last executing test programs: 5m50.769615352s ago: executing program 0 (id=61): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/150, 0x96}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0xc054) r2 = timerfd_create(0x8, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r2, &(0x7f0000000380)=""/162, 0xa2) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) 5m42.836798863s ago: executing program 0 (id=67): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0xfff1, 0x9, 0x9, 0x5}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x20}, &(0x7f0000000340)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}]}}]}, 0x40}}, 0x4048000) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000100010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r7, @ANYBLOB="08000a00fb"], 0x84}}, 0x20008040) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 5m41.294562392s ago: executing program 0 (id=70): socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) 5m39.847781573s ago: executing program 0 (id=72): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000040)={0xa, 0x4e22, 0x2, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="155dcb56b2fdc5feed17485ee349cfbd6d2fcc7e69c8446d63f5f391", 0x1c}], 0x1, &(0x7f0000000840)=[@hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x11, 0x0, '\x00', [@ra={0x5, 0x2, 0x98ee}]}}}, @hopopts_2292={{0x140, 0x29, 0x36, {0x3b, 0x24, '\x00', [@generic={0xb, 0xc0, "c863c3bf0d3a107ca6ff6c42e638c5f95fd8259d962f05d9da8cdde9819c3db808f973acdf37d662f34037c03255a3bbb824826d92571c1b047374a29303dae5e2515bd745086b3b6c65451d211f0d5860874369a42324098f878c8ce25ef549d070bf793c773481751455e4c0b9e224fbe890ffcb5c1cfa1e210959ce60761d088c20362ac8c29618de277f8734dad8c190d3f146d151bf32d09fc089c1b1d8f8bd30db9daf70d9f4ec2ef3f16b6bb3379cbbce0eb254be13625288082b8f40"}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x8, {0x1, 0x0, 0xa, 0x1}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0x6000, [0x5, 0x2, 0x6ed2, 0xcb, 0xfffffffffffffffe, 0x5]}}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@ra={0x5, 0x2, 0x95}]}}}, @dstopts={{0x150, 0x29, 0x37, {0x32, 0x27, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x10}, @generic={0x7, 0x2d, "9cb75cbfc4756f4f147ad25510a52e8af1656253438378efd12cc6346d92eacdb8f9467d6c0c231a21d7e668a8"}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xd, 0xc7, "0c5ccfc1d0a689d4a7338917f1495d45085703fc8c231298749360835d81f673a0fa9f185249fa6a8a02199950f1c56257ac230b6b5e690f4b30febc5bf5d02a25cb44ceddc9e4c961e75545ce7db0a3cab3e8f1765d1834c53fe4485513e451f0b5890d2096fa9f58213a61d7c85dcf7a44e71150ff545e6cfe0214c141f8eb276f7586a26352bd2b4f859c7042460e3905648302b4ad7f178c2120cf8c94da69c826bfa3a05680f50c7d31168fad94f00a20ccc972975a40d54dd0413d24c0240920e27f1fb8"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x2b, 0x1, '\x00', [@ra={0x5, 0x2, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x330}, 0x2004c010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) socket(0x10, 0x2, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000cc0)="b0c650b7c71804200122f8fb5dd5c5538e7daadfceb2a401d44f21958799ad2fb12df6e1453fd2ae43c45039e56bde138fd2fa0b81c7bd88841f0ebbfdf4d9fb60c6b5e6e2a60d073aa9a539e6d1da52768d1f37bd5f372da58af5c9b4b7f01e56bee169a7bd08d55fb8cae8d71d0cb1995079af84248e5212da1699ad218612cbfb7a65c79c40bfa482187fffffffeb5fd617811de787dc0100ab762ec65bce7fdd5ec04ac1be2a8ef38410b1a3197af136a6868634bab7c0c6e4ffcaed7e07d017ea91c648705e1e903d", 0xcb, 0x4004000, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, &(0x7f00000001c0)) 5m37.272509566s ago: executing program 0 (id=75): socket$packet(0x11, 0x2, 0x300) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d042abd70f8ffffffffffffff00", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 5m35.665719173s ago: executing program 0 (id=81): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5m20.139265245s ago: executing program 32 (id=81): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 1m34.633757614s ago: executing program 1 (id=398): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000002c0)={0x42, "7cc710647f13dbe4caff73f05593136aabf0c716789bc1dd1f626f6c8f1df3425a8078dd6880440b375759e84a75d11bf18cc550e5da2ebe954412ecc87e081393f0390700f441498b65bb757309fddcd7fa0700e245ef29dd7bbc63ca46d659e003672cb5b16c7703a47c2b13f43bc0503ef166e8d65283c19dde6495ba2ce1a37c1b302ff631eb42bcecfa110f08b183b2a4105f662f568a05fc03655f613dd43292e5af656bfab199ba100e03c2efcb7a0d74b6f88f63445e7565829b7aabc8061ac5be3561396e70296d03825e4eff28702354ef0e61123ea713b7bca00175f5f73280b758e01b4952412815d2997212614f3020492a8c238e28dfba8cd7dfcfa67cd9b42b9d943b1cee9b79653d8887b670cc3026534f99b98d9c21c89a0e97c6cbfc8033b8c758b68d6ff127a99de6e3b96213103a0f44b84abd543cc949a6a84699529b7814d25c4a89dedd95e0a686734efcae0c3d4ee8fa98a6502737d52860db35790fd5eda89d58efe3c2f216948f1a0f5f8c226480c7be3f6ea3e3c370b39a6398f7a9768d346bc40edf149a646aef3be5a59be81b82eedc8020a85cd2b65150e843ec1c42ee520576ee4d4a4340287d7565ad3b2125a7aa6de6c5f82be45fd27f848a74b0b165000200"}) 1m34.517343881s ago: executing program 1 (id=402): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x48524742, 0x2, @stepwise={0x0, 0x0, 0x8c0a, 0x6, 0x6, 0x3}}) 1m34.384467056s ago: executing program 1 (id=405): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x9, 0x9, 0x80, 0x564c5130, 0x2000000}) 1m34.221826703s ago: executing program 1 (id=409): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) unshare(0x28000600) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x30df, 0x0, 0x2, 0x0, 0x0, r0}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0x6, 0x7, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000001c0)={0x7ff, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 1m33.818343503s ago: executing program 1 (id=413): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000004c0)=@overlay={0x8000, 0x8, 0x4, 0x100000, 0x4, {}, {0x4, 0x0, 0x8, 0x4, 0x6, 0x1, "8643883a"}, 0x4, 0x3, {}, 0xfffffffc}) 1m33.53780517s ago: executing program 1 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2", 0x12}], 0x2) 1m18.050678332s ago: executing program 33 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000500)="e98314d58ce4b24ee137cea9c243c233bfa2", 0x12}], 0x2) 4.025400833s ago: executing program 3 (id=1205): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x2}, 0x3ff}], 0x1, 0x40000002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) 3.037430377s ago: executing program 6 (id=1218): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) 2.969857707s ago: executing program 3 (id=1219): r0 = socket(0xa, 0x1, 0x84) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) 2.8487503s ago: executing program 3 (id=1220): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) unshare(0x28000600) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x30df, 0x0, 0x2, 0x0, 0x0, r0}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r1}, 0x18) signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) pselect6(0x40, &(0x7f0000000000)={0x6, 0x7, 0x3, 0xffffffff, 0x2627bc41, 0xba4, 0x3, 0xfffffffffffffff8}, 0x0, &(0x7f00000001c0)={0x7ff, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x6, 0x1, 0x7f}, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 2.775115433s ago: executing program 6 (id=1222): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) 2.64583974s ago: executing program 6 (id=1224): r0 = syz_usb_connect(0x2, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec1bb2106c04e01401000102030109028f11010000000009046900000e010000182402010202f25d16876185782d8918b263b57fcb8a1c611b"], 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, 0x0, 0x0) syz_usb_ep_read(r0, 0x5, 0x4b, &(0x7f0000000040)=""/75) 2.593756606s ago: executing program 3 (id=1225): munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) write$sndseq(r0, &(0x7f0000005880)=[{0x8e, 0x0, 0x0, 0xfd, @tick=0x4, {}, {0xe}, @addr={0x3}}], 0x1c) 2.357752552s ago: executing program 3 (id=1228): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f00000002c0)={0x40, 0x6}, 0x0, 0x0, &(0x7f0000000080), 0x0}) 2.320598918s ago: executing program 5 (id=1229): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000004040)=""/4096, 0x1000}], 0x2}, 0x3ff}], 0x1, 0x40000002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) 2.270066261s ago: executing program 4 (id=1230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 2.230436818s ago: executing program 4 (id=1231): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf34) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.181964531s ago: executing program 4 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) getdents64(r2, 0x0, 0xc0) 2.093863188s ago: executing program 4 (id=1233): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f00000003c0)="d33d", 0x2, 0x884, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 2.093588081s ago: executing program 4 (id=1234): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) eventfd(0x84ba) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x49cc) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.672287651s ago: executing program 2 (id=1236): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x168, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x260, 0x260, 0x260, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010102, @local, 0x0, 0xff000000, 'veth1_to_bond\x00', 'bond_slave_1\x00', {}, {0xff}, 0x5f, 0x0, 0x80}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff000000, 0x0, 0xffffffff], 0x4e22, 0x4e21, 0x4e22, 0x4e23, 0x9, 0x1b61, 0x100, 0xffff, 0x4}}}, {{@ip={@loopback, @private=0xa010101, 0xffffff00, 0xffffffff, 'geneve0\x00', 'wlan1\x00', {}, {0xff}, 0x8, 0x1, 0x8}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 1.551741969s ago: executing program 2 (id=1237): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000280)={0x983, 0x8251d54a38b53ba1, 0x0, 0x0, 0x0, 0x0}) 1.523246379s ago: executing program 2 (id=1238): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.462142072s ago: executing program 2 (id=1239): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000880)="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", 0x2b9}, {&(0x7f0000000780)="7d87549fd6e506db8227c192ade2364cd555d3bdb38314a12868143d93b2314d1144a69dfa2d04b9d1d495d7ff790a5307f432275e936e98c0dfd1c0aa0c6df2fe50674c60a214018dd7bcc96c0c10826fd234fbc3b48fd4b30d6ffc2f97546094eca61c53bec989b8556428b45f9f3b8c1464b8e7d1c3a060b55b987e4a727450cdcf54d813ec058aba5e3fd8f1fed8031ea0e8191e27240541495f32f73db4a754bbd31ee119939f2fcdef69a03a39fe2d4682e7938735885f2bf4", 0xbc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001040)="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", 0x1bd}, {0x0}], 0x2}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.329389604s ago: executing program 2 (id=1240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32], 0x20}}, 0x0) 1.329084744s ago: executing program 5 (id=1241): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000740000000081069059640101006b08b402005356", @ANYRES32=0x41424344, @ANYBLOB="8c1000ca90781000080a8000000000000fbc080a0000000200000002fe"], 0x0) 1.246413635s ago: executing program 6 (id=1242): socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x820004ce) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 1.117610171s ago: executing program 4 (id=1243): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315f9b10102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x5d, "2ed4bf2e8e907d1aad7df42cc7aee5909e28981bcda41429817ecc965c9cde5d41826a44bf19e903dfbde611b25fadc8f72fbc2604541d2feb2f8d008e130d7b256ea6d819e0cff54fd6a0f3063bcd3fc166d3938bac4051e8aa65c634"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x6}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, &(0x7f0000000100)={0x20, 0x8, 0x76, {0x76, 0x7, "70fa1bf81464dedaa61bdc829d7530a09984ae83e275f560be1afd4449032906dd277c9ce3eee41a0777444794f058e4713bd1dc692985618dd792cba4acc297915415d0e4555fcfd9834e1b94ea3d9fd9044112292c5dfb97c774922ac96986cf3df5f5089df451e891c33bdca677ac65a8a687"}}, &(0x7f0000000040)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "05591c336c8c6b7ba35629209c2706d24679632c424d4118be2f7de52b1b7116db2e8109378940900c"}}, &(0x7f0000000180)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x8, "15d5f591"}, @global=@item_012={0x0, 0x1, 0x6}, @local=@item_4={0x3, 0x2, 0x4, "c4d5ba54"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x8d4}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x0, 0xa, 0x24, "04f14fb6afa17c60a195e441f4b05f9f17f60e090e5dc283901962025fcc3fcf08e46a3a"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0), &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, &(0x7f0000000080)={0x0, 0x7, 0x6d, {0x6d, 0x8, "5d41d0e2e72cfc49fd0be7c11fd8fcda18adb4055f80b908f6909e4fc2c6ca9845245e47019a83b76b728fc6dfaa44f40ef957d6b8769683a6d5154a3601e7991b5c90e8dfb75e30f526676e2de66e76e8d394ca31ad8522f79cd2eef7551ef5bd8b55264f40cd79177523"}}, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x4, "53d233a2"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x139}}}}, 0x0) 1.027967606s ago: executing program 6 (id=1244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ab000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 956.766749ms ago: executing program 2 (id=1245): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x48, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee213459a7a00"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 901.792558ms ago: executing program 6 (id=1246): io_uring_setup(0x4822, &(0x7f0000000180)={0x0, 0x0, 0x40}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r2], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 901.665856ms ago: executing program 5 (id=1247): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="030000000000000000000080"]) 646.686407ms ago: executing program 3 (id=1248): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0x400, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffff, 0x3}, {0xfff1, 0x56e7de01af07971a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r1) 438.560713ms ago: executing program 5 (id=1249): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 121.796568ms ago: executing program 5 (id=1250): r0 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x3) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000200)={0x0, 0x4, 0x3, &(0x7f00000001c0)={0x11, "694b68174bf36f57ec48ed65bbb44df72cbbe29ca8a535bed614dfa2844c483711"}}) 0s ago: executing program 5 (id=1251): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080)=0xfffffffc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x40148000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000340)=0x1, 0x12) kernel console output (not intermixed with test programs): n_adv: batadv0: Removing interface: batadv_slave_1 [ 224.476942][ T3510] veth1_macvtap: left promiscuous mode [ 224.477183][ T3510] veth0_macvtap: left promiscuous mode [ 224.485476][ T3510] veth1_vlan: left promiscuous mode [ 224.485821][ T3510] veth0_vlan: left promiscuous mode [ 224.723983][ T6633] netlink: 92 bytes leftover after parsing attributes in process `syz.4.181'. [ 227.528593][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.676011][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.739404][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.906132][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.470288][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.959421][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.367390][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.459222][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.949003][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.232245][ T6656] netlink: 536 bytes leftover after parsing attributes in process `syz.2.187'. [ 230.455141][ C0] vkms_vblank_simulate: vblank timer overrun [ 230.685331][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.703029][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.712125][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.722259][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.723103][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.614362][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 232.864540][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 233.044208][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 234.860204][ T6671] macvlan2: entered allmulticast mode [ 234.860217][ T6671] veth1_vlan: entered allmulticast mode [ 234.864171][ T6671] veth1_vlan: left allmulticast mode [ 235.382599][ T6664] lo speed is unknown, defaulting to 1000 [ 236.527825][ T6685] capability: warning: `syz.4.194' uses deprecated v2 capabilities in a way that may be insecure [ 239.358961][ T6664] chnl_net:caif_netlink_parms(): no params data found [ 240.725534][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 242.517575][ T6724] macvlan2: entered allmulticast mode [ 242.517596][ T6724] veth1_vlan: entered allmulticast mode [ 242.520238][ T6724] veth1_vlan: left allmulticast mode [ 242.633215][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 246.357404][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 246.357420][ T37] audit: type=1326 audit(1760960515.096:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 246.357456][ T37] audit: type=1326 audit(1760960515.096:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 246.434913][ T37] audit: type=1326 audit(1760960515.216:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 246.698085][ T6757] pim6reg: entered allmulticast mode [ 246.749415][ T37] audit: type=1326 audit(1760960515.476:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 246.749466][ T37] audit: type=1326 audit(1760960515.486:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6748 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 246.917065][ T6748] pim6reg: left allmulticast mode [ 252.469673][ T6791] trusted_key: syz.2.213 sent an empty control message without MSG_MORE. [ 253.660961][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.661070][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.661249][ T6664] bridge_slave_0: entered allmulticast mode [ 253.663433][ T6664] bridge_slave_0: entered promiscuous mode [ 253.710476][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.710601][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.710820][ T6664] bridge_slave_1: entered allmulticast mode [ 253.736779][ T6664] bridge_slave_1: entered promiscuous mode [ 255.954758][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.956635][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.110303][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.188910][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.440753][ T6832] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 259.440795][ T6832] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 259.440813][ T6832] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 261.540176][ T3510] bridge_slave_1: left allmulticast mode [ 261.540204][ T3510] bridge_slave_1: left promiscuous mode [ 261.540442][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.792159][ T3510] bridge_slave_0: left allmulticast mode [ 262.792199][ T3510] bridge_slave_0: left promiscuous mode [ 262.796698][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.443221][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.805696][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.732827][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.092255][ C0] vkms_vblank_simulate: vblank timer overrun [ 266.368151][ T6889] orangefs_mount: mount request failed with -4 [ 266.368648][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.948220][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.089787][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.607955][ T3510] bond0 (unregistering): Released all slaves [ 269.583162][ T6664] team0: Port device team_slave_0 added [ 269.619041][ T6664] team0: Port device team_slave_1 added [ 272.187346][ T6909] sp0: Synchronizing with TNC [ 272.508387][ T6908] [U] è [ 272.871155][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.871168][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.871181][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.242499][ T6948] netlink: 36 bytes leftover after parsing attributes in process `syz.1.250'. [ 274.099482][ T3515] Bluetooth: (null): Invalid header checksum [ 274.099628][ T3515] Bluetooth: (null): Invalid header checksum [ 274.310124][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 275.007793][ T3585] Bluetooth: (null): Invalid header checksum [ 275.008220][ T3585] Bluetooth: (null): Invalid header checksum [ 275.008299][ T3585] Bluetooth: (null): Invalid header checksum [ 275.008413][ T3585] Bluetooth: (null): Invalid header checksum [ 275.008488][ T3585] Bluetooth: (null): Invalid header checksum [ 275.018119][ T6955] macvlan2: entered allmulticast mode [ 275.018136][ T6955] veth1_vlan: entered allmulticast mode [ 275.022533][ T6955] veth1_vlan: left allmulticast mode [ 275.033053][ T3685] Bluetooth: (null): Invalid header checksum [ 275.134501][ T43] Bluetooth: (null): Invalid header checksum [ 275.325081][ T3510] hsr_slave_0: left promiscuous mode [ 275.365616][ T3510] hsr_slave_1: left promiscuous mode [ 275.366577][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.406216][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.784531][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 278.954648][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 279.366353][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.366365][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.366379][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.136877][ T6986] 9pnet_fd: Insufficient options for proto=fd [ 280.260531][ T6664] hsr_slave_0: entered promiscuous mode [ 280.262059][ T6664] hsr_slave_1: entered promiscuous mode [ 287.678137][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.266'. [ 293.145017][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 299.794554][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 299.799367][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 299.825584][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 299.855652][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 299.856247][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 300.010503][ T7080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.276'. [ 300.324262][ T7084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.277'. [ 300.407185][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 301.905723][ T5122] Bluetooth: hci5: command tx timeout [ 302.585549][ T7094] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 303.047752][ T7068] lo speed is unknown, defaulting to 1000 [ 303.983638][ T5122] Bluetooth: hci5: command tx timeout [ 304.863867][ T3595] wlan1: Trigger new scan to find an IBSS to join [ 306.179793][ T5122] Bluetooth: hci5: command tx timeout [ 308.493553][ T5122] Bluetooth: hci5: command tx timeout [ 308.696996][ T7129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.287'. [ 311.340439][ T3510] wlan1: Trigger new scan to find an IBSS to join [ 312.068952][ T7157] netlink: 92 bytes leftover after parsing attributes in process `syz.2.292'. [ 312.244434][ T7068] chnl_net:caif_netlink_parms(): no params data found [ 312.670493][ T57] wlan1: Creating new IBSS network, BSSID 82:52:40:2c:d7:42 [ 313.973286][ T7068] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.973420][ T7068] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.973822][ T7068] bridge_slave_0: entered allmulticast mode [ 313.976430][ T7068] bridge_slave_0: entered promiscuous mode [ 314.046169][ T7068] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.046267][ T7068] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.046428][ T7068] bridge_slave_1: entered allmulticast mode [ 314.081376][ T7068] bridge_slave_1: entered promiscuous mode [ 315.613077][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.070772][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.913775][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 323.734273][ T7204] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd4": -EINTR [ 323.908819][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.908864][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.246021][ T7068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.374615][ T7068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.567527][ T7215] netlink: 16 bytes leftover after parsing attributes in process `syz.4.299'. [ 324.655814][ T43] bridge_slave_1: left allmulticast mode [ 324.655834][ T43] bridge_slave_1: left promiscuous mode [ 324.655983][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.958286][ T43] bridge_slave_0: left allmulticast mode [ 324.958313][ T43] bridge_slave_0: left promiscuous mode [ 324.959406][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.064255][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.836368][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.852969][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'. [ 332.128071][ T43] bond0 (unregistering): Released all slaves [ 334.348495][ T7068] team0: Port device team_slave_0 added [ 334.370915][ T7068] team0: Port device team_slave_1 added [ 336.145562][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.145572][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.145585][ T7068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.054152][ T43] hsr_slave_0: left promiscuous mode [ 342.251023][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz.4.320'. [ 342.752582][ T3510] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.423513][ T43] hsr_slave_1: left promiscuous mode [ 344.431826][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.947019][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.449807][ T7337] syz.2.327 (7337) used greatest stack depth: 16880 bytes left [ 353.036981][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.331'. [ 353.074364][ T43] team0 (unregistering): Port device team_slave_1 removed [ 353.175474][ T43] team0 (unregistering): Port device team_slave_0 removed [ 353.704250][ T7068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.704265][ T7068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.704279][ T7068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.830284][ T7395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.341'. [ 361.844951][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 361.853327][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 361.868288][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 361.870119][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 361.871366][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 363.733576][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.893068][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.355805][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.954415][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.956053][ T7409] netlink: 92 bytes leftover after parsing attributes in process `syz.4.344'. [ 364.993597][ T5815] Bluetooth: hci0: command tx timeout [ 365.365605][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.555992][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.768080][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.506959][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.762964][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.993062][ T7390] lo speed is unknown, defaulting to 1000 [ 367.023750][ T5815] Bluetooth: hci0: command tx timeout [ 367.137234][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.410210][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.553252][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.678427][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.735296][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.352'. [ 368.854139][ T7443] overlayfs: overlapping lowerdir path [ 369.108301][ T5815] Bluetooth: hci0: command tx timeout [ 369.443437][ T3510] bridge_slave_1: left allmulticast mode [ 369.443464][ T3510] bridge_slave_1: left promiscuous mode [ 369.464974][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.525612][ T5815] Bluetooth: hci0: command tx timeout [ 371.609151][ T3510] bridge_slave_0: left allmulticast mode [ 371.609177][ T3510] bridge_slave_0: left promiscuous mode [ 371.609433][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.742888][ T3515] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.376026][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.656168][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.744861][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.838050][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.998715][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.111304][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.402342][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.641642][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.841264][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.990576][ T7483] 9pnet_fd: Insufficient options for proto=fd [ 378.014977][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.309920][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.688819][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.888505][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.834483][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 379.866255][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.263991][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.408804][ T3510] bond0 (unregistering): Released all slaves [ 381.752540][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.836577][ C1] vkms_vblank_simulate: vblank timer overrun [ 381.969684][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.348151][ T7390] chnl_net:caif_netlink_parms(): no params data found [ 383.552929][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.492906][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.492977][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.259373][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.098701][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 389.163647][ T37] audit: type=1326 audit(1760960657.936:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 389.252810][ T37] audit: type=1326 audit(1760960657.946:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 389.388137][ T37] audit: type=1326 audit(1760960658.166:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7535 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc476cbefc9 code=0x7ffc0000 [ 389.415926][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 390.199881][ T7546] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 390.226145][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.377'. [ 390.269656][ T7562] pim6reg: entered allmulticast mode [ 390.357310][ T7564] pim6reg: left allmulticast mode [ 391.656459][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.380'. [ 392.943794][ T3532] wlan1: Trigger new scan to find an IBSS to join [ 393.005373][ T7390] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.005447][ T7390] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.005561][ T7390] bridge_slave_0: entered allmulticast mode [ 393.049831][ T7390] bridge_slave_0: entered promiscuous mode [ 393.324917][ T7390] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.325050][ T7390] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.325260][ T7390] bridge_slave_1: entered allmulticast mode [ 393.343641][ T7390] bridge_slave_1: entered promiscuous mode [ 394.259324][ T7390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.295550][ T7390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.793892][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 395.152881][ T7390] team0: Port device team_slave_0 added [ 395.318518][ T7390] team0: Port device team_slave_1 added [ 395.681723][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.681738][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.681757][ T7390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.729274][ T7390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.729289][ T7390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.729312][ T7390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.164014][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 396.224526][ T7390] hsr_slave_0: entered promiscuous mode [ 396.225844][ T7390] hsr_slave_1: entered promiscuous mode [ 396.388479][ T5884] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 396.388506][ T5884] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 396.388522][ T5884] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 396.388603][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 396.388626][ T5884] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 396.391650][ T5884] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 396.391673][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 396.391691][ T5884] usb 3-1: Product: syz [ 396.391703][ T5884] usb 3-1: Manufacturer: syz [ 396.508989][ T5884] cdc_wdm 3-1:1.0: skipping garbage [ 396.509008][ T5884] cdc_wdm 3-1:1.0: skipping garbage [ 396.686535][ T5884] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 396.686567][ T5884] cdc_wdm 3-1:1.0: Unknown control protocol [ 396.810314][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.827641][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.944975][ T3532] wlan1: Trigger new scan to find an IBSS to join [ 396.992100][ T5892] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 397.084277][ T44] lo speed is unknown, defaulting to 1000 [ 397.143632][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 397.145913][ T5892] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 397.145935][ T5892] usb 5-1: config 0 has no interface number 0 [ 397.145965][ T5892] usb 5-1: config 0 interface 196 has no altsetting 0 [ 397.153001][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 397.153026][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.153043][ T5892] usb 5-1: Product: syz [ 397.153055][ T5892] usb 5-1: Manufacturer: syz [ 397.153066][ T5892] usb 5-1: SerialNumber: syz [ 397.230571][ T5892] usb 5-1: config 0 descriptor?? [ 398.010374][ T5892] ipheth 5-1:0.196: Unable to find endpoints [ 398.045384][ T3595] wlan1: Creating new IBSS network, BSSID 26:0f:c8:a9:dc:4f [ 398.145097][ T5892] usb 5-1: USB disconnect, device number 2 [ 398.762320][ T5892] usb 3-1: USB disconnect, device number 2 [ 399.509035][ T7733] [U]  [ 399.509091][ T7733] [U] K{‘ [ 399.509593][ T7733] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 399.512043][ T7733] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 399.512888][ T7733] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 399.545831][ T7733] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 399.610994][ T7733] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 399.611903][ T7733] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 399.627569][ T7733] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 399.637840][ T7733] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 399.670910][ T7733] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 399.681968][ T7733] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 399.688236][ T7733] [U] 22½“Æ©ÐÛ©X?0;3U± [ 399.694438][ T7733] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 399.760315][ T7733] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 399.760988][ T7733] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 399.761468][ T7733] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 399.815719][ T7733] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 399.815777][ T7733] [U] ¹ EC [ 399.816904][ T7733] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 399.896654][ T7730] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 400.581606][ T7747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 400.581663][ T7747] comedi comedi3: 8255: I/O port conflict (0x8001022,4) [ 400.581756][ T7747] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 400.581882][ T7747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 400.581928][ T7747] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 400.581983][ T7747] comedi comedi3: 8255: I/O port conflict (0x3df,4) [ 400.582075][ T7747] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 400.582121][ T7747] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 400.582167][ T7747] comedi comedi3: 8255: I/O port conflict (0xfffffffffffff350,4) [ 400.582214][ T7747] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 400.582264][ T7747] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 400.582309][ T7747] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 400.582355][ T7747] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 400.582400][ T7747] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 400.582446][ T7747] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 400.582497][ T7747] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 400.582544][ T7747] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 400.582591][ T7747] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 400.582637][ T7747] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 402.668016][ T7790] fuseblk: Bad value for 'fd' [ 404.316743][ T5877] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 404.490677][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.490700][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.490721][ T5877] usb 5-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 404.490732][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.524219][ T5877] usb 5-1: config 0 descriptor?? [ 404.956672][ T5877] hid-generic 0003:093A:8001.0001: unknown main item tag 0x7 [ 404.967022][ T5877] hid-generic 0003:093A:8001.0001: hidraw0: USB HID v0.03 Device [HID 093a:8001] on usb-dummy_hcd.4-1/input0 [ 405.174291][ T10] usb 5-1: USB disconnect, device number 3 [ 407.663329][ T3595] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.763470][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 408.939297][ T10] usb 5-1: config 6 has an invalid interface number: 134 but max is 1 [ 408.939321][ T10] usb 5-1: config 6 has an invalid interface number: 203 but max is 1 [ 408.939345][ T10] usb 5-1: config 6 has no interface number 0 [ 408.939359][ T10] usb 5-1: config 6 has no interface number 1 [ 408.939395][ T10] usb 5-1: config 6 interface 134 has no altsetting 0 [ 408.939404][ T10] usb 5-1: config 6 interface 203 has no altsetting 0 [ 408.995904][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=46.8f [ 408.995931][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.995943][ T10] usb 5-1: Product: syz [ 408.995949][ T10] usb 5-1: Manufacturer: syz [ 408.995956][ T10] usb 5-1: SerialNumber: syz [ 409.378692][ T10] usb 5-1: USB disconnect, device number 4 [ 409.494328][ T7878] udevd[7878]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 409.555471][ T7882] udevd[7882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.203/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 411.192209][ T7900] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 411.192459][ T7900] block device autoloading is deprecated and will be removed. [ 411.599052][ T5949] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 411.770844][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.770873][ T5949] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.772050][ T5949] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 411.772075][ T5949] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 411.772094][ T5949] usb 5-1: Manufacturer: syz [ 411.829853][ T5949] usb 5-1: config 0 descriptor?? [ 412.195625][ T5122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 412.205119][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 412.208534][ T5122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 412.217482][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 412.218307][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 412.865420][ T5949] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0002/input/input5 [ 412.943843][ T5949] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0002/input/input6 [ 412.971707][ T5949] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 413.064803][ T44] usb 5-1: USB disconnect, device number 5 [ 413.098615][ T7906] fido_id[7906]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 414.297750][ T5122] Bluetooth: hci5: command tx timeout [ 414.384704][ T7788] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.410970][ T7788] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.832926][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.843042][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.844391][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.852146][ T7904] lo speed is unknown, defaulting to 1000 [ 414.855822][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.858080][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 415.339795][ T7926] lo speed is unknown, defaulting to 1000 [ 416.382699][ T5122] Bluetooth: hci5: command tx timeout [ 416.476640][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 416.656651][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 416.664774][ T44] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 416.664799][ T44] usb 3-1: config 0 has no interface number 0 [ 416.664830][ T44] usb 3-1: config 0 interface 196 has no altsetting 0 [ 416.678527][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 416.678554][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.678570][ T44] usb 3-1: Product: syz [ 416.678583][ T44] usb 3-1: Manufacturer: syz [ 416.678595][ T44] usb 3-1: SerialNumber: syz [ 416.696857][ T44] usb 3-1: config 0 descriptor?? [ 416.939830][ T44] ipheth 3-1:0.196: Unable to find endpoints [ 416.960299][ T44] usb 3-1: USB disconnect, device number 3 [ 417.000472][ T3510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.016552][ T5122] Bluetooth: hci6: command tx timeout [ 417.308352][ T3510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.422528][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 417.670514][ T3510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.929994][ T7926] chnl_net:caif_netlink_parms(): no params data found [ 417.949839][ T8010] batman_adv: batadv0: Adding interface: dummy0 [ 417.949854][ T8010] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.949884][ T8010] batman_adv: batadv0: Interface activated: dummy0 [ 418.191687][ T3510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.391567][ T8010] batadv0: mtu less than device minimum [ 418.404822][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.420944][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.431938][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.440925][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.455749][ T5122] Bluetooth: hci5: command tx timeout [ 418.475889][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.481208][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.496468][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.516965][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.534848][ T8010] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 418.765581][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 418.916881][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 418.923924][ T31] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 418.923949][ T31] usb 4-1: config 0 has no interface number 0 [ 418.923981][ T31] usb 4-1: config 0 interface 196 has no altsetting 0 [ 418.979530][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 418.979573][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.979590][ T31] usb 4-1: Product: syz [ 418.979603][ T31] usb 4-1: Manufacturer: syz [ 418.979615][ T31] usb 4-1: SerialNumber: syz [ 419.026024][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.026174][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.026404][ T7904] bridge_slave_0: entered allmulticast mode [ 419.066191][ T7904] bridge_slave_0: entered promiscuous mode [ 419.068763][ T31] usb 4-1: config 0 descriptor?? [ 419.095326][ T5122] Bluetooth: hci6: command tx timeout [ 419.121487][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.121687][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.121895][ T7904] bridge_slave_1: entered allmulticast mode [ 419.127143][ T7904] bridge_slave_1: entered promiscuous mode [ 419.279457][ T31] ipheth 4-1:0.196: Unable to find endpoints [ 419.312348][ T31] usb 4-1: USB disconnect, device number 2 [ 419.795543][ T7926] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.795697][ T7926] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.795935][ T7926] bridge_slave_0: entered allmulticast mode [ 419.806389][ T7926] bridge_slave_0: entered promiscuous mode [ 419.906279][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.915552][ T7926] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.915678][ T7926] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.915910][ T7926] bridge_slave_1: entered allmulticast mode [ 419.955899][ T7926] bridge_slave_1: entered promiscuous mode [ 420.119363][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.534607][ T5122] Bluetooth: hci5: command tx timeout [ 420.555483][ T7926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.561165][ T7904] team0: Port device team_slave_0 added [ 420.564133][ T7926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.569555][ T7904] team0: Port device team_slave_1 added [ 420.614652][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 420.733116][ T3510] bridge_slave_1: left allmulticast mode [ 420.733143][ T3510] bridge_slave_1: left promiscuous mode [ 420.733388][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.768156][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.768185][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 420.768204][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 420.768239][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 420.768259][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.829033][ T44] usb 5-1: config 0 descriptor?? [ 420.834009][ T3510] bridge_slave_0: left allmulticast mode [ 420.834035][ T3510] bridge_slave_0: left promiscuous mode [ 420.834588][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.041655][ T8097] syz.3.569 uses obsolete (PF_INET,SOCK_PACKET) [ 421.184351][ T5122] Bluetooth: hci6: command tx timeout [ 421.252190][ T8099] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 421.263862][ T8099] cramfs: wrong magic [ 421.325395][ T44] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 421.444867][ T44] usb 5-1: USB disconnect, device number 6 [ 422.903515][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.974336][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.025544][ T3510] bond0 (unregistering): Released all slaves [ 423.254857][ T5122] Bluetooth: hci6: command tx timeout [ 423.254942][ T5892] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 423.277422][ T8091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.566'. [ 423.426974][ T5892] usb 5-1: config 6 has an invalid interface number: 134 but max is 0 [ 423.427002][ T5892] usb 5-1: config 6 has no interface number 0 [ 423.427034][ T5892] usb 5-1: config 6 interface 134 has no altsetting 0 [ 423.432936][ T5892] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=46.8f [ 423.432963][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.433342][ T5892] usb 5-1: Product: syz [ 423.433356][ T5892] usb 5-1: Manufacturer: syz [ 423.433368][ T5892] usb 5-1: SerialNumber: syz [ 423.504936][ T7926] team0: Port device team_slave_0 added [ 423.747685][ T5892] usb 5-1: USB disconnect, device number 7 [ 423.818627][ T7882] udevd[7882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.134/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.895216][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.895233][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.895248][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.898116][ T7926] team0: Port device team_slave_1 added [ 423.899180][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.899188][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.899202][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.205724][ T8133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.584'. [ 424.584291][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.584302][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.584316][ T7926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.696888][ T7926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.696904][ T7926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.696927][ T7926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.807678][ T5122] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 424.968582][ T7904] hsr_slave_0: entered promiscuous mode [ 424.970100][ T7904] hsr_slave_1: entered promiscuous mode [ 424.971043][ T7904] debugfs: 'hsr0' already exists in 'hsr' [ 424.971062][ T7904] Cannot create hsr debugfs directory [ 425.133883][ T3510] hsr_slave_0: left promiscuous mode [ 425.174845][ T3510] hsr_slave_1: left promiscuous mode [ 425.177354][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.177379][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.223389][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.223415][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.359063][ T3510] veth1_macvtap: left promiscuous mode [ 425.359173][ T3510] veth0_macvtap: left promiscuous mode [ 425.359439][ T3510] veth1_vlan: left promiscuous mode [ 425.359618][ T3510] veth0_vlan: left promiscuous mode [ 427.811051][ T992] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 427.832312][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 427.979644][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.979675][ T992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.981378][ T992] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 427.981412][ T992] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 427.981429][ T992] usb 4-1: Manufacturer: syz [ 427.986833][ T992] usb 4-1: config 0 descriptor?? [ 428.061747][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 429.058826][ T992] uclogic 0003:256C:006D.0004: v1 frame probing failed: -71 [ 429.058913][ T992] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 429.058977][ T992] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 429.069490][ T992] usb 4-1: USB disconnect, device number 3 [ 431.164887][ T8251] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.166272][ T8251] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.216650][ T7926] hsr_slave_0: entered promiscuous mode [ 431.218056][ T7926] hsr_slave_1: entered promiscuous mode [ 431.219045][ T7926] debugfs: 'hsr0' already exists in 'hsr' [ 431.219067][ T7926] Cannot create hsr debugfs directory [ 432.547890][ T7904] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.618566][ T5884] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 432.629537][ T7904] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 432.768727][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 432.774267][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.774317][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 432.774342][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 432.774366][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 432.774386][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 432.847591][ T5884] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 432.847620][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 432.847638][ T5884] usb 5-1: Product: syz [ 432.847650][ T5884] usb 5-1: Manufacturer: syz [ 432.847662][ T5884] usb 5-1: SerialNumber: syz [ 432.886572][ T5884] usb 5-1: config 0 descriptor?? [ 433.102385][ T5884] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 433.102409][ T5884] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 433.136079][ T7904] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.223501][ T7904] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.304828][ T5884] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 433.304863][ T5884] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 433.304889][ T5884] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 433.368233][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 433.505621][ T5884] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 433.518093][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 433.525017][ T5892] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 433.525041][ T5892] usb 3-1: config 0 has no interface number 0 [ 433.527232][ T5892] usb 3-1: config 0 interface 196 has no altsetting 0 [ 433.559779][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 433.559806][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.559823][ T5892] usb 3-1: Product: syz [ 433.559836][ T5892] usb 3-1: Manufacturer: syz [ 433.559848][ T5892] usb 3-1: SerialNumber: syz [ 433.569541][ T5892] usb 3-1: config 0 descriptor?? [ 433.806603][ T5892] ipheth 3-1:0.196: Unable to find endpoints [ 433.833775][ T5892] usb 3-1: USB disconnect, device number 4 [ 434.029872][ T3510] bridge_slave_1: left allmulticast mode [ 434.029897][ T3510] bridge_slave_1: left promiscuous mode [ 434.031017][ T3510] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.140021][ T3510] bridge_slave_0: left allmulticast mode [ 434.140049][ T3510] bridge_slave_0: left promiscuous mode [ 434.141001][ T3510] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.331741][ T5884] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 434.332093][ T5884] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 434.366839][ T5884] usb 5-1: USB disconnect, device number 8 [ 434.618384][ T3510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.718326][ T3510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.800277][ T3510] bond0 (unregistering): Released all slaves [ 434.965946][ T8363] kAFS: No cell specified [ 435.237313][ T5892] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 435.254976][ T3510] hsr_slave_0: left promiscuous mode [ 435.276364][ T8374] kAFS: No cell specified [ 435.288259][ T3510] hsr_slave_1: left promiscuous mode [ 435.288899][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.337734][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.387159][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 435.388919][ T5892] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 435.388940][ T5892] usb 5-1: config 0 has no interface number 0 [ 435.388970][ T5892] usb 5-1: config 0 interface 196 has no altsetting 0 [ 435.391236][ T5892] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 435.391258][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.391275][ T5892] usb 5-1: Product: syz [ 435.391286][ T5892] usb 5-1: Manufacturer: syz [ 435.391298][ T5892] usb 5-1: SerialNumber: syz [ 435.394692][ T5892] usb 5-1: config 0 descriptor?? [ 435.567257][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 435.608489][ T5892] ipheth 5-1:0.196: Unable to find endpoints [ 435.628586][ T5892] usb 5-1: USB disconnect, device number 9 [ 435.748826][ T10] usb 4-1: config 6 has an invalid interface number: 203 but max is 0 [ 435.748852][ T10] usb 4-1: config 6 has no interface number 0 [ 435.748883][ T10] usb 4-1: config 6 interface 203 has no altsetting 0 [ 435.751302][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=46.8f [ 435.751325][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.751335][ T10] usb 4-1: Product: syz [ 435.751342][ T10] usb 4-1: Manufacturer: syz [ 435.751349][ T10] usb 4-1: SerialNumber: syz [ 436.031924][ T10] usb 4-1: USB disconnect, device number 4 [ 436.059073][ T3510] team0 (unregistering): Port device team_slave_1 removed [ 436.082111][ T7882] udevd[7882]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:6.203/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.248989][ T3510] team0 (unregistering): Port device team_slave_0 removed [ 436.446747][ T5884] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 436.533083][ T8382] kAFS: No cell specified [ 436.636655][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 436.639546][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.639610][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 436.639633][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 436.639655][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 436.639674][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 436.650936][ T5884] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 436.650962][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 436.650980][ T5884] usb 5-1: Product: syz [ 436.650992][ T5884] usb 5-1: Manufacturer: syz [ 436.651004][ T5884] usb 5-1: SerialNumber: syz [ 436.660421][ T5884] usb 5-1: config 0 descriptor?? [ 436.865536][ T5884] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 436.865561][ T5884] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 436.876421][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 437.033993][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.034023][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.034043][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 437.034082][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 437.034101][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.078674][ T5884] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 437.078696][ T5884] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 437.078714][ T5884] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 437.199998][ T10] usb 4-1: config 0 descriptor?? [ 437.296378][ T5884] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 437.468914][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.666854][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 437.666969][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 437.704708][ T10] usb 4-1: USB disconnect, device number 5 [ 437.931651][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.062869][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.063152][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.087752][ T5884] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 438.088082][ T5884] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 438.120598][ T5884] usb 5-1: USB disconnect, device number 10 [ 438.198425][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.681'. [ 438.233958][ T7926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.285338][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.291860][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.293452][ T7926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.352458][ T7926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.362881][ T8405] kAFS: No cell specified [ 438.404356][ T7926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.595112][ T5884] IPVS: starting estimator thread 0... [ 438.615792][ T8422] kAFS: No cell specified [ 438.673911][ T3510] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 438.686067][ T8420] IPVS: using max 8 ests per chain, 19200 per kthread [ 438.823493][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.691'. [ 438.974324][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.073550][ T7926] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.092022][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.092202][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.139523][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.139730][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.252849][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.851215][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.220132][ T7904] veth0_vlan: entered promiscuous mode [ 440.263632][ T7904] veth1_vlan: entered promiscuous mode [ 440.347658][ T8485] kAFS: No cell specified [ 440.428383][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 440.626572][ T8389] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 440.639155][ T7904] veth0_macvtap: entered promiscuous mode [ 440.692748][ T7904] veth1_macvtap: entered promiscuous mode [ 440.722230][ T8496] kAFS: No cell specified [ 440.777642][ T8389] usb 5-1: Using ep0 maxpacket: 8 [ 440.778624][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.795581][ T8389] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.795636][ T8389] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 440.795659][ T8389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 440.795680][ T8389] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 440.795699][ T8389] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.800779][ T8389] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 440.800804][ T8389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 440.800822][ T8389] usb 5-1: Product: syz [ 440.800834][ T8389] usb 5-1: Manufacturer: syz [ 440.800846][ T8389] usb 5-1: SerialNumber: syz [ 440.818287][ T8389] usb 5-1: config 0 descriptor?? [ 440.899513][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.984318][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.987944][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.990410][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.990810][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.044463][ T8389] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 441.044488][ T8389] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 441.245670][ T8389] radio-si470x 5-1:0.0: software version 0, hardware version 0 [ 441.245693][ T8389] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 441.245709][ T8389] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 441.446671][ T8389] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 441.801981][ T7926] veth0_vlan: entered promiscuous mode [ 441.869841][ T3685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.869860][ T3685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.935791][ T7926] veth1_vlan: entered promiscuous mode [ 442.005116][ T3595] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.005136][ T3595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.194345][ T7926] veth0_macvtap: entered promiscuous mode [ 442.224565][ T7926] veth1_macvtap: entered promiscuous mode [ 442.459592][ T8389] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 442.461951][ T8389] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 442.505872][ T8389] usb 5-1: USB disconnect, device number 11 [ 442.524593][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.587539][ T7926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.691154][ T3685] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.711929][ T8539] kAFS: No cell specified [ 442.714961][ T3595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.715613][ T3595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.716294][ T3595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.862001][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 443.184369][ T8550] kAFS: No cell specified [ 443.417041][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.417061][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.475160][ T5877] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 443.587680][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.587700][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.648629][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.648660][ T5877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.648695][ T5877] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 443.648716][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.656301][ T5877] usb 4-1: config 0 descriptor?? [ 443.983611][ T5877] usbhid 4-1:0.0: can't add hid device: -71 [ 443.983736][ T5877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 444.039749][ T5877] usb 4-1: USB disconnect, device number 6 [ 444.222783][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 444.369775][ T8586] kAFS: No cell specified [ 444.378182][ T5892] usb 6-1: Using ep0 maxpacket: 8 [ 444.392777][ T5892] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 444.392804][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.392821][ T5892] usb 6-1: Product: syz [ 444.392833][ T5892] usb 6-1: Manufacturer: syz [ 444.392844][ T5892] usb 6-1: SerialNumber: syz [ 444.431417][ T5892] usb 6-1: config 0 descriptor?? [ 444.467240][ T5892] gspca_main: sq930x-2.14.0 probing 2770:930c [ 444.674208][ T5892] gspca_sq930x: reg_r 001f failed -32 [ 444.674307][ T5892] sq930x 6-1:0.0: probe with driver sq930x failed with error -32 [ 444.802227][ T8602] kAFS: No cell specified [ 444.806017][ T8599] syz.4.724: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 444.806528][ T8599] CPU: 1 UID: 0 PID: 8599 Comm: syz.4.724 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 444.806550][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 444.806565][ T8599] Call Trace: [ 444.806575][ T8599] [ 444.806583][ T8599] dump_stack_lvl+0x189/0x250 [ 444.806613][ T8599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.806634][ T8599] ? __pfx__printk+0x10/0x10 [ 444.806655][ T8599] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 444.806678][ T8599] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 444.806702][ T8599] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 444.806729][ T8599] warn_alloc+0x22e/0x3b0 [ 444.806752][ T8599] ? stack_depot_save_flags+0x40/0x860 [ 444.806777][ T8599] ? __pfx_warn_alloc+0x10/0x10 [ 444.806796][ T8599] ? kasan_save_track+0x3e/0x80 [ 444.806810][ T8599] ? __kasan_kmalloc+0x93/0xb0 [ 444.806827][ T8599] ? xsk_setsockopt+0x4dc/0x8d0 [ 444.806847][ T8599] ? do_sock_setsockopt+0x17c/0x1b0 [ 444.806871][ T8599] ? __x64_sys_setsockopt+0x145/0x1b0 [ 444.806893][ T8599] ? do_syscall_64+0xfa/0xfa0 [ 444.806908][ T8599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.806933][ T8599] __vmalloc_node_range_noprof+0x125/0x12d0 [ 444.806982][ T8599] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.807005][ T8599] ? __kasan_kmalloc+0x93/0xb0 [ 444.807027][ T8599] vmalloc_user_noprof+0xad/0xf0 [ 444.807045][ T8599] ? xskq_create+0xbf/0x170 [ 444.807068][ T8599] xskq_create+0xbf/0x170 [ 444.807093][ T8599] xsk_init_queue+0xb0/0x110 [ 444.807118][ T8599] xsk_setsockopt+0x4dc/0x8d0 [ 444.807151][ T8599] ? __pfx_xsk_setsockopt+0x10/0x10 [ 444.807183][ T8599] ? __fget_files+0x2a/0x420 [ 444.807205][ T8599] ? __fget_files+0x2a/0x420 [ 444.807221][ T8599] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 444.807240][ T8599] ? __pfx_xsk_setsockopt+0x10/0x10 [ 444.807264][ T8599] do_sock_setsockopt+0x17c/0x1b0 [ 444.807294][ T8599] __x64_sys_setsockopt+0x145/0x1b0 [ 444.807323][ T8599] do_syscall_64+0xfa/0xfa0 [ 444.807337][ T8599] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.807361][ T8599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.807378][ T8599] ? clear_bhb_loop+0x60/0xb0 [ 444.807398][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.807415][ T8599] RIP: 0033:0x7fc476cbefc9 [ 444.807432][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.807446][ T8599] RSP: 002b:00007fc474f1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 444.807463][ T8599] RAX: ffffffffffffffda RBX: 00007fc476f15fa0 RCX: 00007fc476cbefc9 [ 444.807476][ T8599] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 444.807487][ T8599] RBP: 00007fc476d41f91 R08: 0000000000000004 R09: 0000000000000000 [ 444.807498][ T8599] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.807508][ T8599] R13: 00007fc476f16038 R14: 00007fc476f15fa0 R15: 00007ffe9c50d618 [ 444.807540][ T8599] [ 444.807553][ T8599] Mem-Info: [ 444.807562][ T8599] active_anon:270 inactive_anon:24332 isolated_anon:0 [ 444.807562][ T8599] active_file:15732 inactive_file:37245 isolated_file:0 [ 444.807562][ T8599] unevictable:768 dirty:205 writeback:0 [ 444.807562][ T8599] slab_reclaimable:12062 slab_unreclaimable:101813 [ 444.807562][ T8599] mapped:29991 shmem:19061 pagetables:1409 [ 444.807562][ T8599] sec_pagetables:0 bounce:0 [ 444.807562][ T8599] kernel_misc_reclaimable:0 [ 444.807562][ T8599] free:1311377 free_pcp:1790 free_cma:0 [ 444.807614][ T8599] Node 0 active_anon:1080kB inactive_anon:97328kB active_file:62724kB inactive_file:148980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119964kB dirty:816kB writeback:0kB shmem:74708kB kernel_stack:13108kB pagetables:5492kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.807657][ T8599] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 444.807696][ T8599] Node 0 DMA free:15348kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 444.807747][ T8599] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 444.807779][ T8599] Node 0 DMA32 free:1325832kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1080kB inactive_anon:97328kB active_file:62724kB inactive_file:148980kB unevictable:1536kB writepending:816kB zspages:0kB present:3129332kB managed:2574580kB mlocked:0kB bounce:0kB free_pcp:7156kB local_pcp:2440kB free_cma:0kB [ 444.807834][ T8599] lowmem_reserve[]: 0 0 1 1 1 [ 444.807863][ T8599] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.807913][ T8599] lowmem_reserve[]: 0 0 0 0 0 [ 444.807941][ T8599] Node 1 Normal free:3904328kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 444.807993][ T8599] lowmem_reserve[]: 0 0 0 0 0 [ 444.808022][ T8599] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15348kB [ 444.808376][ T8599] Node 0 DMA32: 627*4kB (UM) 578*8kB (UM) 526*16kB (UM) 605*32kB (UM) 198*64kB (UM) 116*128kB (UME) 57*256kB (UM) 27*512kB (UME) 10*1024kB (UME) 2*2048kB (ME) 298*4096kB (UM) = 1325788kB [ 444.830172][ T8599] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 444.830267][ T8599] Node 1 Normal: 180*4kB (UM) 41*8kB (UME) 41*16kB (UME) 201*32kB (UME) 86*64kB (UME) 32*128kB (UME) 14*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3904328kB [ 444.830413][ T8599] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.830428][ T8599] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.830442][ T8599] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 444.830456][ T8599] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 444.830471][ T8599] 72034 total pagecache pages [ 444.830489][ T8599] 0 pages in swap cache [ 444.830495][ T8599] Free swap = 124996kB [ 444.830502][ T8599] Total swap = 124996kB [ 444.830509][ T8599] 2097051 pages RAM [ 444.830515][ T8599] 0 pages HighMem/MovableOnly [ 444.830522][ T8599] 421444 pages reserved [ 444.830528][ T8599] 0 pages cma reserved [ 445.168071][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.168139][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.597505][ T8624] kAFS: No cell specified [ 446.055122][ T8640] kAFS: No cell specified [ 446.222140][ T8645] binder: BINDER_SET_CONTEXT_MGR already set [ 446.222154][ T8645] binder: 8644:8645 ioctl 4018620d 200000004a80 returned -16 [ 446.975992][ T8657] kAFS: No cell specified [ 447.025706][ T5877] usb 6-1: USB disconnect, device number 2 [ 447.366528][ T8669] kAFS: No cell specified [ 447.657579][ T8686] kAFS: No cell specified [ 447.960996][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 448.114694][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.114725][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.116032][ T5892] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 448.116055][ T5892] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 448.116073][ T5892] usb 5-1: Manufacturer: syz [ 448.176881][ T5892] usb 5-1: config 0 descriptor?? [ 448.214225][ T8706] kAFS: No cell specified [ 448.634637][ T5877] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 448.698793][ T8717] afs: Unknown parameter 'dy' [ 448.804125][ T5877] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.804204][ T5877] usb 6-1: config 0 has no interfaces? [ 448.804233][ T5877] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 448.804252][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.862780][ T5877] usb 6-1: config 0 descriptor?? [ 449.025355][ T8730] netlink: 'syz.2.773': attribute type 39 has an invalid length. [ 449.209286][ T5892] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 449.234355][ T5877] usb 6-1: USB disconnect, device number 3 [ 449.296423][ T8734] afs: Unknown parameter 'dy' [ 449.350196][ T5949] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 449.426277][ T992] usb 5-1: USB disconnect, device number 12 [ 449.516592][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.516622][ T5949] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.516657][ T5949] usb 7-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 449.516669][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.558572][ T5949] usb 7-1: config 0 descriptor?? [ 449.989950][ T5949] usbhid 7-1:0.0: can't add hid device: -71 [ 449.990070][ T5949] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 450.036592][ T5949] usb 7-1: USB disconnect, device number 2 [ 450.137752][ T8748] afs: Unknown parameter 'dy' [ 450.306297][ T8756] afs: Unknown parameter 'dy' [ 450.377283][ T8761] netlink: 'syz.4.787': attribute type 39 has an invalid length. [ 450.879419][ T5892] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 450.932414][ T8780] afs: Unknown parameter 'dy' [ 451.304197][ T5892] usb 4-1: config index 0 descriptor too short (expected 133, got 72) [ 451.320434][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 451.320461][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.320486][ T5892] usb 4-1: Product: syz [ 451.320498][ T5892] usb 4-1: Manufacturer: syz [ 451.320511][ T5892] usb 4-1: SerialNumber: syz [ 451.353900][ T8787] afs: Unknown parameter 'dy' [ 451.381255][ T5892] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 451.505939][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 451.977392][ T5884] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 452.132853][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.132882][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.132917][ T5884] usb 3-1: New USB device found, idVendor=093a, idProduct=8001, bcdDevice= 0.00 [ 452.132936][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.185679][ T5884] usb 3-1: config 0 descriptor?? [ 452.679620][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 452.685947][ T5884] usbhid 3-1:0.0: can't add hid device: -71 [ 452.686071][ T5884] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 452.756203][ T5884] usb 3-1: USB disconnect, device number 5 [ 452.892999][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 452.893581][ T9] ath9k_htc: Failed to initialize the device [ 452.926222][ T5892] usb 4-1: USB disconnect, device number 7 [ 452.958259][ T5892] usb 4-1: ath9k_htc: USB layer deinitialized [ 452.970803][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 453.293894][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.6.813'. [ 453.887906][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 454.045087][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.045119][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.045157][ T5892] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 454.045177][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.086282][ T5892] usb 5-1: config 0 descriptor?? [ 454.356052][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 454.356165][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 454.367891][ T5892] usb 5-1: USB disconnect, device number 13 [ 454.667606][ T8878] fuseblk: Bad value for 'fd' [ 455.189305][ T8903] fuse: Bad value for 'fd' [ 455.465267][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.848'. [ 455.465355][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.848'. [ 455.776339][ T8931] fuse: Bad value for 'fd' [ 455.777316][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.855'. [ 456.396833][ T5892] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 456.472625][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'. [ 456.472649][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.867'. [ 456.572988][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 456.575962][ T5892] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 456.575994][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.576011][ T5892] usb 4-1: Product: syz [ 456.576024][ T5892] usb 4-1: Manufacturer: syz [ 456.576036][ T5892] usb 4-1: SerialNumber: syz [ 456.621737][ T5892] usb 4-1: config 0 descriptor?? [ 456.661250][ T8965] fuse: Bad value for 'fd' [ 456.792160][ T8971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.873'. [ 457.010735][ T8977] fuseblk: Unknown parameter '0x0000000000000003' [ 457.189145][ T5892] usb 4-1: USB disconnect, device number 8 [ 457.369369][ T8790] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 457.369541][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 457.516093][ T8790] usb 5-1: Using ep0 maxpacket: 8 [ 457.530775][ T8790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.530853][ T8790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.530890][ T8790] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 457.530917][ T8790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.534032][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64 [ 457.564498][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 457.564524][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.564541][ T9] usb 7-1: Product: syz [ 457.564553][ T9] usb 7-1: Manufacturer: syz [ 457.564565][ T9] usb 7-1: SerialNumber: syz [ 457.740408][ T9] usb 7-1: config 0 descriptor?? [ 457.743409][ T8790] usb 5-1: config 0 descriptor?? [ 457.762832][ T9001] netlink: 60 bytes leftover after parsing attributes in process `syz.5.882'. [ 457.919027][ T7878] udevd[7878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.148202][ T9011] batman_adv: batadv0: Adding interface: dummy0 [ 458.148219][ T9011] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.148245][ T9011] batman_adv: batadv0: Interface activated: dummy0 [ 458.212221][ T9011] net_ratelimit: 10 callbacks suppressed [ 458.212241][ T9011] batadv0: mtu less than device minimum [ 458.238475][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.263656][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.283232][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.301977][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.322012][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.337839][ T8790] topre 0003:0853:0148.0006: hidraw0: USB HID v0.07 Device [HID 0853:0148] on usb-dummy_hcd.4-1/input0 [ 458.343162][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.373127][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.393281][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.399717][ T9] usb 7-1: USB disconnect, device number 3 [ 458.420169][ T9011] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 458.475694][ T5884] usb 5-1: USB disconnect, device number 14 [ 458.862577][ T7883] udevd[7883]: setting owner of /dev/bus/usb/007/003 to uid=0, gid=0 failed: No such file or directory [ 458.886697][ T9017] fido_id[9017]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 458.928513][ T7883] udevd[7883]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.022702][ T9025] warn_alloc: 1 callbacks suppressed [ 459.022714][ T9025] syz.3.886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 459.022754][ T9025] CPU: 1 UID: 0 PID: 9025 Comm: syz.3.886 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 459.022765][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 459.022771][ T9025] Call Trace: [ 459.022776][ T9025] [ 459.022780][ T9025] dump_stack_lvl+0x189/0x250 [ 459.022797][ T9025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.022809][ T9025] ? __pfx__printk+0x10/0x10 [ 459.022821][ T9025] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 459.022834][ T9025] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 459.022848][ T9025] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 459.022862][ T9025] warn_alloc+0x22e/0x3b0 [ 459.022875][ T9025] ? stack_depot_save_flags+0x40/0x860 [ 459.022902][ T9025] ? __pfx_warn_alloc+0x10/0x10 [ 459.022922][ T9025] ? kasan_save_track+0x3e/0x80 [ 459.022936][ T9025] ? __kasan_kmalloc+0x93/0xb0 [ 459.022952][ T9025] ? xsk_setsockopt+0x4dc/0x8d0 [ 459.022972][ T9025] ? do_sock_setsockopt+0x17c/0x1b0 [ 459.022994][ T9025] ? __x64_sys_setsockopt+0x145/0x1b0 [ 459.023014][ T9025] ? do_syscall_64+0xfa/0xfa0 [ 459.023028][ T9025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.023053][ T9025] __vmalloc_node_range_noprof+0x125/0x12d0 [ 459.023094][ T9025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 459.023114][ T9025] ? __kasan_kmalloc+0x93/0xb0 [ 459.023133][ T9025] vmalloc_user_noprof+0xad/0xf0 [ 459.023149][ T9025] ? xskq_create+0xbf/0x170 [ 459.023170][ T9025] xskq_create+0xbf/0x170 [ 459.023190][ T9025] xsk_init_queue+0xb0/0x110 [ 459.023211][ T9025] xsk_setsockopt+0x4dc/0x8d0 [ 459.023230][ T9025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 459.023255][ T9025] ? __fget_files+0x2a/0x420 [ 459.023272][ T9025] ? __fget_files+0x2a/0x420 [ 459.023287][ T9025] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 459.023304][ T9025] ? __pfx_xsk_setsockopt+0x10/0x10 [ 459.023328][ T9025] do_sock_setsockopt+0x17c/0x1b0 [ 459.023353][ T9025] __x64_sys_setsockopt+0x145/0x1b0 [ 459.023377][ T9025] do_syscall_64+0xfa/0xfa0 [ 459.023390][ T9025] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.023414][ T9025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.023433][ T9025] ? clear_bhb_loop+0x60/0xb0 [ 459.023453][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.023470][ T9025] RIP: 0033:0x7f5a2ba3efc9 [ 459.023486][ T9025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.023518][ T9025] RSP: 002b:00007f5a29c9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 459.023535][ T9025] RAX: ffffffffffffffda RBX: 00007f5a2bc95fa0 RCX: 00007f5a2ba3efc9 [ 459.023547][ T9025] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 459.023557][ T9025] RBP: 00007f5a2bac1f91 R08: 0000000000000004 R09: 0000000000000000 [ 459.023567][ T9025] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.023578][ T9025] R13: 00007f5a2bc96038 R14: 00007f5a2bc95fa0 R15: 00007ffc64b6f4e8 [ 459.023605][ T9025] [ 459.332927][ T9025] Mem-Info: [ 459.332937][ T9025] active_anon:271 inactive_anon:24718 isolated_anon:0 [ 459.332937][ T9025] active_file:15759 inactive_file:37238 isolated_file:0 [ 459.332937][ T9025] unevictable:768 dirty:160 writeback:0 [ 459.332937][ T9025] slab_reclaimable:12088 slab_unreclaimable:103398 [ 459.332937][ T9025] mapped:30177 shmem:19063 pagetables:1554 [ 459.332937][ T9025] sec_pagetables:0 bounce:0 [ 459.332937][ T9025] kernel_misc_reclaimable:0 [ 459.332937][ T9025] free:1299029 free_pcp:7352 free_cma:0 [ 459.332968][ T9025] Node 0 active_anon:1084kB inactive_anon:98872kB active_file:62832kB inactive_file:148952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120708kB dirty:632kB writeback:0kB shmem:74716kB kernel_stack:13384kB pagetables:6072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.332992][ T9025] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 459.333013][ T9025] Node 0 DMA free:15348kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 459.333043][ T9025] lowmem_reserve[]: 0 2514 2515 2515 2515 [ 459.333060][ T9025] Node 0 DMA32 free:1276440kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1084kB inactive_anon:98872kB active_file:62832kB inactive_file:148952kB unevictable:1536kB writepending:632kB zspages:0kB present:3129332kB managed:2574580kB mlocked:0kB bounce:0kB free_pcp:29372kB local_pcp:19872kB free_cma:0kB [ 459.333089][ T9025] lowmem_reserve[]: 0 0 1 1 1 [ 459.333105][ T9025] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 459.333131][ T9025] lowmem_reserve[]: 0 0 0 0 0 [ 459.333146][ T9025] Node 1 Normal free:3904328kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 459.333174][ T9025] lowmem_reserve[]: 0 0 0 0 0 [ 459.333189][ T9025] Node 0 DMA: 1*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15348kB [ 459.333261][ T9025] Node 0 DMA32: 364*4kB (UM) 52*8kB (UM) 29*16kB (UM) 75*32kB (UME) 208*64kB (UM) 120*128kB (UME) 50*256kB (UME) 21*512kB (UM) 5*1024kB (UME) 1*2048kB (E) 296*4096kB (UM) = 1276544kB [ 459.333336][ T9025] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 459.333382][ T9025] Node 1 Normal: 180*4kB (UM) 41*8kB (UME) 41*16kB (UME) 201*32kB (UME) 86*64kB (UME) 32*128kB (UME) 14*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 946*4096kB (UM) = 3904328kB [ 459.333457][ T9025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.333465][ T9025] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.333473][ T9025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 459.333480][ T9025] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 459.333489][ T9025] 72056 total pagecache pages [ 459.333494][ T9025] 0 pages in swap cache [ 459.333497][ T9025] Free swap = 124996kB [ 459.333501][ T9025] Total swap = 124996kB [ 459.333504][ T9025] 2097051 pages RAM [ 459.333508][ T9025] 0 pages HighMem/MovableOnly [ 459.333511][ T9025] 421444 pages reserved [ 459.333515][ T9025] 0 pages cma reserved [ 460.055666][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 460.254914][ T9047] netlink: 60 bytes leftover after parsing attributes in process `syz.6.893'. [ 460.486612][ T8790] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 460.580605][ T5122] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 460.669587][ T8790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.669623][ T8790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.672901][ T8790] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 460.672927][ T8790] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 460.672945][ T8790] usb 4-1: Manufacturer: syz [ 460.705766][ T8790] usb 4-1: config 0 descriptor?? [ 461.157888][ T8790] usbhid 4-1:0.0: can't add hid device: -32 [ 461.158049][ T8790] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 461.206813][ T8790] usb 4-1: USB disconnect, device number 9 [ 461.388539][ T9083] overlayfs: missing 'lowerdir' [ 461.671678][ T9096] netlink: 60 bytes leftover after parsing attributes in process `syz.2.906'. [ 461.876288][ T5122] Bluetooth: hci2: unexpected event for opcode 0x2012 [ 462.141520][ T9119] overlayfs: missing 'lowerdir' [ 462.728419][ T9144] netlink: 60 bytes leftover after parsing attributes in process `syz.5.924'. [ 462.803472][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 462.972916][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.972935][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.994078][ T5877] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 462.994105][ T5877] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 462.994124][ T5877] usb 5-1: Manufacturer: syz [ 463.066590][ T5877] usb 5-1: config 0 descriptor?? [ 463.152288][ T9155] overlayfs: missing 'lowerdir' [ 463.491839][ T5877] usbhid 5-1:0.0: can't add hid device: -32 [ 463.491958][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 463.523921][ T5877] usb 5-1: USB disconnect, device number 15 [ 463.735320][ T9177] netlink: 24 bytes leftover after parsing attributes in process `syz.6.936'. [ 463.853053][ T5884] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 464.004707][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 464.006911][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 464.006935][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.006952][ T5884] usb 3-1: Product: syz [ 464.006963][ T5884] usb 3-1: Manufacturer: syz [ 464.006970][ T5884] usb 3-1: SerialNumber: syz [ 464.060269][ T5884] usb 3-1: config 0 descriptor?? [ 464.107594][ T5884] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 464.214789][ T7879] udevd[7879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.285609][ T5884] usb 3-1: USB disconnect, device number 6 [ 464.631475][ T9200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.947'. [ 465.270252][ T37] audit: type=1326 audit(1760960990.079:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ba3efc9 code=0x7ffc0000 [ 465.271428][ T37] audit: type=1326 audit(1760960990.079:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ba3efc9 code=0x7ffc0000 [ 465.275526][ T37] audit: type=1326 audit(1760960990.089:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f5a2ba3efc9 code=0x7ffc0000 [ 465.275812][ T37] audit: type=1326 audit(1760961246.097:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ba3efc9 code=0x7ffc0000 [ 465.276217][ T37] audit: type=1326 audit(1760961246.097:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9221 comm="syz.3.957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2ba3efc9 code=0x7ffc0000 [ 465.882264][ T9224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.958'. [ 466.441620][ T8790] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 466.500928][ T9251] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 466.515960][ T9250] IPVS: stopping master sync thread 9251 ... [ 466.571673][ T8790] usb 4-1: device descriptor read/64, error -71 [ 466.660343][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.6.970'. [ 466.751480][ T5122] Bluetooth: hci4: command 0x0406 tx timeout [ 466.751548][ T9204] Bluetooth: hci4: Opcode 0x0401 failed: -110 [ 466.840143][ T8790] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 466.974623][ T8790] usb 4-1: device descriptor read/64, error -71 [ 467.011355][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 467.087427][ T8790] usb usb4-port1: attempt power cycle [ 467.161238][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 467.166527][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.166557][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.166594][ T9] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 467.166614][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.172375][ T9] usb 3-1: config 0 descriptor?? [ 467.452902][ T8790] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 467.482840][ T8790] usb 4-1: device descriptor read/8, error -71 [ 467.524647][ T9276] batman_adv: batadv0: Adding interface: dummy0 [ 467.524663][ T9276] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.524703][ T9276] batman_adv: batadv0: Interface activated: dummy0 [ 467.602653][ T9276] net_ratelimit: 10 callbacks suppressed [ 467.602672][ T9276] batadv0: mtu less than device minimum [ 467.618426][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.636930][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.649991][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.665554][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.681083][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 467.681207][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 467.684312][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.700637][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.701156][ T9] usb 3-1: USB disconnect, device number 7 [ 467.717933][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.729793][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.741042][ T8790] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 467.747997][ T9276] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 467.772182][ T8790] usb 4-1: device descriptor read/8, error -71 [ 467.881451][ T8790] usb usb4-port1: unable to enumerate USB device [ 468.004778][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.982'. [ 468.100824][ T5884] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 468.230757][ T5884] usb 5-1: device descriptor read/64, error -71 [ 468.320682][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 468.437103][ T9299] netlink: 'syz.6.989': attribute type 39 has an invalid length. [ 468.470638][ T5884] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 468.475286][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 468.477999][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.478017][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.478027][ T9] usb 6-1: Product: syz [ 468.478034][ T9] usb 6-1: Manufacturer: syz [ 468.478041][ T9] usb 6-1: SerialNumber: syz [ 468.483301][ T9] usb 6-1: config 0 descriptor?? [ 468.596795][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 468.609591][ T5884] usb 5-1: device descriptor read/64, error -71 [ 468.647255][ T7879] udevd[7879]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.720591][ T5884] usb usb5-port1: attempt power cycle [ 469.060333][ T5884] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 469.083214][ T5884] usb 5-1: device descriptor read/8, error -71 [ 469.159015][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.994'. [ 469.320224][ T5884] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 469.340958][ T5884] usb 5-1: device descriptor read/8, error -71 [ 469.450635][ T5884] usb usb5-port1: unable to enumerate USB device [ 469.642215][ T8790] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 469.686148][ T3685] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 469.789951][ T8790] usb 7-1: Using ep0 maxpacket: 8 [ 469.795372][ T8790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.795403][ T8790] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.795440][ T8790] usb 7-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 469.795459][ T8790] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.850058][ T8790] usb 7-1: config 0 descriptor?? [ 469.950001][ T5884] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 470.107149][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.117251][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 470.117279][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.117296][ T5884] usb 3-1: Product: syz [ 470.117307][ T5884] usb 3-1: Manufacturer: syz [ 470.117319][ T5884] usb 3-1: SerialNumber: syz [ 470.131986][ T5884] usb 3-1: config 0 descriptor?? [ 470.234915][ T5884] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 470.267313][ T8790] usbhid 7-1:0.0: can't add hid device: -71 [ 470.267433][ T8790] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 470.287608][ T8790] usb 7-1: USB disconnect, device number 4 [ 470.327840][ T7879] udevd[7879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.349791][ T5884] usb 3-1: USB disconnect, device number 8 [ 470.800288][ T5884] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 470.929480][ T5884] usb 4-1: device descriptor read/64, error -71 [ 470.945989][ T9342] loop2: detected capacity change from 0 to 7 [ 471.025526][ T7879] Dev loop2: unable to read RDB block 7 [ 471.025581][ T7879] loop2: unable to read partition table [ 471.025850][ T7879] loop2: partition table beyond EOD, truncated [ 471.053997][ T9342] Dev loop2: unable to read RDB block 7 [ 471.054044][ T9342] loop2: unable to read partition table [ 471.054281][ T9342] loop2: partition table beyond EOD, truncated [ 471.054298][ T9342] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 471.143455][ T5892] usb 6-1: USB disconnect, device number 4 [ 471.175074][ T5884] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 471.319203][ T44] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 471.325292][ T5884] usb 4-1: device descriptor read/64, error -71 [ 471.429809][ T5884] usb usb4-port1: attempt power cycle [ 471.471255][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.471286][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.472751][ T44] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 471.472776][ T44] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 471.472793][ T44] usb 5-1: Manufacturer: syz [ 471.476956][ T44] usb 5-1: config 0 descriptor?? [ 471.779137][ T5884] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 471.800245][ T5884] usb 4-1: device descriptor read/8, error -71 [ 471.892963][ T44] usbhid 5-1:0.0: can't add hid device: -32 [ 471.893088][ T44] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 471.916495][ T44] usb 5-1: USB disconnect, device number 20 [ 472.058895][ T5884] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 472.092497][ T5884] usb 4-1: device descriptor read/8, error -71 [ 472.118335][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1020'. [ 472.202870][ T5884] usb usb4-port1: unable to enumerate USB device [ 472.528722][ T5884] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 472.685101][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 472.687646][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 472.687672][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.687690][ T5884] usb 3-1: Product: syz [ 472.687702][ T5884] usb 3-1: Manufacturer: syz [ 472.687712][ T5884] usb 3-1: SerialNumber: syz [ 472.702828][ T5884] usb 3-1: config 0 descriptor?? [ 472.795070][ T5884] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 472.830853][ T7879] udevd[7879]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.103745][ T9401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1034'. [ 473.264016][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1037'. [ 473.751921][ T9426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1045'. [ 474.437380][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1058'. [ 474.478908][ T8790] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 474.508001][ T44] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 474.608226][ T8790] usb 6-1: device descriptor read/64, error -71 [ 474.675267][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.675298][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.675340][ T44] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 474.675361][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.684556][ T44] usb 4-1: config 0 descriptor?? [ 474.847413][ T8790] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 474.977408][ T8790] usb 6-1: device descriptor read/64, error -71 [ 475.087606][ T8790] usb usb6-port1: attempt power cycle [ 475.134617][ T44] hid-led 0003:04D8:F372.0007: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 475.310534][ T5892] usb 3-1: USB disconnect, device number 9 [ 475.415293][ T44] hid-led 0003:04D8:F372.0007: Greynut Luxafor initialized [ 475.427132][ T8790] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 475.447707][ T8790] usb 6-1: device descriptor read/8, error -71 [ 475.451189][ T44] usb 4-1: USB disconnect, device number 18 [ 475.492592][ T3515] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 475.507997][ T12] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 475.511428][ T43] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 475.517614][ T3515] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 475.542024][ T3595] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 475.551913][ T3515] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 475.560674][ T3515] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 475.596962][ T3595] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 475.633069][ T12] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 475.636592][ T3515] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 475.653906][ T3515] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 475.656266][ T12] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 475.660355][ T12] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 475.669320][ T12] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 475.675983][ T12] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 475.678458][ T12] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 475.691004][ T12] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 475.700830][ T3595] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 475.707042][ T8790] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 475.731363][ T8790] usb 6-1: device descriptor read/8, error -71 [ 475.837241][ T8790] usb usb6-port1: unable to enumerate USB device [ 476.038359][ T9490] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 476.038418][ T9490] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 476.093482][ T9493] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 476.436618][ T8790] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 476.590055][ T8790] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 476.593021][ T8790] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 476.593046][ T8790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.593064][ T8790] usb 4-1: Product: syz [ 476.593076][ T8790] usb 4-1: Manufacturer: syz [ 476.593089][ T8790] usb 4-1: SerialNumber: syz [ 476.647898][ T8790] usb 4-1: config 0 descriptor?? [ 476.691693][ T8790] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 476.772663][ T9015] udevd[9015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.804534][ T5892] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 476.823929][ T9517] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1084'. [ 476.948172][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.948191][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.948211][ T5892] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 476.948223][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.952590][ T5892] usb 5-1: config 0 descriptor?? [ 477.376254][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 477.376366][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 477.385770][ T5892] usb 5-1: USB disconnect, device number 21 [ 477.870833][ T9540] usb usb9: usbfs: process 9540 (syz.2.1093) did not claim interface 8 before use [ 477.983157][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1094'. [ 477.983182][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1094'. [ 478.053576][ T9548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 478.379708][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1101'. [ 478.379731][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1101'. [ 478.643691][ T9572] netlink: 'syz.6.1105': attribute type 39 has an invalid length. [ 478.960109][ T9587] fuse: Bad value for 'group_id' [ 478.960127][ T9587] fuse: Bad value for 'group_id' [ 479.255889][ T44] usb 4-1: USB disconnect, device number 19 [ 479.340114][ T9598] netlink: 'syz.3.1118': attribute type 39 has an invalid length. [ 479.579810][ C1] vkms_vblank_simulate: vblank timer overrun [ 479.646727][ T5892] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 479.797754][ T5892] usb 7-1: config index 0 descriptor too short (expected 4495, got 71) [ 479.797781][ T5892] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 479.797801][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.797817][ T5892] usb 7-1: config 0 has no interface number 0 [ 479.807657][ T5892] usb 7-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 479.807685][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.807702][ T5892] usb 7-1: Product: syz [ 479.807715][ T5892] usb 7-1: Manufacturer: syz [ 479.807727][ T5892] usb 7-1: SerialNumber: syz [ 479.855716][ T5892] usb 7-1: config 0 descriptor?? [ 480.081499][ C1] vkms_vblank_simulate: vblank timer overrun [ 480.083831][ T5892] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 480.083867][ T5892] uvcvideo 7-1:0.105: No valid video chain found. [ 480.096094][ T5892] usb 7-1: USB disconnect, device number 5 [ 480.471574][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 480.471598][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1136'. [ 481.134392][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 481.244363][ T44] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 481.284411][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 481.287017][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.287074][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 481.287093][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 481.287106][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 481.287116][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 481.289310][ T5892] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 481.289334][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 481.289352][ T5892] usb 7-1: Product: syz [ 481.289361][ T5892] usb 7-1: Manufacturer: syz [ 481.289368][ T5892] usb 7-1: SerialNumber: syz [ 481.293136][ T5892] usb 7-1: config 0 descriptor?? [ 481.408371][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.408401][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.408552][ T44] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 481.408574][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.454560][ T5884] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 481.474349][ T44] usb 3-1: config 0 descriptor?? [ 481.530459][ T5892] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 481.530486][ T5892] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 481.607351][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 481.607382][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.607476][ T5884] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 481.607497][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.666042][ T5884] usb 4-1: config 0 descriptor?? [ 481.724538][ T5892] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 481.724562][ T5892] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 481.724858][ T5892] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 481.738067][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 481.777613][ T5892] usb 7-1: USB disconnect, device number 6 [ 481.911652][ T44] usbhid 3-1:0.0: can't add hid device: -71 [ 481.911978][ T44] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 481.939839][ T5884] usbhid 4-1:0.0: can't add hid device: -71 [ 481.939953][ T5884] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 481.958137][ T44] usb 3-1: USB disconnect, device number 10 [ 481.972162][ T5884] usb 4-1: USB disconnect, device number 20 [ 482.115440][ T9685] netlink: 'syz.5.1155': attribute type 39 has an invalid length. [ 482.299061][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.612131][ C1] vkms_vblank_simulate: vblank timer overrun [ 482.703552][ T9] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 482.879533][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.884631][ T9] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 482.884658][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.884675][ T9] usb 7-1: Product: syz [ 482.884688][ T9] usb 7-1: Manufacturer: syz [ 482.884700][ T9] usb 7-1: SerialNumber: syz [ 482.956896][ T9] usb 7-1: config 0 descriptor?? [ 483.022638][ T9711] loop2: detected capacity change from 0 to 7 [ 483.043421][ T9711] Dev loop2: unable to read RDB block 7 [ 483.043475][ T9711] loop2: unable to read partition table [ 483.043715][ T9711] loop2: partition table beyond EOD, truncated [ 483.043746][ T9711] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.191662][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 483.226334][ T9] usb 7-1: USB disconnect, device number 7 [ 483.311871][ T9015] udevd[9015]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.485883][ T8790] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 483.649159][ T8790] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 483.649188][ T8790] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 483.649206][ T8790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 483.649224][ T8790] usb 4-1: config 0 has no interface number 0 [ 483.663792][ T8790] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 483.663820][ T8790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.663837][ T8790] usb 4-1: Product: syz [ 483.663849][ T8790] usb 4-1: Manufacturer: syz [ 483.663862][ T8790] usb 4-1: SerialNumber: syz [ 483.696402][ T8790] usb 4-1: config 0 descriptor?? [ 483.865389][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 483.920770][ T8790] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 483.920802][ T8790] uvcvideo 4-1:0.105: No valid video chain found. [ 483.944872][ T8790] usb 4-1: USB disconnect, device number 21 [ 484.021425][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 484.029357][ T44] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.029387][ T44] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.029407][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 484.029437][ T44] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 484.029464][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.079900][ T44] usb 3-1: config 0 descriptor?? [ 484.495570][ T9750] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1184'. [ 484.540885][ T44] hid (null): unknown global tag 0xd [ 484.540946][ T44] hid (null): global environment stack underflow [ 484.562128][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562164][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562189][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562214][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562237][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562261][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562286][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562311][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562336][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.562359][ T44] cougar 0003:060B:500A.0008: unknown main item tag 0x0 [ 484.636856][ T44] cougar 0003:060B:500A.0008: unexpected long global item [ 484.637759][ T44] cougar 0003:060B:500A.0008: parse failed [ 484.637861][ T44] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 484.734685][ T8790] usb 3-1: USB disconnect, device number 11 [ 485.276053][ T9775] fuseblk: Bad value for 'fd' [ 485.362301][ T44] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 485.520581][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 485.530960][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.531011][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 485.531034][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 485.531057][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 485.531084][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 485.582146][ T44] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 485.582173][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 485.582192][ T44] usb 7-1: Product: syz [ 485.582204][ T44] usb 7-1: Manufacturer: syz [ 485.582218][ T44] usb 7-1: SerialNumber: syz [ 485.628527][ T44] usb 7-1: config 0 descriptor?? [ 485.752354][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 485.752379][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 485.857042][ T44] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 485.857065][ T44] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 486.069333][ T44] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 486.069357][ T44] radio-si470x 7-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 486.069648][ T44] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 486.118511][ T44] usb 7-1: USB disconnect, device number 8 [ 486.598545][ T9814] loop2: detected capacity change from 0 to 7 [ 486.599932][ T9814] Dev loop2: unable to read RDB block 7 [ 486.599960][ T9814] loop2: AHDI p1 p2 p3 [ 486.599990][ T9814] loop2: partition table partially beyond EOD, truncated [ 486.600214][ T9814] loop2: p1 start 1601398130 is beyond EOD, truncated [ 486.600232][ T9814] loop2: p2 start 1702059890 is beyond EOD, truncated [ 486.691534][ T8790] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 486.829778][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 486.829801][ T9820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 486.851398][ T8790] usb 3-1: Using ep0 maxpacket: 16 [ 486.854956][ T8790] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.854983][ T8790] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.855003][ T8790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 486.855034][ T8790] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 486.855053][ T8790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.863488][ T8790] usb 3-1: config 0 descriptor?? [ 486.972532][ T44] lo speed is unknown, defaulting to 1000 [ 486.972570][ T44] syz2: Port: 1 Link DOWN [ 487.294309][ T8790] hid (null): unknown global tag 0xd [ 487.294368][ T8790] hid (null): global environment stack underflow [ 487.320817][ T9835] comedi comedi2: dt2814: I/O port conflict (0xfff,2) [ 487.339335][ T8790] cougar 0003:060B:500A.0009: unexpected long global item [ 487.340153][ T8790] cougar 0003:060B:500A.0009: parse failed [ 487.340265][ T8790] cougar 0003:060B:500A.0009: probe with driver cougar failed with error -22 [ 487.479668][ T8790] usb 3-1: USB disconnect, device number 12 [ 487.591137][ T5892] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 487.660372][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 487.660389][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 487.770982][ T44] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 487.777669][ T5892] usb 7-1: config index 0 descriptor too short (expected 4495, got 71) [ 487.777696][ T5892] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 487.777715][ T5892] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.777731][ T5892] usb 7-1: config 0 has no interface number 0 [ 487.780765][ T5892] usb 7-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 487.780791][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.785761][ T5892] usb 7-1: Product: syz [ 487.785778][ T5892] usb 7-1: Manufacturer: syz [ 487.785791][ T5892] usb 7-1: SerialNumber: syz [ 487.793400][ T5892] usb 7-1: config 0 descriptor?? [ 487.944130][ T44] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 487.944158][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.944176][ T44] usb 4-1: Product: syz [ 487.944189][ T44] usb 4-1: Manufacturer: syz [ 487.944202][ T44] usb 4-1: SerialNumber: syz [ 487.981774][ T44] usb 4-1: config 0 descriptor?? [ 487.989189][ T44] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 488.031476][ T5892] uvcvideo 7-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 488.031511][ T5892] uvcvideo 7-1:0.105: No valid video chain found. [ 488.053496][ T5892] usb 7-1: USB disconnect, device number 9 [ 488.601780][ T44] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 488.601944][ T44] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 488.634815][ T44] usb 4-1: USB disconnect, device number 22 [ 489.040456][ T5877] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 489.195288][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.195325][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.218442][ T5877] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 489.218470][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.218488][ T5877] usb 5-1: Product: syz [ 489.218501][ T5877] usb 5-1: Manufacturer: syz [ 489.218513][ T5877] usb 5-1: SerialNumber: syz [ 489.271183][ T5877] usb 5-1: config 0 descriptor?? [ 489.289871][ T5877] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 489.342141][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 489.345969][ T5877] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 489.346060][ T5877] usb 5-1: media controller created [ 489.403911][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 489.599809][ T5877] DVB: Unable to find symbol tda10046_attach() [ 489.599837][ T5877] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 489.599857][ T5877] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 489.887649][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.889520][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.111426][ T9897] ------------[ cut here ]------------ [ 490.111441][ T9897] WARNING: CPU: 0 PID: 9897 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 490.111555][ T9897] Modules linked in: [ 490.111582][ T9897] CPU: 0 UID: 0 PID: 9897 Comm: syz.5.1251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 490.111652][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.111664][ T9897] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 490.111722][ T9897] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 490.111768][ T9897] RSP: 0018:ffffc9000ca778e0 EFLAGS: 00010287 [ 490.111785][ T9897] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 490.111793][ T9897] RDX: ffffc9001e852000 RSI: 00000000000000ae RDI: 00000000000000af [ 490.111799][ T9897] RBP: ffffc9000ca77a70 R08: 0000000000000000 R09: 0000000000000000 [ 490.111806][ T9897] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 490.111817][ T9897] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805c324791 [ 490.111829][ T9897] FS: 00007f77f47a56c0(0000) GS:ffff888126bc8000(0000) knlGS:0000000000000000 [ 490.111845][ T9897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.111858][ T9897] CR2: 00007f77f47a4f98 CR3: 000000004edfa000 CR4: 00000000003526f0 [ 490.111874][ T9897] Call Trace: [ 490.111912][ T9897] [ 490.111968][ T9897] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 490.112121][ T9897] ? __pfx_cgroup_freeze+0x10/0x10 [ 490.112144][ T9897] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 490.112160][ T9897] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 490.112184][ T9897] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 490.112218][ T9897] ? mutex_lock_nested+0x154/0x1d0 [ 490.112238][ T9897] ? cgroup_kn_lock_live+0x13c/0x230 [ 490.112269][ T9897] cgroup_freeze_write+0x156/0x1c0 [ 490.112289][ T9897] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 490.112300][ T9897] ? kernfs_root+0x1c/0x230 [ 490.112332][ T9897] ? kernfs_root+0x1c/0x230 [ 490.112356][ T9897] ? kernfs_root+0x1ea/0x230 [ 490.112376][ T9897] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 490.112398][ T9897] cgroup_file_write+0x39e/0x740 [ 490.112425][ T9897] ? __pfx_cgroup_file_write+0x10/0x10 [ 490.112456][ T9897] ? __pfx_cgroup_file_write+0x10/0x10 [ 490.112464][ T9897] kernfs_fop_write_iter+0x3b0/0x540 [ 490.112479][ T9897] vfs_write+0x5d5/0xb40 [ 490.112517][ T9897] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 490.112539][ T9897] ? __pfx_vfs_write+0x10/0x10 [ 490.112561][ T9897] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 490.112603][ T9897] ? mutex_lock_nested+0x154/0x1d0 [ 490.112621][ T9897] ? fdget_pos+0x253/0x320 [ 490.112638][ T9897] ksys_write+0x14b/0x260 [ 490.112649][ T9897] ? __pfx_ksys_write+0x10/0x10 [ 490.112661][ T9897] ? do_syscall_64+0xbe/0xfa0 [ 490.112712][ T9897] do_syscall_64+0xfa/0xfa0 [ 490.112729][ T9897] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.112779][ T9897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.112806][ T9897] ? clear_bhb_loop+0x60/0xb0 [ 490.112820][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.112831][ T9897] RIP: 0033:0x7f77f655efc9 [ 490.112847][ T9897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.112862][ T9897] RSP: 002b:00007f77f47a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.112882][ T9897] RAX: ffffffffffffffda RBX: 00007f77f67b6090 RCX: 00007f77f655efc9 [ 490.112896][ T9897] RDX: 0000000000000012 RSI: 0000200000000340 RDI: 0000000000000007 [ 490.112908][ T9897] RBP: 00007f77f65e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.112920][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.112931][ T9897] R13: 00007f77f67b6128 R14: 00007f77f67b6090 R15: 00007ffd5e204348 [ 490.112962][ T9897] [ 490.112975][ T9897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.112984][ T9897] CPU: 0 UID: 0 PID: 9897 Comm: syz.5.1251 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 490.112996][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.113003][ T9897] Call Trace: [ 490.113010][ T9897] [ 490.113018][ T9897] dump_stack_lvl+0x99/0x250 [ 490.113058][ T9897] ? __asan_memcpy+0x40/0x70 [ 490.113098][ T9897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.113120][ T9897] ? __pfx__printk+0x10/0x10 [ 490.113143][ T9897] vpanic+0x237/0x6d0 [ 490.113160][ T9897] ? __pfx_vpanic+0x10/0x10 [ 490.113182][ T9897] panic+0xb9/0xc0 [ 490.113207][ T9897] ? __pfx_panic+0x10/0x10 [ 490.113243][ T9897] __warn+0x31b/0x4b0 [ 490.113260][ T9897] ? cgroup_freeze+0x80a/0xf90 [ 490.113287][ T9897] ? cgroup_freeze+0x80a/0xf90 [ 490.113304][ T9897] report_bug+0x2be/0x4f0 [ 490.113367][ T9897] ? cgroup_freeze+0x80a/0xf90 [ 490.113392][ T9897] ? cgroup_freeze+0x80a/0xf90 [ 490.113417][ T9897] ? cgroup_freeze+0x80c/0xf90 [ 490.113447][ T9897] handle_bug+0x84/0x160 [ 490.113465][ T9897] exc_invalid_op+0x1a/0x50 [ 490.113476][ T9897] asm_exc_invalid_op+0x1a/0x20 [ 490.113486][ T9897] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 490.113499][ T9897] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 490.113508][ T9897] RSP: 0018:ffffc9000ca778e0 EFLAGS: 00010287 [ 490.113523][ T9897] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 490.113536][ T9897] RDX: ffffc9001e852000 RSI: 00000000000000ae RDI: 00000000000000af [ 490.113548][ T9897] RBP: ffffc9000ca77a70 R08: 0000000000000000 R09: 0000000000000000 [ 490.113560][ T9897] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 490.113582][ T9897] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88805c324791 [ 490.113604][ T9897] ? cgroup_freeze+0x809/0xf90 [ 490.113637][ T9897] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 490.113654][ T9897] ? __pfx_cgroup_freeze+0x10/0x10 [ 490.113667][ T9897] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 490.113687][ T9897] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 490.113710][ T9897] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 490.113743][ T9897] ? mutex_lock_nested+0x154/0x1d0 [ 490.113763][ T9897] ? cgroup_kn_lock_live+0x13c/0x230 [ 490.113793][ T9897] cgroup_freeze_write+0x156/0x1c0 [ 490.113808][ T9897] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 490.113820][ T9897] ? kernfs_root+0x1c/0x230 [ 490.113833][ T9897] ? kernfs_root+0x1c/0x230 [ 490.113848][ T9897] ? kernfs_root+0x1ea/0x230 [ 490.113868][ T9897] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 490.113890][ T9897] cgroup_file_write+0x39e/0x740 [ 490.113918][ T9897] ? __pfx_cgroup_file_write+0x10/0x10 [ 490.113952][ T9897] ? __pfx_cgroup_file_write+0x10/0x10 [ 490.113966][ T9897] kernfs_fop_write_iter+0x3b0/0x540 [ 490.113988][ T9897] vfs_write+0x5d5/0xb40 [ 490.114006][ T9897] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 490.114024][ T9897] ? __pfx_vfs_write+0x10/0x10 [ 490.114045][ T9897] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 490.114077][ T9897] ? mutex_lock_nested+0x154/0x1d0 [ 490.114097][ T9897] ? fdget_pos+0x253/0x320 [ 490.114127][ T9897] ksys_write+0x14b/0x260 [ 490.114140][ T9897] ? __pfx_ksys_write+0x10/0x10 [ 490.114151][ T9897] ? do_syscall_64+0xbe/0xfa0 [ 490.114163][ T9897] do_syscall_64+0xfa/0xfa0 [ 490.114171][ T9897] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.114197][ T9897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.114215][ T9897] ? clear_bhb_loop+0x60/0xb0 [ 490.114235][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.114253][ T9897] RIP: 0033:0x7f77f655efc9 [ 490.114266][ T9897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.114281][ T9897] RSP: 002b:00007f77f47a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.114298][ T9897] RAX: ffffffffffffffda RBX: 00007f77f67b6090 RCX: 00007f77f655efc9 [ 490.114313][ T9897] RDX: 0000000000000012 RSI: 0000200000000340 RDI: 0000000000000007 [ 490.114325][ T9897] RBP: 00007f77f65e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 490.114337][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.114349][ T9897] R13: 00007f77f67b6128 R14: 00007f77f67b6090 R15: 00007ffd5e204348 [ 490.114384][ T9897] [ 490.114663][ T9897] Kernel Offset: disabled