last executing test programs: 38.763684371s ago: executing program 1 (id=2366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a000000140007800800114008000000050015000c00000012000300686173683a6e6574"], 0x60}}, 0x0) 37.401867461s ago: executing program 1 (id=2368): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 33.086155809s ago: executing program 1 (id=2377): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="200d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x0, 0x2, 0x8, &(0x7f0000000400)={0x1a, "65c28678035ab73ade02d839a66f560cfa56ec4319a52702236be319b49de48232"}}) 30.938295713s ago: executing program 1 (id=2386): r0 = syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000012c0)='./mnt\x00', 0x414, &(0x7f0000000080)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a3, &(0x7f0000000440)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x5472, &(0x7f0000000100)={0x0, 0x406f, 0x8000, 0x3, 0x1c5}, &(0x7f0000000180), &(0x7f00000001c0)) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r2, &(0x7f0000000280)={0x8, {"68828c0b9bc23b6a89f8110d35c59d082b92f476102ce32229638a495dcd21c89d83a602a5e31db5ec28b818a3d699abbfafad0370d610ac8a0c4726147706600ff53312a5a0fcf02dd3c0c051bce7e14058a91070617264a63a446e3bcbc60a8204e1cde7294551e2b14ca95768db0f1d7e91a01558164eb611a545bfff41ad4788237a35d9bb2087b6245d27b7fdf4d12d0b19d8cb93ab5ae5850dc1c521058256c8ffa7742038290bb874b0e4199e945f3ab5c74e1b3840f18b0c27377c18beea9f6f909f141e96c7ef2d65f293a13fbbca16644d71cf8cc7652391c5eacaa8a1e247815d7c91adab2cfe77c71882246812312aa01c99b9402a62d82ce80d08636aa5a87b550becadfe4b5ae98085a6b0d9fd3407461eecd242e243140cbe1027d68516e3c379a0921455ca4b36fb9d4b9f9324590fc77730385dee376d147a74bb08ce8fec7ed205311dc42f4cd009f57c85abced5844867f81ddf09cb67bb623ed41304c2d08373972f30418780c6bed885604b2fc6ea1cd1dfe48c5fae5f5925c9c657bb39d8b30db6eb1cab5031ae94d45aa4764d45397793250c758537e24bab0ab75d8066903f808d1bf68d189c1a1f5c6ad28dbeae6ab64c771346a9e7720b92ad4008db9c94d6b876753d57bb21f7c645d6833e680f52c3ecaf20b05869feb4ee670d4f18e233df78ccda64a8cbc6d28e392fad9cc7dc8baed666cf0e96111aac3376d3e66b50f83bbc51b180de2a320ee8c5fe17bea897acea40274c3962f009ede428a99e0fe869a9f711b626e68a5e257e32cd6a000f4c9c509b1116f2502f199823f29d7410e37f4d57755b85e3b0f555422f8631047187b55295001847e7395e7d59752ee37d12f7f9b0d94f00f626eb330ebcf5fd520925036cc07e687e001befa33475b67d381f5d0d5c969fd603464520d9212df27dbb4665c139755795a42005fac94f0ceeb6dee1f3bb0c7c1b03bbaafe7a4b53257892fa6a0148a1bbb43f0b57c21e278730c53a888864a8fbf71a81e154d5f923bdc67a3557d081655d3a63c63609c0e1804dbb7242ca489ac2f2d425a4f8007d4f312ca7723bf3c6633b651177c0a54d6ac50ac45e5f36e474685ef3938775537a3c50f06eca472d7f8cee44239b2a4d29fbf2629eaf62d879ab8dcd2fd5d2345298f3fea84307f0d22a5ecbe2c728cec1b9ad4240926dc9d3d94d5476a0f9f088b0c21b040139bbe103417ae11a85f72d652c93351f8e062530c03cb842ef3b231ecf36ef32c470c67d48648740334ea670a200e4d87745784c270023ac2391b39319162a268c55d64c763d9e5079c286b0c2eb6c084adbdd0b1823d9d31a73aa181cb507bfce4d9f7752da2fbbd3d3eb366b7fcb4c7868a5d010ea3b4e7dd6e68aeb044edf20e2d4aa2837cd70814a556b5a4f90fc47ceab97b2f6ec437f46196398667cf927c900523154b3bfee8e96eb4b4c03dc0d818511a51b5defd3ebf6523816560ba03fc010fd34ab09fdb3aa355e48b6b3a0cb6ce89b4008104a4afe8265f1178d177027918ec1aca8a2ad98fa63bad1367d379e6ff13a57909d8f9ecf50bf5dedc6e49cb9459e4db15c4aa2098fec4e13eafebaf8c1ea118d05c51e799f8e843e0c722ececfcf2422ece64dd945b6c14e5843a393e84873d3dd84eab786955014f210686aea9b11062c70e829ef9ff9da1be19705d2a74110d82e141cb1da325441a8593780470656e6116d5bf16bb6fee6b980ae3448d782c5f8d658f6e9e8494d9357490485a1b9879d34f4e681a425e36627f4844a64bfee3c90bb2c93c4e791ecefb0917b45f9323524fa575472f9152b84ab51aca006e5672091554d95a598c2c09068673a857704b131dac07bff07985941f2510aa52dbb79246bb5193819fe06cfafd24ac8f2cb98b9f4a7bb5f27d962fcb733b9ac25f1dec5a1d6f6c4fde072048169fbfdde0854a993ae1f93d13b4cfbacd926c204d687f2f9feb696406a8aa83de5853cdb2fc110db3e3ee717851ebc9bfea5f7563e7f41d8edfac83f2b6d015fca0f9ca29e3d97f9c727bdddc5eab6bf603c0af7b421aa44f3a03296fde5d980b3c2c707059440b0e6fac05a66d919733989f69209303d91e09e7b6fac37c812bb880bd06b687958dac2608ec6e07f492732c44b3a304d0a11a7307abab29e31239bde8274ec53a6999c0ec36ef708d46b4e606ddd4e41b05e144147b5a3d786806873dad19d8b11209a0d0d3e93d17ba4b6b75b5e8e9c36289f9be1db428278c0c18bef8327d374fcb16007c595b8c59b15c90f0b2e302071a1e328282b94516af2a83bbcdd2912a5b2044582f21820df59cee9d45a8dc0e9baffffffff2475af0ce53bb0b25661ac5226e946f6cf87dab12601f2cb55573f17ac7d48a647a4ef38e3fca92377ffdd9b5f3bb75bad2b406d8d5656b4eea17a7e2f540c12985599bdb09793068b3151f5a7c39241c88c267f34cf342506338835a8e9975b76dde0e275f3522ff6be12402011868e658fba23ef0ea8eeb470f631ca1b5a2e5e35336320ed03ecc31212bf84467333730d96919e2ed9edddb71da5784fdbc23472da3840ac665cfafbc863d71f5e032d6cb1299375f96ae7a1658798561c5d3e549052751eda4d830109d0c7ccdd80afc7803e546738e3424cf77627330b9447ff34068585936bb60eadd47d40f171d80f5b4d3276a74a4ac606135b805a64d0d39a06344d3be8c1572cd33f9a3afd10dfefd4789a54e9cb55677b02f9330ed19a1f93a6cebd52f22e0d0000000000000082b4dabaf26e215872e11cc836b439b580ea013c76ea8629ed752b087bcf176fdc8cb6ae4e2947f5bcf9338d48ce1cf74e365b720d1b3d8c5145d1a78e8eb1b45d21bb62ed1b6e212c13a0ea21223103cd521cb73666cc7a5bacf02b5764251257dea8138e3683c0f7ec4037093a3b78a2d74185289a4803003619b1d9d1553ea217ca214be2cba732907692a769d398d52b816e3859f8ae81e5d0c089e1a87885dd5c86c50ac83db3a802ea67bc0224b4d4e5ed0347a7b144004a93826b01244e75b6e499d4b26bb1845afea8654ba9ade75f5310b458885ad78eff3712c02e62363c5dedd6c99d9aae4cff5cc5ed9406c248744cb4f091eb1f419d0efd1ef5c850b4176fa07a1a5a4e8d39d2e0308916abc77f6cf6b4a44a8a01fc21059d0e100daaeaf636bd177637a583eb9f45c67bc2c76760a58bf448e2e379831755f7a974384d3d62727ca3fec2194dd633a0ed411d6586651b4bbd8b4f5746ce4e72715ba9736c240747f98a01fd3df0b9bed007763c1a1968d4b6f7afd279d1c761f8d6a675ab2fced1793920b10c50af3520170b1d5041a0dde753a2fc210cf98ebcc5392a5deccaefdf4b002aeee716dcdca6cb6073881ddbfd37ee751edaca99b65202bfdbe1fec457bd502555b7dedc5d8e221d4093cf7acf89a3b801d6d2fdd3415d58bef856be0ff22eab5d75675081d85416ab70d7d36d617a2a7f0c8d6ed35a2a81588f01e80712534c3256fc52fb4ed5478325ae28efd78e7eaaabf08bd749226ecab7bdbab7a60b5b60f2d93714455ae6d3b88de9ebb5d2df81fc7e349af45d1b502cfaf36f4adc16886db2758b4f43f5a030912cb772def90d1a0fb555c8fb10d3a7bd8e2dd954860b8084ce5c72971f5df24ef5bc24937ccd545f964a86b6c466610e24cee92bf7a196c915975349b491e8bb1f164ae0af3fbe050d57dc7af839be63cdf1883ec31f5310c6e0d87c70902a66259bcf76588f14f96ebb85b95997f64814c73d6ff8b059536c70f7d72b5924258ffb706e2af7aaf580f327af6dff0c3b020b451c4b22d46fa72854af95b2b6a6d7a3e0b2b78c06eeec2edd5f9a2174ae8b7b6f4ce2e781314142b8482dc8ff4046e851a5d6b8347b4ac8b2326e1c359160ac49d637e4f5549d73369d3323223f179146a5426e21213c6e51a348bc9d55289837b42fa56f9084f6e268a9d041bde513b1e8ea13a7637bc53f67b2951b4bec7a44acb0d93ea325611c486806884b08192ed5768ca88e95db075d8d551b09c42d62a81769f1555707b163af0ff78d728ad0a1871704645f1ed8632e85735ff24e7541005d5409205940df84926ec581218a4ce89498715fb09dcdb44849d3ca7631c1d472ffcafeb37610e8ca77ba4b43176d825a27f59ec81b217b7aa6e01698fe45ffafa0ea2356ad423e581b632b6c627e0d827da58523a40aa19ea3e2ca93f93ed2a33e4fabc36ae56abcb11ae7944577230ec6c498033976fb8d9610d9d9eacf7302ecb060ea5002d70eb6f327ded18f5b2c79e04f09bff203b7d572a214c3684eb89470c28a1361333b32dd63df2163c039d129c5f766fe1a4110f95fc99b87ead844433ac309c3565bc9ca7a6f838a121fc44303ae248a366865e0a3da36ed3046e304f579ff422a7b9946b5cfb52d3e4463e4c5a1e3c7ec1dc16c18c1cdc641b8a8301cd2fcd271489528b4bb4a8515a71be236faadc7ea05173c21f4b8a9aadae38d2e8443199a08a8df1d502df62736812398e8df6eb17f938d529e8dccfe6a15470be9a8cb613a7fb337f213f77ebd136ddbab9471629169e24304e8d20f37e9a341559afc9ab598119e504c53d5c8ec5316e8336295c4101d8bdf6c71d1483355c00972636ea6831704008858cf823defbba5069c24ac7d5e1b7c8e664212d350832fbc767e09a6c2a08073dd8ac2661fec32d6f548b56d74201c274e2cc07a1712169d3db64ebd5bc111fc0aa41f69a5ef849a41a84cb0673db00cb6ae345fdbd44a5467f8588aa24ef57d05000000000000002ee7990c1e3d97375ffd800248f87789cedb94803c315728805b5c0394ab617eadacafebba89d103b28c9df323fc65d023539393ac18285246ffc5e4a7ba902dc234ac2383382f3f445f198cd82a494c8f7ea80c0517223f14e303cf7565e44cd650d4997202ac331355d2c734c61c8a1903d056eb03ce50d167a7a94854de234e45e3886287d01221c6d493ea078df81c2c0d7e5b61a34ceecbf83dd21edb2aeddd14869aaf034588076f6a604569e745f4400fa8ca7dfb9be8bfb85874283a5d1522ec70559abe4681c91112e3561841b2fad0540865944b5df385121b4c8d99cb4d5f9634ace1700c90dbc98f4086714f5f3fd8450f4067e32715aee5943c571fcdca2cb6115dcc373e3f5e96b08e626a1a776ffd5efbf898cfaac7405f75a40feb8ddf06cddf1258a09f3e58b424d409767966290c5c15d150e0f7d120f0078cb97337874f16838ce3cad921bad2573ecef3d853ee5d7e89c3fe517a0d1139ad3f1424c6e5e880cc8b33eb4762b7bd1fe5fd4e2d4c3249bb70b5fe2e74e3751e1b0d78dfbc78fbab4a35d7cd97f8be57eec3a6b3b5c63a5747f82bd3e7fba99bbf9ad1faee6f4b59e14049bbc7a78c285cc8be8cc3fac3451add460bdada49d65d2253adb3500ad3d163f9ae0e24d413ad348bc1a2ed940e6d1c28fa16b9ad05c2175b3374d765939148451b8daffb3f4e646397bc04b0f04a808b6f96dcab1dccbd5b55d4758279b67899dea10bbb61c58f6aad2aefe78f9e5d2b916ca6d717d78e978c25a527b912e7bddede9c2bf3cd464ff102d78332c1468fc2f2f5cd20baddb71736c30a4a302bb5412587e95f165bc12c05cebf5128ef67064fe9b9f14aed30708a4e5afe8b0cf6c904dbedcd2d7c467cef6544ddd020de4cc50f646d0ba0862030febee6af93b263ff983708b1c725a1310300", 0x1000}}, 0x1006) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) writev(r3, 0x0, 0x0) fallocate(r1, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0), 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000a00)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,overriderockperm,utf8,map=acorn,iocharset=iso8859-1,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c00d4215a15701bca521647652b2623aac16363b7c886c8e01c34c1be48fac31ff64fd975416483f623de07f461566ca6ee1f45ee43de3a417c9f293dce66ea364d3d2e284b815c568722445db6e7bc85745e23605586296a7c3b961a6202dc4d36efbb967e286625378fc6af8ffdc648cbda4797ab0d6ad05169b0e2236e6cbf8f752dbf0496b0ba34761d90d049f3be85f3c0c0e38b6daad6f29cb7ee0f1aea54884f0983e098cd5497ff80c97d0fcc"], 0x1, 0xa2f, &(0x7f00000018c0)="$eJzs3c1vXFdfB/DvHduJH/chydOGUqK2nqQkdVvj2A5NiLooiT1JXPyCbEdqxKIpjYOiGAotSG2F1FRCrFqBBGIBu4oVq0rdUBaoGwQ7umKBhPovVKzCyujOjO2xPeNxjGO76edjzcx9+d1zfnfuy/HM3JkTflxWjm8YW1mp33Y5fvMf9yFjDrGrk99/+dUX5e2zBzmSnrxe/FPSn6Sa9CZ5LumbmJyfm+lS0P3kdpJvkyLJ0TQed+R2ir/Mz9fHv03x92W9HR3Zacl0s8JP2kHvfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcBgVE5Ojo2PFkUzN3ny72pBUt5iYnJ8rsrKydc7qMg3f1Hv9Lr7pWm9SlLf096929f3cyfXZzyapnsnzjbHn6x2Spz+fPPXsiTee6a2sLt8pm/+Xozsv9sOPP7n/7vLy0gdt5xbFHmZ1yDT2keu12amFuamZK9dr1amFuerlixdHz9+4tlC9NjVdW7i1sFibqU7M164szs1XhyZeqY5dvnyhWhu5NXdz9vrkyHRtdeKlXx8fHb1YfWvkd2pX5hfmZs+/NbIwcWNqenpq9no9ppxdxlwqd8TfnlqsLtauzFSrd+8tL13YlFlPNu2/ZdBYt/Upg8a7BY2Pjo+PjY2Pj33W7D17bcLF1y+/fml0tHd0k2yJeEw7LYfLzzpv5r0/icMuVRrtfzKdqczmZt5Ote3fRCYzn7nMdJjftNr+nz1f27batLT/zVa+t2X+qfLuTF5sjvZ3aP875LJ/fx/m43yS+3k3y1nOUj448Iz29+96apnNVBYyl6nM5Ep9SrU5pZrLuZiLGc07uZHBLKQ31zKV6dSykFtZyGJq9T1qIvOp5UoWM5f5VDOUibySasZyOZdzIdXUMpJbmcvNzOZ6JnOlXsrd3Ks/7xe2yXEtaGwnQePbBG1pzB+5/a9t/ueEJ1Bl2638GM7isDsrzfb/SPfQoYn9SAgAAADYc7/67zl28ul/+++kyAv1z+WvTU3XRg86LQAAAGAP1S/Xe7586CuHXkjh9T8AAAA8aYr6d+yKJAMZbAytfhPKmwAAAADwhKh//v9iisH1CV7/AwAAwBOm+2/sd40ohld//rd6p/F4pxnRGCsGrk1N10Ym5qbfGMu5+q8M1L9psKW0nqToq3/94NWcbkSdHmg8DqyXWNbZX0aNjbwxlldzprkiQy+VDy8NtYkcb0S+3Ih8uTWyJxsiL5SRAPCkO7NNe7zT9v/VDDcihk/Vm/zeUxva4J56yzqqZQWAw2Ktj53/bXZp1qb9b0a82Kn9/41tXv+XEU/n7mDjkoKRvJf3s5w7GU7zioPBdqWu9kbQuAxhuMu7AQPNSxa+u1TJ8Jb3A/rX1rU1dinjGW77jkBLucVqDhcacT2PZxsAwH47s207vNb+927X/g9v//q/pc11SSEAHAZrPdg/6sDgzoMPeh0BgI200gAAAAAAAAAAAAAAAAAAAAAAAAAAALD3dvQD/v9xLlleXkp221lAm4Hv/vWff6ljzOdPJf2PkuH2A5XsTc6Hf6AnyUHV/mYeealyGx+Wp87AxoEDPjEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwL4qkp930SnI0yWiS8/uf1ePz4KAT2CvV3S1WPMzDfJRje50OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBPXfP3/ytpPD7VmJTeSnI2ye0kv3vQOT6K/i7zH+5THofPH9TvW37/v5L0ZaVIb2Ozp+ibmJyfmyl3heJoOf/7L7/6orx1LPLT1YGtvSqUBZQ1bOhcollDy5S+jUv9or7UwOTSh/f/5P0/qk5ere+YVxevTU/OXJ//rfXAZ4uvG10gtHaDsJrvn539l79qmXykWfnX5Zq2t7nea/V6J7fW+yvtlu5Q7w7cW14aL2tarL29+Kd/WGmd9XROJy8NJUMba/r98tahptObn8+Nih+KvyiO5W9zu779y2ejWCnKTXS8vv4/u3tveWnkvfeX76zl9Om9j1oKOJHBJHc2HmVdchqsn0/aqu91lb6y1tF6UHl3skt522opcWz9ed2wDr+o7zIDj7QO1c7rUNfleW9mdGFzRivlQfLXf/xMzm27pY+2KfFclxrbKn4o/qu4kf/Mn7f0/1Ept//ZtD062xRRj2zZU1rnbTi8KmfX13y8dcY7m8vseFTyGHye38tvrm3/Ssv5v7mtOhw3a+ejN1smdjhuVg+tbY6Llhq3HBdN3Y6LrUfqPxzf0qKsqx9GJze1SM2zT6dlmnmebER1yPOX81rSe+qRziivdTmjdFt+t8f/3xVD+Z880P8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+BVJT7vpleRskhNJjpfj1WRlc8yDXdRXGSh2k+ae2U3OPz5FxxUtHuZhPsqx/c4IAAAAAAAAgMfj6uT3X371RXmrfx7fk1+rNOdUk94kJ4q/6ZuYnJ+b6VJQX3J79SP9/vYhHSbndnn38/Xxb8ux57rUd7CXDwDAj9r/BQAA//+CGm1g") mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x58) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mlock(&(0x7f00007c3000/0x1000)=nil, 0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(r0, &(0x7f0000000200)='./bus/file0\x00', 0x800, 0x0) 28.361969281s ago: executing program 1 (id=2397): socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x0, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0xf0f9, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x80000001}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000010000000000006d32d54a2bd6695099c7c24d23b92392265c0575ad36b44876fd87a267b94980b1976b8ef910e0ed93588c5e26c1cbd7bca28a5c55f3f240719f3d94fa60cb67a7ebbcf1e1fa9d1ee9f544f774887e4ae0b10a7f54b01230b7d09ac38bd468832d814f61a22aaaab6ed5be8f829026fe0ad4e041a48846f30ea1a93292f6602dcd5367f85adaa9ae8311"], 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = dup3(r4, r5, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = accept4$netrom(r6, &(0x7f0000000580)={{0x3, @netrom}, [@bcast, @default, @bcast, @null, @netrom, @default, @default, @default]}, &(0x7f0000000040)=0x48, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2a, 0x6, 0x9, 0xfffffffffffff2bf, 0x2, 0x6, 0x80000000, 0xf1, 0x40, 0x380, 0x0, 0xb6, 0x38, 0x3, 0xb2, 0x1, 0x8001}, [{0x60000000, 0xee94, 0x2, 0x800, 0x4, 0xe265, 0x0, 0x4}, {0x2, 0xeef, 0x7d5, 0x1, 0x5, 0x9, 0x2, 0x16f}, {0x3, 0x2, 0x4, 0xc, 0x5, 0x3ff, 0x5}], "de4df928a1957099c6e729f72171210d3f75c23abcceea0fcda24863fec99cf4634222c3832ee4c76b8aa87b4fc0f413555e2b56", ['\x00']}, 0x21c) sendto$netrom(r8, &(0x7f00000009c0)="c9fee80dfb51c8cd40dacf863116b452661331e3fd681e0671e228df2627657a04cdc6f2f326a4f8b7b2dd4084236f91e1cad9e6b8da388f0ced73e6e601a7394d409e50e924649a513e43ca130ce47a66f5e3e6b3c973dbacfac8ee82f266085e67f51705c026a2c8ad67d85ad1f13c4d9d54b4fb147ce2090457e8e401a064e91a5a4fed953d348144ed445007c25972d3de1195c1ddf4cbb9a96b7fbdc2db1b7319cc2e8a2188da9c", 0xaa, 0x44040, 0x0, 0x0) bind$802154_raw(r7, 0x0, 0x0) 27.593920702s ago: executing program 1 (id=2401): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300"/11], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070056060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff6d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded85d3cdd66d9c79f0529d045625b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c700e3806f825f1d0da2a304e06543b56d35235d7897a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664b44e22b72e843e7cf55f394cf75d1cd57c9150bfb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcfc5540f9574f20e7f513a2a7c5dad90e7d479724d69fa0c0bf97af1231a49ea166f743279d240e2e6f01d8704f313d68b16198be5f6a50e9e0fd20893b2922df566d2622edee5000000000000000000d91c6da09fa7cdbbf16d4780d8c2401c55aff772aced3ff966"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 26.785045148s ago: executing program 32 (id=2401): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300"/11], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) splice(r1, 0x0, r2, 0x0, 0x4ffe6, 0x0) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 15.565725193s ago: executing program 2 (id=2443): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) 13.99504893s ago: executing program 3 (id=2447): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 13.833980623s ago: executing program 3 (id=2448): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x1602, &(0x7f0000000400)={0x0, 0x707b, 0x40, 0x204, 0x386}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[], 0x0, 0x6}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) writev(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000040)="05000000010000", 0x7) shutdown(0xffffffffffffffff, 0x1) mkdir(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') 13.652387998s ago: executing program 3 (id=2451): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r5, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) 10.537852669s ago: executing program 3 (id=2458): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x5472, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(0x0, 0x182) write$UHID_INPUT(r0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000a00)=ANY=[@ANYBLOB='hide,dmode=0x0000000000000009,overriderockperm,utf8,map=acorn,iocharset=iso8859-1,mode=0x00000000000000c9,cruft,map=off,check=strict,overriderockperm,block=0x0000000000000200,cruft,nocompress,cruft,session=0x000000000000002e,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c7362736563746f723d3078303030303030303030303030303030332c00d4215a15701bca521647652b2623aac16363b7c886c8e01c34c1be48fac31ff64fd975416483f623de07f461566ca6ee1f45ee43de3a417c9f293dce66ea364d3d2e284b815c568722445db6e7bc85745e23605586296a7c3b961a6202dc4d36efbb967e286625378fc6af8ffdc648cbda4797ab0d6ad05169b0e2236e6cbf8f752dbf0496b0ba34761d90d049f3be85f3c0c0e38b6daad6f29cb7ee0f1aea54884f0983e098cd5497ff80c97d0fcc"], 0x1, 0xa2f, &(0x7f00000018c0)="$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") openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mlock(&(0x7f00007c3000/0x1000)=nil, 0x1000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 9.898510901s ago: executing program 2 (id=2460): syz_usbip_server_init(0x3) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffff9, 0x10100, 0x0, 0xd3, 0x0, r1}, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) pselect6(0x40, &(0x7f0000000300)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffc, 0x9, 0x1259, 0x0, 0x7fffffff}, 0x0, 0x0) 9.565839198s ago: executing program 3 (id=2463): socket$inet6(0xa, 0x80002, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x100, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0xf96, 0x8202, 0x400, 0x7}, &(0x7f0000000340)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg1\x00', 0x2}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1a9) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2d72646d61202d726411ba15a68d4fff9670696473202d6e4574202b6d656d6f7279202b6d656d6f7279203d89b0"], 0x2b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\'\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\'\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x6) 8.825936958s ago: executing program 2 (id=2465): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2080, 0x6c) r2 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) 7.941078699s ago: executing program 3 (id=2470): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xfffffff7, 0x4) syz_genetlink_get_family_id$mptcp(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x7811}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xffff, 0x2, 0x2, 0x0, 0x9}) 7.840471627s ago: executing program 33 (id=2470): r0 = socket(0x10, 0x803, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0xfffffff7, 0x4) syz_genetlink_get_family_id$mptcp(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'team_slave_0\x00', 0x7811}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xffff, 0x2, 0x2, 0x0, 0x9}) 7.588513887s ago: executing program 5 (id=2473): socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x0, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0xf0f9, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x80000001}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000010000000000006d32d54a2bd6695099c7c24d23b92392265c0575ad36b44876fd87a267b94980b1976b8ef910e0ed93588c5e26c1cbd7bca28a5c55f3f240719f3d94fa60cb67a7ebbcf1e1fa9d1ee9f544f774887e4ae0b10a7f54b01230b7d09ac38bd468832d814f61a22aaaab6ed5be8f829026fe0ad4e041a48846f30ea1a93292f6602dcd5367f85adaa9ae8311"], 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = dup3(r4, r5, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = accept4$netrom(r6, &(0x7f0000000580)={{0x3, @netrom}, [@bcast, @default, @bcast, @null, @netrom, @default, @default, @default]}, &(0x7f0000000040)=0x48, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2a, 0x6, 0x9, 0xfffffffffffff2bf, 0x2, 0x6, 0x80000000, 0xf1, 0x40, 0x380, 0x0, 0xb6, 0x38, 0x3, 0xb2, 0x1, 0x8001}, [{0x60000000, 0xee94, 0x2, 0x800, 0x4, 0xe265, 0x0, 0x4}, {0x2, 0xeef, 0x7d5, 0x1, 0x5, 0x9, 0x2, 0x16f}, {0x3, 0x2, 0x4, 0xc, 0x5, 0x3ff, 0x5}], "de4df928a1957099c6e729f72171210d3f75c23abcceea0fcda24863fec99cf4634222c3832ee4c76b8aa87b4fc0f413555e2b56", ['\x00']}, 0x21c) sendto$netrom(r8, &(0x7f00000009c0)="c9fee80dfb51c8cd40dacf863116b452661331e3fd681e0671e228df2627657a04cdc6f2f326a4f8b7b2dd4084236f91e1cad9e6b8da388f0ced73e6e601a7394d409e50e924649a513e43ca130ce47a66f5e3e6b3c973dbacfac8ee82f266085e67f51705c026a2c8ad67d85ad1f13c4d9d54b4fb147ce2090457e8e401a064e91a5a4fed953d348144ed445007c25972d3de1195c1ddf4cbb9a96b7fbdc2db1b7319cc2e8a2188da9c", 0xaa, 0x44040, 0x0, 0x0) bind$802154_raw(r7, 0x0, 0x0) 6.717308727s ago: executing program 5 (id=2474): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setreuid(0x0, 0xee00) r1 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000340)={0x60002000}) 6.617892356s ago: executing program 5 (id=2475): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x14444, &(0x7f0000001d80)=ANY=[@ANYBLOB="696f636861727365743d61736369692c6e6f6164696e696362000064696e6963622c6769643d69676e6f72652c7569643d666f726765742c756d61736b3d30303030303030303030303030303030303030303030322c076f6e6761642c6769643d771d0f4d30dc61469a581342d98a7a4c3534a971c3e26de72edc9ec3db403d8b2e970b9dcea448ddbb5a116ce6f67d99a77aa50bce7fc5451bcf5b13e9698d80385c54fff77d38aa9703314cd19a075893a1648dd8ef78a118122ee7a0e400"/203, @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0xfe, 0xc22, &(0x7f00000002c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6.251169425s ago: executing program 5 (id=2476): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) 5.176479112s ago: executing program 5 (id=2478): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x89, 0x10, 0x499, 0x8206, 0xf455, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x94, 0x0, 0x1, 0xff, 0xe5, 0x57, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x20, 0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) 4.157969144s ago: executing program 2 (id=2480): socket$inet6(0xa, 0x80002, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x100, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0xf96, 0x8202, 0x400, 0x7}, &(0x7f0000000340)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg1\x00', 0x2}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f00000011c0)) r4 = creat(0x0, 0x1a9) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2d72646d61202d726411ba15a68d4fff9670696473202d6e4574202b6d656d6f7279202b6d656d6f7279203d89b0"], 0x2b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\'\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\'\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x6) 3.077011551s ago: executing program 0 (id=2482): syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) 2.903299415s ago: executing program 2 (id=2484): socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x0, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0xf0f9, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x80000001}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000010000000000006d32d54a2bd6695099c7c24d23b92392265c0575ad36b44876fd87a267b94980b1976b8ef910e0ed93588c5e26c1cbd7bca28a5c55f3f240719f3d94fa60cb67a7ebbcf1e1fa9d1ee9f544f774887e4ae0b10a7f54b01230b7d09ac38bd468832d814f61a22aaaab6ed5be8f829026fe0ad4e041a48846f30ea1a93292f6602dcd5367f85adaa9ae8311"], 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r6 = dup3(r4, r5, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = accept4$netrom(r6, &(0x7f0000000580)={{0x3, @netrom}, [@bcast, @default, @bcast, @null, @netrom, @default, @default, @default]}, &(0x7f0000000040)=0x48, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2a, 0x6, 0x9, 0xfffffffffffff2bf, 0x2, 0x6, 0x80000000, 0xf1, 0x40, 0x380, 0x0, 0xb6, 0x38, 0x3, 0xb2, 0x1, 0x8001}, [{0x60000000, 0xee94, 0x2, 0x800, 0x4, 0xe265, 0x0, 0x4}, {0x2, 0xeef, 0x7d5, 0x1, 0x5, 0x9, 0x2, 0x16f}, {0x3, 0x2, 0x4, 0xc, 0x5, 0x3ff, 0x5}], "de4df928a1957099c6e729f72171210d3f75c23abcceea0fcda24863fec99cf4634222c3832ee4c76b8aa87b4fc0f413555e2b56", ['\x00']}, 0x21c) sendto$netrom(r8, &(0x7f00000009c0)="c9fee80dfb51c8cd40dacf863116b452661331e3fd681e0671e228df2627657a04cdc6f2f326a4f8b7b2dd4084236f91e1cad9e6b8da388f0ced73e6e601a7394d409e50e924649a513e43ca130ce47a66f5e3e6b3c973dbacfac8ee82f266085e67f51705c026a2c8ad67d85ad1f13c4d9d54b4fb147ce2090457e8e401a064e91a5a4fed953d348144ed445007c25972d3de1195c1ddf4cbb9a96b7fbdc2db1b7319cc2e8a2188da9c", 0xaa, 0x44040, 0x0, 0x0) bind$802154_raw(r7, 0x0, 0x0) 2.772540396s ago: executing program 0 (id=2485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 2.049773134s ago: executing program 5 (id=2486): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000100)=""/223, 0x0, 0xdf, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r3, 0x1, 0x5}, 0x50) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) 2.025346856s ago: executing program 0 (id=2487): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0xab) 1.97772937s ago: executing program 4 (id=2488): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf251b000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.928088644s ago: executing program 2 (id=2489): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040c410cf8a0000000000010902240001000000000904000001030000000921000005012205000905810300000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "7fec6714"}]}}, 0x0}, 0x0) 1.869982529s ago: executing program 4 (id=2490): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) r2 = dup(r0) inotify_rm_watch(r2, r1) 1.84932447s ago: executing program 0 (id=2491): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, 0x0, 0x446102) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r5, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, r6, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r9 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_mreqsrc(r9, 0x0, 0xe, 0x0, &(0x7f0000000280)) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) 1.710232172s ago: executing program 4 (id=2492): socket(0x2a, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000740)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [{{0x254, 0x1, {{0x3, 0x2}, 0x76, 0x1, 0x80, 0x2, 0x1d, 'syz1\x00', "75e4f8cd1ce4f04348e4622059a8c03fd84090119bdef747c01fe49ff6035707", "d09406a0e7096dd6d2395c19e8996b0c2cf760604e36dfa887202f45ec0153f8", [{0x1, 0x7, {0x2, 0x1}}, {0x7ff, 0x8, {0x3, 0xfffffff8}}, {0xed, 0x2dea, {0x2, 0x1}}, {0x2, 0x9, {0x0, 0x8d0}}, {0x4, 0x3, {0x2, 0x1df20000}}, {0x0, 0x3, {0x0, 0xb045}}, {0x89cb, 0x3, {0x0, 0x5}}, {0xaf, 0x6, {0x41998e8385e00d27, 0x4f}}, {0x4, 0x3, {0x1, 0x4}}, {0x7f, 0x666f, {0x0, 0xcf39}}, {0x8001, 0x9, {0x3, 0x8000}}, {0x101, 0x1000, {0x2, 0x8}}, {0xe, 0xfffa, {0x2, 0xf788}}, {0xed4, 0x80, {0x1, 0x8}}, {0x0, 0x9, {0x0, 0x5}}, {0x7ff, 0x901, {0x1, 0x401}}, {0x9, 0x5, {0x1, 0x80000000}}, {0x10, 0xae25, {0x0, 0x7633}}, {0x2, 0x1, {0x3, 0xfffffffd}}, {0x10, 0xfff8, {0x2, 0x8000}}, {0x8001, 0x9, {0x0, 0x10000}}, {0x4, 0x7, {0x2, 0xa0}}, {0x7ff, 0x0, {0x2, 0x9}}, {0x2, 0x3, {0x3, 0x3}}, {0x7fff, 0x1b0, {0x1, 0x6f5a}}, {0x5, 0x499, {0x0, 0x5}}, {0xfff, 0x3, {0x1, 0xa044}}, {0x0, 0xf0f9, {0x3}}, {0x73, 0xb4, {0x3, 0x4e}}, {0x7, 0x56, {0x1, 0x2}}, {0xf, 0x2, {0x1, 0x7}}, {0x2, 0xffff, {0x3, 0x1}}, {0x5, 0x400, {0x2, 0x80000001}}, {0xb81e, 0x6, {0x2, 0x8}}, {0x10, 0x2, {0x2, 0x8001}}, {0x7, 0x1, {0x3, 0x1}}, {0x8, 0x7, {0x2, 0x2}}, {0xab, 0x9, {0x1, 0x7ff}}, {0x0, 0x3, {0x3, 0x2}}, {0x8, 0x0, {0x0, 0x8001}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8010}, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff}, @exit]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x8000600) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000cc0)=ANY=[@ANYBLOB="02000000010000000000006d32d54a2bd6695099c7c24d23b92392265c0575ad36b44876fd87a267b94980b1976b8ef910e0ed93588c5e26c1cbd7bca28a5c55f3f240719f3d94fa60cb67a7ebbcf1e1fa9d1ee9f544f774887e4ae0b10a7f54b01230b7d09ac38bd468832d814f61a22aaaab6ed5be8f829026fe0ad4e041a48846f30ea1a93292f6602dcd5367f85adaa9ae8311"], 0x24, 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x281, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r4, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = dup3(r4, r5, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = accept4$netrom(r6, &(0x7f0000000580)={{0x3, @netrom}, [@bcast, @default, @bcast, @null, @netrom, @default, @default, @default]}, &(0x7f0000000040)=0x48, 0x800) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2a, 0x6, 0x9, 0xfffffffffffff2bf, 0x2, 0x6, 0x80000000, 0xf1, 0x40, 0x380, 0x0, 0xb6, 0x38, 0x3, 0xb2, 0x1, 0x8001}, [{0x60000000, 0xee94, 0x2, 0x800, 0x4, 0xe265, 0x0, 0x4}, {0x2, 0xeef, 0x7d5, 0x1, 0x5, 0x9, 0x2, 0x16f}, {0x3, 0x2, 0x4, 0xc, 0x5, 0x3ff, 0x5}], "de4df928a1957099c6e729f72171210d3f75c23abcceea0fcda24863fec99cf4634222c3832ee4c76b8aa87b4fc0f413555e2b56", ['\x00']}, 0x21c) sendto$netrom(r8, &(0x7f00000009c0)="c9fee80dfb51c8cd40dacf863116b452661331e3fd681e0671e228df2627657a04cdc6f2f326a4f8b7b2dd4084236f91e1cad9e6b8da388f0ced73e6e601a7394d409e50e924649a513e43ca130ce47a66f5e3e6b3c973dbacfac8ee82f266085e67f51705c026a2c8ad67d85ad1f13c4d9d54b4fb147ce2090457e8e401a064e91a5a4fed953d348144ed445007c25972d3de1195c1ddf4cbb9a96b7fbdc2db1b7319cc2e8a2188da9c", 0xaa, 0x44040, 0x0, 0x0) bind$802154_raw(r7, 0x0, 0x0) 904.219297ms ago: executing program 0 (id=2493): socket$inet6(0xa, 0x80002, 0x88) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x15, 0x0, 0x14) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x100, 0x5}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0xf96, 0x8202, 0x400, 0x7}, &(0x7f0000000340)=0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'pimreg1\x00', 0x2}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f00000011c0)) r4 = creat(0x0, 0x1a9) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="2d72646d61202d726411ba15a68d4fff9670696473202d6e4574202b6d656d6f7279202b6d656d6f7279203d89b0"], 0x2b) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='\'\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000040)='\'\x00') truncate(&(0x7f0000000240)='./file0\x00', 0x6) 757.022809ms ago: executing program 4 (id=2494): syz_emit_ethernet(0x4e, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) 324.811073ms ago: executing program 0 (id=2495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x3, 0x400, 0x0, 0x7, 0x0, 0xff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1ff, 0x9, 0x2dd0, 0x3, 0x7fffffff, 0x3ff}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x7fffffff}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x2, 0xb}, {0xa, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008810) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 176.775605ms ago: executing program 4 (id=2496): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="0203000211000000000700000000000005000920e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000040030005000000000002000000ac141400000000000000000002000800"], 0x88}, 0x1, 0x7}, 0x0) 0s ago: executing program 4 (id=2497): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b1a, 0x0) kernel console output (not intermixed with test programs): 51' uses 32-bit capabilities (legacy support in use) [ 115.042577][ T5200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'. [ 115.249002][ T5205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 115.835833][ T4322] kernel read not supported for file /dsp (pid: 4322 comm: kworker/0:10) [ 116.808033][ T5220] netlink: 'syz.3.265': attribute type 21 has an invalid length. [ 116.816427][ T5220] netlink: 144 bytes leftover after parsing attributes in process `syz.3.265'. [ 117.365085][ T5219] binder: 5217:5219 ioctl c0306201 0 returned -14 [ 117.479232][ T5230] loop4: detected capacity change from 0 to 2048 [ 118.661313][ T5230] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 118.763179][ T5230] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 118.788469][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.219084][ T5284] device pim6reg1 entered promiscuous mode [ 122.564288][ T5306] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 123.262503][ T5309] loop1: detected capacity change from 0 to 2048 [ 123.329897][ T5309] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 123.481583][ T5309] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 124.389338][ T5336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.520320][ T5321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 124.590801][ T26] audit: type=1326 audit(1754365769.582:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5327 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ddb81ab69 code=0x7fc00000 [ 124.634122][ T5321] EXT4-fs (loop1): Remounting filesystem read-only [ 126.011398][ T5356] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.846640][ T5375] syz.2.304 uses obsolete (PF_INET,SOCK_PACKET) [ 128.380920][ T4301] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.590715][ T4251] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.640714][ T4301] usb 4-1: Using ep0 maxpacket: 16 [ 128.780814][ T4301] usb 4-1: config 0 has no interfaces? [ 128.860912][ T4251] usb 5-1: Using ep0 maxpacket: 16 [ 128.866299][ T4301] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 128.876092][ T4301] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 128.884658][ T4301] usb 4-1: Manufacturer: syz [ 128.901787][ T4301] usb 4-1: config 0 descriptor?? [ 128.967046][ T5401] netlink: 'syz.1.312': attribute type 5 has an invalid length. [ 128.978475][ T5401] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.981171][ T4251] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.987898][ T5401] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.006396][ T5401] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.008168][ T4251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.015595][ T5401] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.038618][ T4251] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.048746][ T5401] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.054193][ T4251] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 129.057852][ T5401] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.079588][ T5401] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.088586][ T5401] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.156229][ T4251] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.170283][ T4251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 129.194159][ T4251] usb 5-1: SerialNumber: syz [ 129.294949][ T4251] hub 5-1:1.0: bad descriptor, ignoring hub [ 129.309789][ T4251] hub: probe of 5-1:1.0 failed with error -5 [ 129.332153][ T4251] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 129.819987][ T5398] loop0: detected capacity change from 0 to 40427 [ 129.848815][ T5398] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.859817][ T5398] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.874291][ T5398] F2FS-fs (loop0): invalid crc value [ 129.922502][ T5398] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.967647][ T5415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.315'. [ 129.992051][ T5398] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.999098][ T5398] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 130.417447][ T5428] loop0: detected capacity change from 0 to 2048 [ 130.436665][ T5428] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 130.463560][ T5428] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 130.741137][ T5431] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 130.793307][ T5431] EXT4-fs (loop0): Remounting filesystem read-only [ 131.341592][ T1325] usb 4-1: USB disconnect, device number 3 [ 131.636397][ T5178] usb 5-1: USB disconnect, device number 2 [ 132.743452][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.749754][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.339433][ T5450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.326'. [ 134.277880][ T5477] loop1: detected capacity change from 0 to 2048 [ 134.392128][ T5477] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 134.488951][ T5453] loop3: detected capacity change from 0 to 40427 [ 134.525703][ T5477] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 135.785366][ T5453] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 135.835110][ T5453] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 135.916810][ T5453] F2FS-fs (loop3): invalid crc value [ 135.970039][ T5453] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-12) [ 138.812758][ T5527] netlink: 24 bytes leftover after parsing attributes in process `syz.1.346'. [ 139.538071][ T5531] loop3: detected capacity change from 0 to 2048 [ 140.063583][ T5531] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 140.285241][ T5545] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 140.309192][ T5545] cramfs: wrong magic [ 140.912191][ T5531] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 142.798477][ T5537] loop2: detected capacity change from 0 to 40427 [ 142.899398][ T5537] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 142.990925][ T5537] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 143.304314][ T5537] F2FS-fs (loop2): invalid crc value [ 143.377996][ T5537] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 143.776707][ T5596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.364'. [ 144.661877][ T5605] loop3: detected capacity change from 0 to 2048 [ 144.862480][ T5605] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 145.341809][ T5605] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 150.348553][ T5674] loop4: detected capacity change from 0 to 2048 [ 150.422958][ T5674] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 150.511518][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 150.709622][ T26] audit: type=1326 audit(1754365795.692:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7fc00000 [ 151.404015][ T26] audit: type=1326 audit(1754365796.402:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.3.390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7819002b69 code=0x7fc00000 [ 155.163781][ T5733] netlink: 56 bytes leftover after parsing attributes in process `syz.2.402'. [ 155.837650][ T5740] loop3: detected capacity change from 0 to 2048 [ 155.927762][ T5740] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 156.071696][ T5740] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 157.931591][ T5761] process 'syz.2.407' launched './file0' with NULL argv: empty string added [ 159.134679][ T5777] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 159.141513][ T5777] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 159.171488][ T5777] vhci_hcd vhci_hcd.0: Device attached [ 159.362938][ T5785] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 159.470687][ T1325] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 160.168510][ T5785] orangefs_mount: mount request failed with -4 [ 160.212568][ T5778] vhci_hcd: connection closed [ 160.215432][ T5171] vhci_hcd: stop threads [ 160.231645][ T5171] vhci_hcd: release socket [ 160.238120][ T5171] vhci_hcd: disconnect device [ 160.378711][ T5792] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 160.385363][ T5792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 160.405995][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 160.437151][ T5792] vhci_hcd vhci_hcd.0: Device attached [ 160.454472][ T5793] vhci_hcd: connection closed [ 160.456639][ T5171] vhci_hcd: stop threads [ 160.495218][ T5171] vhci_hcd: release socket [ 160.499735][ T5171] vhci_hcd: disconnect device [ 160.616938][ T5806] loop1: detected capacity change from 0 to 2048 [ 161.234422][ T5806] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 161.280098][ T5806] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 163.123891][ T5810] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 163.220563][ T5826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.425'. [ 163.233110][ T5826] netlink: 43 bytes leftover after parsing attributes in process `syz.3.425'. [ 163.243291][ T5826] netlink: 'syz.3.425': attribute type 6 has an invalid length. [ 163.251972][ T5826] netlink: 'syz.3.425': attribute type 5 has an invalid length. [ 163.259785][ T5826] netlink: 43 bytes leftover after parsing attributes in process `syz.3.425'. [ 163.667770][ T5810] EXT4-fs (loop1): Remounting filesystem read-only [ 165.578512][ T1325] vhci_hcd: vhci_device speed not set [ 167.030716][ T4322] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.360885][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 168.317340][ T5839] loop1: detected capacity change from 0 to 40427 [ 168.400989][ T4322] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.471400][ T4322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.909921][ T4322] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.062017][ T5884] netlink: set zone limit has 8 unknown bytes [ 169.506343][ T4322] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.535647][ T4322] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.665083][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.797895][ T1325] Bluetooth: hci2: command 0x0406 tx timeout [ 170.970987][ T4322] usb 5-1: can't set config #16, error -71 [ 171.034583][ T1325] Bluetooth: hci1: command 0x0406 tx timeout [ 171.038578][ T4322] usb 5-1: USB disconnect, device number 3 [ 171.048047][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 172.055337][ T1325] Bluetooth: hci4: command 0x0406 tx timeout [ 174.530121][ T5936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.457'. [ 176.113613][ T5950] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 176.501114][ T4267] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.501230][ T1107] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.921153][ T1107] usb 3-1: Using ep0 maxpacket: 8 [ 176.927166][ T4267] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.986647][ T4267] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 177.026472][ T4267] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 177.037086][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.070667][ T1107] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 177.131200][ T5952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 177.148138][ T1107] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 177.202503][ T1107] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.222457][ T1107] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.383670][ T1107] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 177.392985][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.805247][ T7] usb 2-1: USB disconnect, device number 3 [ 177.831925][ T1107] usb 3-1: GET_CAPABILITIES returned 0 [ 177.837687][ T1107] usbtmc 3-1:16.0: can't read capabilities [ 178.045322][ T4243] usb 3-1: USB disconnect, device number 3 [ 183.688344][ T6050] loop6: detected capacity change from 0 to 7 [ 183.720291][ T4175] Dev loop6: unable to read RDB block 7 [ 183.735736][ T4175] loop6: unable to read partition table [ 183.745020][ T4175] loop6: partition table beyond EOD, truncated [ 183.843233][ T6050] Dev loop6: unable to read RDB block 7 [ 183.848896][ T6050] loop6: unable to read partition table [ 183.874047][ T6050] loop6: partition table beyond EOD, truncated [ 183.937236][ T6050] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.239725][ T6064] netlink: 165 bytes leftover after parsing attributes in process `syz.1.495'. [ 184.547627][ T5178] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.904382][ T26] audit: type=1326 audit(1754365829.902:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 184.955620][ T5178] usb 1-1: Using ep0 maxpacket: 16 [ 184.987913][ T26] audit: type=1326 audit(1754365829.932:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 185.241840][ T26] audit: type=1326 audit(1754365829.932:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 185.263813][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.273660][ T26] audit: type=1326 audit(1754365829.932:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 185.295578][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.321219][ T5178] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 185.332190][ T5178] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.340475][ T5178] usb 1-1: Product: syz [ 185.348834][ T5178] usb 1-1: Manufacturer: syz [ 185.355337][ T5178] usb 1-1: SerialNumber: syz [ 185.367218][ T26] audit: type=1326 audit(1754365829.932:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 185.368689][ T5178] usb 1-1: config 0 descriptor?? [ 185.518160][ T5178] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 185.534559][ T26] audit: type=1326 audit(1754365829.932:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 185.561342][ T26] audit: type=1326 audit(1754365829.932:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 185.592864][ T26] audit: type=1326 audit(1754365829.942:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 185.614897][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.626354][ T26] audit: type=1326 audit(1754365829.942:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 185.648367][ C1] vkms_vblank_simulate: vblank timer overrun [ 185.677385][ T26] audit: type=1326 audit(1754365829.942:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6077 comm="syz.3.500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7818f9ed69 code=0x7ffc0000 [ 185.742572][ T6105] tipc: Started in network mode [ 185.747792][ T6105] tipc: Node identity c29f8090ed05, cluster identity 4711 [ 185.770909][ T5178] gp8psk: usb in 128 operation failed. [ 185.891132][ T5178] gp8psk: usb in 137 operation failed. [ 185.907055][ T5178] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 186.009125][ T5178] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 186.019303][ T5178] usb 1-1: media controller created [ 186.189337][ T5178] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.272076][ T5178] gp8psk_fe: Frontend revision 1 attached [ 186.278376][ T5178] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 186.300332][ T6105] tipc: Enabled bearer , priority 0 [ 186.309546][ T5178] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 186.350978][ T6106] device syzkaller0 entered promiscuous mode [ 186.401146][ T6112] tipc: Resetting bearer [ 186.430727][ T5178] gp8psk: usb in 138 operation failed. [ 186.443634][ T5178] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 186.455827][ T5178] gp8psk: found Genpix USB device pID = 201 (hex) [ 186.488812][ T5178] usb 1-1: USB disconnect, device number 2 [ 186.655949][ T5178] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 186.688614][ T6112] tipc: Disabling bearer [ 187.060797][ T5178] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 188.520302][ T5178] usb 1-1: device not accepting address 3, error -71 [ 188.522180][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.517'. [ 192.769785][ T6182] netlink: 24 bytes leftover after parsing attributes in process `syz.3.534'. [ 193.991042][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 194.147341][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.153724][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.984686][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.551'. [ 197.008022][ T6245] netlink: 24 bytes leftover after parsing attributes in process `syz.4.552'. [ 197.556901][ T6251] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 197.951677][ T6267] program syz.2.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.439507][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.565'. [ 200.333519][ T6296] loop6: detected capacity change from 0 to 7 [ 200.396810][ T4175] Dev loop6: unable to read RDB block 7 [ 200.426966][ T4175] loop6: AHDI p3 p4 [ 200.452756][ T4175] loop6: partition table partially beyond EOD, truncated [ 200.522931][ T4175] loop6: p3 start 7893504 is beyond EOD, truncated [ 200.678191][ T6296] Dev loop6: unable to read RDB block 7 [ 200.713898][ T6296] loop6: AHDI p3 p4 [ 200.734381][ T6296] loop6: partition table partially beyond EOD, truncated [ 200.752245][ T6296] loop6: p3 start 7893504 is beyond EOD, truncated [ 200.867597][ T6302] xt_connbytes: Forcing CT accounting to be enabled [ 202.200935][ T4243] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 202.388876][ T6317] overlayfs: overlapping lowerdir path [ 202.656334][ T6319] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 202.850870][ T4243] usb 5-1: Using ep0 maxpacket: 16 [ 204.234696][ T4243] usb 5-1: unable to read config index 0 descriptor/all [ 205.000669][ T4243] usb 5-1: can't read configurations, error -71 [ 206.452649][ T6362] overlayfs: overlapping lowerdir path [ 207.487867][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.590'. [ 207.817581][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 211.932684][ T6425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.606'. [ 212.825616][ T4301] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 213.510837][ T4301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.541096][ T4301] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 213.550217][ T4301] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 213.570483][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.646665][ T4301] usb 3-1: config 0 descriptor?? [ 213.759333][ T4301] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 213.794005][ T4301] dvb-usb: bulk message failed: -22 (3/0) [ 213.879890][ T4301] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 214.051092][ T4301] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 214.075334][ T4301] usb 3-1: media controller created [ 214.086820][ T4301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.391863][ T6410] loop4: detected capacity change from 0 to 40427 [ 214.761992][ T4301] dvb-usb: bulk message failed: -22 (6/0) [ 214.849126][ T4301] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 214.901548][ T4301] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 215.423861][ T4301] dvb-usb: schedule remote query interval to 150 msecs. [ 215.440689][ T4301] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 215.456479][ T4301] usb 3-1: USB disconnect, device number 4 [ 216.769814][ T4301] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 217.170758][ T4301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 217.961750][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.634'. [ 217.970647][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.580716][ T4301] usb 3-1: Using ep0 maxpacket: 8 [ 218.600922][ T4322] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 218.633199][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.780794][ T4301] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 218.793726][ T4301] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 218.817281][ T4301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.829858][ T6523] input: syz0 as /devices/virtual/input/input7 [ 218.844218][ T4301] usb 3-1: config 0 descriptor?? [ 219.031150][ T4322] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 219.059432][ T4322] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 219.173471][ T4322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.290877][ T4322] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 219.377985][ T4322] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 219.424032][ T4301] corsair 0003:1B1C:1B09.0001: unbalanced delimiter at end of report description [ 219.495078][ T4322] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246 [ 219.521113][ T4301] corsair 0003:1B1C:1B09.0001: parse failed [ 219.568438][ T4301] corsair: probe of 0003:1B1C:1B09.0001 failed with error -22 [ 220.470852][ T4322] usb 2-1: string descriptor 0 read error: -71 [ 220.477112][ T4322] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 220.506803][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.526093][ T4322] usb 2-1: config 0 descriptor?? [ 220.560926][ T4322] usb 2-1: can't set config #0, error -71 [ 220.752897][ T4322] usb 2-1: USB disconnect, device number 4 [ 222.202341][ T23] usb 3-1: USB disconnect, device number 5 [ 223.481551][ T6572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 224.903903][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.654'. [ 229.050763][ T26] kauditd_printk_skb: 939 callbacks suppressed [ 229.050778][ T26] audit: type=1326 audit(1754365873.502:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 230.524962][ T26] audit: type=1326 audit(1754365873.502:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 230.554819][ T26] audit: type=1326 audit(1754365873.502:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 230.586024][ T26] audit: type=1326 audit(1754365873.512:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 230.638408][ T26] audit: type=1326 audit(1754365873.512:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 230.876268][ T6629] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 230.887703][ T26] audit: type=1326 audit(1754365873.512:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 231.063274][ T26] audit: type=1326 audit(1754365873.512:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 231.085744][ T26] audit: type=1326 audit(1754365873.512:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 231.108402][ T26] audit: type=1326 audit(1754365873.512:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 231.131541][ T26] audit: type=1326 audit(1754365873.512:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.1.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 231.163617][ T6646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.672'. [ 231.258353][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.673'. [ 232.552112][ T4235] Bluetooth: hci4: command 0x0405 tx timeout [ 233.380507][ T6677] netlink: 'syz.2.680': attribute type 21 has an invalid length. [ 233.390828][ T6677] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.319561][ T6692] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 237.474747][ T6716] (syz.0.691,6716,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 237.526287][ T6716] (syz.0.691,6716,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 238.065782][ T6721] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 238.204577][ T6724] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 239.639110][ T6745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.701'. [ 242.619591][ T6765] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 243.521120][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 245.833506][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 249.976768][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.736'. [ 252.789920][ T4301] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 253.503499][ T6891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.748'. [ 254.300658][ T4301] usb 2-1: Using ep0 maxpacket: 32 [ 254.420763][ T4301] usb 2-1: config index 0 descriptor too short (expected 50356, got 796) [ 254.432424][ T4301] usb 2-1: config 41 has too many interfaces: 195, using maximum allowed: 32 [ 254.460464][ T4301] usb 2-1: config 41 has an invalid descriptor of length 0, skipping remainder of the config [ 254.472104][ T4301] usb 2-1: config 41 has 0 interfaces, different from the descriptor's value: 195 [ 254.970855][ T4301] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 254.989008][ T4301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.016999][ T4301] usb 2-1: Product: syz [ 255.029164][ T4301] usb 2-1: Manufacturer: syz [ 255.087267][ T4301] usb 2-1: can't set config #41, error -71 [ 255.129033][ T4301] usb 2-1: USB disconnect, device number 5 [ 255.545179][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.561692][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.348473][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 260.502937][ T4300] libceph: connect (1)[c::]:6789 error -101 [ 260.509444][ T4300] libceph: mon0 (1)[c::]:6789 connect error [ 260.510025][ T7003] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 260.536219][ T5178] libceph: connect (1)[c::]:6789 error -101 [ 260.542795][ T5178] libceph: mon0 (1)[c::]:6789 connect error [ 260.820972][ T5459] libceph: connect (1)[c::]:6789 error -101 [ 260.838565][ T5459] libceph: mon0 (1)[c::]:6789 connect error [ 261.521632][ T6994] ceph: No mds server is up or the cluster is laggy [ 261.908245][ T5459] libceph: connect (1)[c::]:6789 error -101 [ 261.914406][ T5459] libceph: mon0 (1)[c::]:6789 connect error [ 262.323897][ T7019] netlink: 24 bytes leftover after parsing attributes in process `syz.4.783'. [ 263.533644][ T7033] overlayfs: missing 'lowerdir' [ 263.917989][ T7039] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 267.428395][ T7083] netlink: 108 bytes leftover after parsing attributes in process `syz.3.801'. [ 268.091207][ T7089] overlayfs: missing 'lowerdir' [ 268.542442][ T7093] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 273.401515][ T7134] netlink: 56 bytes leftover after parsing attributes in process `syz.2.815'. [ 273.837696][ T7136] overlayfs: missing 'lowerdir' [ 273.843421][ T7133] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 278.064415][ T7180] netlink: 56 bytes leftover after parsing attributes in process `syz.4.829'. [ 278.679827][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 278.679882][ T26] audit: type=1326 audit(1754365923.672:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 279.260556][ T26] audit: type=1326 audit(1754365923.722:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.1.830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 279.312681][ T7185] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 280.051055][ T7191] overlayfs: unrecognized mount option "/" or missing value [ 280.889535][ T7204] afs: Unknown parameter '' [ 281.268620][ T7203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.839'. [ 282.252606][ T4251] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 283.044881][ T7224] orangefs_mount: mount request failed with -4 [ 283.235082][ T4251] usb 5-1: Using ep0 maxpacket: 32 [ 283.286591][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.848'. [ 283.591912][ T4251] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 283.910505][ T4251] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.947712][ T4251] usb 5-1: Product: syz [ 283.963407][ T4251] usb 5-1: Manufacturer: syz [ 283.976979][ T4251] usb 5-1: SerialNumber: syz [ 283.986005][ T7261] netlink: 56 bytes leftover after parsing attributes in process `syz.2.854'. [ 283.999226][ T4251] usb 5-1: config 0 descriptor?? [ 284.014967][ T7263] device syzkaller1 entered promiscuous mode [ 284.040821][ T4251] usb 5-1: can't set config #0, error -71 [ 284.057224][ T4251] usb 5-1: USB disconnect, device number 6 [ 285.573132][ T4323] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 285.920420][ T7290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 288.073511][ T7308] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 289.655793][ T7327] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.936773][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 291.758255][ T7352] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 292.490143][ T7374] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 292.504827][ T7374] cramfs: wrong magic [ 293.857736][ T7388] tipc: Started in network mode [ 293.890115][ T7388] tipc: Node identity 9ef4413d5941, cluster identity 4711 [ 294.093574][ T7388] tipc: Enabled bearer , priority 0 [ 294.108190][ T7393] device syzkaller0 entered promiscuous mode [ 294.133235][ T7388] tipc: Resetting bearer [ 294.333398][ T7386] tipc: Resetting bearer [ 294.447608][ T7386] tipc: Disabling bearer [ 294.679456][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 295.037187][ T7410] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 295.053538][ T7410] cramfs: wrong magic [ 295.290711][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 295.448077][ T13] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 296.262476][ T7428] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 296.276032][ T7428] cramfs: wrong magic [ 296.321033][ T13] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 296.364210][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.373763][ T13] usb 1-1: Product: syz [ 296.378128][ T13] usb 1-1: Manufacturer: syz [ 296.505527][ T13] usb 1-1: SerialNumber: syz [ 296.536269][ T13] usb 1-1: config 0 descriptor?? [ 296.701010][ T13] usb 1-1: can't set config #0, error -71 [ 296.719778][ T13] usb 1-1: USB disconnect, device number 5 [ 298.035796][ T7449] overlayfs: failed to set xattr on upper [ 298.090806][ T7449] overlayfs: ...falling back to index=off,metacopy=off. [ 298.111499][ T7449] overlayfs: failed to resolve './file0': -2 [ 298.387124][ T7463] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 298.402587][ T7463] cramfs: wrong magic [ 299.511249][ T7467] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 299.832542][ T7482] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 299.842713][ T7482] cramfs: wrong magic [ 303.749245][ T7522] netlink: 248 bytes leftover after parsing attributes in process `syz.4.929'. [ 307.518948][ T7550] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 307.593656][ T7550] cramfs: wrong magic [ 309.123386][ T7576] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 311.294355][ T7605] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 311.380717][ T7605] cramfs: wrong magic [ 313.663076][ T7632] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 314.944722][ T7641] netlink: 56 bytes leftover after parsing attributes in process `syz.1.960'. [ 315.369569][ T7651] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 315.487289][ T7651] cramfs: wrong magic [ 317.049959][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.063740][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.633753][ T7702] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 318.706457][ T7702] cramfs: wrong magic [ 319.184173][ T7708] kvm: pic: non byte write [ 320.540605][ C0] sched: RT throttling activated [ 329.240201][ T7816] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 329.259053][ T7816] cramfs: wrong magic [ 329.786028][ T7814] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 333.917729][ T7871] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 333.927546][ T7871] cramfs: wrong magic [ 335.497820][ T7878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1030'. [ 339.191090][ T7912] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.204299][ T7912] cramfs: wrong magic [ 342.485403][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1050'. [ 344.013796][ T7965] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.022689][ T7965] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.031530][ T7965] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 344.040271][ T7965] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.285512][ T8009] loop3: detected capacity change from 0 to 2048 [ 346.458529][ T8009] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 346.539653][ T8009] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 347.690820][ T8023] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1069'. [ 352.016425][ T8057] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 352.022980][ T8057] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 352.030949][ T8057] vhci_hcd vhci_hcd.0: Device attached [ 352.038270][ T8058] vhci_hcd: connection closed [ 352.046137][ T4321] vhci_hcd: stop threads [ 352.146061][ T4321] vhci_hcd: release socket [ 352.528618][ T4321] vhci_hcd: disconnect device [ 352.570833][ T4251] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 352.578417][ T4251] usb 35-1: enqueue for inactive port 0 [ 352.749116][ T8084] kvm: pic: non byte write [ 352.893714][ T4251] vhci_hcd: vhci_device speed not set [ 355.052106][ T8106] tipc: Started in network mode [ 355.066811][ T8106] tipc: Node identity ae940300ddc5, cluster identity 4711 [ 355.092357][ T8106] tipc: Enabled bearer , priority 0 [ 355.123646][ T8108] device syzkaller0 entered promiscuous mode [ 355.306360][ T8106] tipc: Resetting bearer [ 355.493834][ T8100] tipc: Resetting bearer [ 355.652447][ T8100] tipc: Disabling bearer [ 358.584685][ T8153] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 358.606018][ T8147] tipc: Enabled bearer , priority 0 [ 359.492644][ T8158] device syzkaller0 entered promiscuous mode [ 359.603274][ T5178] tipc: Node number set to 3350544701 [ 359.632024][ T8147] tipc: Resetting bearer [ 360.033114][ T8143] tipc: Resetting bearer [ 360.353355][ T8143] tipc: Disabling bearer [ 360.798874][ T8178] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 362.013298][ T8194] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 362.569988][ T8192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 362.765328][ T8192] overlayfs: failed to set xattr on upper [ 362.814549][ T8192] overlayfs: ...falling back to index=off,metacopy=off. [ 362.979330][ T8192] overlayfs: failed to resolve './file0': -2 [ 364.344157][ T8209] device syzkaller0 entered promiscuous mode [ 364.372875][ T8204] tipc: Started in network mode [ 364.377783][ T8204] tipc: Node identity 9af19620d835, cluster identity 4711 [ 364.430998][ T8204] tipc: Enabled bearer , priority 0 [ 364.450260][ T8204] tipc: Resetting bearer [ 364.494995][ T8203] tipc: Resetting bearer [ 364.514465][ T8203] tipc: Disabling bearer [ 364.536975][ T8216] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 364.659629][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 364.889625][ T8232] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 364.896169][ T8232] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 365.564319][ T8232] vhci_hcd vhci_hcd.0: Device attached [ 365.607692][ T8234] vhci_hcd: connection closed [ 365.615658][ T4320] vhci_hcd: stop threads [ 365.641600][ T4320] vhci_hcd: release socket [ 365.651219][ T4320] vhci_hcd: disconnect device [ 367.264243][ T8259] tipc: Enabled bearer , priority 0 [ 367.271766][ T8259] device syzkaller0 entered promiscuous mode [ 367.294495][ T8259] tipc: Resetting bearer [ 367.408901][ T8258] tipc: Resetting bearer [ 367.469425][ T8258] tipc: Disabling bearer [ 371.614880][ T8318] tipc: Enabled bearer , priority 0 [ 371.676701][ T8318] tipc: Resetting bearer [ 371.711631][ T8316] tipc: Disabling bearer [ 374.783249][ T8350] loop1: detected capacity change from 0 to 2048 [ 374.890518][ T8350] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 374.978461][ T8350] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 378.863280][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.869599][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.023400][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1184'. [ 379.263929][ T8413] loop1: detected capacity change from 0 to 2048 [ 379.696246][ T8413] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 379.780041][ T8413] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 384.352554][ T8477] loop3: detected capacity change from 0 to 2048 [ 384.466573][ T8479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1203'. [ 384.491154][ T8477] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 384.601065][ T8477] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 391.562844][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1219'. [ 395.563105][ T8571] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 396.564251][ T8583] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 396.575448][ T8583] netlink: 'syz.3.1229': attribute type 3 has an invalid length. [ 396.584475][ T8583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1229'. [ 397.383806][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1234'. [ 399.054097][ T8615] loop3: detected capacity change from 0 to 2048 [ 400.295451][ T8615] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 400.701716][ T8615] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 400.736943][ T8624] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 404.394942][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1255'. [ 404.426789][ T8669] tipc: Enabled bearer , priority 0 [ 404.434675][ T8669] device syzkaller0 entered promiscuous mode [ 405.246691][ T8669] tipc: Resetting bearer [ 405.292524][ T8668] tipc: Resetting bearer [ 405.371179][ T8668] tipc: Disabling bearer [ 406.482138][ T8688] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 408.536495][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1267'. [ 410.606367][ T8733] loop4: detected capacity change from 0 to 2048 [ 410.646599][ T8733] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 410.778972][ T8733] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 412.163310][ T8744] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 412.454295][ T8759] 9pnet: Could not find request transport: xen [ 412.483705][ T8744] EXT4-fs (loop4): Remounting filesystem read-only [ 413.413556][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1281'. [ 417.409234][ T8796] loop3: detected capacity change from 0 to 2048 [ 417.518777][ T8796] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 417.901121][ T8796] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 419.002354][ T8824] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1295'. [ 421.909640][ T8853] loop2: detected capacity change from 0 to 2048 [ 421.921323][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 421.930304][ T8846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1303'. [ 421.939282][ T8846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1303'. [ 422.109467][ T8853] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 422.404678][ T8865] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 422.418060][ T8865] cramfs: wrong magic [ 422.434125][ T8853] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 423.000510][ T8864] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 423.084541][ T8864] EXT4-fs (loop2): Remounting filesystem read-only [ 424.108976][ T8880] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 426.634689][ T8910] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 426.646464][ T8910] cramfs: wrong magic [ 426.738394][ T8908] loop1: detected capacity change from 0 to 2048 [ 427.114875][ T8908] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 427.657081][ T8908] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 431.514528][ T4265] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 431.790070][ T8963] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 431.804367][ T8963] cramfs: wrong magic [ 433.021218][ T4265] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 433.030797][ T4265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.039110][ T4265] usb 3-1: Product: syz [ 433.043927][ T4265] usb 3-1: Manufacturer: syz [ 433.048726][ T4265] usb 3-1: SerialNumber: syz [ 433.056028][ T4265] usb 3-1: config 0 descriptor?? [ 434.430908][ T4265] usb 3-1: can't set config #0, error -71 [ 434.454422][ T8974] loop3: detected capacity change from 0 to 2048 [ 434.461065][ T4265] usb 3-1: USB disconnect, device number 6 [ 434.592299][ T8974] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 434.604567][ T8983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 435.302444][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1344'. [ 435.342780][ T8974] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 437.346688][ T9012] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 437.364137][ T9012] cramfs: wrong magic [ 438.221887][ T9022] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.308920][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 438.541090][ T9022] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.866942][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.873351][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.692582][ T9022] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.803194][ T9022] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.982549][ T9022] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.023822][ T9022] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.054902][ T9022] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.085474][ T9022] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.018516][ T9083] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 443.029267][ T9083] cramfs: wrong magic [ 444.311814][ T9078] tipc: Enabled bearer , priority 0 [ 444.494698][ T9078] tipc: Resetting bearer [ 444.941192][ T9092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1371'. [ 446.648794][ T9075] tipc: Disabling bearer [ 448.856392][ T9133] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 448.865030][ T9133] cramfs: wrong magic [ 454.524361][ T9177] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 454.558135][ T9177] cramfs: wrong magic [ 457.541115][ T9211] device syzkaller0 entered promiscuous mode [ 461.583914][ T9253] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 463.840200][ T9275] afs: Unknown parameter '' [ 464.502677][ T4236] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 465.472510][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 465.990860][ T4236] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 466.015674][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.057579][ T4236] usb 1-1: Product: syz [ 466.071219][ T4236] usb 1-1: Manufacturer: syz [ 466.096175][ T4236] usb 1-1: SerialNumber: syz [ 466.164979][ T4236] usb 1-1: config 0 descriptor?? [ 466.202977][ T4236] xr_serial 1-1:0.0: skipping garbage [ 466.403969][ T4236] usb 1-1: USB disconnect, device number 6 [ 467.374042][ T9311] device syzkaller0 entered promiscuous mode [ 468.741304][ T9327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1434'. [ 469.550856][ T4327] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 470.052124][ T4327] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.229221][ T4327] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 470.450484][ T4327] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 470.744040][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.764584][ T9343] afs: Unknown parameter '' [ 470.791599][ T4327] usb 2-1: config 0 descriptor?? [ 470.862614][ T4327] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 470.869292][ T4327] dvb-usb: bulk message failed: -22 (3/0) [ 470.902269][ T4327] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 470.934054][ T4327] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 470.942198][ T4327] usb 2-1: media controller created [ 470.959806][ T4327] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.093724][ T4327] dvb-usb: bulk message failed: -22 (6/0) [ 471.099898][ T4327] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 471.157607][ T4327] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 471.222475][ T4327] dvb-usb: schedule remote query interval to 150 msecs. [ 471.229540][ T4327] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 471.250848][ T1107] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 471.384724][ T4327] dvb-usb: bulk message failed: -22 (1/0) [ 471.390875][ T4327] dvb-usb: error while querying for an remote control event. [ 471.520734][ T1107] usb 5-1: Using ep0 maxpacket: 32 [ 471.550879][ T4327] dvb-usb: bulk message failed: -22 (1/0) [ 471.568851][ T4327] dvb-usb: error while querying for an remote control event. [ 471.737880][ T9357] dns_resolver: Unsupported server list version (0) [ 471.740704][ T4327] dvb-usb: bulk message failed: -22 (1/0) [ 471.740743][ T4327] dvb-usb: error while querying for an remote control event. [ 471.810950][ T1107] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 471.810988][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.811026][ T1107] usb 5-1: Product: syz [ 471.811076][ T1107] usb 5-1: Manufacturer: syz [ 471.811130][ T1107] usb 5-1: SerialNumber: syz [ 471.820242][ T1107] usb 5-1: config 0 descriptor?? [ 471.881534][ T1107] xr_serial 5-1:0.0: skipping garbage [ 472.034057][ T4327] dvb-usb: bulk message failed: -22 (1/0) [ 472.034083][ T4327] dvb-usb: error while querying for an remote control event. [ 472.128392][ T8978] usb 5-1: USB disconnect, device number 7 [ 472.858480][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 472.858568][ T1107] dvb-usb: error while querying for an remote control event. [ 473.010889][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 473.010985][ T1107] dvb-usb: error while querying for an remote control event. [ 473.253337][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 473.253427][ T23] dvb-usb: error while querying for an remote control event. [ 473.410725][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 473.410864][ T1107] dvb-usb: error while querying for an remote control event. [ 473.574864][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 473.574955][ T1107] dvb-usb: error while querying for an remote control event. [ 473.730852][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 473.731023][ T1107] dvb-usb: error while querying for an remote control event. [ 474.621590][ T1107] dvb-usb: bulk message failed: -22 (1/0) [ 474.621608][ T1107] dvb-usb: error while querying for an remote control event. [ 474.782687][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 474.782712][ T23] dvb-usb: error while querying for an remote control event. [ 475.010743][ T23] dvb-usb: bulk message failed: -22 (1/0) [ 475.010773][ T23] dvb-usb: error while querying for an remote control event. [ 475.133936][ T23] usb 2-1: USB disconnect, device number 6 [ 475.188108][ T9379] IPv6: NLM_F_CREATE should be specified when creating new route [ 475.318394][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 476.793570][ T9388] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 476.800118][ T9388] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 476.827071][ T9388] vhci_hcd vhci_hcd.0: Device attached [ 476.912339][ T9389] vhci_hcd: connection closed [ 476.913586][ T154] vhci_hcd: stop threads [ 476.937330][ T154] vhci_hcd: release socket [ 476.971195][ T154] vhci_hcd: disconnect device [ 477.121889][ T23] vhci_hcd: vhci_device speed not set [ 478.550287][ T9406] afs: Unknown parameter '' [ 478.836623][ T4236] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 479.110659][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 479.730886][ T4236] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 479.750215][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.798201][ T4236] usb 1-1: Product: syz [ 479.812908][ T4236] usb 1-1: Manufacturer: syz [ 479.817550][ T4236] usb 1-1: SerialNumber: syz [ 479.901858][ T4236] usb 1-1: config 0 descriptor?? [ 479.942167][ T4236] xr_serial 1-1:0.0: skipping garbage [ 480.152856][ T4236] usb 1-1: USB disconnect, device number 7 [ 480.301794][ T9432] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1465'. [ 480.407892][ T9435] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 480.414415][ T9435] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 480.422329][ T9435] vhci_hcd vhci_hcd.0: Device attached [ 481.347738][ T23] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 481.521209][ T9436] vhci_hcd: connection reset by peer [ 481.526905][ T4317] vhci_hcd: stop threads [ 481.852792][ T4317] vhci_hcd: release socket [ 481.857327][ T4317] vhci_hcd: disconnect device [ 484.587429][ T9482] afs: Unknown parameter '' [ 484.870646][ T4228] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 485.120771][ T4228] usb 3-1: Using ep0 maxpacket: 32 [ 485.430990][ T4228] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 485.449434][ T4228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.475456][ T4228] usb 3-1: Product: syz [ 485.563823][ T4228] usb 3-1: Manufacturer: syz [ 485.580937][ T4228] usb 3-1: SerialNumber: syz [ 485.604772][ T4228] usb 3-1: config 0 descriptor?? [ 485.679918][ T9494] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 485.694354][ T9494] cramfs: wrong magic [ 486.271834][ T4228] xr_serial 3-1:0.0: skipping garbage [ 486.478152][ T4228] usb 3-1: USB disconnect, device number 7 [ 486.607298][ T23] vhci_hcd: vhci_device speed not set [ 490.012894][ T9537] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 490.316420][ T9539] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 490.399339][ T9537] cramfs: wrong magic [ 490.403888][ T9539] cramfs: wrong magic [ 490.568773][ T9543] afs: Unknown parameter '' [ 490.589157][ T9544] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 490.970656][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 492.620863][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 493.021151][ T23] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 493.031546][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.039990][ T23] usb 4-1: Product: syz [ 493.045424][ T23] usb 4-1: Manufacturer: syz [ 493.050370][ T23] usb 4-1: SerialNumber: syz [ 493.070551][ T23] usb 4-1: config 0 descriptor?? [ 493.122397][ T23] xr_serial 4-1:0.0: skipping garbage [ 493.324909][ T23] usb 4-1: USB disconnect, device number 4 [ 494.328376][ T9579] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 494.343803][ T9579] cramfs: wrong magic [ 500.620398][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1528'. [ 501.391328][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.398006][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.775875][ T9676] afs: Unknown parameter '' [ 503.009134][ T9680] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 503.280665][ T4267] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 504.990357][ T4267] usb 2-1: Using ep0 maxpacket: 32 [ 505.311235][ T4267] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 505.389024][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.397516][ T4267] usb 2-1: Product: syz [ 505.438376][ T4267] usb 2-1: Manufacturer: syz [ 505.493901][ T4267] usb 2-1: SerialNumber: syz [ 505.527105][ T4267] usb 2-1: config 0 descriptor?? [ 506.090356][ T4267] usb 2-1: can't set config #0, error -71 [ 506.671479][ T9704] tipc: Started in network mode [ 506.677112][ T9704] tipc: Node identity 629d7473dc9c, cluster identity 4711 [ 506.771435][ T4267] usb 2-1: USB disconnect, device number 7 [ 506.802536][ T9704] tipc: Enabled bearer , priority 0 [ 507.596578][ T9704] tipc: Resetting bearer [ 507.921754][ T9703] tipc: Disabling bearer [ 508.020764][ T4322] tipc: Node number set to 3187766387 [ 508.078211][ T9713] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 510.858661][ T9753] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1558'. [ 512.653367][ T9775] tipc: Enabled bearer , priority 0 [ 512.719930][ T9775] tipc: Resetting bearer [ 512.802283][ T9774] tipc: Disabling bearer [ 513.606991][ T9783] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 514.130932][ T4327] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 515.030900][ T4327] usb 5-1: device descriptor read/64, error -71 [ 515.320261][ T9796] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 515.330798][ T4327] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 515.737230][ T4327] usb 5-1: device descriptor read/64, error -71 [ 515.911649][ T4327] usb usb5-port1: attempt power cycle [ 516.082675][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 517.353116][ T9826] tipc: Enabled bearer , priority 0 [ 517.498890][ T9826] tipc: Resetting bearer [ 517.552846][ T9823] tipc: Disabling bearer [ 521.521512][ T9864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 525.095895][ T9906] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 525.102435][ T9906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 525.111070][ T9906] vhci_hcd vhci_hcd.0: Device attached [ 525.375348][ T9907] vhci_hcd: connection closed [ 525.375990][ T606] vhci_hcd: stop threads [ 525.390951][ T4322] usb 39-1: new high-speed USB device number 2 using vhci_hcd [ 525.483590][ T606] vhci_hcd: release socket [ 525.582457][ T606] vhci_hcd: disconnect device [ 526.921799][ T9928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 527.477545][ T9936] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 530.046526][ T9943] loop1: detected capacity change from 0 to 2048 [ 530.513673][ T9943] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 530.580780][ T4322] vhci_hcd: vhci_device speed not set [ 530.637394][ T9954] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 531.370857][ T9943] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 531.584121][ T9961] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 531.590638][ T9961] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 531.600886][ T9961] vhci_hcd vhci_hcd.0: Device attached [ 532.300791][ T21] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 532.526189][ T9962] vhci_hcd: connection reset by peer [ 532.532503][ T4320] vhci_hcd: stop threads [ 532.536811][ T4320] vhci_hcd: release socket [ 532.544144][ T4320] vhci_hcd: disconnect device [ 533.157348][ T9976] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1618'. [ 533.695476][ T9982] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 536.734635][T10007] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 537.662569][ T21] vhci_hcd: vhci_device speed not set [ 538.165601][T10025] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 538.172148][T10025] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 538.180174][T10025] vhci_hcd vhci_hcd.0: Device attached [ 538.460770][ T4250] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 538.611876][T10026] vhci_hcd: connection reset by peer [ 538.620147][ T154] vhci_hcd: stop threads [ 538.630112][ T154] vhci_hcd: release socket [ 538.696030][ T154] vhci_hcd: disconnect device [ 539.280867][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1631'. [ 542.877249][T10073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1644'. [ 543.621016][ T4250] vhci_hcd: vhci_device speed not set [ 543.980353][T10094] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 550.727143][T10132] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 551.745399][T10141] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 551.755608][T10141] cramfs: wrong magic [ 554.473299][T10162] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 558.971677][T10221] syz.0.1687 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 559.106586][T10225] tipc: Enabling of bearer rejected, failed to enable media [ 559.119862][T10227] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 562.761858][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.768212][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.012137][T10273] tipc: Enabling of bearer rejected, failed to enable media [ 567.106744][T10333] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1717'. [ 567.116093][T10327] afs: Unknown parameter '' [ 567.481245][ T5178] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 567.730637][ T5178] usb 5-1: Using ep0 maxpacket: 32 [ 568.043939][ T5178] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 568.063474][ T5178] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.090675][ T5178] usb 5-1: Product: syz [ 568.121704][ T5178] usb 5-1: Manufacturer: syz [ 568.154408][ T5178] usb 5-1: SerialNumber: syz [ 568.277608][ T5178] usb 5-1: config 0 descriptor?? [ 568.436082][ T5178] xr_serial 5-1:0.0: skipping garbage [ 568.670296][ T5178] usb 5-1: USB disconnect, device number 11 [ 569.003490][T10351] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 569.010013][T10351] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 569.017870][T10351] vhci_hcd vhci_hcd.0: Device attached [ 569.290750][ T5178] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 569.749687][T10352] vhci_hcd: connection reset by peer [ 569.758605][ T606] vhci_hcd: stop threads [ 569.764543][ T606] vhci_hcd: release socket [ 569.832601][ T606] vhci_hcd: disconnect device [ 570.898041][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1724'. [ 572.848240][T10392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1735'. [ 574.404457][T10404] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 574.438037][T10404] cramfs: wrong magic [ 574.440896][ T5178] vhci_hcd: vhci_device speed not set [ 577.765451][ C1] hrtimer: interrupt took 51424 ns [ 577.991113][T10450] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 577.999849][T10450] cramfs: wrong magic [ 578.157230][T10453] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 578.171573][T10453] cramfs: wrong magic [ 589.751694][T10588] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 589.760270][T10588] cramfs: wrong magic [ 590.720873][ T4235] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 590.990796][ T4235] usb 2-1: Using ep0 maxpacket: 32 [ 591.271276][ T4235] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 591.329253][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.368908][ T4235] usb 2-1: Product: syz [ 591.398842][ T4235] usb 2-1: Manufacturer: syz [ 591.454446][ T4235] usb 2-1: SerialNumber: syz [ 591.503431][ T4235] usb 2-1: config 0 descriptor?? [ 591.652184][ T4235] xr_serial 2-1:0.0: skipping garbage [ 593.345426][ T4235] usb 2-1: USB disconnect, device number 8 [ 594.921222][T10630] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 594.928747][T10630] cramfs: wrong magic [ 599.598175][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1819'. [ 609.001623][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1839'. [ 612.428194][T10790] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 612.434765][T10790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 613.218814][T10791] vhci_hcd: connection closed [ 613.219156][T10790] vhci_hcd vhci_hcd.0: Device attached [ 613.233254][ T154] vhci_hcd: stop threads [ 613.259709][ T154] vhci_hcd: release socket [ 613.357760][ T154] vhci_hcd: disconnect device [ 613.766064][T10797] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1854'. [ 615.032171][T10817] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 615.039771][T10817] cramfs: wrong magic [ 618.343645][T10839] kvm: pic: non byte write [ 618.589134][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1872'. [ 619.019584][T10857] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 619.033869][T10857] cramfs: wrong magic [ 619.441183][T10865] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1877'. [ 620.554650][T10876] device pim6reg1 entered promiscuous mode [ 624.020639][T10889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 624.184154][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.190544][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.492732][T10940] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1900'. [ 631.575509][T11039] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1931'. [ 635.036193][T11081] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1943'. [ 636.103191][T11107] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 636.287382][T11111] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1955'. [ 638.780101][T11139] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 639.134865][T11149] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1968'. [ 639.563597][T11155] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 639.571544][T11155] cramfs: wrong magic [ 642.938349][T11181] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 652.395533][T11263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2004'. [ 652.531107][T11268] afs: Unknown parameter '' [ 653.350642][ T4251] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 653.600678][ T4251] usb 1-1: Using ep0 maxpacket: 32 [ 653.910935][ T4251] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 653.920650][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.929435][ T4251] usb 1-1: Product: syz [ 653.934145][ T4251] usb 1-1: Manufacturer: syz [ 653.939504][ T4251] usb 1-1: SerialNumber: syz [ 653.961319][ T4251] usb 1-1: config 0 descriptor?? [ 654.021908][ T4251] xr_serial 1-1:0.0: skipping garbage [ 654.266369][ T4251] usb 1-1: USB disconnect, device number 8 [ 657.266957][T11308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2016'. [ 658.479876][T11331] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 658.497301][T11331] cramfs: wrong magic [ 660.340756][T11342] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 662.876580][T11365] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 662.884608][T11365] cramfs: wrong magic [ 665.201477][T11384] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 665.209553][T11384] cramfs: wrong magic [ 666.073584][T11390] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 670.237145][T11435] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 670.373631][T11435] cramfs: wrong magic [ 670.837212][T11445] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 670.845823][T11445] cramfs: wrong magic [ 671.362400][T11450] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 675.259501][T11479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2060'. [ 677.176473][T11497] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 679.577327][T11514] device syzkaller0 entered promiscuous mode [ 681.666083][T11523] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 684.650771][T11544] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2077'. [ 685.695766][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.704835][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.725928][T11551] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 686.325438][T11561] afs: Unknown parameter '' [ 687.160951][ T4251] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 689.034144][ T4251] usb 5-1: Using ep0 maxpacket: 32 [ 689.771523][ T4251] usb 5-1: unable to read config index 0 descriptor/all [ 689.778512][ T4251] usb 5-1: can't read configurations, error -71 [ 690.061730][T11598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2093'. [ 691.731836][T11611] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 692.683516][T11632] afs: Unknown parameter '' [ 693.103646][ T4322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 693.357896][T11644] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2105'. [ 693.980742][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 695.095269][ T4322] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 695.117277][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.151061][ T4322] usb 1-1: Product: syz [ 695.174101][ T4322] usb 1-1: Manufacturer: syz [ 695.187874][ T4322] usb 1-1: SerialNumber: syz [ 695.228294][ T4322] usb 1-1: config 0 descriptor?? [ 695.312261][ T4322] xr_serial 1-1:0.0: skipping garbage [ 695.513099][ T4322] usb 1-1: USB disconnect, device number 9 [ 696.631645][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 699.328504][T11684] kvm: pic: non byte write [ 699.480867][T11694] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2117'. [ 700.211705][T11700] afs: Unknown parameter '' [ 700.885307][T11714] device syzkaller0 entered promiscuous mode [ 701.023188][ T4322] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 701.320714][ T4322] usb 2-1: Using ep0 maxpacket: 32 [ 701.600810][ T4322] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 701.622308][ T4322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.646576][ T4322] usb 2-1: Product: syz [ 701.667793][ T4322] usb 2-1: Manufacturer: syz [ 701.704228][ T4322] usb 2-1: SerialNumber: syz [ 701.731294][ T4322] usb 2-1: config 0 descriptor?? [ 701.791918][ T4322] xr_serial 2-1:0.0: skipping garbage [ 702.002788][ T4322] usb 2-1: USB disconnect, device number 9 [ 703.432481][T11742] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2132'. [ 704.126466][T11744] kvm: pic: non byte write [ 708.746137][T11776] afs: Unknown parameter '' [ 709.694272][ T4235] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 709.980827][ T4235] usb 4-1: Using ep0 maxpacket: 32 [ 710.344415][ T4235] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 710.405872][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.517403][ T4235] usb 4-1: Product: syz [ 710.522368][ T4235] usb 4-1: Manufacturer: syz [ 710.530481][ T4235] usb 4-1: SerialNumber: syz [ 710.545701][ T4235] usb 4-1: config 0 descriptor?? [ 710.813127][ T4235] xr_serial 4-1:0.0: skipping garbage [ 711.074795][ T4235] usb 4-1: USB disconnect, device number 5 [ 711.869456][T11798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2148'. [ 714.048502][T11820] device syzkaller0 entered promiscuous mode [ 716.099990][T11849] afs: Unknown parameter 'ÿ' [ 716.418589][ T4251] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 716.468713][T11847] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 716.790713][ T4251] usb 1-1: Using ep0 maxpacket: 32 [ 716.872830][T11857] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 716.884602][T11857] cramfs: wrong magic [ 718.434027][ T4251] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 718.462517][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.529028][ T4251] usb 1-1: Product: syz [ 718.697146][ T4251] usb 1-1: Manufacturer: syz [ 720.735624][ T4251] usb 1-1: SerialNumber: syz [ 720.742419][ T4251] usb 1-1: config 0 descriptor?? [ 720.820771][ T4251] usb 1-1: can't set config #0, error -71 [ 720.841077][ T4251] usb 1-1: USB disconnect, device number 10 [ 721.083631][T11888] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2169'. [ 723.937229][T11915] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 723.949654][T11915] cramfs: wrong magic [ 724.545009][T11917] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2179'. [ 726.728632][T11933] device syzkaller0 entered promiscuous mode [ 727.307647][T11937] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 727.316413][T11937] cramfs: wrong magic [ 728.599420][T11962] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 732.515735][T11996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2199'. [ 732.855081][T12003] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 732.867118][T12003] cramfs: wrong magic [ 734.714184][T12008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 734.720732][T12008] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 734.728727][T12008] vhci_hcd vhci_hcd.0: Device attached [ 734.738857][T12009] vhci_hcd: connection closed [ 734.740026][ T154] vhci_hcd: stop threads [ 734.818103][ T154] vhci_hcd: release socket [ 734.823397][ T154] vhci_hcd: disconnect device [ 735.432748][T12025] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 735.444674][T12025] cramfs: wrong magic [ 739.708763][T12059] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 739.727636][T12059] cramfs: wrong magic [ 743.029746][T12064] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 743.036285][T12064] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 743.044106][T12064] vhci_hcd vhci_hcd.0: Device attached [ 743.051473][T12066] vhci_hcd: connection closed [ 743.052887][T12069] vhci_hcd: stop threads [ 743.083350][T12069] vhci_hcd: release socket [ 743.088159][T12069] vhci_hcd: disconnect device [ 743.332702][T12072] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2214'. [ 743.921800][T12079] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 743.929889][T12079] cramfs: wrong magic [ 746.497145][T12113] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 746.505661][T12113] cramfs: wrong magic [ 746.780139][T12114] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 746.786679][T12114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 746.794733][T12114] vhci_hcd vhci_hcd.0: Device attached [ 747.072360][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.078662][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.086016][ T4235] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 747.189610][T12115] vhci_hcd: connection closed [ 747.190685][ T5171] vhci_hcd: stop threads [ 747.704157][ T5171] vhci_hcd: release socket [ 747.708729][ T5171] vhci_hcd: disconnect device [ 749.340704][ T26] audit: type=1326 audit(1754366394.322:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 749.476730][ T26] audit: type=1326 audit(1754366394.322:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 750.029658][ T26] audit: type=1326 audit(1754366394.322:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 750.245313][ T26] audit: type=1326 audit(1754366394.322:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 750.370563][T12157] netlink: 'syz.1.2238': attribute type 10 has an invalid length. [ 750.405681][ T26] audit: type=1326 audit(1754366394.322:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 751.372528][T12162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 751.379063][T12162] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 751.386925][T12162] vhci_hcd vhci_hcd.0: Device attached [ 751.394282][T12163] vhci_hcd: connection closed [ 751.655825][ T26] audit: type=1326 audit(1754366394.322:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 751.675055][ T4319] vhci_hcd: stop threads [ 751.683023][ T26] audit: type=1326 audit(1754366394.322:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12139 comm="syz.3.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 751.779613][ T4319] vhci_hcd: release socket [ 751.781624][T12157] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.796733][T12157] bond0: (slave team0): Enslaving as an active interface with an up link [ 751.811595][ T4319] vhci_hcd: disconnect device [ 752.180313][T12169] loop2: detected capacity change from 0 to 512 [ 752.347585][T12169] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 752.402792][T12169] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 752.456556][T12169] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 752.496593][T12169] EXT4-fs (loop2): 1 truncate cleaned up [ 752.525927][T12169] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,stripe=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,noinit_itable,minixdf,quota,,errors=continue. Quota mode: writeback. [ 752.648664][ T26] audit: type=1800 audit(1754366397.642:975): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2242" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 752.670813][ T4235] vhci_hcd: vhci_device speed not set [ 755.391424][T12214] afs: Unknown parameter '' [ 755.680844][ T1107] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 755.743396][ T26] audit: type=1326 audit(1754366400.742:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 755.800859][ T26] audit: type=1326 audit(1754366400.742:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 755.826191][T12211] loop4: detected capacity change from 0 to 4096 [ 756.020766][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 756.070949][ T26] audit: type=1326 audit(1754366400.742:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 756.164237][ T26] audit: type=1326 audit(1754366400.742:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 756.250512][ T26] audit: type=1326 audit(1754366400.742:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.1.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 756.381066][ T1107] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 756.400367][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.419015][ T1107] usb 1-1: Product: syz [ 756.430841][ T1107] usb 1-1: Manufacturer: syz [ 756.440815][ T1107] usb 1-1: SerialNumber: syz [ 756.470411][ T1107] usb 1-1: config 0 descriptor?? [ 756.543977][ T1107] xr_serial 1-1:0.0: skipping garbage [ 756.629614][T12227] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2258'. [ 756.775693][ T23] usb 1-1: USB disconnect, device number 11 [ 760.202653][T12270] afs: Unknown parameter 'ÿ' [ 760.448192][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2269'. [ 761.070363][T12188] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 761.320827][T12188] usb 2-1: Using ep0 maxpacket: 32 [ 762.520833][T12188] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 762.530152][T12188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.538493][T12188] usb 2-1: Product: syz [ 762.542917][T12188] usb 2-1: Manufacturer: syz [ 762.547517][T12188] usb 2-1: SerialNumber: syz [ 762.555676][T12188] usb 2-1: config 0 descriptor?? [ 762.602152][T12188] xr_serial 2-1:0.0: skipping garbage [ 762.920091][T12188] usb 2-1: USB disconnect, device number 10 [ 764.367234][T12308] loop1: detected capacity change from 0 to 1024 [ 764.906343][T12317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2284'. [ 764.977080][T12308] EXT4-fs (loop1): Ignoring removed oldalloc option [ 765.058895][T12308] EXT4-fs (loop1): Ignoring removed bh option [ 765.325934][T12308] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 765.522549][T12308] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 767.433024][T12353] tmpfs: Unknown parameter '‹' [ 768.669567][ T26] audit: type=1326 audit(1754366413.632:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 768.693664][ T26] audit: type=1326 audit(1754366413.632:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 768.720400][ T26] audit: type=1326 audit(1754366413.632:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59752ac4d0 code=0x7ffc0000 [ 768.754340][ T26] audit: type=1326 audit(1754366413.632:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f59752ac4d0 code=0x7ffc0000 [ 768.811409][ T26] audit: type=1326 audit(1754366413.632:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 768.895506][T12371] loop4: detected capacity change from 0 to 1764 [ 768.951055][ T26] audit: type=1326 audit(1754366413.632:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 768.999598][ T26] audit: type=1326 audit(1754366413.642:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 769.512486][ T26] audit: type=1326 audit(1754366413.642:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 769.563861][ T26] audit: type=1326 audit(1754366413.642:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 769.680630][ T26] audit: type=1326 audit(1754366413.642:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12370 comm="syz.4.2299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 771.086755][T12386] loop3: detected capacity change from 0 to 8192 [ 772.643104][T12408] Can't find ip_set type ha [ 775.315046][ T4235] Bluetooth: hci4: command 0x0405 tx timeout [ 775.360968][T12453] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 776.883166][T12471] team0: Port device team_slave_0 removed [ 778.448338][T12492] binder: BINDER_SET_CONTEXT_MGR already set [ 778.476062][T12492] binder: 12491:12492 ioctl 4018620d 200000004a80 returned -16 [ 780.099413][T12520] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 781.805736][ T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 782.100783][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 782.275935][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 782.291780][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.338639][ T23] usb 5-1: config 0 descriptor?? [ 782.620802][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 782.651795][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 782.721164][ T23] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 782.738592][ T23] usb 5-1: media controller created [ 782.841982][T12530] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 783.030122][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.500760][ T23] az6027: usb out operation failed. (-71) [ 783.541334][ T23] az6027: usb out operation failed. (-71) [ 783.566285][ T23] stb0899_attach: Driver disabled by Kconfig [ 783.724400][ T23] az6027: no front-end attached [ 783.724400][ T23] [ 783.754177][ T23] az6027: usb out operation failed. (-71) [ 783.759932][ T23] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 783.769912][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 783.796870][ T23] dvb-usb: schedule remote query interval to 400 msecs. [ 783.870797][ T23] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 784.563921][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 784.563934][ T26] audit: type=1326 audit(1754366429.562:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 784.700178][ T26] audit: type=1326 audit(1754366429.602:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 784.729570][ T23] usb 5-1: USB disconnect, device number 14 [ 784.736400][ T26] audit: type=1326 audit(1754366429.612:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 784.986838][T12570] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 785.014961][ T26] audit: type=1326 audit(1754366429.612:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 785.051936][ T23] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 785.101036][ T26] audit: type=1326 audit(1754366429.612:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12560 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f918c51eb69 code=0x7ffc0000 [ 785.288237][T12577] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 785.300377][T12577] cramfs: wrong magic [ 788.355594][T12587] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.363484][T12587] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.902843][T12587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.964277][T12587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.487117][T12587] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.509322][T12587] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.532221][T12587] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.550061][T12587] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.858112][T12587] syz.1.2368 (12587) used greatest stack depth: 19176 bytes left [ 790.899826][T12633] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 791.098019][T12646] device syzkaller0 entered promiscuous mode [ 791.200753][ T4267] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 791.450869][ T4267] usb 2-1: Using ep0 maxpacket: 32 [ 791.571279][ T4267] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 791.639580][ T4267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.870727][T12619] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 791.892949][ T4267] usb 2-1: config 0 descriptor?? [ 792.150765][ T4267] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 792.166215][ T4267] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 792.201060][ T4267] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 792.208483][ T4267] usb 2-1: media controller created [ 792.242857][ T4267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 792.316331][T12619] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 792.400889][ T4267] az6027: usb out operation failed. (-71) [ 792.420923][ T4267] az6027: usb out operation failed. (-71) [ 792.438445][ T4267] stb0899_attach: Driver disabled by Kconfig [ 792.479114][ T4267] az6027: no front-end attached [ 792.479114][ T4267] [ 792.532876][ T4267] az6027: usb out operation failed. (-71) [ 792.557411][ T4267] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 792.618178][ T4267] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 792.622710][T12619] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 792.640814][T12662] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 792.649212][T12619] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 792.658623][T12619] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 792.673368][ T4267] dvb-usb: schedule remote query interval to 400 msecs. [ 792.683328][T12662] cramfs: wrong magic [ 792.689472][T12619] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 792.695115][ T4267] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 792.757057][ T4267] usb 2-1: USB disconnect, device number 11 [ 792.837249][ T4267] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 792.870933][T12619] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 792.888372][T12619] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 792.912061][T12619] usb 4-1: Product: syz [ 792.924602][T12619] usb 4-1: Manufacturer: syz [ 792.981887][T12619] cdc_wdm 4-1:1.0: skipping garbage [ 792.990959][T12619] cdc_wdm 4-1:1.0: skipping garbage [ 793.018421][T12619] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 793.050624][T12619] cdc_wdm 4-1:1.0: Unknown control protocol [ 793.103676][T12667] loop1: detected capacity change from 0 to 128 [ 793.159814][T12667] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 793.361168][T12667] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 794.877336][T12619] usb 4-1: USB disconnect, device number 6 [ 794.964680][T12688] device syzkaller0 entered promiscuous mode [ 795.158608][T12690] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 795.686530][ T4183] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 795.843692][ T4183] FAT-fs (loop1): Filesystem has been set read-only [ 796.073449][ T4183] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 796.178991][ T4183] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 796.427291][T12708] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 797.184246][T12713] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2394'. [ 798.505454][T12736] loop3: detected capacity change from 0 to 512 [ 798.606098][T12736] EXT4-fs (loop3): Ignoring removed oldalloc option [ 798.703071][T12736] EXT4-fs (loop3): 1 truncate cleaned up [ 798.708860][T12736] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 799.034190][T12732] chnl_net:caif_netlink_parms(): no params data found [ 799.213091][T12732] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.260877][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.273833][T12749] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 799.303128][T12732] device bridge_slave_0 entered promiscuous mode [ 799.354255][T12732] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.365080][T12749] cramfs: wrong magic [ 799.417178][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.433967][T12732] device bridge_slave_1 entered promiscuous mode [ 799.677653][T12732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.753191][T12732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.923305][T12732] team0: Port device team_slave_0 added [ 799.963247][T12732] team0: Port device team_slave_1 added [ 800.020190][T12732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.033965][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.068395][T12732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.112220][T12732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.134073][T12732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.216119][T12732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.895164][T12760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 800.935363][T12619] Bluetooth: hci0: command 0x0409 tx timeout [ 800.976085][T12732] device hsr_slave_0 entered promiscuous mode [ 800.992649][T12732] device hsr_slave_1 entered promiscuous mode [ 801.012595][T12732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 801.036735][T12732] Cannot create hsr debugfs directory [ 802.022856][T12766] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 802.152967][T12732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 802.174053][T12732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 802.202144][T12732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 802.233029][T12732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 803.154626][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 803.975242][T12801] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 804.000560][T12732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.775808][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 804.784194][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 804.813452][T12732] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.839890][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 804.863283][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 804.916391][ T3097] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.923543][ T3097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.112403][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 805.130747][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 805.162661][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 805.259708][ T4320] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.266836][ T4320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.390706][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 805.577053][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 805.718393][T12822] loop3: detected capacity change from 0 to 512 [ 805.824114][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 805.916295][T12822] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 805.946200][T12732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 805.976923][T12732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 806.220787][T12822] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,noauto_da_alloc,quota,stripe=0x0000000000000000,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 806.426290][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 806.438013][T12822] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 806.566166][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 806.688018][T12832] Can't find ip_set type hash:net,por [ 806.692158][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 806.769441][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 806.833726][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 806.853619][T12838] loop2: detected capacity change from 0 to 1024 [ 806.871362][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 806.887914][ T26] audit: type=1326 audit(1754366451.882:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 806.969002][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 807.014879][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 807.035956][ T26] audit: type=1326 audit(1754366451.922:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f78190014d0 code=0x7ffc0000 [ 807.053042][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 807.099883][ T26] audit: type=1326 audit(1754366451.922:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7819002b69 code=0x7ffc0000 [ 807.196125][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 807.216887][T10719] hfsplus: b-tree write err: -5, ino 4 [ 807.262450][T12843] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 808.314833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 808.360099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 808.451963][T12732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.510409][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.521971][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.195439][T12889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 810.636793][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 810.649986][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 810.828981][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 810.949790][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 811.111083][T12732] device veth0_vlan entered promiscuous mode [ 811.163235][T12732] device veth1_vlan entered promiscuous mode [ 811.311054][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 811.319576][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 812.159994][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 812.189008][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 812.241548][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 812.264351][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 812.308828][T12732] device veth0_macvtap entered promiscuous mode [ 812.344221][T12732] device veth1_macvtap entered promiscuous mode [ 812.410173][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.431299][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.616811][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.027701][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.183964][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.194512][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.204370][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.215098][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.245634][T12732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.264422][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.295264][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.368952][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.436179][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.490674][T12732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 813.524748][T12732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.574936][T12732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.635542][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 813.661020][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 813.671005][T12919] loop3: detected capacity change from 0 to 128 [ 813.683520][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 813.824955][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 813.849434][T12919] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 813.893820][T12919] ext4 filesystem being mounted at /494/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 813.910069][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 813.967629][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 814.048845][T12732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.066088][T12931] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 814.072630][T12931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 814.081902][T12732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.082083][T12931] vhci_hcd vhci_hcd.0: Device attached [ 814.102589][T12732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.111868][T12732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.192775][T12932] vhci_hcd: connection closed [ 814.193012][ T4321] vhci_hcd: stop threads [ 814.220833][ T4321] vhci_hcd: release socket [ 814.239393][ T4321] vhci_hcd: disconnect device [ 814.271798][ T4321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.281856][ T4265] vhci_hcd: vhci_device speed not set [ 814.291902][ T4321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.309978][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 814.343891][ T4319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.352682][ T4319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.524739][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 815.201014][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2402'. [ 815.280753][ T4322] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 815.297816][T12949] netlink: 'syz.0.2466': attribute type 11 has an invalid length. [ 815.520880][T12618] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 815.960875][ T4322] usb 5-1: Using ep0 maxpacket: 8 [ 816.281453][ T4322] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 816.291682][ T4322] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.301131][ T4322] usb 5-1: Product: syz [ 816.305309][ T4322] usb 5-1: Manufacturer: syz [ 816.320937][T12618] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 816.336858][T12618] usb 3-1: config 0 interface 0 has no altsetting 0 [ 816.350626][ T4322] usb 5-1: SerialNumber: syz [ 816.376106][ T4322] usb 5-1: config 0 descriptor?? [ 816.603878][T12966] chnl_net:caif_netlink_parms(): no params data found [ 816.801745][ T4322] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 816.865319][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.880735][T12618] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 816.888376][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.906118][T12966] device bridge_slave_0 entered promiscuous mode [ 816.910716][T12618] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.919003][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.920720][T12618] usb 3-1: Product: syz [ 816.931737][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.940131][T12966] device bridge_slave_1 entered promiscuous mode [ 816.956921][T12618] usb 3-1: Manufacturer: syz [ 816.970634][T12618] usb 3-1: SerialNumber: syz [ 816.978904][T12618] usb 3-1: config 0 descriptor?? [ 816.985400][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.005248][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.032531][T12618] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 817.050476][T12966] team0: Port device team_slave_0 added [ 817.058159][T12618] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 817.065887][T12966] team0: Port device team_slave_1 added [ 817.111101][T12618] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 817.119747][T12618] usb 3-1: media controller created [ 817.127465][T12966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 817.149351][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.154974][T12618] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 817.194589][T12966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 817.247640][T12966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 817.257983][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 817.301386][T12966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.378350][T12983] loop5: detected capacity change from 0 to 2048 [ 817.391049][T12966] device hsr_slave_0 entered promiscuous mode [ 817.406648][T12618] DVB: Unable to find symbol tda10046_attach() [ 817.417974][T12966] device hsr_slave_1 entered promiscuous mode [ 817.420725][T12618] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 817.447055][T12966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 817.455416][T12618] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 817.456872][T12966] Cannot create hsr debugfs directory [ 817.522305][T12983] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 817.578648][T12983] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 817.717518][T12966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 817.738367][T12966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 817.765409][T12966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 817.775307][T12966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.590967][ T4322] gspca_sonixj: reg_r err -71 [ 818.602675][ T4322] sonixj: probe of 5-1:0.0 failed with error -71 [ 818.670958][ T4327] Bluetooth: hci4: command 0x0409 tx timeout [ 818.755867][T12966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.793165][ T4322] usb 5-1: USB disconnect, device number 15 [ 818.841620][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 818.852175][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 818.879883][T12966] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.911694][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 818.930794][T12618] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71 [ 818.931769][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 818.964762][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.971956][T10719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.004096][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 819.021228][T12618] usb 3-1: USB disconnect, device number 8 [ 819.029735][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 819.043532][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 819.061684][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.068827][T10719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.070677][ T4228] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 819.086135][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 819.100069][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 819.113133][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 819.129993][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 819.142653][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 819.168849][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 819.184108][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 819.203270][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 819.287123][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 819.290706][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2479'. [ 819.369509][T12189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 819.401638][ T4228] usb 6-1: Using ep0 maxpacket: 16 [ 819.790889][T12189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 819.817247][T12966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 820.132480][ T4228] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 820.304653][ T4228] usb 6-1: config 0 has no interface number 0 [ 820.365930][ T4228] usb 6-1: config 0 interface 148 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 32 [ 820.443411][ T4228] usb 6-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 820.496165][ T4228] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.656572][ T4228] usb 6-1: config 0 descriptor?? [ 820.721425][T13002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 820.874319][ T8978] Bluetooth: hci4: command 0x041b tx timeout [ 821.021876][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 821.029366][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 821.033107][T12917] udevd[12917]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.148/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.141974][T12966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.157717][ T4228] usb 6-1: USB disconnect, device number 2 [ 821.978479][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 822.128553][ T26] audit: type=1326 audit(1754366467.122:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 822.180646][ T26] audit: type=1326 audit(1754366467.122:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 822.299363][ T26] audit: type=1326 audit(1754366467.212:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 822.325150][ T26] audit: type=1326 audit(1754366467.212:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 822.347944][ T26] audit: type=1326 audit(1754366467.212:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13042 comm="syz.4.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59752adb69 code=0x7ffc0000 [ 822.371544][T12619] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 822.761275][T12619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 822.858284][T12619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.980841][T12619] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 823.027132][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 823.035512][ T4327] Bluetooth: hci4: command 0x040f tx timeout [ 823.056873][T12619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.057433][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 823.446612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 823.496095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 823.567283][T12619] usb 3-1: config 0 descriptor?? [ 823.568961][T12966] device veth0_vlan entered promiscuous mode [ 823.595057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 823.624815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 823.643933][T12966] device veth1_vlan entered promiscuous mode [ 823.677430][ T606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.699331][T13062] tipc: Enabled bearer , priority 0 [ 823.715313][T13062] device syzkaller0 entered promiscuous mode [ 823.762660][T13065] loop4: detected capacity change from 0 to 2048 [ 823.768570][ T606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.811362][T13062] tipc: Resetting bearer [ 823.841297][T12966] device veth0_macvtap entered promiscuous mode [ 823.848707][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 823.857411][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 823.866523][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 823.877948][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 823.887159][T13065] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 823.924447][ T606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.976016][T13061] tipc: Resetting bearer [ 823.988011][T13061] tipc: Disabling bearer [ 824.004538][T12966] device veth1_macvtap entered promiscuous mode [ 824.046519][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 824.078233][T12619] hid-u2fzero 0003:10C4:8ACF.0002: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.2-1/input0 [ 824.086209][ T5171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 824.098659][T12619] hid-u2fzero 0003:10C4:8ACF.0002: U2F Zero LED initialised [ 824.107356][T12619] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 824.119078][T12619] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 824.127495][T12619] CPU: 0 PID: 12619 Comm: kworker/0:2 Not tainted 5.15.189-syzkaller #0 [ 824.135820][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 824.145874][T12619] Workqueue: usb_hub_wq hub_event [ 824.150926][T12619] RIP: 0010:u2fzero_rng_read+0x1fc/0x680 [ 824.156576][T12619] Code: 43 80 7c 3d 00 00 74 08 48 89 df e8 de 77 60 fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 36 78 60 fa 48 8d 44 24 60 49 89 07 [ 824.176214][T12619] RSP: 0018:ffffc90003e7e800 EFLAGS: 00010202 [ 824.182348][T12619] RAX: 0000000000000015 RBX: ffff88802b3fc030 RCX: dffffc0000000000 [ 824.190346][T12619] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888146f46d69 [ 824.198367][T12619] RBP: ffffc90003e7e998 R08: 0000000000000001 R09: ffff888146f46d2e [ 824.206367][T12619] R10: ffffed1028de8dad R11: 1ffff11028de8da5 R12: ffff88802b3fc388 [ 824.214376][T12619] R13: 1ffff1100567f806 R14: 1ffff1100567f805 R15: 00000000000000a8 [ 824.222381][T12619] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 824.231365][T12619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.237974][T12619] CR2: 00007f5975290fa0 CR3: 000000002a43d000 CR4: 00000000003506f0 [ 824.245983][T12619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 824.253970][T12619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 824.261975][T12619] Call Trace: [ 824.265271][T12619] [ 824.268227][T12619] ? u2fzero_brightness_set+0x290/0x290 [ 824.273842][T12619] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 824.279871][T12619] ? mutex_lock_io_nested+0x60/0x60 [ 824.285120][T12619] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 824.290805][T12619] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 824.296751][T12619] ? _raw_spin_unlock+0x40/0x40 [ 824.301642][T12619] ? u2fzero_brightness_set+0x290/0x290 [ 824.307223][T12619] add_early_randomness+0x7a/0x150 [ 824.312373][T12619] hwrng_register+0x42d/0x4b0 [ 824.317089][T12619] devm_hwrng_register+0x43/0xb0 [ 824.322164][T12619] u2fzero_probe+0x26e/0x2f0 [ 824.326792][T12619] ? twinhan_input_mapping+0x2210/0x2210 [ 824.332474][T12619] hid_device_probe+0x271/0x360 [ 824.337342][T12619] ? hid_uevent+0x340/0x340 [ 824.341877][T12619] really_probe+0x284/0xc80 [ 824.346387][T12619] __driver_probe_device+0x18c/0x330 [ 824.351800][T12619] driver_probe_device+0x4f/0x420 [ 824.357010][T12619] __device_attach_driver+0x2b0/0x500 [ 824.362505][T12619] ? deferred_probe_work_func+0x230/0x230 [ 824.368259][T12619] bus_for_each_drv+0x175/0x200 [ 824.373122][T12619] ? _raw_spin_unlock+0x40/0x40 [ 824.377997][T12619] ? subsys_find_device_by_id+0x350/0x350 [ 824.383751][T12619] __device_attach+0x29b/0x460 [ 824.388573][T12619] ? device_attach+0x20/0x20 [ 824.393204][T12619] ? kobject_uevent_env+0x371/0x890 [ 824.398427][T12619] bus_probe_device+0xbc/0x1e0 [ 824.403211][T12619] ? device_add+0x97c/0xfb0 [ 824.407729][T12619] device_add+0xa00/0xfb0 [ 824.412144][T12619] hid_add_device+0x389/0x530 [ 824.416889][T12619] usbhid_probe+0xb92/0xf40 [ 824.421412][T12619] usb_probe_interface+0x5a0/0xaf0 [ 824.426668][T12619] ? usb_register_driver+0x3d0/0x3d0 [ 824.431963][T12619] really_probe+0x284/0xc80 [ 824.436477][T12619] __driver_probe_device+0x18c/0x330 [ 824.441793][T12619] driver_probe_device+0x4f/0x420 [ 824.446837][T12619] __device_attach_driver+0x2b0/0x500 [ 824.452237][T12619] ? deferred_probe_work_func+0x230/0x230 [ 824.457969][T12619] bus_for_each_drv+0x175/0x200 [ 824.462828][T12619] ? _raw_spin_unlock+0x40/0x40 [ 824.467728][T12619] ? subsys_find_device_by_id+0x350/0x350 [ 824.473465][T12619] __device_attach+0x29b/0x460 [ 824.478262][T12619] ? kobject_uevent_env+0x371/0x890 [ 824.483474][T12619] ? device_attach+0x20/0x20 [ 824.488085][T12619] ? kobject_uevent_env+0x371/0x890 [ 824.493296][T12619] bus_probe_device+0xbc/0x1e0 [ 824.498078][T12619] ? device_add+0x97c/0xfb0 [ 824.502591][T12619] device_add+0xa00/0xfb0 [ 824.506943][T12619] usb_set_configuration+0x1991/0x1fd0 [ 824.512437][T12619] usb_generic_driver_probe+0x89/0x150 [ 824.517904][T12619] usb_probe_device+0x139/0x270 [ 824.522738][T12619] ? usb_register_device_driver+0x230/0x230 [ 824.528612][T12619] really_probe+0x284/0xc80 [ 824.533100][T12619] __driver_probe_device+0x18c/0x330 [ 824.538383][T12619] driver_probe_device+0x4f/0x420 [ 824.543585][T12619] __device_attach_driver+0x2b0/0x500 [ 824.548933][T12619] ? deferred_probe_work_func+0x230/0x230 [ 824.554632][T12619] bus_for_each_drv+0x175/0x200 [ 824.559456][T12619] ? _raw_spin_unlock+0x40/0x40 [ 824.564286][T12619] ? subsys_find_device_by_id+0x350/0x350 [ 824.569986][T12619] ? lockdep_hardirqs_on+0x94/0x140 [ 824.575162][T12619] __device_attach+0x29b/0x460 [ 824.579902][T12619] ? device_attach+0x20/0x20 [ 824.584462][T12619] ? kobject_uevent_env+0x371/0x890 [ 824.589635][T12619] bus_probe_device+0xbc/0x1e0 [ 824.594372][T12619] ? device_add+0x97c/0xfb0 [ 824.598858][T12619] device_add+0xa00/0xfb0 [ 824.603160][T12619] usb_new_device+0xd53/0x1640 [ 824.607911][T12619] ? lock_chain_count+0x20/0x20 [ 824.612752][T12619] ? usb_disconnect+0x8a0/0x8a0 [ 824.617599][T12619] ? _raw_spin_unlock_irq+0x1f/0x40 [ 824.622775][T12619] ? lockdep_hardirqs_on+0x94/0x140 [ 824.627952][T12619] hub_event+0x295c/0x4fa0 [ 824.632353][T12619] ? led_work+0x6e0/0x6e0 [ 824.636660][T12619] ? read_lock_is_recursive+0x10/0x10 [ 824.642006][T12619] ? _raw_spin_unlock_irq+0x1f/0x40 [ 824.647193][T12619] process_one_work+0x863/0x1000 [ 824.652104][T12619] ? worker_detach_from_pool+0x240/0x240 [ 824.657707][T12619] ? lockdep_hardirqs_off+0x70/0x100 [ 824.663069][T12619] ? _raw_spin_lock_irq+0xab/0xe0 [ 824.668088][T12619] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 824.673434][T12619] ? wq_worker_running+0x97/0x170 [ 824.678432][T12619] worker_thread+0xaa8/0x12a0 [ 824.683089][T12619] kthread+0x436/0x520 [ 824.687128][T12619] ? rcu_lock_release+0x20/0x20 [ 824.691964][T12619] ? kthread_blkcg+0xd0/0xd0 [ 824.696539][T12619] ret_from_fork+0x1f/0x30 [ 824.700935][T12619] [ 824.703934][T12619] Modules linked in: [ 824.720780][T12619] ---[ end trace 927b564bc5be72df ]--- [ 824.726289][T12619] RIP: 0010:u2fzero_rng_read+0x1fc/0x680 [ 824.732956][T12619] Code: 43 80 7c 3d 00 00 74 08 48 89 df e8 de 77 60 fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 36 78 60 fa 48 8d 44 24 60 49 89 07 [ 824.752775][T12619] RSP: 0018:ffffc90003e7e800 EFLAGS: 00010202 [ 824.754505][ T606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.758881][T12619] RAX: 0000000000000015 RBX: ffff88802b3fc030 RCX: dffffc0000000000 [ 824.802507][T12619] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff888146f46d69 [ 824.810510][T12619] RBP: ffffc90003e7e998 R08: 0000000000000001 R09: ffff888146f46d2e [ 824.850641][T12619] R10: ffffed1028de8dad R11: 1ffff11028de8da5 R12: ffff88802b3fc388 [ 824.868717][T12619] R13: 1ffff1100567f806 R14: 1ffff1100567f805 R15: 00000000000000a8 [ 824.891239][T12619] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 824.900199][T12619] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.916132][T12619] CR2: 00007f5975290fa0 CR3: 00000000250a7000 CR4: 00000000003506f0 [ 824.924375][T12619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 824.933808][T12619] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 824.944210][T12619] Kernel panic - not syncing: Fatal exception [ 824.951946][T12619] Kernel Offset: disabled [ 824.956269][T12619] Rebooting in 86400 seconds..