last executing test programs: 29m19.818783782s ago: executing program 4 (id=205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000030000005637f880f14ee2dd0000f90e72cd0ea30cee982535"], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) epoll_create(0x6) 29m18.458067064s ago: executing program 4 (id=209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x7, 0x4}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0x5, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x9}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000002140)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000030000005637f880f14ee2dd0000f90e72cd0ea30cee982535"], &(0x7f0000000c40)=""/3, 0x26, 0x3, 0x1, 0x1}, 0x28) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) accept(0xffffffffffffffff, &(0x7f0000002080)=@l2tp6, &(0x7f0000002100)=0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = epoll_create(0x6) r5 = dup3(r3, r4, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) 29m17.149002286s ago: executing program 4 (id=212): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0x0, 0xf, 0xd, 0x7, 0x1}, 0x4, 0x1, {}, 0x101}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046, 0x100000}) 29m16.537432052s ago: executing program 4 (id=216): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 29m14.666217291s ago: executing program 4 (id=220): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 29m13.301685578s ago: executing program 4 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x8000000000000001) 28m57.871517242s ago: executing program 32 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x8000000000000001) 27m50.778018888s ago: executing program 5 (id=382): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept(r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x541c43, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xprtrdma_marshal\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x140f, &(0x7f0000000040)={0x0, 0x87b0, 0x2, 0x2, 0x33d}, &(0x7f00000000c0), &(0x7f0000000100)) openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000380)={0x0, 0x86f7, 0x8000, 0x1, 0x38a, 0x0, r1}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r7 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r7, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r7, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) 27m48.832232372s ago: executing program 5 (id=388): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab70102030109021200010000000009048000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="201201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000100)={0x40, 0x18, 0x1, '8'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x44, &(0x7f0000000240)={0x40, 0x0, 0x1, '\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27m44.056167947s ago: executing program 5 (id=393): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7e) close_range(r1, 0xffffffffffffffff, 0x0) 27m41.756726458s ago: executing program 5 (id=397): r0 = syz_open_dev$vim2m(0x0, 0x80000000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@mmap={0x401, 0x2, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0x0, 0xf, 0xd, 0x7, 0x1}, 0x4, 0x1, {}, 0x101}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f046, 0x100000}) 27m39.352304596s ago: executing program 5 (id=401): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = landlock_create_ruleset(&(0x7f0000000040)={0xc009, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x4) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 27m37.79073251s ago: executing program 5 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x8000000000000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m21.500035823s ago: executing program 33 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) alarm(0x8000000000000001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 20m56.308931548s ago: executing program 3 (id=1243): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x0, 0x472d}) 20m55.194533442s ago: executing program 3 (id=1247): accept(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x541c43, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xprtrdma_marshal\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x140f, &(0x7f0000000040)={0x0, 0x87b0, 0x2, 0x2, 0x33d}, &(0x7f00000000c0), &(0x7f0000000100)) openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = syz_io_uring_setup(0x1e20, &(0x7f0000000380)={0x0, 0x86f7, 0x8000, 0x1, 0x38a, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) 20m53.727369064s ago: executing program 3 (id=1250): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) chdir(0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x3, "5806de", 0x0, 0xff}]}}}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000034cb63077b538bfaeaab1000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 20m47.156218216s ago: executing program 3 (id=1269): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000240)=@x86={0x0, 0x6, 0x1d, 0x0, 0x0, 0x63, 0x6, 0x8, 0x6, 0xa0, 0x2, 0xfe, 0x0, 0x2, 0x1, 0xef, 0x8, 0x81, 0x5, '\x00', 0x1, 0x7fff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x100000, 0x6, 0x81, 0x8, 0x0, [{0x1, 0x7, 0x0, '\x00', 0x1}, {0x6, 0x3, 0x4, '\x00', 0x7f}, {0x8, 0x2, 0x6, '\x00', 0x3}, {0xf1, 0x0, 0x0, '\x00', 0x9}, {0x3, 0x78, 0x3, '\x00', 0x3}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x81, 0x7f, 0x0, '\x00', 0x97}, {0x5, 0x3, 0xf7, '\x00', 0x20}, {0x6, 0x8, 0x4, '\x00', 0x4}, {0x4, 0x9, 0x8, '\x00', 0x3}, {0x2, 0x7f, 0xf1, '\x00', 0x36}, {0xfe, 0x47, 0x6, '\x00', 0x7}, {0xb, 0x4, 0xfd, '\x00', 0x55}, {0x6, 0x9, 0x1, '\x00', 0x8}, {0xf0, 0x5, 0x10, '\x00', 0x4}, {0x1, 0x9, 0x40, '\x00', 0x3}, {0x2, 0x6, 0x81, '\x00', 0x40}, {0x2, 0x5, 0x6, '\x00', 0x4}, {0x77, 0x2, 0x10, '\x00', 0x1}, {0xe, 0xc, 0x2, '\x00', 0x5}, {0x1a, 0x8, 0x2, '\x00', 0xe}, {0x9c, 0xf9, 0x67, '\x00', 0x70}, {0xff, 0xfe, 0xb, '\x00', 0x3}, {0x2, 0x23, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000700000"]) 20m45.108941786s ago: executing program 3 (id=1273): accept(0xffffffffffffffff, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x541c43, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='xprtrdma_marshal\x00', 0xffffffffffffffff, 0x0, 0x8000}, 0x18) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x140f, &(0x7f0000000040)={0x0, 0x87b0, 0x2, 0x2, 0x33d}, &(0x7f00000000c0), &(0x7f0000000100)) openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = syz_io_uring_setup(0x1e20, &(0x7f0000000380)={0x0, 0x86f7, 0x8000, 0x1, 0x38a, 0x0, r0}, &(0x7f0000000140)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r6, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) 20m43.198398406s ago: executing program 3 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) chdir(0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x3, "5806de", 0x0, 0xff}]}}}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000034cb63077b538bfaeaab1000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 20m28.032912082s ago: executing program 34 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) chdir(0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@any, 0x0, 0x3, "5806de", 0x0, 0xff}]}}}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000034cb63077b538bfaeaab1000000000000000000000000020000000000"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 20.421534721s ago: executing program 2 (id=3654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_eee={0x4e, 0x0, 0xd8eb, 0x7, 0x6, 0xfffffff8, 0x5, 0x4, [0xa8, 0x1ff]}}) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) 20.367622867s ago: executing program 6 (id=3655): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='MR', 0x2}], 0x1, 0xc, 0x1000, 0xdb) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) 18.844258299s ago: executing program 2 (id=3656): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0xe4}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x80800}) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) 18.844085605s ago: executing program 7 (id=3657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) 17.631952084s ago: executing program 7 (id=3658): r0 = syz_io_uring_setup(0x7fbc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2000000}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xb, 0x0, 0x0, 0x0, {0x6042}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 17.397031397s ago: executing program 6 (id=3660): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x0, 0xfffffff8]}) 16.310843701s ago: executing program 2 (id=3663): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x80d, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x2b, 0xd, 0x4) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f00000000c0)={0x1, 0x4000001, 0x24e, 0x20, 0x2f, &(0x7f0000000e40)}) socket$netlink(0x10, 0x3, 0x4) pwrite64(r0, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) 16.310320661s ago: executing program 7 (id=3664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/219) 16.256453581s ago: executing program 6 (id=3665): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x8f, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\n'], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) 15.240244542s ago: executing program 0 (id=3667): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, 0x0, 0x0}, 0x94) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 14.275300389s ago: executing program 2 (id=3669): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000380)=0x3) r1 = fcntl$dupfd(r0, 0x0, r0) setxattr$security_ima(0x0, 0x0, 0x0, 0x700, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sndseq(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0xf2, @tick=0x80000, {0x4}, {}, @raw32={[0x9, 0x8, 0x5a7]}}, {0xfb, 0x0, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @note={0x5f, 0x2, 0x9, 0x7, 0x5}}], 0x38) 13.094839347s ago: executing program 0 (id=3671): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffffffffffffb, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0x1, @vbi={0x7, 0x3b4b, 0xffff, 0x32314d48, [0xb, 0x7f], [0x620, 0x6], 0x2}}) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 11.504292847s ago: executing program 7 (id=3672): r0 = socket(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_setup(0x6, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, 0x0, 0x40040) connect$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x2}}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27, 0x3, 0x2}, 0x47) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff0b0000000c00000002003be0000000000000382db36e4eb196ac"], 0x0, 0x26}, 0x20) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x5) 9.729824256s ago: executing program 7 (id=3674): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x3, 0x2}}, 0x0, 0x0, &(0x7f0000000e80)={0x40, 0x9, 0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.552249805s ago: executing program 6 (id=3675): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7.14299701s ago: executing program 1 (id=3678): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) 7.052208995s ago: executing program 0 (id=3679): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0xf5c48d65a1b76797) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 6.988276693s ago: executing program 6 (id=3680): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 6.931675789s ago: executing program 1 (id=3681): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x500, 0x0) read$msr(r0, &(0x7f0000000400)=""/60, 0x3c) 6.824885789s ago: executing program 0 (id=3682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000340)=""/219) 5.243472229s ago: executing program 2 (id=3683): setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) clock_gettime(0x0, 0x0) setitimer(0x1, &(0x7f00000001c0)={{}, {0x0, 0x2710}}, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) syz_usbip_server_init(0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0xfffffff6, 0x71, &(0x7f0000000680)=""/113, 0x41100, 0x20}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_dev$vbi(0x0, 0x0, 0x2) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)='MR', 0x2}], 0x1, 0xc, 0x1000, 0xdb) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, 0x0) 4.820371802s ago: executing program 1 (id=3684): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000080000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.294855387s ago: executing program 7 (id=3685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299", 0xb}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.027025374s ago: executing program 1 (id=3686): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x20000000}]}]}}, 0x0, 0x32}, 0x28) 1.928377138s ago: executing program 0 (id=3687): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002d00090027bd7000fedbdf250500000008000a"], 0x1c}}, 0x20000086) fsopen(&(0x7f0000000400)='ceph\x00', 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r9, 0x0, 0x10003}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.760384148s ago: executing program 1 (id=3688): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x10, 0x140f, 0x1, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x4f80}, 0x4000800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f00000000c0)={@default, @default, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 704.856287ms ago: executing program 0 (id=3689): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xfffffffffffffe34) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) 703.275037ms ago: executing program 2 (id=3690): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 14.068733ms ago: executing program 6 (id=3691): syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff4457244a6377800c3bf7798370000000000000000955e6556ad0b"]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 0s ago: executing program 1 (id=3692): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() userfaultfd(0x801) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r7, &(0x7f0000000340), 0x0}, 0x20) add_key(&(0x7f00000002c0)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800003fecf20000000086070000", 0x1d, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000000)='user\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0xc300, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ycle [ 1366.620507][ T6007] usb usb36-port1: unable to enumerate USB device [ 1370.246117][T16609] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2602'. [ 1371.102206][T16608] netlink: 'syz.6.2601': attribute type 3 has an invalid length. [ 1371.111854][T16608] netlink: 'syz.6.2601': attribute type 1 has an invalid length. [ 1371.119701][T16608] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2601'. [ 1371.128763][T16608] NCSI netlink: No device for ifindex 33022 [ 1371.138784][T16608] hub 8-0:1.0: USB hub found [ 1371.146370][T16608] hub 8-0:1.0: 1 port detected [ 1376.673087][T16658] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 1376.681031][T16658] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 1376.688941][T16658] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2615'. [ 1376.698081][T16658] NCSI netlink: No device for ifindex 33022 [ 1376.730111][T16658] hub 8-0:1.0: USB hub found [ 1376.740748][T16658] hub 8-0:1.0: 1 port detected [ 1378.120829][T16665] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2616'. [ 1383.220381][T16707] netlink: 'syz.1.2626': attribute type 3 has an invalid length. [ 1383.228191][T16707] netlink: 'syz.1.2626': attribute type 1 has an invalid length. [ 1383.236075][T16707] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2626'. [ 1383.245198][T16707] NCSI netlink: No device for ifindex 33022 [ 1383.285769][T16707] hub 8-0:1.0: USB hub found [ 1383.293491][T16707] hub 8-0:1.0: 1 port detected [ 1383.841984][T16709] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2628'. [ 1388.329037][ T5879] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1388.623766][T16760] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2641'. [ 1389.569062][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 1389.989396][ T5879] usb 7-1: device descriptor read/all, error -71 [ 1396.469730][T16813] netlink: 'syz.0.2654': attribute type 3 has an invalid length. [ 1396.477506][T16813] netlink: 'syz.0.2654': attribute type 1 has an invalid length. [ 1396.485333][T16813] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2654'. [ 1396.494447][T16813] NCSI netlink: No device for ifindex 33022 [ 1396.505314][T16813] hub 8-0:1.0: USB hub found [ 1396.510216][T16813] hub 8-0:1.0: 1 port detected [ 1398.849061][T16838] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2661'. [ 1399.421167][ T6007] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1399.608021][T16840] mkiss: ax0: crc mode is auto. [ 1399.862222][ T6007] usb 1-1: Using ep0 maxpacket: 16 [ 1400.585030][ T6007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.614831][ T6007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.642802][ T6007] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1400.680434][ T6007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.722810][ T6007] usb 1-1: config 0 descriptor?? [ 1401.962515][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x6 [ 1401.972204][ T6007] apple 0003:05AC:024B.0006: ignoring exceeding usage max [ 1401.985382][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.315653][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.325534][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.582546][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.625689][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.666865][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.697690][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.728939][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.970943][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.978742][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.985963][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1402.993227][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.001390][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.008364][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.015643][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.022700][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.029758][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.036800][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.047111][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1403.055423][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1404.029121][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1404.036205][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1404.763748][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1404.771257][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1404.778468][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1405.174669][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1405.202732][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1405.212245][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1405.219370][ T6007] apple 0003:05AC:024B.0006: unknown main item tag 0x0 [ 1406.022818][T16887] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2673'. [ 1406.178700][ T6007] apple 0003:05AC:024B.0006: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.0-1/input0 [ 1406.195773][ T6007] usb 1-1: USB disconnect, device number 15 [ 1406.425901][T16890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2675'. [ 1406.667452][T16891] fido_id[16891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1408.999477][ T6007] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1409.390691][ T6007] usb 7-1: Using ep0 maxpacket: 16 [ 1409.612687][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.088646][ T6007] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.290257][ T6007] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1410.319188][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.373157][ T6007] usb 7-1: config 0 descriptor?? [ 1410.811552][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x6 [ 1410.818521][ T6007] apple 0003:05AC:024B.0007: ignoring exceeding usage max [ 1410.833118][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1410.845479][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1410.854914][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1410.864610][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1410.876856][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1410.887152][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1411.046873][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1411.283418][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1411.829477][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1411.862128][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1412.051369][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1412.058356][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1412.829106][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1412.874157][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1412.937447][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1412.960358][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1413.050715][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1413.098961][T15304] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1414.229307][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.499868][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.506861][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.599485][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.606605][T15304] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.622521][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.632155][T15304] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1414.643392][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.653622][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.661331][T15304] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1414.678984][T15304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1414.696689][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.758994][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.769114][T15304] usb 1-1: SerialNumber: syz [ 1414.810467][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.847951][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.879177][ T6007] apple 0003:05AC:024B.0007: unknown main item tag 0x0 [ 1414.912067][ T6007] apple 0003:05AC:024B.0007: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.6-1/input0 [ 1415.243141][ T6007] usb 7-1: USB disconnect, device number 9 [ 1415.647337][T15304] usb 1-1: 0:2 : does not exist [ 1415.778745][T16937] udevd[16937]: failed to send result of seq 15544 to main daemon: Connection refused [ 1415.794060][T16969] fido_id[16969]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1415.919037][T15304] usb 1-1: USB disconnect, device number 16 [ 1417.040610][T16910] udevd[16910]: failed to send result of seq 15546 to main daemon: Transport endpoint is not connected [ 1423.375787][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.388409][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.042804][T17082] mkiss: ax0: crc mode is auto. [ 1430.642640][T17098] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2723'. [ 1435.508891][ T6007] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1436.598886][ T6007] usb 7-1: Using ep0 maxpacket: 8 [ 1436.611395][ T6007] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1436.628918][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.455103][ T6007] usb 7-1: config 0 descriptor?? [ 1438.627242][ T6007] usb 7-1: can't set config #0, error -71 [ 1438.724854][ T6007] usb 7-1: USB disconnect, device number 10 [ 1440.924607][ T30] audit: type=1326 audit(1752570044.166:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1440.970325][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2743'. [ 1441.056595][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2743'. [ 1441.320595][ T30] audit: type=1326 audit(1752570044.166:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1441.638333][ T30] audit: type=1326 audit(1752570044.166:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1441.818928][ T30] audit: type=1326 audit(1752570044.176:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1441.883400][ T30] audit: type=1326 audit(1752570044.176:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1442.149887][ T30] audit: type=1326 audit(1752570044.176:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1442.172472][ T30] audit: type=1326 audit(1752570044.176:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1442.195999][ T30] audit: type=1326 audit(1752570044.206:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1443.029510][T17192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2749'. [ 1443.073927][ T30] audit: type=1326 audit(1752570044.206:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1443.103213][ T30] audit: type=1326 audit(1752570044.206:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17174 comm="syz.6.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x7ffc0000 [ 1444.331405][T17202] netlink: 'syz.7.2753': attribute type 1 has an invalid length. [ 1444.359439][T17202] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2753'. [ 1446.785868][T17231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2762'. [ 1449.751917][T17252] netlink: 'syz.1.2760': attribute type 3 has an invalid length. [ 1450.221510][T17252] netlink: 'syz.1.2760': attribute type 1 has an invalid length. [ 1450.329868][T17254] hub 8-0:1.0: USB hub found [ 1450.344861][T17252] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2760'. [ 1450.431155][T17254] hub 8-0:1.0: 1 port detected [ 1450.545013][T17252] NCSI netlink: No device for ifindex 33022 [ 1451.499144][T13569] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1452.319538][T13569] usb 3-1: Using ep0 maxpacket: 32 [ 1452.379501][T13569] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1452.821492][T13569] usb 3-1: config 0 has no interface number 0 [ 1452.845223][T13569] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1452.863259][T13569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.876729][T13569] usb 3-1: Product: syz [ 1452.909296][T13569] usb 3-1: Manufacturer: syz [ 1452.938860][T13569] usb 3-1: SerialNumber: syz [ 1453.000385][T13569] usb 3-1: config 0 descriptor?? [ 1453.037226][T17277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1453.064355][T13569] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1453.692299][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.797358][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.710992][T13569] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1454.717931][T13569] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1455.631469][T13569] usb 3-1: USB disconnect, device number 13 [ 1458.083063][T17322] syz.6.2781: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1458.098283][T17322] CPU: 0 UID: 0 PID: 17322 Comm: syz.6.2781 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1458.098315][T17322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1458.098329][T17322] Call Trace: [ 1458.098338][T17322] [ 1458.098348][T17322] dump_stack_lvl+0x189/0x250 [ 1458.098380][T17322] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1458.098414][T17322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1458.098440][T17322] ? __pfx__printk+0x10/0x10 [ 1458.098468][T17322] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1458.098496][T17322] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1458.098532][T17322] warn_alloc+0x214/0x310 [ 1458.098553][T17322] ? stack_depot_save_flags+0x40/0x900 [ 1458.098589][T17322] ? __pfx_warn_alloc+0x10/0x10 [ 1458.098612][T17322] ? kasan_save_track+0x4f/0x80 [ 1458.098641][T17322] ? xskq_create+0x56/0x170 [ 1458.098671][T17322] ? xsk_init_queue+0xb0/0x110 [ 1458.098698][T17322] ? xsk_setsockopt+0x43f/0x710 [ 1458.098724][T17322] ? do_sock_setsockopt+0x25a/0x3e0 [ 1458.098751][T17322] ? __x64_sys_setsockopt+0x18b/0x220 [ 1458.098774][T17322] ? do_syscall_64+0xfa/0x3b0 [ 1458.098792][T17322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.098822][T17322] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1458.098890][T17322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1458.098938][T17322] ? __kasan_kmalloc+0x93/0xb0 [ 1458.098973][T17322] vmalloc_user_noprof+0xad/0xf0 [ 1458.099005][T17322] ? xskq_create+0xbf/0x170 [ 1458.099037][T17322] xskq_create+0xbf/0x170 [ 1458.099070][T17322] xsk_init_queue+0xb0/0x110 [ 1458.099104][T17322] xsk_setsockopt+0x43f/0x710 [ 1458.099136][T17322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1458.099164][T17322] ? __lock_acquire+0xab9/0xd20 [ 1458.099195][T17322] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1458.099225][T17322] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1458.099258][T17322] do_sock_setsockopt+0x25a/0x3e0 [ 1458.099287][T17322] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1458.099319][T17322] ? __fget_files+0x2a/0x420 [ 1458.099349][T17322] __x64_sys_setsockopt+0x18b/0x220 [ 1458.099382][T17322] do_syscall_64+0xfa/0x3b0 [ 1458.099402][T17322] ? lockdep_hardirqs_on+0x9c/0x150 [ 1458.099434][T17322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.099455][T17322] ? clear_bhb_loop+0x60/0xb0 [ 1458.099482][T17322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.099503][T17322] RIP: 0033:0x7f62f7f8e929 [ 1458.099523][T17322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1458.099540][T17322] RSP: 002b:00007f62f8e91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1458.099563][T17322] RAX: ffffffffffffffda RBX: 00007f62f81b6080 RCX: 00007f62f7f8e929 [ 1458.099580][T17322] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1458.099593][T17322] RBP: 00007f62f8010b39 R08: 0000000000000004 R09: 0000000000000000 [ 1458.099606][T17322] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1458.099620][T17322] R13: 0000000000000000 R14: 00007f62f81b6080 R15: 00007fff3f0c5208 [ 1458.099655][T17322] [ 1458.432163][T17322] Mem-Info: [ 1458.437243][T17322] active_anon:297 inactive_anon:6424 isolated_anon:0 [ 1458.437243][T17322] active_file:22242 inactive_file:35503 isolated_file:0 [ 1458.437243][T17322] unevictable:768 dirty:183 writeback:0 [ 1458.437243][T17322] slab_reclaimable:6085 slab_unreclaimable:100350 [ 1458.437243][T17322] mapped:29269 shmem:1398 pagetables:1719 [ 1458.437243][T17322] sec_pagetables:0 bounce:0 [ 1458.437243][T17322] kernel_misc_reclaimable:0 [ 1458.437243][T17322] free:1315759 free_pcp:13465 free_cma:0 [ 1458.485244][T17322] Node 0 active_anon:1188kB inactive_anon:25696kB active_file:88716kB inactive_file:142012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117076kB dirty:732kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12760kB pagetables:6704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1458.522381][T17322] Node 1 active_anon:0kB inactive_anon:0kB active_file:252kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1458.554162][T17322] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1458.584264][T17322] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1458.591251][T17322] Node 0 DMA32 free:1345572kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1184kB inactive_anon:25652kB active_file:86956kB inactive_file:141944kB unevictable:1536kB writepending:732kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:36572kB local_pcp:15520kB free_cma:0kB [ 1458.624231][T17322] lowmem_reserve[]: 0 0 1 1 1 [ 1458.630152][T17322] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1760kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1458.660306][T17322] lowmem_reserve[]: 0 0 0 0 0 [ 1458.666045][T17322] Node 1 Normal free:3902084kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:252kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17248kB local_pcp:9568kB free_cma:0kB [ 1458.698142][T17322] lowmem_reserve[]: 0 0 0 0 0 [ 1458.703478][T17322] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1458.717340][T17322] Node 0 DMA32: 1684*4kB (UM) 936*8kB (UME) 663*16kB (UME) 875*32kB (UME) 348*64kB (UME) 72*128kB (UME) 47*256kB (UME) 22*512kB (UME) 25*1024kB (UME) 10*2048kB (UME) 291*4096kB (UM) = 1345632kB [ 1458.739043][T17322] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1458.754812][T17322] Node 1 Normal: 189*4kB (UM) 38*8kB (UME) 34*16kB (UME) 64*32kB (UME) 27*64kB (UE) 3*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 949*4096kB (M) = 3902084kB [ 1458.775523][T17322] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1458.785202][T17322] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1458.794767][T17322] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1458.804469][T17322] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1458.813950][T17322] 59139 total pagecache pages [ 1458.818725][T17322] 0 pages in swap cache [ 1460.028333][T17322] Free swap = 124996kB [ 1460.032702][T17322] Total swap = 124996kB [ 1460.036911][T17322] 2097051 pages RAM [ 1460.045682][T17322] 0 pages HighMem/MovableOnly [ 1460.059431][T17322] 424720 pages reserved [ 1460.068923][T17322] 0 pages cma reserved [ 1460.844693][T17334] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2786'. [ 1464.324800][ T5879] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1464.516467][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1464.538415][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1464.557542][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1464.576840][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1464.611988][ T5879] usb 3-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 1464.638926][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.653278][ T5879] usb 3-1: Product: syz [ 1464.664220][ T5879] usb 3-1: Manufacturer: syz [ 1464.673428][ T5879] usb 3-1: SerialNumber: syz [ 1464.692232][ T5879] usb 3-1: config 0 descriptor?? [ 1464.711352][ T5879] usb 3-1: NFC: Unable to get FW version [ 1464.734531][ T5879] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90 [ 1464.872676][T17383] netlink: 'syz.6.2793': attribute type 3 has an invalid length. [ 1464.888964][T17383] netlink: 'syz.6.2793': attribute type 1 has an invalid length. [ 1464.948369][T17383] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2793'. [ 1464.949412][ T5879] usb 3-1: USB disconnect, device number 14 [ 1465.068639][T17383] NCSI netlink: No device for ifindex 33022 [ 1465.113201][T17384] hub 8-0:1.0: USB hub found [ 1465.187704][T17384] hub 8-0:1.0: 1 port detected [ 1465.437636][T17391] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2801'. [ 1466.642983][T15304] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1467.535289][T15304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1467.558026][T15304] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1468.222876][T15304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1468.259766][T15304] usb 1-1: config 0 descriptor?? [ 1468.775778][T15304] lenovo 0003:17EF:6047.0008: item fetching failed at offset 3/5 [ 1468.784629][T15304] lenovo 0003:17EF:6047.0008: hid_parse failed [ 1468.819085][T15304] lenovo 0003:17EF:6047.0008: probe with driver lenovo failed with error -22 [ 1468.945218][T17421] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1469.767437][T17421] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.049431][T17421] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.116549][ T5879] usb 1-1: USB disconnect, device number 17 [ 1471.594076][T17421] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.027478][T17444] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2814'. [ 1474.218602][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2817'. [ 1476.743934][T17421] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.627253][T17421] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.657556][T17421] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.692220][T17421] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1477.858897][T15958] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1478.058837][T15958] usb 8-1: Using ep0 maxpacket: 32 [ 1478.072178][T17497] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2828'. [ 1478.094292][T15958] usb 8-1: config 0 has an invalid interface number: 132 but max is 0 [ 1478.121324][T15958] usb 8-1: config 0 has no interface number 0 [ 1478.138910][T15958] usb 8-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1478.163771][T15958] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1478.173431][T15958] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.181687][T15958] usb 8-1: Product: syz [ 1478.187669][T15958] usb 8-1: Manufacturer: syz [ 1478.196418][T15958] usb 8-1: SerialNumber: syz [ 1478.214178][T15958] usb 8-1: config 0 descriptor?? [ 1478.396618][T15958] em28xx 8-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1478.439438][T15958] em28xx 8-1:0.132: Video interface 132 found: [ 1478.663484][T17499] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2829'. [ 1478.803360][T15958] em28xx 8-1:0.132: unknown em28xx chip ID (0) [ 1480.047826][T15958] em28xx 8-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 1480.086546][T15958] em28xx 8-1:0.132: failed to read eeprom (err=-5) [ 1480.374725][T17513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2832'. [ 1481.155641][T15958] em28xx 8-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1482.566660][T15958] em28xx 8-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1482.608844][T15958] em28xx 8-1:0.132: analog set to bulk mode. [ 1482.757860][T13569] em28xx 8-1:0.132: Registering V4L2 extension [ 1482.830652][T15958] usb 8-1: USB disconnect, device number 5 [ 1482.838285][T15958] em28xx 8-1:0.132: Disconnecting em28xx [ 1484.588675][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.689041][T13569] em28xx 8-1:0.132: Config register raw data: 0xffffffed [ 1484.696531][T13569] em28xx 8-1:0.132: AC97 chip type couldn't be determined [ 1484.703797][T13569] em28xx 8-1:0.132: No AC97 audio processor [ 1484.714072][T13569] usb 8-1: Decoder not found [ 1484.718802][T13569] em28xx 8-1:0.132: failed to create media graph [ 1484.725227][T13569] em28xx 8-1:0.132: V4L2 device video103 deregistered [ 1484.759547][T13569] em28xx 8-1:0.132: Remote control support is not available for this card. [ 1484.777422][T15958] em28xx 8-1:0.132: Closing input extension [ 1485.516065][T17542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2840'. [ 1485.551497][T15958] em28xx 8-1:0.132: Freeing device [ 1485.729425][T11273] Bluetooth: hci4: command 0x0406 tx timeout [ 1486.807379][T17563] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2845'. [ 1489.549192][T17575] mkiss: ax0: crc mode is auto. [ 1495.413023][T17600] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2858'. [ 1499.920292][T17638] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2869'. [ 1500.709359][T17649] mkiss: ax0: crc mode is auto. [ 1503.104044][T17675] No buffer was provided with the request [ 1505.389598][T17693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2883'. [ 1506.640037][T17704] mkiss: ax0: crc mode is auto. [ 1508.241716][ T6034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.921044][T17722] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2893'. [ 1510.067990][T17729] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2896'. [ 1510.154726][T17734] netlink: 'syz.1.2894': attribute type 3 has an invalid length. [ 1510.162722][T17734] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 1510.171588][T17734] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2894'. [ 1510.181581][T17734] NCSI netlink: No device for ifindex 33022 [ 1510.196582][T17734] hub 8-0:1.0: USB hub found [ 1510.203152][T17734] hub 8-0:1.0: 1 port detected [ 1510.291489][T11273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1510.298235][ T6034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.349269][T11273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1510.388500][T11273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1510.417313][T11273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1510.452783][T11273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1510.985178][ T6034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.249118][T17730] lo speed is unknown, defaulting to 1000 [ 1512.060081][T17750] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2899'. [ 1512.712690][ T6034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.919227][T11273] Bluetooth: hci0: command tx timeout [ 1513.803062][T17779] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1514.065782][T17781] netlink: 'syz.6.2907': attribute type 3 has an invalid length. [ 1514.073840][T17781] netlink: 'syz.6.2907': attribute type 1 has an invalid length. [ 1514.081816][T17781] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2907'. [ 1514.091119][T17781] NCSI netlink: No device for ifindex 33022 [ 1514.128589][T17781] hub 8-0:1.0: USB hub found [ 1514.136248][T17781] hub 8-0:1.0: 1 port detected [ 1514.754957][T17730] chnl_net:caif_netlink_parms(): no params data found [ 1514.884151][ T6034] bridge_slave_1: left allmulticast mode [ 1514.910747][ T6034] bridge_slave_1: left promiscuous mode [ 1514.916708][ T6034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.768767][T11273] Bluetooth: hci0: command tx timeout [ 1515.790483][ T6034] bridge_slave_0: left allmulticast mode [ 1515.796203][ T6034] bridge_slave_0: left promiscuous mode [ 1515.805111][ T6034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.109125][T17798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2912'. [ 1517.312766][T17804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2915'. [ 1517.799482][T11273] Bluetooth: hci0: command tx timeout [ 1519.882050][T11273] Bluetooth: hci0: command tx timeout [ 1520.381140][T17834] netlink: 'syz.6.2922': attribute type 3 has an invalid length. [ 1520.389053][T17834] netlink: 'syz.6.2922': attribute type 1 has an invalid length. [ 1520.396800][T17834] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2922'. [ 1520.405956][T17834] NCSI netlink: No device for ifindex 33022 [ 1520.418221][T17834] hub 8-0:1.0: USB hub found [ 1520.424773][T17834] hub 8-0:1.0: 1 port detected [ 1520.666748][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.689462][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.706000][ T6034] bond0 (unregistering): Released all slaves [ 1523.871525][T17864] 9pnet_fd: Insufficient options for proto=fd [ 1525.242116][T17730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.278049][T17730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.318034][T17730] bridge_slave_0: entered allmulticast mode [ 1525.357378][T17730] bridge_slave_0: entered promiscuous mode [ 1525.371656][T17730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.380683][T17730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.387986][T17730] bridge_slave_1: entered allmulticast mode [ 1525.401230][T17730] bridge_slave_1: entered promiscuous mode [ 1525.419425][T15304] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1525.796200][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2933'. [ 1526.671271][T15304] usb 3-1: Using ep0 maxpacket: 32 [ 1526.708938][T15304] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 1526.715096][T17730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1526.718134][T15304] usb 3-1: config 0 has no interface number 0 [ 1526.735663][T15304] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 1526.757012][T15304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.765585][T15304] usb 3-1: Product: syz [ 1526.805279][T15304] usb 3-1: Manufacturer: syz [ 1526.819047][T15304] usb 3-1: SerialNumber: syz [ 1526.876202][T15304] usb 3-1: config 0 descriptor?? [ 1526.906012][T15304] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1527.129995][T15304] gspca_sn9c2028: read1 error -71 [ 1527.185340][T15304] gspca_sn9c2028: read1 error -71 [ 1527.367688][T15304] gspca_sn9c2028: read1 error -71 [ 1527.827571][T17730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.850723][T15304] sn9c2028 3-1:0.119: probe with driver sn9c2028 failed with error -71 [ 1527.910677][T15304] usb 3-1: USB disconnect, device number 15 [ 1529.206752][T17730] team0: Port device team_slave_0 added [ 1529.432736][T17730] team0: Port device team_slave_1 added [ 1530.161769][ T6034] hsr_slave_0: left promiscuous mode [ 1530.856685][ T6034] hsr_slave_1: left promiscuous mode [ 1530.870759][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.878271][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.947019][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.960600][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.201902][ T6034] veth1_macvtap: left promiscuous mode [ 1531.250828][ T6034] veth0_macvtap: left promiscuous mode [ 1531.302640][ T6034] veth1_vlan: left promiscuous mode [ 1531.342327][ T6034] veth0_vlan: left promiscuous mode [ 1532.725499][T17936] netlink: 'syz.6.2944': attribute type 3 has an invalid length. [ 1532.733404][T17936] netlink: 'syz.6.2944': attribute type 1 has an invalid length. [ 1532.741260][T17936] netlink: 216 bytes leftover after parsing attributes in process `syz.6.2944'. [ 1532.751189][T17936] NCSI netlink: No device for ifindex 33022 [ 1532.768323][T17936] hub 8-0:1.0: USB hub found [ 1532.773452][T17936] hub 8-0:1.0: 1 port detected [ 1534.349983][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 1534.411846][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 1535.692573][T17730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.713554][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.793808][T17730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.879766][T17730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.913201][T17730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1535.940088][T17730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.476515][T17730] hsr_slave_0: entered promiscuous mode [ 1538.497887][T17730] hsr_slave_1: entered promiscuous mode [ 1538.696765][T17730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1538.728788][T17730] Cannot create hsr debugfs directory [ 1539.782026][T17991] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1539.788619][T17991] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1539.898951][T17991] vhci_hcd vhci_hcd.0: Device attached [ 1540.318878][ T5932] usb 46-1: SetAddress Request (18) to port 0 [ 1540.420109][ T6034] IPVS: stop unused estimator thread 0... [ 1540.438786][T17992] vhci_hcd: connection closed [ 1540.450314][ T36] vhci_hcd: stop threads [ 1540.459241][ T5932] usb 46-1: new SuperSpeed USB device number 18 using vhci_hcd [ 1540.589769][ T36] vhci_hcd: release socket [ 1540.594401][ T36] vhci_hcd: disconnect device [ 1541.859438][T18010] netlink: 'syz.7.2962': attribute type 3 has an invalid length. [ 1541.867255][T18010] netlink: 'syz.7.2962': attribute type 1 has an invalid length. [ 1541.875185][T18010] netlink: 216 bytes leftover after parsing attributes in process `syz.7.2962'. [ 1541.884506][T18010] NCSI netlink: No device for ifindex 33022 [ 1541.894557][T18010] hub 8-0:1.0: USB hub found [ 1541.899670][T18010] hub 8-0:1.0: 1 port detected [ 1542.735595][T17730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1542.938129][T17730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1543.190861][T17730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1543.465552][T17730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1544.514541][T17730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1544.583171][T17730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1544.704123][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.711514][T11654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1545.434493][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.441708][T11654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1545.592853][T17730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1545.642194][ T5932] usb 46-1: device descriptor read/8, error -110 [ 1546.520917][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.678074][T18059] netlink: 'syz.2.2973': attribute type 3 has an invalid length. [ 1546.686313][T18059] netlink: 'syz.2.2973': attribute type 1 has an invalid length. [ 1546.694162][T18059] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2973'. [ 1546.703276][T18059] NCSI netlink: No device for ifindex 33022 [ 1546.713064][T18059] hub 8-0:1.0: USB hub found [ 1546.719629][T18059] hub 8-0:1.0: 1 port detected [ 1547.032646][ T5932] usb usb46-port1: attempt power cycle [ 1547.673872][T17730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1547.837848][T17730] veth0_vlan: entered promiscuous mode [ 1547.846575][T18068] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2976'. [ 1547.852465][ T5932] usb usb46-port1: unable to enumerate USB device [ 1547.882991][T17730] veth1_vlan: entered promiscuous mode [ 1548.008570][T17730] veth0_macvtap: entered promiscuous mode [ 1548.058280][T17730] veth1_macvtap: entered promiscuous mode [ 1548.181538][T17730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.238813][T17730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.317462][T17730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.749046][T17730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.878801][T17730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.915424][T17730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1549.800643][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.458892][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.667041][T18083] siw: device registration error -23 [ 1550.667735][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.723039][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.790212][T18083] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1550.796809][T18083] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1550.823363][T18083] vhci_hcd vhci_hcd.0: Device attached [ 1551.605820][T18094] vhci_hcd: connection closed [ 1551.612969][T13036] vhci_hcd: stop threads [ 1551.714052][T13036] vhci_hcd: release socket [ 1551.746540][T13036] vhci_hcd: disconnect device [ 1551.765181][ T43] usb 38-1: SetAddress Request (16) to port 0 [ 1551.771457][ T43] usb 38-1: new SuperSpeed USB device number 16 using vhci_hcd [ 1551.856714][ T43] usb 38-1: enqueue for inactive port 0 [ 1553.287376][ T43] usb usb38-port1: attempt power cycle [ 1553.816155][ T1338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.010078][ T43] usb usb38-port1: unable to enumerate USB device [ 1554.092514][T18115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1554.218495][ T1338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.439044][T18128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1555.464891][T18128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1555.474995][T18128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1555.491086][T18128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1555.501480][T18128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1555.749704][ T1338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.005704][T18122] lo speed is unknown, defaulting to 1000 [ 1556.855140][ T1338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.506494][T18122] chnl_net:caif_netlink_parms(): no params data found [ 1557.639226][T11273] Bluetooth: hci1: command tx timeout [ 1557.733867][ T1338] bridge_slave_1: left allmulticast mode [ 1557.740947][ T1338] bridge_slave_1: left promiscuous mode [ 1557.747639][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.966123][ T1338] bridge_slave_0: left allmulticast mode [ 1558.003708][ T1338] bridge_slave_0: left promiscuous mode [ 1558.037518][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.354985][T18167] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2999'. [ 1559.497252][T18168] netlink: 'syz.7.3000': attribute type 3 has an invalid length. [ 1559.505139][T18168] netlink: 'syz.7.3000': attribute type 1 has an invalid length. [ 1559.512961][T18168] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3000'. [ 1559.522163][T18168] NCSI netlink: No device for ifindex 33022 [ 1559.533166][T18168] hub 8-0:1.0: USB hub found [ 1559.538177][T18168] hub 8-0:1.0: 1 port detected [ 1559.718859][T11273] Bluetooth: hci1: command tx timeout [ 1561.179990][T18187] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1561.186557][T18187] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1561.218901][T18187] vhci_hcd vhci_hcd.0: Device attached [ 1561.560156][ T43] usb 46-1: SetAddress Request (22) to port 0 [ 1561.577215][ T43] usb 46-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1561.799104][T11273] Bluetooth: hci1: command tx timeout [ 1562.069520][T18190] vhci_hcd: connection reset by peer [ 1562.105680][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1562.127900][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1562.149048][ T1338] bond0 (unregistering): Released all slaves [ 1562.480730][ T6034] vhci_hcd: stop threads [ 1562.485317][ T6034] vhci_hcd: release socket [ 1562.499964][ T6034] vhci_hcd: disconnect device [ 1563.378816][T18208] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3008'. [ 1563.880575][T11273] Bluetooth: hci1: command tx timeout [ 1563.915121][T18122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.939660][T18122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.966856][T18122] bridge_slave_0: entered allmulticast mode [ 1564.007151][T18122] bridge_slave_0: entered promiscuous mode [ 1564.016342][T18122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.023676][T18122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1564.035178][T18122] bridge_slave_1: entered allmulticast mode [ 1564.064151][T18122] bridge_slave_1: entered promiscuous mode [ 1564.153362][ T1338] hsr_slave_0: left promiscuous mode [ 1564.165869][ T1338] hsr_slave_1: left promiscuous mode [ 1564.174503][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.219150][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.263144][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.333648][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.763835][ T1338] veth1_macvtap: left promiscuous mode [ 1564.830274][ T1338] veth0_macvtap: left promiscuous mode [ 1564.935659][ T1338] veth1_vlan: left promiscuous mode [ 1565.020494][ T1338] veth0_vlan: left promiscuous mode [ 1565.105297][T18218] orangefs_mount: mount request failed with -4 [ 1566.682141][ T43] usb 46-1: device descriptor read/8, error -110 [ 1567.113846][ T43] usb usb46-port1: attempt power cycle [ 1567.745887][ T43] usb usb46-port1: unable to enumerate USB device [ 1568.480356][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 1568.685213][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 1569.503838][T18250] siw: device registration error -23 [ 1569.523182][T18250] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1569.529776][T18250] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1569.537898][T18250] vhci_hcd vhci_hcd.0: Device attached [ 1569.739918][T18257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3019'. [ 1569.849495][T18253] vhci_hcd: connection closed [ 1569.899577][T13036] vhci_hcd: stop threads [ 1569.983279][ T5932] usb 38-1: SetAddress Request (20) to port 0 [ 1570.035207][T13036] vhci_hcd: release socket [ 1570.086192][ T5932] usb 38-1: new SuperSpeed USB device number 20 using vhci_hcd [ 1570.120657][T13036] vhci_hcd: disconnect device [ 1570.209162][ T5932] usb 38-1: enqueue for inactive port 0 [ 1570.830231][ T5932] usb usb38-port1: attempt power cycle [ 1572.309565][ T5932] usb usb38-port1: unable to enumerate USB device [ 1572.373751][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3024'. [ 1572.482182][T18122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.566208][T18122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.876468][T18122] team0: Port device team_slave_0 added [ 1574.963744][T18122] team0: Port device team_slave_1 added [ 1575.866366][ T5932] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 1575.889932][T18122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.897433][T18122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.088918][T18122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1576.102434][ T5932] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1576.119135][ T5932] usb 8-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1576.130727][T18122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1576.137731][T18122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1576.174852][ T5932] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.205042][ T5932] usb 8-1: config 0 descriptor?? [ 1576.220135][T18122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.333193][T18122] hsr_slave_0: entered promiscuous mode [ 1576.370896][T18122] hsr_slave_1: entered promiscuous mode [ 1576.623301][ T5932] asus 0003:0B05:17E0.0009: item fetching failed at offset 2/5 [ 1576.659672][ T5932] asus 0003:0B05:17E0.0009: Asus hid parse failed: -22 [ 1576.677034][ T5932] asus 0003:0B05:17E0.0009: probe with driver asus failed with error -22 [ 1576.826725][ T5932] usb 8-1: USB disconnect, device number 6 [ 1577.185334][T18302] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1577.191941][T18302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1577.199891][T18302] vhci_hcd vhci_hcd.0: Device attached [ 1577.448834][T18303] vhci_hcd: connection closed [ 1577.480467][ T175] vhci_hcd: stop threads [ 1577.535192][ T175] vhci_hcd: release socket [ 1577.567196][ T175] vhci_hcd: disconnect device [ 1577.572101][T13569] usb 46-1: SetAddress Request (26) to port 0 [ 1577.572202][T13569] usb 46-1: new SuperSpeed USB device number 26 using vhci_hcd [ 1578.910484][T18122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1579.070507][T18122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1579.170663][T18122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1579.253233][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 1579.999110][T18122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1580.022676][T18319] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1580.029275][T18319] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1580.038426][T18319] vhci_hcd vhci_hcd.0: Device attached [ 1580.045962][T18320] vhci_hcd: connection reset by peer [ 1580.062900][ T6034] vhci_hcd: stop threads [ 1580.067230][ T6034] vhci_hcd: release socket [ 1580.093839][ T6034] vhci_hcd: disconnect device [ 1580.241504][T18122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.281754][T18122] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.314154][T13036] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.321371][T13036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.328821][ T43] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1580.407615][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.414879][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1580.497773][ T43] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1580.520139][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.550823][ T43] usb 1-1: Product: syz [ 1580.569258][ T43] usb 1-1: Manufacturer: syz [ 1580.584495][ T43] usb 1-1: SerialNumber: syz [ 1580.640654][ T43] usb 1-1: config 0 descriptor?? [ 1580.884300][ T43] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1582.716009][ T43] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1582.954271][T13569] usb 46-1: device descriptor read/8, error -110 [ 1583.446997][T13569] usb usb46-port1: attempt power cycle [ 1583.739687][T18353] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1584.402076][T18122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.558858][ T5879] usb 1-1: USB disconnect, device number 18 [ 1585.013118][T13569] usb usb46-port1: unable to enumerate USB device [ 1585.891219][T18122] veth0_vlan: entered promiscuous mode [ 1585.928246][T18122] veth1_vlan: entered promiscuous mode [ 1586.190925][T18358] lo speed is unknown, defaulting to 1000 [ 1587.778817][T13569] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1588.676713][T18122] veth0_macvtap: entered promiscuous mode [ 1588.718470][T18122] veth1_macvtap: entered promiscuous mode [ 1588.738330][T13569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1588.776235][T13569] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1588.782564][T18122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.794026][T13569] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1589.602009][T13569] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.878122][T13569] usb 1-1: config 0 descriptor?? [ 1590.331482][T18122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.357556][T18122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.367873][T18122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.398763][T18122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.427999][T18122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.522458][T13569] sony 0003:054C:0268.000A: item fetching failed at offset 4/5 [ 1590.555408][T13569] sony 0003:054C:0268.000A: parse failed [ 1590.583717][T13569] sony 0003:054C:0268.000A: probe with driver sony failed with error -22 [ 1590.690920][ T6948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.735421][ T6948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.771640][T13569] usb 1-1: USB disconnect, device number 19 [ 1590.816785][ T6200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.046120][ T6200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.382677][T18128] Bluetooth: hci1: command 0x0405 tx timeout [ 1595.929926][T18413] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1595.936526][T18413] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1595.957815][T18413] vhci_hcd vhci_hcd.0: Device attached [ 1595.976569][T18414] vhci_hcd: connection closed [ 1595.976870][ T6948] vhci_hcd: stop threads [ 1596.022932][ T6948] vhci_hcd: release socket [ 1596.027430][ T6948] vhci_hcd: disconnect device [ 1596.056666][T13036] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.520674][T13036] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.745171][T13036] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.838950][T13036] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.862676][T18430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1597.898009][T18430] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1598.055375][T18430] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1598.096523][T18430] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1598.292237][T13036] bridge_slave_1: left allmulticast mode [ 1599.043954][T13036] bridge_slave_1: left promiscuous mode [ 1599.055054][T18430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1599.222392][T13036] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.252888][T13036] bridge_slave_0: left allmulticast mode [ 1599.261163][T13036] bridge_slave_0: left promiscuous mode [ 1599.268614][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.283403][T18430] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1601.092616][T11273] Bluetooth: hci0: command 0x0c1a tx timeout [ 1603.421536][T18430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1603.447549][T18430] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1604.248225][T18128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1604.409538][T18128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1604.419785][T18128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1604.440339][T18128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1604.452105][T18128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1604.492866][T11273] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1604.512876][T11273] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1604.584130][T18466] netlink: 'syz.0.3070': attribute type 3 has an invalid length. [ 1604.592076][T18466] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 1604.599893][T18466] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3070'. [ 1604.608982][T18466] NCSI netlink: No device for ifindex 33022 [ 1604.620866][T18466] hub 8-0:1.0: USB hub found [ 1604.629317][T18466] hub 8-0:1.0: 1 port detected [ 1604.789103][T11273] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1604.799567][T11273] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1604.808769][T11273] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1604.842946][T18467] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1604.849539][T18467] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1604.862590][T18467] vhci_hcd vhci_hcd.0: Device attached [ 1604.870241][T18468] vhci_hcd: connection closed [ 1604.872378][ T6034] vhci_hcd: stop threads [ 1604.882327][ T6034] vhci_hcd: release socket [ 1604.891374][ T6034] vhci_hcd: disconnect device [ 1605.361209][T18485] netlink: 'syz.1.3074': attribute type 3 has an invalid length. [ 1605.369108][T18485] netlink: 'syz.1.3074': attribute type 1 has an invalid length. [ 1605.376940][T18485] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3074'. [ 1605.386143][T18485] NCSI netlink: No device for ifindex 33022 [ 1606.852040][T11273] Bluetooth: hci3: command tx timeout [ 1607.225877][T13036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1607.273053][T13036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1607.291347][T13036] bond0 (unregistering): Released all slaves [ 1607.410946][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.918800][T11273] Bluetooth: hci3: command tx timeout [ 1611.039097][T11273] Bluetooth: hci3: command tx timeout [ 1611.092114][T18440] lo speed is unknown, defaulting to 1000 [ 1613.588747][T11273] Bluetooth: hci3: command tx timeout [ 1614.187634][T13036] hsr_slave_0: left promiscuous mode [ 1614.199050][T13036] hsr_slave_1: left promiscuous mode [ 1614.212835][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1614.288836][T18541] netlink: 'syz.6.3090': attribute type 3 has an invalid length. [ 1614.296712][T18541] netlink: 'syz.6.3090': attribute type 1 has an invalid length. [ 1614.304619][T18541] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3090'. [ 1614.314606][T18541] NCSI netlink: No device for ifindex 33022 [ 1614.333867][T18541] hub 8-0:1.0: USB hub found [ 1614.340151][T18541] hub 8-0:1.0: 1 port detected [ 1614.815532][T13036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1614.826646][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.843048][T13036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.196808][T18552] netlink: 'syz.0.3091': attribute type 3 has an invalid length. [ 1615.204835][T18552] netlink: 'syz.0.3091': attribute type 1 has an invalid length. [ 1615.212749][T18552] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3091'. [ 1615.221979][T18552] NCSI netlink: No device for ifindex 33022 [ 1615.249824][T18552] hub 8-0:1.0: USB hub found [ 1615.256251][T18552] hub 8-0:1.0: 1 port detected [ 1615.776592][T18128] Bluetooth: hci3: command 0x0405 tx timeout [ 1617.836083][T13036] veth1_macvtap: left promiscuous mode [ 1617.842055][T13036] veth0_macvtap: left promiscuous mode [ 1617.847857][T13036] veth1_vlan: left promiscuous mode [ 1617.861585][T13036] veth0_vlan: left promiscuous mode [ 1620.335611][T18570] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1620.356974][T18570] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1620.396524][T18572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3099'. [ 1621.566333][T18579] Falling back ldisc for ttyS3. [ 1621.891085][T18583] overlayfs: failed to resolve './file0': -2 [ 1622.625130][T13036] team0 (unregistering): Port device team_slave_1 removed [ 1623.041456][T13036] team0 (unregistering): Port device team_slave_0 removed [ 1624.285027][T18584] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 1627.353412][T18440] chnl_net:caif_netlink_parms(): no params data found [ 1634.124255][T18631] netlink: 'syz.0.3116': attribute type 3 has an invalid length. [ 1634.132079][T18631] netlink: 'syz.0.3116': attribute type 1 has an invalid length. [ 1634.139871][T18631] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3116'. [ 1634.148935][T18631] NCSI netlink: No device for ifindex 33022 [ 1634.158178][T18631] hub 8-0:1.0: USB hub found [ 1634.163075][T18631] hub 8-0:1.0: 1 port detected [ 1634.236933][T18440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.269603][T18440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.302655][T18440] bridge_slave_0: entered allmulticast mode [ 1634.326496][T18440] bridge_slave_0: entered promiscuous mode [ 1634.359764][T18440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.579076][T18440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.652307][T18440] bridge_slave_1: entered allmulticast mode [ 1634.676523][T18440] bridge_slave_1: entered promiscuous mode [ 1636.872864][T18440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1637.074407][T18440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1637.438518][T18665] siw: device registration error -23 [ 1637.635448][T18665] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1637.642046][T18665] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1637.649985][T18665] vhci_hcd vhci_hcd.0: Device attached [ 1637.664167][T18667] vhci_hcd: connection closed [ 1637.667362][ T59] vhci_hcd: stop threads [ 1637.689492][ T59] vhci_hcd: release socket [ 1637.694616][ T59] vhci_hcd: disconnect device [ 1637.873565][T18440] team0: Port device team_slave_0 added [ 1637.903355][T18440] team0: Port device team_slave_1 added [ 1638.975263][T18677] netlink: 'syz.7.3125': attribute type 3 has an invalid length. [ 1638.983111][T18677] netlink: 'syz.7.3125': attribute type 1 has an invalid length. [ 1638.992334][T18677] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3125'. [ 1639.002020][T18677] NCSI netlink: No device for ifindex 33022 [ 1639.011519][T18677] hub 8-0:1.0: USB hub found [ 1639.016564][T18677] hub 8-0:1.0: 1 port detected [ 1639.877347][T18440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.888958][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.962986][T18440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.990574][T18440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.998865][ T5920] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1640.007939][T18440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1640.058044][T18440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.186875][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1640.259407][ T5920] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1640.282487][T18440] hsr_slave_0: entered promiscuous mode [ 1640.322232][T18440] hsr_slave_1: entered promiscuous mode [ 1640.343736][ T5920] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1640.381543][T18440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1640.417819][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1640.439217][T18440] Cannot create hsr debugfs directory [ 1640.504621][ T5920] usb 1-1: config 0 descriptor?? [ 1641.579244][ T5920] kovaplus 0003:1E7D:2D50.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1642.504354][ T5920] kovaplus 0003:1E7D:2D50.000B: couldn't init struct kovaplus_device [ 1642.517326][ T5920] kovaplus 0003:1E7D:2D50.000B: couldn't install mouse [ 1642.636223][T18440] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1642.676960][ T5920] kovaplus 0003:1E7D:2D50.000B: probe with driver kovaplus failed with error -71 [ 1642.705408][ T5920] usb 1-1: USB disconnect, device number 20 [ 1642.707849][T18440] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1642.746032][T18440] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1642.796229][T18440] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1643.196130][T18728] siw: device registration error -23 [ 1643.206015][T18728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 1643.212606][T18728] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1643.220589][T18728] vhci_hcd vhci_hcd.0: Device attached [ 1643.237825][T18440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.323705][T18730] vhci_hcd: connection closed [ 1643.325688][ T6947] vhci_hcd: stop threads [ 1643.371600][ T6947] vhci_hcd: release socket [ 1643.442908][ T6947] vhci_hcd: disconnect device [ 1643.484959][T18440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1643.806828][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.814144][ T9605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1644.364395][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.371669][ T6947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.637921][ T5920] usb usb36-port1: attempt power cycle [ 1646.781721][ T5920] usb usb36-port1: unable to enumerate USB device [ 1649.160502][T18440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.186337][T18789] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1649.192922][T18789] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1649.200794][T18789] vhci_hcd vhci_hcd.0: Device attached [ 1649.290435][T18790] vhci_hcd: connection closed [ 1649.301410][ T6000] vhci_hcd: stop threads [ 1649.341096][ T6000] vhci_hcd: release socket [ 1649.548823][ T6000] vhci_hcd: disconnect device [ 1649.627556][T15304] usb 46-1: enqueue for inactive port 0 [ 1650.639859][T15304] usb usb46-port1: attempt power cycle [ 1650.693638][T18440] veth0_vlan: entered promiscuous mode [ 1650.813062][T18440] veth1_vlan: entered promiscuous mode [ 1651.126090][T18440] veth0_macvtap: entered promiscuous mode [ 1651.136926][T18440] veth1_macvtap: entered promiscuous mode [ 1651.167938][T18440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1651.235788][T18440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.271246][T18440] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.285457][T18440] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.296361][T18440] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.305632][T18440] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.526336][T15304] usb usb46-port1: unable to enumerate USB device [ 1651.921998][T18824] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1651.921998][T18824] program syz.1.3159 not setting count and/or reply_len properly [ 1653.071383][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 1653.071428][ T30] audit: type=1326 audit(1752570256.296:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18831 comm="syz.6.3162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62f7f8e929 code=0x0 [ 1654.497742][T18844] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1654.504346][T18844] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1654.512671][T18844] vhci_hcd vhci_hcd.0: Device attached [ 1654.841140][T18845] vhci_hcd: connection closed [ 1654.861134][ T6948] vhci_hcd: stop threads [ 1654.918995][ T6948] vhci_hcd: release socket [ 1654.923817][ T6948] vhci_hcd: disconnect device [ 1654.968872][ T6007] usb 46-1: enqueue for inactive port 0 [ 1655.041712][T18128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1655.055946][T18128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1655.079219][T18128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1655.087785][T18128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1655.097680][T18128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1655.155965][T18848] lo speed is unknown, defaulting to 1000 [ 1655.480173][ T6007] usb usb46-port1: attempt power cycle [ 1656.000925][ T1338] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.310146][ T6007] usb usb46-port1: unable to enumerate USB device [ 1657.163320][T18128] Bluetooth: hci3: command tx timeout [ 1657.235793][ T1338] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.275045][T18848] chnl_net:caif_netlink_parms(): no params data found [ 1658.902154][T18893] siw: device registration error -23 [ 1659.250103][T18128] Bluetooth: hci3: command tx timeout [ 1659.255860][T18893] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1659.262428][T18893] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1659.271484][T18893] vhci_hcd vhci_hcd.0: Device attached [ 1659.281941][T18897] vhci_hcd: connection closed [ 1659.282411][T13036] vhci_hcd: stop threads [ 1659.430576][T13036] vhci_hcd: release socket [ 1659.435086][T13036] vhci_hcd: disconnect device [ 1659.490669][ T1338] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.538297][ T1338] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.560043][T18848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1660.576355][T18848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.594199][T18848] bridge_slave_0: entered allmulticast mode [ 1660.609827][T18848] bridge_slave_0: entered promiscuous mode [ 1660.635229][T18848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1660.664782][T18848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.684350][T18848] bridge_slave_1: entered allmulticast mode [ 1660.713803][T18848] bridge_slave_1: entered promiscuous mode [ 1661.529621][T18128] Bluetooth: hci3: command tx timeout [ 1663.351566][T18848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.392517][T18848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.558888][T18128] Bluetooth: hci3: command tx timeout [ 1663.771423][T18848] team0: Port device team_slave_0 added [ 1664.094033][T18848] team0: Port device team_slave_1 added [ 1664.170742][T18949] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1664.177317][T18949] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1664.185965][T18949] vhci_hcd vhci_hcd.0: Device attached [ 1664.368136][T18848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1664.383491][T18848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.459010][T18848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.508812][T15958] usb 46-1: SetAddress Request (38) to port 0 [ 1664.529034][T15958] usb 46-1: new SuperSpeed USB device number 38 using vhci_hcd [ 1664.591917][T18848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.612312][T18848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.655017][T18848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.668169][ T1338] bridge_slave_1: left allmulticast mode [ 1664.822144][ T1338] bridge_slave_1: left promiscuous mode [ 1664.828882][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.846410][T18951] vhci_hcd: connection reset by peer [ 1664.856328][ T6948] vhci_hcd: stop threads [ 1664.864172][ T1338] bridge_slave_0: left allmulticast mode [ 1664.872235][ T6948] vhci_hcd: release socket [ 1664.878088][ T6948] vhci_hcd: disconnect device [ 1664.884055][ T1338] bridge_slave_0: left promiscuous mode [ 1665.674508][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.370141][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.396143][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.433402][ T1338] bond0 (unregistering): Released all slaves [ 1668.776570][T18848] hsr_slave_0: entered promiscuous mode [ 1668.799747][T18848] hsr_slave_1: entered promiscuous mode [ 1668.818933][T18848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1668.848480][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.865542][T18848] Cannot create hsr debugfs directory [ 1668.949154][ T1338] hsr_slave_0: left promiscuous mode [ 1668.989765][ T1338] hsr_slave_1: left promiscuous mode [ 1668.995952][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1669.038251][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1669.208930][ T1338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1669.218090][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1669.259754][T18993] siw: device registration error -23 [ 1669.279002][T18993] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1669.285585][T18993] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1669.293421][T18993] vhci_hcd vhci_hcd.0: Device attached [ 1669.348082][ T1338] veth1_macvtap: left promiscuous mode [ 1669.381830][ T1338] veth0_macvtap: left promiscuous mode [ 1669.424755][ T1338] veth1_vlan: left promiscuous mode [ 1669.453085][ T1338] veth0_vlan: left promiscuous mode [ 1669.671965][T15958] usb 46-1: device descriptor read/8, error -110 [ 1669.892729][T18994] vhci_hcd: connection closed [ 1670.079607][T11654] vhci_hcd: stop threads [ 1670.165451][T11654] vhci_hcd: release socket [ 1670.227083][T11654] vhci_hcd: disconnect device [ 1670.787421][T15958] usb usb46-port1: attempt power cycle [ 1671.687332][T19015] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1671.687332][T19015] program syz.0.3207 not setting count and/or reply_len properly [ 1671.880573][T15958] usb usb46-port1: unable to enumerate USB device [ 1674.230271][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 1674.351018][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 1675.859076][T19042] siw: device registration error -23 [ 1675.879775][T19042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1675.886369][T19042] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1675.894409][T19042] vhci_hcd vhci_hcd.0: Device attached [ 1676.145321][T19052] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1676.145321][T19052] program syz.6.3217 not setting count and/or reply_len properly [ 1676.345099][T15958] usb 36-1: SetAddress Request (19) to port 0 [ 1676.475271][T19045] vhci_hcd: connection closed [ 1676.497135][ T6034] vhci_hcd: stop threads [ 1676.580364][T15958] usb 36-1: new SuperSpeed USB device number 19 using vhci_hcd [ 1676.689294][ T6034] vhci_hcd: release socket [ 1676.694127][ T6034] vhci_hcd: disconnect device [ 1676.828862][T15958] usb 36-1: enqueue for inactive port 0 [ 1676.909131][T19057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1676.915738][T19057] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1676.923730][T19057] vhci_hcd vhci_hcd.0: Device attached [ 1676.932489][T19058] vhci_hcd: connection closed [ 1676.937796][ T59] vhci_hcd: stop threads [ 1676.960215][ T59] vhci_hcd: release socket [ 1677.169350][ T59] vhci_hcd: disconnect device [ 1678.058856][ T5953] usb 34-1: enqueue for inactive port 0 [ 1678.066927][T15958] usb usb36-port1: attempt power cycle [ 1679.128257][ T5953] usb usb34-port1: attempt power cycle [ 1679.135703][T15958] usb usb36-port1: unable to enumerate USB device [ 1679.182036][T18848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1679.602190][T18848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1679.731778][T18848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1679.763139][T18848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1679.771358][ T5953] usb usb34-port1: unable to enumerate USB device [ 1680.105273][T18848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.425058][T18848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.655949][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.663317][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.757237][ T175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.764603][ T175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1681.557728][T18848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.784328][T18848] veth0_vlan: entered promiscuous mode [ 1681.801305][T18848] veth1_vlan: entered promiscuous mode [ 1683.584228][T18848] veth0_macvtap: entered promiscuous mode [ 1683.599548][T18848] veth1_macvtap: entered promiscuous mode [ 1683.830654][T18848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.863425][T18848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1683.917298][T19120] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1683.917298][T19120] program syz.6.3230 not setting count and/or reply_len properly [ 1684.039931][T19118] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1684.046532][T19118] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1684.055479][T19118] vhci_hcd vhci_hcd.0: Device attached [ 1684.079998][T19121] vhci_hcd: connection closed [ 1684.568941][ T59] vhci_hcd: stop threads [ 1684.577961][ T59] vhci_hcd: release socket [ 1684.594398][T18848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.606951][ T59] vhci_hcd: disconnect device [ 1684.622483][ T5879] usb 48-1: SetAddress Request (22) to port 0 [ 1684.648754][T18848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.668511][ T5879] usb 48-1: new SuperSpeed USB device number 22 using vhci_hcd [ 1684.689485][T18848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.698260][T18848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1684.730536][ T5879] usb 48-1: enqueue for inactive port 0 [ 1685.864351][ T5879] usb usb48-port1: attempt power cycle [ 1685.978689][ T6007] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1686.803810][ T5879] usb usb48-port1: unable to enumerate USB device [ 1686.981020][ T6007] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.015946][ T6007] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1687.045365][ T175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.068701][ T175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.122387][ T6007] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1687.131996][ T6007] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.143105][ T6007] usb 1-1: config 0 descriptor?? [ 1687.236499][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.259910][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.692704][ T6007] kovaplus 0003:1E7D:2D50.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 1688.626827][ T6007] kovaplus 0003:1E7D:2D50.000C: couldn't init struct kovaplus_device [ 1688.648707][ T6007] kovaplus 0003:1E7D:2D50.000C: couldn't install mouse [ 1688.662066][ T6007] kovaplus 0003:1E7D:2D50.000C: probe with driver kovaplus failed with error -32 [ 1688.722656][ T6007] usb 1-1: USB disconnect, device number 21 [ 1694.209022][T19197] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1694.209022][T19197] program syz.7.3252 not setting count and/or reply_len properly [ 1695.843105][T19211] netlink: 'syz.0.3256': attribute type 3 has an invalid length. [ 1695.851077][T19211] netlink: 'syz.0.3256': attribute type 1 has an invalid length. [ 1695.859026][T19211] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3256'. [ 1695.868174][T19211] NCSI netlink: No device for ifindex 33022 [ 1695.904105][T19211] hub 8-0:1.0: USB hub found [ 1695.910724][T19211] hub 8-0:1.0: 1 port detected [ 1697.945402][T19225] netlink: 'syz.6.3257': attribute type 3 has an invalid length. [ 1697.953348][T19225] netlink: 'syz.6.3257': attribute type 1 has an invalid length. [ 1697.961413][T19225] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1697.971332][T19225] NCSI netlink: No device for ifindex 33022 [ 1698.002827][T19225] hub 8-0:1.0: USB hub found [ 1698.009144][T19225] hub 8-0:1.0: 1 port detected [ 1702.979960][T19268] netlink: 'syz.2.3271': attribute type 3 has an invalid length. [ 1702.989021][T19268] netlink: 'syz.2.3271': attribute type 1 has an invalid length. [ 1702.996850][T19268] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3271'. [ 1703.006053][T19268] NCSI netlink: No device for ifindex 33022 [ 1703.037423][T19268] hub 8-0:1.0: USB hub found [ 1703.043810][T19268] hub 8-0:1.0: 1 port detected [ 1718.079765][T19352] No buffer was provided with the request [ 1719.082603][T19363] netlink: 'syz.7.3295': attribute type 3 has an invalid length. [ 1719.090622][T19363] netlink: 'syz.7.3295': attribute type 1 has an invalid length. [ 1719.098434][T19363] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3295'. [ 1719.107621][T19363] NCSI netlink: No device for ifindex 33022 [ 1719.139537][T19363] hub 8-0:1.0: USB hub found [ 1719.145874][T19363] hub 8-0:1.0: 1 port detected [ 1723.865514][T19396] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1727.862842][T19413] netlink: 'syz.1.3307': attribute type 3 has an invalid length. [ 1727.871417][T19413] netlink: 'syz.1.3307': attribute type 1 has an invalid length. [ 1727.879253][T19413] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1727.888316][T19413] NCSI netlink: No device for ifindex 33022 [ 1727.898016][T19413] hub 8-0:1.0: USB hub found [ 1727.903036][T19413] hub 8-0:1.0: 1 port detected [ 1730.285668][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1737.202732][T19483] netlink: 'syz.0.3325': attribute type 3 has an invalid length. [ 1737.210945][T19483] netlink: 'syz.0.3325': attribute type 1 has an invalid length. [ 1737.218842][T19483] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3325'. [ 1737.227977][T19483] NCSI netlink: No device for ifindex 33022 [ 1737.262044][T19483] hub 8-0:1.0: USB hub found [ 1737.268258][T19483] hub 8-0:1.0: 1 port detected [ 1739.324855][T19490] lo speed is unknown, defaulting to 1000 [ 1739.926490][T19494] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1739.933089][T19494] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1739.941393][T19494] vhci_hcd vhci_hcd.0: Device attached [ 1740.045960][T19497] vhci_hcd: connection closed [ 1740.089399][ T49] vhci_hcd: stop threads [ 1740.128030][ T49] vhci_hcd: release socket [ 1740.143984][ T49] vhci_hcd: disconnect device [ 1741.921890][T19512] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1749.353456][T19529] netlink: 'syz.2.3336': attribute type 3 has an invalid length. [ 1749.365564][T19529] netlink: 'syz.2.3336': attribute type 1 has an invalid length. [ 1749.374579][T19529] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3336'. [ 1749.383705][T19529] NCSI netlink: No device for ifindex 33022 [ 1749.394039][T19529] hub 8-0:1.0: USB hub found [ 1749.400112][T19529] hub 8-0:1.0: 1 port detected [ 1750.568829][ T6007] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1751.022003][ T6007] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.191219][ T6007] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1751.295605][ T6007] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1751.436418][ T6007] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.428239][ T6007] usb 8-1: config 0 descriptor?? [ 1752.825673][T19553] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1753.690040][T19557] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3345'. [ 1753.710234][ T6007] usbhid 8-1:0.0: can't add hid device: -71 [ 1753.716309][ T6007] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1753.760957][ T6007] usb 8-1: USB disconnect, device number 7 [ 1757.299404][T19573] netlink: 'syz.6.3351': attribute type 3 has an invalid length. [ 1757.307203][T19573] netlink: 'syz.6.3351': attribute type 1 has an invalid length. [ 1757.315019][T19573] netlink: 216 bytes leftover after parsing attributes in process `syz.6.3351'. [ 1757.324116][T19573] NCSI netlink: No device for ifindex 33022 [ 1757.334396][T19573] hub 8-0:1.0: USB hub found [ 1757.339742][T19573] hub 8-0:1.0: 1 port detected [ 1760.968670][T19602] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1760.975276][T19602] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1760.984111][T19602] vhci_hcd vhci_hcd.0: Device attached [ 1760.990440][T19607] vhci_hcd: connection closed [ 1761.064789][ T6000] vhci_hcd: stop threads [ 1761.098882][ T6000] vhci_hcd: release socket [ 1761.104198][ T6000] vhci_hcd: disconnect device [ 1761.608039][T19613] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1761.608039][T19613] program syz.0.3358 not setting count and/or reply_len properly [ 1764.802811][T19644] netlink: 'syz.1.3366': attribute type 3 has an invalid length. [ 1764.810816][T19644] netlink: 'syz.1.3366': attribute type 1 has an invalid length. [ 1764.818810][T19644] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3366'. [ 1765.576997][T19644] NCSI netlink: No device for ifindex 33022 [ 1765.594491][T19644] hub 8-0:1.0: USB hub found [ 1765.600520][T19644] hub 8-0:1.0: 1 port detected [ 1770.662472][T19677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1770.669059][T19677] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1770.677923][T19677] vhci_hcd vhci_hcd.0: Device attached [ 1770.925743][T19679] vhci_hcd: connection closed [ 1770.934668][ T1338] vhci_hcd: stop threads [ 1771.071875][ T1338] vhci_hcd: release socket [ 1771.148780][ T1338] vhci_hcd: disconnect device [ 1771.154425][T15304] usb 38-1: SetAddress Request (24) to port 0 [ 1771.196555][T15304] usb 38-1: new SuperSpeed USB device number 24 using vhci_hcd [ 1771.291155][T15304] usb 38-1: enqueue for inactive port 0 [ 1771.914241][T15304] usb usb38-port1: attempt power cycle [ 1771.924003][T11273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1771.942960][T11273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1771.951857][T11273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1771.975685][T11273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1771.990533][T11273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1772.304309][T11654] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.180196][T15304] usb usb38-port1: unable to enumerate USB device [ 1773.201530][T19689] lo speed is unknown, defaulting to 1000 [ 1773.429647][T11654] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.803987][T19710] netlink: 'syz.0.3382': attribute type 3 has an invalid length. [ 1773.811894][T19710] netlink: 'syz.0.3382': attribute type 1 has an invalid length. [ 1773.819845][T19710] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3382'. [ 1773.829294][T19710] NCSI netlink: No device for ifindex 33022 [ 1773.862452][T19710] hub 8-0:1.0: USB hub found [ 1773.868621][T19710] hub 8-0:1.0: 1 port detected [ 1774.039847][T18128] Bluetooth: hci2: command tx timeout [ 1774.349853][T11654] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.526338][T11654] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1775.890552][T19725] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1775.897169][T19725] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1775.905625][T19725] vhci_hcd vhci_hcd.0: Device attached [ 1776.128285][T18128] Bluetooth: hci2: command tx timeout [ 1776.139794][T19729] vhci_hcd: connection closed [ 1776.145600][ T6947] vhci_hcd: stop threads [ 1776.159135][ T6947] vhci_hcd: release socket [ 1776.163670][ T6947] vhci_hcd: disconnect device [ 1776.481125][T19689] chnl_net:caif_netlink_parms(): no params data found [ 1776.529271][T11654] bridge_slave_1: left allmulticast mode [ 1776.534990][T11654] bridge_slave_1: left promiscuous mode [ 1776.558805][T11654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.572035][T11654] bridge_slave_0: left allmulticast mode [ 1776.577763][T11654] bridge_slave_0: left promiscuous mode [ 1776.609163][T11654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.789623][T19740] binder: 19739:19740 ioctl 4018620d 0 returned -22 [ 1776.811102][T19740] binder: 19739:19740 ioctl 8983 200000000000 returned -22 [ 1778.215517][T11273] Bluetooth: hci2: command tx timeout [ 1778.455638][T11273] Bluetooth: hci3: command 0x0406 tx timeout [ 1780.278659][T18128] Bluetooth: hci2: command tx timeout [ 1782.232021][T19778] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1782.238621][T19778] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1782.246989][T19778] vhci_hcd vhci_hcd.0: Device attached [ 1782.789449][T19779] vhci_hcd: connection closed [ 1782.791273][ T6948] vhci_hcd: stop threads [ 1782.885956][ T6948] vhci_hcd: release socket [ 1782.888873][T13569] usb 38-1: SetAddress Request (28) to port 0 [ 1782.897355][ T6948] vhci_hcd: disconnect device [ 1782.902737][T13569] usb 38-1: new SuperSpeed USB device number 28 using vhci_hcd [ 1783.128680][T13569] usb 38-1: enqueue for inactive port 0 [ 1784.158288][T11654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1784.183975][T11654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1784.337350][T13569] usb usb38-port1: attempt power cycle [ 1784.582018][T11654] bond0 (unregistering): Released all slaves [ 1784.617828][T19795] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1785.152059][T13569] usb usb38-port1: unable to enumerate USB device [ 1787.850617][T19689] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.918699][T19689] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.926038][T19689] bridge_slave_0: entered allmulticast mode [ 1787.948361][T19689] bridge_slave_0: entered promiscuous mode [ 1788.515331][T19823] netlink: 'syz.7.3411': attribute type 3 has an invalid length. [ 1788.523285][T19823] netlink: 'syz.7.3411': attribute type 1 has an invalid length. [ 1788.531156][T19823] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3411'. [ 1788.540316][T19823] NCSI netlink: No device for ifindex 33022 [ 1788.572598][T19823] hub 8-0:1.0: USB hub found [ 1788.578887][T19823] hub 8-0:1.0: 1 port detected [ 1789.152725][T11654] hsr_slave_0: left promiscuous mode [ 1789.199469][T11654] hsr_slave_1: left promiscuous mode [ 1789.274466][T11654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1789.308291][T11654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.338805][T11654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1790.638609][T19833] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1790.645189][T19833] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1790.653349][T19833] vhci_hcd vhci_hcd.0: Device attached [ 1790.788542][T11654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1790.900062][T19835] vhci_hcd: connection closed [ 1790.924704][ T6947] vhci_hcd: stop threads [ 1790.961043][ T6947] vhci_hcd: release socket [ 1790.974279][ T6947] vhci_hcd: disconnect device [ 1791.219445][T11654] veth1_macvtap: left promiscuous mode [ 1791.225052][T11654] veth0_macvtap: left promiscuous mode [ 1791.230841][T11654] veth1_vlan: left promiscuous mode [ 1791.236237][T11654] veth0_vlan: left promiscuous mode [ 1791.739481][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.489259][T19883] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1798.495848][T19883] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1798.503675][T19883] vhci_hcd vhci_hcd.0: Device attached [ 1798.525876][T19884] vhci_hcd: connection closed [ 1798.527471][ T6000] vhci_hcd: stop threads [ 1798.585620][ T6000] vhci_hcd: release socket [ 1798.604607][ T6000] vhci_hcd: disconnect device [ 1803.733640][T11654] team0 (unregistering): Port device team_slave_1 removed [ 1803.939281][T11654] team0 (unregistering): Port device team_slave_0 removed [ 1807.353913][T19689] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.379888][T19689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.387488][T19689] bridge_slave_1: entered allmulticast mode [ 1807.399644][T19689] bridge_slave_1: entered promiscuous mode [ 1807.994485][T19934] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1808.001137][T19934] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1808.009241][T19934] vhci_hcd vhci_hcd.0: Device attached [ 1808.141609][T19935] vhci_hcd: connection closed [ 1808.182627][ T6948] vhci_hcd: stop threads [ 1808.205809][ T6948] vhci_hcd: release socket [ 1808.215886][ T6948] vhci_hcd: disconnect device [ 1808.233448][ T978] lo speed is unknown, defaulting to 1000 [ 1808.256458][ T978] infiniband syz0: ib_query_port failed (-19) [ 1808.265494][T19689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1808.350434][T19689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1809.470929][T19943] netlink: 'syz.0.3441': attribute type 3 has an invalid length. [ 1809.478904][T19943] netlink: 'syz.0.3441': attribute type 1 has an invalid length. [ 1809.487341][T19943] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3441'. [ 1809.496532][T19943] NCSI netlink: No device for ifindex 33022 [ 1809.506367][T19943] hub 8-0:1.0: USB hub found [ 1809.511483][T19943] hub 8-0:1.0: 1 port detected [ 1809.552851][T19689] team0: Port device team_slave_0 added [ 1809.585235][T19689] team0: Port device team_slave_1 added [ 1810.135307][T19689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1810.214604][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.428261][T19689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1810.619930][T19689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1810.627746][T19689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1810.653984][T19689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.404322][T19689] hsr_slave_0: entered promiscuous mode [ 1814.420231][T19689] hsr_slave_1: entered promiscuous mode [ 1814.427110][T19689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1814.445666][T19689] Cannot create hsr debugfs directory [ 1815.421338][T19980] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1815.427939][T19980] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1815.435906][T19980] vhci_hcd vhci_hcd.0: Device attached [ 1815.436264][T19981] vhci_hcd: connection closed [ 1815.473977][ T6034] vhci_hcd: stop threads [ 1815.499723][ T6034] vhci_hcd: release socket [ 1815.581333][ T6034] vhci_hcd: disconnect device [ 1816.071134][T19992] netlink: 'syz.1.3453': attribute type 3 has an invalid length. [ 1816.079050][T19992] netlink: 'syz.1.3453': attribute type 1 has an invalid length. [ 1816.086866][T19992] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3453'. [ 1816.096049][T19992] NCSI netlink: No device for ifindex 33022 [ 1816.129023][T19992] hub 8-0:1.0: USB hub found [ 1816.135648][T19992] hub 8-0:1.0: 1 port detected [ 1816.202563][ T5932] usb usb48-port1: attempt power cycle [ 1817.950874][ T5932] usb usb48-port1: unable to enumerate USB device [ 1821.019482][T19689] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1821.079535][T19689] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1821.229233][T19689] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1821.276204][T19689] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1822.468851][T20038] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1822.475437][T20038] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1822.483296][T20038] vhci_hcd vhci_hcd.0: Device attached [ 1822.969829][T20039] vhci_hcd: connection closed [ 1823.389058][ T175] vhci_hcd: stop threads [ 1823.422406][ T175] vhci_hcd: release socket [ 1823.434652][ T175] vhci_hcd: disconnect device [ 1823.661428][T19689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1825.071688][T19689] 8021q: adding VLAN 0 to HW filter on device team0 [ 1825.450210][T20059] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1827.461335][T18128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1827.474657][T18128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1827.483545][T18128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1827.493558][T18128] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1827.630586][T18128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1831.388895][T18128] Bluetooth: hci5: command tx timeout [ 1833.398827][T11273] Bluetooth: hci5: command tx timeout [ 1833.506540][T20083] chnl_net:caif_netlink_parms(): no params data found [ 1835.879040][T11273] Bluetooth: hci5: command tx timeout [ 1836.207178][T20142] Falling back ldisc for ttyS3. [ 1836.217773][T20083] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.228878][T20083] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.236198][T20083] bridge_slave_0: entered allmulticast mode [ 1836.830084][T20083] bridge_slave_0: entered promiscuous mode [ 1836.878796][T20147] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1836.885472][T20147] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1836.902914][T20083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.929019][T20147] vhci_hcd vhci_hcd.0: Device attached [ 1836.938795][T20083] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.069074][T20083] bridge_slave_1: entered allmulticast mode [ 1837.075812][T20151] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(13) [ 1837.081038][T20083] bridge_slave_1: entered promiscuous mode [ 1837.082513][T20151] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1837.114137][T20151] vhci_hcd vhci_hcd.0: Device attached [ 1837.143605][T20147] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 1837.150300][T20147] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1837.200454][T20147] vhci_hcd vhci_hcd.0: Device attached [ 1837.219555][T20151] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 1837.226243][T20151] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1837.263883][T20147] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1837.281745][T20151] vhci_hcd vhci_hcd.0: Device attached [ 1837.323852][T20163] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(22) [ 1837.330540][T20163] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1837.400124][ T5879] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1837.408881][T20163] vhci_hcd vhci_hcd.0: Device attached [ 1837.959156][T11273] Bluetooth: hci5: command tx timeout [ 1838.209306][T20157] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3491'. [ 1838.330732][T20164] vhci_hcd: connection closed [ 1838.336888][ T49] vhci_hcd: stop threads [ 1838.346271][ T49] vhci_hcd: release socket [ 1838.348900][T20160] vhci_hcd: connection closed [ 1838.350885][ T49] vhci_hcd: disconnect device [ 1838.351516][T20149] vhci_hcd: connection reset by peer [ 1838.355611][T20152] vhci_hcd: connection closed [ 1838.355878][T20154] vhci_hcd: connection closed [ 1838.378637][ T49] vhci_hcd: stop threads [ 1838.404784][ T49] vhci_hcd: release socket [ 1838.446160][ T49] vhci_hcd: disconnect device [ 1838.460025][ T1338] bridge_slave_1: left allmulticast mode [ 1838.467117][ T49] vhci_hcd: stop threads [ 1838.481134][ T49] vhci_hcd: release socket [ 1838.496986][ T1338] bridge_slave_1: left promiscuous mode [ 1838.543536][ T49] vhci_hcd: disconnect device [ 1838.576989][ T1338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.598986][ T49] vhci_hcd: stop threads [ 1838.603316][ T49] vhci_hcd: release socket [ 1838.785323][ T1338] bridge_slave_0: left allmulticast mode [ 1838.816566][ T49] vhci_hcd: disconnect device [ 1838.824616][ T1338] bridge_slave_0: left promiscuous mode [ 1838.830557][ T49] vhci_hcd: stop threads [ 1838.845561][ T49] vhci_hcd: release socket [ 1838.845797][ T1338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1838.859812][ T49] vhci_hcd: disconnect device [ 1840.578648][ T6007] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1840.760513][ T1338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1840.785612][ T1338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1840.804088][ T1338] bond0 (unregistering): Released all slaves [ 1840.911136][T20083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1840.925511][T20083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.977873][ T1338] hsr_slave_0: left promiscuous mode [ 1842.144105][ T1338] hsr_slave_1: left promiscuous mode [ 1842.305067][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.322997][ T1338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.518594][ T5879] vhci_hcd: vhci_device speed not set [ 1843.512953][T20212] Falling back ldisc for ttyS3. [ 1843.657518][ T5843] hid-generic 0005:0B57:0001.000D: collection stack underflow [ 1843.672157][ T5843] hid-generic 0005:0B57:0001.000D: item 0 0 0 12 parsing failed [ 1843.709108][ T5843] hid-generic 0005:0B57:0001.000D: probe with driver hid-generic failed with error -22 [ 1844.003035][T20218] netlink: 'syz.2.3503': attribute type 3 has an invalid length. [ 1844.010973][T20218] netlink: 'syz.2.3503': attribute type 1 has an invalid length. [ 1844.018896][T20218] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3503'. [ 1844.028062][T20218] NCSI netlink: No device for ifindex 33022 [ 1845.651071][T20226] netlink: 200 bytes leftover after parsing attributes in process `syz.7.3505'. [ 1846.037945][ T1338] team0 (unregistering): Port device team_slave_1 removed [ 1846.180816][ T1338] team0 (unregistering): Port device team_slave_0 removed [ 1848.449319][T20083] team0: Port device team_slave_0 added [ 1848.499660][T20083] team0: Port device team_slave_1 added [ 1849.958638][T20257] mkiss: ax0: crc mode is auto. [ 1850.184607][T20083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.203843][T20083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.410149][T20083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.451903][T20083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.463244][T20083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1851.098051][T20083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1853.169125][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.270886][T20083] hsr_slave_0: entered promiscuous mode [ 1853.302354][T20083] hsr_slave_1: entered promiscuous mode [ 1853.356808][T20083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1853.620125][T20083] Cannot create hsr debugfs directory [ 1853.672674][T20293] netlink: 'syz.7.3523': attribute type 3 has an invalid length. [ 1853.680606][T20293] netlink: 'syz.7.3523': attribute type 1 has an invalid length. [ 1853.688508][T20293] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3523'. [ 1853.697683][T20293] NCSI netlink: No device for ifindex 33022 [ 1853.715986][T20293] hub 8-0:1.0: USB hub found [ 1853.728042][T20293] hub 8-0:1.0: 1 port detected [ 1856.386073][T20306] lo speed is unknown, defaulting to 1000 [ 1856.392055][T20306] lo speed is unknown, defaulting to 1000 [ 1856.398816][T20306] lo speed is unknown, defaulting to 1000 [ 1856.417437][T20306] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1856.472624][T20309] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1856.479216][T20309] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1856.490112][T20309] vhci_hcd vhci_hcd.0: Device attached [ 1856.495670][T20306] lo speed is unknown, defaulting to 1000 [ 1856.502839][T20306] lo speed is unknown, defaulting to 1000 [ 1856.510073][T20306] lo speed is unknown, defaulting to 1000 [ 1856.517163][T20306] lo speed is unknown, defaulting to 1000 [ 1856.527693][T20306] lo speed is unknown, defaulting to 1000 [ 1856.540950][T20310] vhci_hcd: connection closed [ 1856.554335][ T6947] vhci_hcd: stop threads [ 1856.573659][ T6947] vhci_hcd: release socket [ 1856.578145][ T6947] vhci_hcd: disconnect device [ 1856.601335][T20314] CIFS: iocharset name too long [ 1857.355940][T20317] mkiss: ax0: crc mode is auto. [ 1858.436154][T20083] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1858.476706][T20083] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1858.504897][T20083] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1858.745316][T20083] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1859.024325][T20331] siw: device registration error -23 [ 1859.334869][T20331] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1859.341472][T20331] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1859.349645][T20331] vhci_hcd vhci_hcd.0: Device attached [ 1859.361818][T20340] vhci_hcd: connection closed [ 1859.403161][ T175] vhci_hcd: stop threads [ 1859.437246][ T175] vhci_hcd: release socket [ 1859.472819][ T175] vhci_hcd: disconnect device [ 1859.497671][T20083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1859.633957][T20083] 8021q: adding VLAN 0 to HW filter on device team0 [ 1859.713068][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1859.720321][ T6947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1860.131593][T20351] netlink: 'syz.0.3534': attribute type 3 has an invalid length. [ 1860.142037][T20351] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 1860.150259][T20351] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3534'. [ 1860.160284][T20351] NCSI netlink: No device for ifindex 33022 [ 1860.185353][T20351] hub 8-0:1.0: USB hub found [ 1860.192276][T20351] hub 8-0:1.0: 1 port detected [ 1860.629040][T20083] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1860.639588][T20083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1860.831070][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1860.838257][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.676772][T20370] siw: device registration error -23 [ 1863.106120][T20370] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1863.112734][T20370] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1863.120729][T20370] vhci_hcd vhci_hcd.0: Device attached [ 1863.372740][T20371] vhci_hcd: connection closed [ 1863.398983][ T49] vhci_hcd: stop threads [ 1863.434126][T20083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.452629][ T49] vhci_hcd: release socket [ 1863.457237][ T49] vhci_hcd: disconnect device [ 1863.665722][T20382] mkiss: ax0: crc mode is auto. [ 1867.116815][T20402] siw: device registration error -23 [ 1867.612601][T20402] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1867.619190][T20402] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1867.627045][T20402] vhci_hcd vhci_hcd.0: Device attached [ 1867.822535][T20404] vhci_hcd: connection closed [ 1867.836544][ T6034] vhci_hcd: stop threads [ 1867.860069][ T6034] vhci_hcd: release socket [ 1867.864576][ T6034] vhci_hcd: disconnect device [ 1869.604181][T20418] netlink: 'syz.2.3548': attribute type 3 has an invalid length. [ 1869.612080][T20418] netlink: 'syz.2.3548': attribute type 1 has an invalid length. [ 1869.620411][T20418] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3548'. [ 1869.629608][T20418] NCSI netlink: No device for ifindex 33022 [ 1869.665373][T20418] hub 8-0:1.0: USB hub found [ 1869.678864][T20418] hub 8-0:1.0: 1 port detected [ 1870.337972][T20083] veth0_vlan: entered promiscuous mode [ 1870.441880][T20083] veth1_vlan: entered promiscuous mode [ 1871.579744][T20083] veth0_macvtap: entered promiscuous mode [ 1871.662409][T20083] veth1_macvtap: entered promiscuous mode [ 1871.892543][T20433] siw: device registration error -23 [ 1871.939881][T20433] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1871.946502][T20433] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1871.954784][T20433] vhci_hcd vhci_hcd.0: Device attached [ 1872.314683][T20083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1872.827924][T20434] vhci_hcd: connection closed [ 1872.855774][ T59] vhci_hcd: stop threads [ 1872.921696][ T59] vhci_hcd: release socket [ 1872.926161][ T59] vhci_hcd: disconnect device [ 1872.949099][T20083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.020479][T20083] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.036018][T20083] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.061881][T20083] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.091713][T20083] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.965694][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1873.982467][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.259171][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.487858][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.954989][T20478] fuse: Unknown parameter '0x0000000000000007' [ 1878.675401][T20489] siw: device registration error -23 [ 1879.411729][T20489] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1879.418312][T20489] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1879.426466][T20489] vhci_hcd vhci_hcd.0: Device attached [ 1879.435847][T20495] vhci_hcd: connection closed [ 1879.437381][ T1338] vhci_hcd: stop threads [ 1880.565572][ T1338] vhci_hcd: release socket [ 1880.592290][ T1338] vhci_hcd: disconnect device [ 1880.618645][ T5843] usb 46-1: enqueue for inactive port 0 [ 1881.066074][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1881.078850][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1881.151120][ T5843] usb usb46-port1: attempt power cycle [ 1881.163954][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.194877][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.199043][T15304] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1881.243062][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1881.262772][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1881.409667][T15304] usb 8-1: Using ep0 maxpacket: 16 [ 1881.439333][T15304] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1881.448112][T15304] usb 8-1: config 0 has no interface number 0 [ 1881.476283][T15304] usb 8-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1881.490205][T15304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.632981][T15304] usb 8-1: Product: syz [ 1881.656319][T15304] usb 8-1: Manufacturer: syz [ 1881.691972][T15304] usb 8-1: SerialNumber: syz [ 1881.726268][T15304] usb 8-1: config 0 descriptor?? [ 1881.743209][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1881.759505][T20509] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3573'. [ 1881.774884][T15304] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1881.808585][ T5843] usb usb46-port1: unable to enumerate USB device [ 1882.204070][T15304] gspca_spca1528: reg_w err -71 [ 1882.231561][T15304] spca1528 8-1:0.1: probe with driver spca1528 failed with error -71 [ 1882.246425][T15304] usb 8-1: USB disconnect, device number 8 [ 1882.445995][ T30] audit: type=1326 audit(1752570485.704:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20525 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75c98e929 code=0x7ffc0000 [ 1882.514552][ T30] audit: type=1326 audit(1752570485.704:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20525 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75c98e929 code=0x7ffc0000 [ 1882.711015][ T30] audit: type=1326 audit(1752570485.734:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20525 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fd75c98e929 code=0x7ffc0000 [ 1883.768565][ T30] audit: type=1326 audit(1752570485.734:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20525 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75c98e929 code=0x7ffc0000 [ 1883.790506][ T30] audit: type=1326 audit(1752570485.734:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20525 comm="syz.1.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd75c98e929 code=0x7ffc0000 [ 1884.575352][T20539] siw: device registration error -23 [ 1884.629416][T20539] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1884.636039][T20539] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1884.644747][T20539] vhci_hcd vhci_hcd.0: Device attached [ 1885.157039][T20540] vhci_hcd: connection closed [ 1885.302201][ T6034] vhci_hcd: stop threads [ 1885.319575][ T6034] vhci_hcd: release socket [ 1885.324160][ T6034] vhci_hcd: disconnect device [ 1887.168503][T20567] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3589'. [ 1889.065233][T20574] netlink: 'syz.2.3587': attribute type 3 has an invalid length. [ 1889.073216][T20574] netlink: 'syz.2.3587': attribute type 1 has an invalid length. [ 1889.081240][T20574] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3587'. [ 1889.090446][T20574] NCSI netlink: No device for ifindex 33022 [ 1889.208231][T20575] hub 8-0:1.0: USB hub found [ 1889.213759][T20575] hub 8-0:1.0: 1 port detected [ 1889.689540][T20581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.697361][T20581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.765994][T20581] bridge0: entered allmulticast mode [ 1889.928832][T20582] bridge_slave_1: left allmulticast mode [ 1890.579238][T20582] bridge_slave_1: left promiscuous mode [ 1890.588897][T20582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.179405][T20582] bridge_slave_0: left allmulticast mode [ 1891.185163][T20582] bridge_slave_0: left promiscuous mode [ 1891.256438][T20582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.162852][T20603] siw: device registration error -23 [ 1893.786337][T20603] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 1893.792929][T20603] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1893.805508][T20603] vhci_hcd vhci_hcd.0: Device attached [ 1893.837212][T20605] vhci_hcd: connection closed [ 1893.837566][ T59] vhci_hcd: stop threads [ 1893.863563][ T59] vhci_hcd: release socket [ 1893.868169][ T59] vhci_hcd: disconnect device [ 1894.143365][T20613] siw: device registration error -23 [ 1894.178883][T20613] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1894.185480][T20613] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1894.193484][T20613] vhci_hcd vhci_hcd.0: Device attached [ 1894.758893][T20614] vhci_hcd: connection closed [ 1894.833590][ T59] vhci_hcd: stop threads [ 1895.078553][ T5920] usb 46-1: SetAddress Request (46) to port 0 [ 1895.085939][ T59] vhci_hcd: release socket [ 1895.092122][ T59] vhci_hcd: disconnect device [ 1895.296998][ T5920] usb 46-1: new SuperSpeed USB device number 46 using vhci_hcd [ 1895.874654][ T5920] usb 46-1: enqueue for inactive port 0 [ 1897.061832][T20639] netlink: 'syz.2.3603': attribute type 3 has an invalid length. [ 1897.069759][T20639] netlink: 'syz.2.3603': attribute type 1 has an invalid length. [ 1897.077572][T20639] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1897.086817][T20639] NCSI netlink: No device for ifindex 33022 [ 1897.123054][T20639] hub 8-0:1.0: USB hub found [ 1897.136130][T20639] hub 8-0:1.0: 1 port detected [ 1897.653427][ T5920] usb usb46-port1: attempt power cycle [ 1898.159045][T20650] nfs: Unknown parameter 'fscquencer' [ 1898.450413][ T5920] usb usb46-port1: unable to enumerate USB device [ 1899.175684][T20667] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1899.182281][T20667] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1899.190650][T20667] vhci_hcd vhci_hcd.0: Device attached [ 1899.433981][T20668] vhci_hcd: connection closed [ 1899.455879][ T175] vhci_hcd: stop threads [ 1899.473550][ T175] vhci_hcd: release socket [ 1899.484664][ T175] vhci_hcd: disconnect device [ 1902.292903][T20691] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3615'. [ 1903.655267][T20703] netlink: 'syz.7.3618': attribute type 3 has an invalid length. [ 1903.850190][T20703] netlink: 'syz.7.3618': attribute type 1 has an invalid length. [ 1903.858002][T20703] netlink: 216 bytes leftover after parsing attributes in process `syz.7.3618'. [ 1903.961444][T20703] NCSI netlink: No device for ifindex 33022 [ 1903.995698][T20711] hub 8-0:1.0: USB hub found [ 1904.059636][T20711] hub 8-0:1.0: 1 port detected [ 1911.609213][T20783] mkiss: ax0: crc mode is auto. [ 1915.347901][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.750712][T20792] Bluetooth: MGMT ver 1.23 [ 1918.858572][T11273] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1919.347083][T20823] program syz.6.3649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1921.793604][T20827] mkiss: ax0: crc mode is auto. [ 1921.867312][T20840] siw: device registration error -23 [ 1922.609753][T20840] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1922.616326][T20840] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1922.626320][T20840] vhci_hcd vhci_hcd.0: Device attached [ 1922.632293][T20842] vhci_hcd: connection closed [ 1922.658685][ T6947] vhci_hcd: stop threads [ 1922.667963][ T6947] vhci_hcd: release socket [ 1922.683876][ T6947] vhci_hcd: disconnect device [ 1924.940548][T20863] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3662'. [ 1925.894255][ T978] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1925.953149][T20873] ubi31: attaching mtd0 [ 1925.982541][T20873] ubi31: scanning is finished [ 1926.008560][T20873] ubi31: empty MTD device detected [ 1926.088870][ T978] usb 7-1: Using ep0 maxpacket: 16 [ 1926.096235][ T978] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1926.159981][ T978] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1926.184732][ T978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1926.208487][ T978] usb 7-1: Product: syz [ 1926.212734][ T978] usb 7-1: Manufacturer: syz [ 1926.238615][ T978] usb 7-1: SerialNumber: syz [ 1926.286221][ T978] usb 7-1: config 0 descriptor?? [ 1926.308264][ T978] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1926.467416][ T978] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 1926.700838][T20873] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1926.935557][T20873] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1926.998785][T20873] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1927.006241][T20873] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1927.091885][T20873] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1927.185928][T20873] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1927.245298][T20873] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 635522299 [ 1927.275770][T20873] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1927.302068][T20879] ubi31: background thread "ubi_bgt31d" started, PID 20879 [ 1927.419337][ T978] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1927.716628][T20888] siw: device registration error -23 [ 1928.222470][T20888] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1928.229065][T20888] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1928.237276][T20888] vhci_hcd vhci_hcd.0: Device attached [ 1928.348606][T20890] vhci_hcd: connection closed [ 1928.350647][ T1338] vhci_hcd: stop threads [ 1928.490044][ T1338] vhci_hcd: release socket [ 1928.494538][ T1338] vhci_hcd: disconnect device [ 1928.849453][T20878] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in; [ 1928.849453][T20878] program syz.2.3669 not setting count and/or reply_len properly [ 1928.978580][ T978] em28xx 7-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 1929.004623][ T978] em28xx 7-1:0.0: failed to read eeprom (err=-5) [ 1929.011501][ T978] em28xx 7-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1929.176857][T20899] mkiss: ax0: crc mode is auto. [ 1929.423172][ T978] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1930.646264][ T978] em28xx 7-1:0.0: dvb set to bulk mode. [ 1930.652586][ T5932] em28xx 7-1:0.0: Binding DVB extension [ 1930.668563][ T978] usb 7-1: USB disconnect, device number 11 [ 1930.675989][ T978] em28xx 7-1:0.0: Disconnecting em28xx [ 1930.713916][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.798495][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.986347][ T5932] em28xx 7-1:0.0: Registering input extension [ 1930.996621][ T5879] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1931.251859][ T978] em28xx 7-1:0.0: Closing input extension [ 1931.271570][ T978] em28xx 7-1:0.0: Freeing device [ 1931.328607][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 1932.058103][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.083397][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.111801][ T5879] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1932.132476][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.174369][ T5879] usb 8-1: config 0 descriptor?? [ 1932.194978][ T5879] hub 8-1:0.0: USB hub found [ 1933.318838][ T5879] hub 8-1:0.0: 1 port detected [ 1934.059017][ T5879] hub 8-1:0.0: activate --> -90 [ 1936.104208][ T5932] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 1936.108937][ T5953] usb 8-1: USB disconnect, device number 9 [ 1937.724990][T20935] siw: device registration error -23 [ 1938.181654][T20935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1938.188267][T20935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1938.196324][T20935] vhci_hcd vhci_hcd.0: Device attached [ 1938.350484][T20936] vhci_hcd: connection closed [ 1938.414470][ T175] vhci_hcd: stop threads [ 1938.423683][ T175] vhci_hcd: release socket [ 1938.436070][ T175] vhci_hcd: disconnect device [ 1938.509071][ T5953] usb 38-1: enqueue for inactive port 0 [ 1939.547168][ T5953] usb usb38-port1: attempt power cycle [ 1941.317465][T20957] [ 1941.319875][T20957] ====================================================== [ 1941.326917][T20957] WARNING: possible circular locking dependency detected [ 1941.333968][T20957] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 1941.341099][T20957] ------------------------------------------------------ [ 1941.348137][T20957] syz.0.3689/20957 is trying to acquire lock: [ 1941.354222][T20957] ffff888055c43940 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x735/0xe50 [ 1941.364049][T20957] [ 1941.364049][T20957] but task is already holding lock: [ 1941.371438][T20957] ffff888057fc8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1941.380813][T20957] [ 1941.380813][T20957] which lock already depends on the new lock. [ 1941.380813][T20957] [ 1941.391252][T20957] [ 1941.391252][T20957] the existing dependency chain (in reverse order) is: [ 1941.400297][T20957] [ 1941.400297][T20957] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1941.407552][T20957] lock_acquire+0x120/0x360 [ 1941.412592][T20957] __mutex_lock+0x182/0xe80 [ 1941.417629][T20957] kernfs_seq_start+0x55/0x3c0 [ 1941.422935][T20957] seq_read_iter+0x3ef/0xe10 [ 1941.428060][T20957] copy_splice_read+0x54f/0x9b0 [ 1941.433447][T20957] splice_file_to_pipe+0x273/0x440 [ 1941.439096][T20957] do_sendfile+0x475/0x7e0 [ 1941.444127][T20957] __se_sys_sendfile64+0x13e/0x190 [ 1941.449765][T20957] do_syscall_64+0xfa/0x3b0 [ 1941.454795][T20957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.461308][T20957] [ 1941.461308][T20957] -> #2 (&p->lock){+.+.}-{4:4}: [ 1941.468370][T20957] lock_acquire+0x120/0x360 [ 1941.473426][T20957] __mutex_lock+0x182/0xe80 [ 1941.478569][T20957] seq_read_iter+0xb7/0xe10 [ 1941.483635][T20957] copy_splice_read+0x54f/0x9b0 [ 1941.489033][T20957] splice_file_to_pipe+0x273/0x440 [ 1941.494717][T20957] do_sendfile+0x475/0x7e0 [ 1941.499663][T20957] __se_sys_sendfile64+0x13e/0x190 [ 1941.505303][T20957] do_syscall_64+0xfa/0x3b0 [ 1941.510334][T20957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.516842][T20957] [ 1941.516842][T20957] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1941.524251][T20957] lock_acquire+0x120/0x360 [ 1941.529288][T20957] __mutex_lock+0x182/0xe80 [ 1941.534321][T20957] anon_pipe_write+0x16a/0x1360 [ 1941.539698][T20957] __kernel_write_iter+0x3ec/0x860 [ 1941.545342][T20957] __kernel_write+0xef/0x150 [ 1941.550465][T20957] autofs_notify_daemon+0x748/0xe50 [ 1941.556206][T20957] autofs_wait+0x11dc/0x1870 [ 1941.561337][T20957] autofs_mount_wait+0x16b/0x330 [ 1941.566807][T20957] autofs_d_automount+0x393/0x720 [ 1941.572365][T20957] __traverse_mounts+0x308/0x5b0 [ 1941.577839][T20957] step_into+0x534/0xf30 [ 1941.582615][T20957] link_path_walk+0x77b/0xea0 [ 1941.587824][T20957] path_lookupat+0x97/0x430 [ 1941.592861][T20957] filename_lookup+0x212/0x570 [ 1941.598158][T20957] user_path_at+0x3a/0x60 [ 1941.603021][T20957] bpf_obj_get_user+0xa9/0x430 [ 1941.608312][T20957] __sys_bpf+0x71e/0x860 [ 1941.613088][T20957] __x64_sys_bpf+0x7c/0x90 [ 1941.618086][T20957] do_syscall_64+0xfa/0x3b0 [ 1941.623117][T20957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.629538][T20957] [ 1941.629538][T20957] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1941.637291][T20957] validate_chain+0xb9b/0x2140 [ 1941.642606][T20957] __lock_acquire+0xab9/0xd20 [ 1941.647814][T20957] lock_acquire+0x120/0x360 [ 1941.652849][T20957] __mutex_lock+0x182/0xe80 [ 1941.657887][T20957] autofs_notify_daemon+0x735/0xe50 [ 1941.663622][T20957] autofs_wait+0x11dc/0x1870 [ 1941.668750][T20957] autofs_mount_wait+0x16b/0x330 [ 1941.674229][T20957] autofs_d_automount+0x393/0x720 [ 1941.679799][T20957] __traverse_mounts+0x308/0x5b0 [ 1941.685281][T20957] step_into+0x534/0xf30 [ 1941.690060][T20957] path_lookupat+0x163/0x430 [ 1941.695184][T20957] filename_lookup+0x212/0x570 [ 1941.700491][T20957] kern_path+0x35/0x50 [ 1941.705097][T20957] lookup_bdev+0xc0/0x280 [ 1941.709978][T20957] resume_store+0x169/0x460 [ 1941.715042][T20957] kernfs_fop_write_iter+0x378/0x4f0 [ 1941.720876][T20957] vfs_write+0x54b/0xa90 [ 1941.725687][T20957] ksys_write+0x145/0x250 [ 1941.730555][T20957] do_syscall_64+0xfa/0x3b0 [ 1941.735591][T20957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.742023][T20957] [ 1941.742023][T20957] other info that might help us debug this: [ 1941.742023][T20957] [ 1941.752288][T20957] Chain exists of: [ 1941.752288][T20957] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 1941.752288][T20957] [ 1941.764401][T20957] Possible unsafe locking scenario: [ 1941.764401][T20957] [ 1941.771862][T20957] CPU0 CPU1 [ 1941.777242][T20957] ---- ---- [ 1941.782626][T20957] lock(&of->mutex); [ 1941.786628][T20957] lock(&p->lock); [ 1941.792990][T20957] lock(&of->mutex); [ 1941.799509][T20957] lock(&sbi->pipe_mutex); [ 1941.804022][T20957] [ 1941.804022][T20957] *** DEADLOCK *** [ 1941.804022][T20957] [ 1941.812182][T20957] 4 locks held by syz.0.3689/20957: [ 1941.817402][T20957] #0: ffff888029e289b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1941.826490][T20957] #1: ffff8880349e4428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1941.835425][T20957] #2: ffff888057fc8888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1941.845228][T20957] #3: ffff88801daa1698 (kn->active#68){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1941.855282][T20957] [ 1941.855282][T20957] stack backtrace: [ 1941.861197][T20957] CPU: 1 UID: 0 PID: 20957 Comm: syz.0.3689 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1941.861220][T20957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1941.861231][T20957] Call Trace: [ 1941.861242][T20957] [ 1941.861251][T20957] dump_stack_lvl+0x189/0x250 [ 1941.861275][T20957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1941.861293][T20957] ? __pfx__printk+0x10/0x10 [ 1941.861315][T20957] ? print_lock_name+0xde/0x100 [ 1941.861338][T20957] print_circular_bug+0x2ee/0x310 [ 1941.861361][T20957] check_noncircular+0x134/0x160 [ 1941.861383][T20957] validate_chain+0xb9b/0x2140 [ 1941.861412][T20957] __lock_acquire+0xab9/0xd20 [ 1941.861430][T20957] ? autofs_notify_daemon+0x735/0xe50 [ 1941.861454][T20957] lock_acquire+0x120/0x360 [ 1941.861468][T20957] ? autofs_notify_daemon+0x735/0xe50 [ 1941.861498][T20957] __mutex_lock+0x182/0xe80 [ 1941.861514][T20957] ? autofs_notify_daemon+0x735/0xe50 [ 1941.861538][T20957] ? autofs_notify_daemon+0x6e5/0xe50 [ 1941.861564][T20957] ? autofs_notify_daemon+0x735/0xe50 [ 1941.861588][T20957] ? __pfx___mutex_lock+0x10/0x10 [ 1941.861604][T20957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1941.861619][T20957] ? from_kgid_munged+0x1f4/0x6a0 [ 1941.861644][T20957] ? __pfx_from_kgid_munged+0x10/0x10 [ 1941.861667][T20957] ? kasan_save_track+0x4f/0x80 [ 1941.861689][T20957] ? __kasan_kmalloc+0x93/0xb0 [ 1941.861711][T20957] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1941.861735][T20957] ? autofs_wait+0xd32/0x1870 [ 1941.861757][T20957] ? autofs_notify_daemon+0x3d1/0xe50 [ 1941.861782][T20957] autofs_notify_daemon+0x735/0xe50 [ 1941.861806][T20957] ? do_syscall_64+0xfa/0x3b0 [ 1941.861823][T20957] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1941.861861][T20957] ? __raw_spin_lock_init+0x45/0x100 [ 1941.861885][T20957] ? autofs_wait+0xe13/0x1870 [ 1941.861910][T20957] autofs_wait+0x11dc/0x1870 [ 1941.861932][T20957] ? d_walk+0x2c0/0x780 [ 1941.861954][T20957] ? __pfx_autofs_wait+0x10/0x10 [ 1941.861979][T20957] ? do_raw_spin_unlock+0x122/0x240 [ 1941.862007][T20957] autofs_mount_wait+0x16b/0x330 [ 1941.862031][T20957] autofs_d_automount+0x393/0x720 [ 1941.862057][T20957] __traverse_mounts+0x308/0x5b0 [ 1941.862077][T20957] step_into+0x534/0xf30 [ 1941.862095][T20957] ? lookup_slow+0x5e/0x70 [ 1941.862114][T20957] ? __pfx_step_into+0x10/0x10 [ 1941.862135][T20957] ? walk_component+0x190/0x400 [ 1941.862153][T20957] path_lookupat+0x163/0x430 [ 1941.862174][T20957] filename_lookup+0x212/0x570 [ 1941.862193][T20957] ? __pfx_filename_lookup+0x10/0x10 [ 1941.862221][T20957] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1941.862243][T20957] ? getname_kernel+0x146/0x2f0 [ 1941.862261][T20957] ? getname_kernel+0x20e/0x2f0 [ 1941.862278][T20957] kern_path+0x35/0x50 [ 1941.862295][T20957] lookup_bdev+0xc0/0x280 [ 1941.862312][T20957] ? rcu_is_watching+0x15/0xb0 [ 1941.862332][T20957] ? __pfx_lookup_bdev+0x10/0x10 [ 1941.862347][T20957] ? kstrndup+0xbf/0x160 [ 1941.862368][T20957] resume_store+0x169/0x460 [ 1941.862389][T20957] ? sysfs_file_kobj+0x1a/0x230 [ 1941.862413][T20957] ? __pfx_resume_store+0x10/0x10 [ 1941.862436][T20957] ? sysfs_file_kobj+0x1a/0x230 [ 1941.862459][T20957] ? sysfs_file_kobj+0x1a/0x230 [ 1941.862481][T20957] ? sysfs_file_kobj+0x1a/0x230 [ 1941.862505][T20957] ? sysfs_file_kobj+0x1e4/0x230 [ 1941.862528][T20957] ? sysfs_kf_write+0x166/0x260 [ 1941.862554][T20957] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1941.862578][T20957] kernfs_fop_write_iter+0x378/0x4f0 [ 1941.862603][T20957] vfs_write+0x54b/0xa90 [ 1941.862627][T20957] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1941.862650][T20957] ? __pfx_vfs_write+0x10/0x10 [ 1941.862676][T20957] ? __fget_files+0x2a/0x420 [ 1941.862694][T20957] ksys_write+0x145/0x250 [ 1941.862717][T20957] ? __pfx_ksys_write+0x10/0x10 [ 1941.862738][T20957] ? rcu_is_watching+0x15/0xb0 [ 1941.862758][T20957] ? do_syscall_64+0xbe/0x3b0 [ 1941.862775][T20957] do_syscall_64+0xfa/0x3b0 [ 1941.862789][T20957] ? lockdep_hardirqs_on+0x9c/0x150 [ 1941.862814][T20957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.862831][T20957] ? clear_bhb_loop+0x60/0xb0 [ 1941.862850][T20957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.862867][T20957] RIP: 0033:0x7f999d58e929 [ 1941.862883][T20957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1941.862900][T20957] RSP: 002b:00007f999afb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1941.862918][T20957] RAX: ffffffffffffffda RBX: 00007f999d7b6240 RCX: 00007f999d58e929 [ 1941.862931][T20957] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 1941.862942][T20957] RBP: 00007f999d610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1941.862952][T20957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1941.862962][T20957] R13: 0000000000000000 R14: 00007f999d7b6240 R15: 00007ffd1ee4ede8 [ 1941.862981][T20957] [ 1942.335799][ T5953] usb usb38-port1: unable to enumerate USB device SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1942.895732][T20957] block device autoloading is deprecated and will be removed. [ 1942.903612][T20957] PM: Image not found (code -22) [ 1944.289539][ T6034] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.363974][ T6034] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.463703][ T6034] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.515608][ T6034] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.699924][ T6034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1944.716199][ T6034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1944.725896][ T6034] bond0 (unregistering): Released all slaves [ 1944.957739][ T6034] hsr_slave_0: left promiscuous mode [ 1944.963639][ T6034] hsr_slave_1: left promiscuous mode [ 1944.970070][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1944.977528][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1944.986539][ T6034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1944.994273][ T6034] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1945.005325][ T6034] veth1_macvtap: left promiscuous mode [ 1945.011221][ T6034] veth0_macvtap: left promiscuous mode [ 1945.016802][ T6034] veth1_vlan: left promiscuous mode [ 1945.022144][ T6034] veth0_vlan: left promiscuous mode [ 1945.137079][ T6034] team0 (unregistering): Port device team_slave_1 removed [ 1945.154582][ T6034] team0 (unregistering): Port device team_slave_0 removed [ 1945.254155][ T6007] lo speed is unknown, defaulting to 1000 [ 1945.260096][ T6007] infiniband syz0: ib_query_port failed (-19) [ 1945.531003][ T175] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.565531][ T175] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.612872][ T175] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.653985][ T175] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.742025][ T175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.783521][ T175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.833405][ T175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.884916][ T175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.962556][ T175] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.032769][ T175] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.082625][ T175] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.142732][ T175] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.204532][ T175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.263112][ T175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.333563][ T175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.409228][ T175] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1946.501313][ T175] bridge_slave_1: left allmulticast mode [ 1946.506994][ T175] bridge_slave_1: left promiscuous mode [ 1946.512918][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.522151][ T175] bridge_slave_0: left allmulticast mode [ 1946.527809][ T175] bridge_slave_0: left promiscuous mode [ 1946.533730][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.543391][ T175] bridge_slave_1: left allmulticast mode [ 1946.549322][ T175] bridge_slave_1: left promiscuous mode [ 1946.555026][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.563508][ T175] bridge_slave_0: left allmulticast mode [ 1946.569229][ T175] bridge_slave_0: left promiscuous mode [ 1946.574905][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.584519][ T175] bridge_slave_1: left allmulticast mode [ 1946.590325][ T175] bridge_slave_1: left promiscuous mode [ 1946.596517][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.604972][ T175] bridge_slave_0: left allmulticast mode [ 1946.611361][ T175] bridge_slave_0: left promiscuous mode [ 1946.617056][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.627249][ T175] bridge_slave_1: left allmulticast mode [ 1946.633196][ T175] bridge_slave_1: left promiscuous mode [ 1946.639574][ T175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.647817][ T175] bridge_slave_0: left allmulticast mode [ 1946.653766][ T175] bridge_slave_0: left promiscuous mode [ 1946.659538][ T175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.816971][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1946.827280][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1946.837414][ T175] bond0 (unregistering): Released all slaves [ 1946.913460][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1946.923686][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1946.933516][ T175] bond0 (unregistering): Released all slaves [ 1947.045270][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1947.055305][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1947.065446][ T175] bond0 (unregistering): Released all slaves [ 1947.165568][ T175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1947.176078][ T175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1947.185876][ T175] bond0 (unregistering): Released all slaves [ 1947.764837][ T175] hsr_slave_0: left promiscuous mode [ 1947.771007][ T175] hsr_slave_1: left promiscuous mode [ 1947.776759][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1947.784287][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1947.792197][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1947.799676][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1947.812389][ T175] hsr_slave_0: left promiscuous mode [ 1947.818119][ T175] hsr_slave_1: left promiscuous mode [ 1947.824067][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1947.831836][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1947.839788][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1947.847191][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1947.857404][ T175] hsr_slave_0: left promiscuous mode [ 1947.863431][ T175] hsr_slave_1: left promiscuous mode [ 1947.870135][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1947.877581][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1947.886009][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1947.893744][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1947.904443][ T175] hsr_slave_0: left promiscuous mode [ 1947.910354][ T175] hsr_slave_1: left promiscuous mode [ 1947.916035][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1947.923592][ T175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1947.931793][ T175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1947.939346][ T175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1947.956244][ T175] veth1_macvtap: left promiscuous mode [ 1947.961858][ T175] veth0_macvtap: left promiscuous mode [ 1947.967423][ T175] veth1_vlan: left promiscuous mode [ 1947.972828][ T175] veth0_vlan: left promiscuous mode [ 1947.978990][ T175] veth1_macvtap: left promiscuous mode [ 1947.984523][ T175] veth0_macvtap: left promiscuous mode [ 1947.990463][ T175] veth1_vlan: left promiscuous mode [ 1947.995766][ T175] veth0_vlan: left promiscuous mode [ 1948.002324][ T175] veth1_macvtap: left promiscuous mode [ 1948.007845][ T175] veth0_macvtap: left promiscuous mode [ 1948.013560][ T175] veth1_vlan: left promiscuous mode [ 1948.018942][ T175] veth0_vlan: left promiscuous mode [ 1948.024985][ T175] veth1_macvtap: left promiscuous mode [ 1948.030571][ T175] veth0_macvtap: left promiscuous mode [ 1948.036140][ T175] veth1_vlan: left promiscuous mode [ 1948.041607][ T175] veth0_vlan: left promiscuous mode [ 1948.314617][ T175] team0 (unregistering): Port device team_slave_1 removed [ 1948.332249][ T175] team0 (unregistering): Port device team_slave_0 removed [ 1948.530356][ T175] team0 (unregistering): Port device team_slave_1 removed [ 1948.554253][ T175] team0 (unregistering): Port device team_slave_0 removed [ 1948.703858][ T175] team0 (unregistering): Port device team_slave_1 removed [ 1948.717999][ T175] team0 (unregistering): Port device team_slave_0 removed [ 1948.894201][ T175] team0 (unregistering): Port device team_slave_1 removed [ 1948.905890][ T175] team0 (unregistering): Port device team_slave_0 removed