last executing test programs: 14m58.261571785s ago: executing program 2 (id=152): pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0xbc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xb5) keyctl$search(0xa, r1, 0x0, 0x0, r1) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x1, {0x4, 0x4, 0x7}}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200), 0x0) sendmmsg$unix(r3, &(0x7f0000000680), 0x4924924924925c6, 0x0) 14m57.607435424s ago: executing program 2 (id=154): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x2c, @multicast2, 0x4621, 0x3, 'lc\x00', 0x15, 0x4, 0x6f}, {@loopback, 0x4e23, 0x2000, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet(0x2b, 0x801, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x11, @empty, 0x4e24, 0x0, 'lc\x00', 0x1c, 0x2, 0x4a}, 0x2c) 14m56.48836308s ago: executing program 2 (id=159): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 14m53.567101282s ago: executing program 2 (id=168): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, 0x0, &(0x7f0000000340), 0x1000000}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x40000000000000}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m53.268889836s ago: executing program 2 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x80000040001}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000500)="fac7264d505ef1ffdaaf24db444f9702edf0", 0x12, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) 14m48.606710743s ago: executing program 2 (id=184): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 14m32.594907492s ago: executing program 32 (id=184): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 12m11.256419351s ago: executing program 3 (id=636): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 12m10.66839807s ago: executing program 3 (id=637): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x24) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x7, 0x0, 0x4, 0xff, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 12m6.392742261s ago: executing program 3 (id=649): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000000)=0x7fffffff) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x2c2c, 0x200006, 0x2, 0x4964, 0x9}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 12m4.264520331s ago: executing program 3 (id=656): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000280)=0x100, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 12m1.032706917s ago: executing program 3 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 12m0.951615758s ago: executing program 3 (id=668): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = mq_open(0x0, 0x42, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x1b, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11m45.753006116s ago: executing program 33 (id=668): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = mq_open(0x0, 0x42, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) ustat(0x1b, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10m5.252597122s ago: executing program 4 (id=953): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, 0x0, 0xb, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) 10m4.987580466s ago: executing program 4 (id=954): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 10m3.904840831s ago: executing program 4 (id=957): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r4, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$kcm(0x11, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m1.334435097s ago: executing program 4 (id=961): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x2000000085}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r5 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r5) 9m56.784914872s ago: executing program 4 (id=978): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, 0x0, 0xb, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15) 9m55.995380664s ago: executing program 4 (id=980): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40020002, 0x0, 0xa17433da3c5d69ad, 0x2, 0x7f}, 0x9c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file1/file0\x00', 0xc000, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa3\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xcf\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb9\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xb5\rP\xf62\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xe7\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)~d7\xe9\x03\xee\xb39\xe9\x98K\xb4\xc9v]\b]\xd3\x83\xad\x15\xe2\xc6\x9f1]\xec\x11\x81q\x8a\xd8M\xd7\a\x9a\x10\x88\x02`\"YJN\vyB\x88\xe8\xaf\x8fk\xb6\xd7\xaaEI\\,%+ Qv\xb1X)\xb5\xd3$\xad_\xfb\\U0\x8bR\xdb\x17\xbd[*Ui\xdfE\x9a\x19\xe9\x87I\xd5\xbb\xa8\rU\xe6=\xde.\xc2\xc2e\xb7\xcf\xb1\xddZ\xd0\tO\xff\xae_\xcf\x8b\xd3\xc4\xc9\xb05\xb9\xee\xb2 )iq\x8a\v>:C\xe6*\f\xf1\x1a\x85\xf44\xe5*\x1e\a6\xde\x84\xe6\xb2\xf1\xd5G\xff\x18\xc6A\xc0]\x04\x0ey2E~\x11\fO\xceKRQ\\\xd5\x81\xe9\x04*L\x9e\xd0za\x89f\x12)\xce@\x93\xbc\x98\xb4Jr\xd2\x01\xb4\xe3\xdb\xf6\xf5W\xd8L\xbb\x97\x03', 0x4) 9m40.91424416s ago: executing program 34 (id=980): write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40020002, 0x0, 0xa17433da3c5d69ad, 0x2, 0x7f}, 0x9c) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat(0xffffffffffffffff, &(0x7f0000000280)='./file1/file0\x00', 0xc000, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa3\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xcf\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb9\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xb5\rP\xf62\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xe7\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)~d7\xe9\x03\xee\xb39\xe9\x98K\xb4\xc9v]\b]\xd3\x83\xad\x15\xe2\xc6\x9f1]\xec\x11\x81q\x8a\xd8M\xd7\a\x9a\x10\x88\x02`\"YJN\vyB\x88\xe8\xaf\x8fk\xb6\xd7\xaaEI\\,%+ Qv\xb1X)\xb5\xd3$\xad_\xfb\\U0\x8bR\xdb\x17\xbd[*Ui\xdfE\x9a\x19\xe9\x87I\xd5\xbb\xa8\rU\xe6=\xde.\xc2\xc2e\xb7\xcf\xb1\xddZ\xd0\tO\xff\xae_\xcf\x8b\xd3\xc4\xc9\xb05\xb9\xee\xb2 )iq\x8a\v>:C\xe6*\f\xf1\x1a\x85\xf44\xe5*\x1e\a6\xde\x84\xe6\xb2\xf1\xd5G\xff\x18\xc6A\xc0]\x04\x0ey2E~\x11\fO\xceKRQ\\\xd5\x81\xe9\x04*L\x9e\xd0za\x89f\x12)\xce@\x93\xbc\x98\xb4Jr\xd2\x01\xb4\xe3\xdb\xf6\xf5W\xd8L\xbb\x97\x03', 0x4) 54.716339438s ago: executing program 6 (id=2378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f0000000300)=r0}, 0x20) 54.548597481s ago: executing program 6 (id=2381): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$isdn_base(0x22, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3300, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x3c00}}}}}}}, 0x0) 54.473007642s ago: executing program 6 (id=2382): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"], 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 54.323882234s ago: executing program 6 (id=2387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 52.543001329s ago: executing program 6 (id=2393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='workqueue_activate_work\x00', r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f00000004c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15.472633709s ago: executing program 6 (id=2393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='workqueue_activate_work\x00', r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f00000004c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.640558955s ago: executing program 1 (id=2500): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfe85e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) bind$bt_hci(r2, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) r7 = socket(0x10, 0x3, 0x0) bind$inet(r7, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) iopl(0x3) r8 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r8, r8, 0x21) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10001}], 0x1c) recvfrom$inet6(r9, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000280)="86a66561c1511ea5fd8a771e0557194769f41112", 0x14, 0x27, 0x0, 0x2, r10}]) 12.574512831s ago: executing program 1 (id=2502): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000100)=[0xb, 0x2ff]) 9.644269762s ago: executing program 5 (id=2510): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfb1d], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9.10848449s ago: executing program 1 (id=2511): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x1, 0x555f, &(0x7f000000cdc0)="$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") 8.487599279s ago: executing program 7 (id=2512): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 8.38782261s ago: executing program 5 (id=2513): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$video4linux(0x0, 0x2, 0x101000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0xc0884123, &(0x7f0000000000)=0x85) poll(&(0x7f0000000180)=[{r8, 0x9}], 0x1, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 8.116625615s ago: executing program 7 (id=2514): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80540, 0x188) read$hiddev(r1, &(0x7f0000000080)=""/39, 0x27) 6.868636802s ago: executing program 7 (id=2515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) syz_io_uring_setup(0xb0, &(0x7f0000000100)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 6.788892753s ago: executing program 1 (id=2516): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, r4, 0x301, 0x0, 0x25dfdbfe, {{0x5}, {@void, @val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044041}, 0x20000000) getpid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r5 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0xc95e}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x28040085) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.738685034s ago: executing program 0 (id=2517): openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000100)='0', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001100)={r7, 0x4, {0x0, 0x0, 0x0, 0x4000000001000000, 0x0, 0x0, 0x0, 0x1c, 0x1c, "339f020bbe82b3980000000000003b0000000d0ec081b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c783a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2453335e235a21c113eb64110000000000040000000007000000000000ff0f00", [0xfffffffffeff7ff9]}}) 5.706028419s ago: executing program 0 (id=2518): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) socket$nl_sock_diag(0x10, 0x3, 0x4) 4.533632356s ago: executing program 5 (id=2519): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000580)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000280)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010900", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @opaque="65a2041c64d3707370a3ecc0517f"}}}}}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8, @void, @value}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f00), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x24008084) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r7, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0e, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xed, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 4.427913927s ago: executing program 0 (id=2520): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x36, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x16]}}, 0x0, 0x8, &(0x7f0000000000)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.284616873s ago: executing program 0 (id=2521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bbf47152c215473674074c146e65dd0e8b67b85dba37670bf70d9ae662f30db28f503e26c04c761c12ee318d64bce3e723"], 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2.592075193s ago: executing program 1 (id=2522): creat(&(0x7f00000002c0)='./file0\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000540)={0x0, 0x2, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000400)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={r7, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000540)={0x0, [[0x9, 0x101, 0x0, 0x0, 0x0, 0x3, 0x1, 0xf], [0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x840f, 0x0, 0x6], [0xfff, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x4575]], '\x00', [{0x0, 0x1, 0x1}, {}, {0x80}, {0x9e, 0x4}, {0x0, 0xb}, {}, {}, {}, {}, {0x4000000}, {0x0, 0x4}], '\x00', 0xd, 0x0, 0x0, 0x0, 0x0, 0x5000000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) close_range(r1, r3, 0x0) 2.535209284s ago: executing program 5 (id=2523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x44}}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)="c78183be", 0x4, 0x4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0xa1, 0x100c40, 0x5, 0x6, 0x2, 0x9829, 0x3, 0x0, 0x2, 0x5}) close(r3) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x2000201, 0x4) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000004a00031163eacd00000000000a"], 0x24}}, 0x0) 1.608912517s ago: executing program 7 (id=2524): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) 1.603261717s ago: executing program 5 (id=2525): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.527318789s ago: executing program 0 (id=2526): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/icmp\x00') pread64(r2, 0x0, 0x0, 0x200000000013) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r5 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgrcv(r5, 0x0, 0x0, 0x1, 0x0) msgsnd(r5, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000"], 0x8, 0x0) msgrcv(r5, &(0x7f0000000000)={0x0, ""/104}, 0x70, 0x0, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 1.499793209s ago: executing program 1 (id=2527): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, 0x0, 0x0) 1.315356381s ago: executing program 7 (id=2528): openat$nullb(0xffffffffffffff9c, 0x0, 0x42000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f0000000100)='0', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') getdents64(0xffffffffffffffff, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x58) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001100)={r7, 0x4, {0x0, 0x0, 0x0, 0x4000000001000000, 0x0, 0x0, 0x0, 0x1c, 0x1c, "339f020bbe82b3980000000000003b0000000d0ec081b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c783a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "2453335e235a21c113eb64110000000000040000000007000000000000ff0f00", [0xfffffffffeff7ff9]}}) 544.588722ms ago: executing program 0 (id=2529): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$video4linux(0x0, 0x2, 0x101000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r7, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0xc0884123, &(0x7f0000000000)=0x85) poll(&(0x7f0000000180)=[{r8, 0x9}], 0x1, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 39.45278ms ago: executing program 5 (id=2530): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = creat(0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0xd0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000280)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x10) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000040)=""/119) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r2, &(0x7f0000000480)=""/4081, 0x103a) 0s ago: executing program 7 (id=2531): ioperm(0x7fff, 0x80000000000f0, 0x100000081) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001000003090001007379ecf3ffff00002c000000030a01010000000000000000010000000900010073077a30000000000900030073797a320000000008000000060a010400008750867f6a5c42e60deb0000000000000100000008050040000000003c000480001400028008000340000000000800044000000022140001800c0001006269747769736500040002800900010073797a3021000000140000001100010000008b97d25a5ea97fbbfe1395ccc217cac06d07000000000000000000"], 0xd8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000d80)={'sit0\x00', 0x0, 0x1, 0x80, 0x8000, 0x8, {{0xd, 0x4, 0x2, 0x5, 0x34, 0x64, 0x0, 0xf9, 0x29, 0x0, @remote, @multicast1, {[@generic={0x83, 0x8, "ffee3018a89b"}, @timestamp={0x44, 0xc, 0xc1, 0x0, 0x0, [0x1000, 0x6]}, @ssrr={0x89, 0xb, 0x22, [@multicast2, @loopback]}]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 7.063281][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.069686][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.538473][ T6982] vxcan1 speed is unknown, defaulting to 1000 [ 321.161099][ T4212] Bluetooth: hci4: command 0x0409 tx timeout [ 322.898202][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 323.123492][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.714'. [ 323.204889][ T5877] Bluetooth: hci4: command 0x041b tx timeout [ 323.261109][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.268554][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.277100][ T6982] device bridge_slave_0 entered promiscuous mode [ 323.286296][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.293599][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.332005][ T6982] device bridge_slave_1 entered promiscuous mode [ 323.381738][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.394190][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.429933][ T6982] team0: Port device team_slave_0 added [ 323.439971][ T6982] team0: Port device team_slave_1 added [ 323.472487][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.479853][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.506067][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.519009][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.526105][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.554492][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.599179][ T6982] device hsr_slave_0 entered promiscuous mode [ 323.613606][ T6982] device hsr_slave_1 entered promiscuous mode [ 323.620633][ T6982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.637095][ T6982] Cannot create hsr debugfs directory [ 323.779151][ T4212] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 325.275031][ T7036] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 325.284666][ T7036] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 325.614882][ T5877] Bluetooth: hci4: command 0x040f tx timeout [ 325.745649][ T4212] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 325.945566][ T4212] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 325.977196][ T4212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.103351][ T4212] usb 5-1: Product: syz [ 326.135604][ T6982] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.152663][ T4212] usb 5-1: Manufacturer: syz [ 326.163107][ T4212] usb 5-1: SerialNumber: syz [ 326.377763][ T6982] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.417167][ T4212] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 326.434083][ T6982] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 326.503600][ T6982] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 326.533933][ T4212] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 326.552172][ T4212] dib0700: firmware download failed at 7 with -22 [ 326.579876][ T4212] usb 5-1: USB disconnect, device number 5 [ 328.171445][ T4216] Bluetooth: hci4: command 0x0419 tx timeout [ 328.192873][ T6982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.793292][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.209202][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.375261][ T6982] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.408546][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.441223][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.477469][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.484673][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.516386][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.559656][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 329.574962][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.621544][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.668915][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.676063][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.736284][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.806255][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.846462][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.053071][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.145529][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 330.183702][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.415603][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.773687][ T6982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.890720][ T6982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.918861][ T7078] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 330.927864][ T7078] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 330.935311][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 330.975677][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.183571][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.382210][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.615215][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 331.615596][ T26] audit: type=1326 audit(1748006121.610:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 331.991797][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.181885][ T26] audit: type=1326 audit(1748006121.610:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 332.224919][ T26] audit: type=1326 audit(1748006121.620:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 333.219846][ T26] audit: type=1326 audit(1748006121.620:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 333.474829][ T4212] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 333.882770][ T26] audit: type=1326 audit(1748006121.620:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 333.978655][ T26] audit: type=1326 audit(1748006121.620:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 334.027966][ T26] audit: type=1326 audit(1748006121.620:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 334.184861][ T4212] usb 6-1: Using ep0 maxpacket: 16 [ 334.414145][ T26] audit: type=1326 audit(1748006121.620:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 334.592312][ T26] audit: type=1326 audit(1748006121.620:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 334.641894][ T4212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 334.662162][ T4212] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 334.672222][ T26] audit: type=1326 audit(1748006121.620:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7081 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe14f5e3969 code=0x7ffc0000 [ 334.704875][ T4212] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.815497][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 334.826388][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 334.893060][ T4212] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 334.928663][ T6982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.075860][ T4212] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 335.104470][ T4212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.131006][ T4212] usb 6-1: Product: syz [ 335.143369][ T4212] usb 6-1: Manufacturer: syz [ 335.160246][ T4212] usb 6-1: SerialNumber: syz [ 335.247614][ T4212] usb 6-1: config 0 descriptor?? [ 335.340754][ T4212] mcba_usb 6-1:0.0 can0: couldn't setup read URBs [ 335.362350][ T4212] mcba_usb 6-1:0.0 can0: couldn't start device: -90 [ 335.475870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 335.485839][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 335.506729][ T4212] mcba_usb: probe of 6-1:0.0 failed with error -90 [ 335.520342][ T6982] device veth0_vlan entered promiscuous mode [ 335.564925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 335.576671][ T4212] usb 6-1: USB disconnect, device number 2 [ 335.636264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 335.645834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 335.653797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 335.678799][ T6982] device veth1_vlan entered promiscuous mode [ 335.708137][ T6982] device veth0_macvtap entered promiscuous mode [ 335.718708][ T6982] device veth1_macvtap entered promiscuous mode [ 335.741322][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.751833][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.764370][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.790214][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.811925][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.857038][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.871369][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.882251][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.894198][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.901743][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 335.917559][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 335.928143][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 336.130725][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 336.147163][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.339938][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.376553][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.404439][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.585986][ T7130] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 337.594931][ T7130] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 337.735408][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.760375][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.775651][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.787537][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.798413][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.233770][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.299395][ T6982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.643041][ T6982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.685701][ T6982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.696187][ T6982] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.696281][ T6982] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.696312][ T6982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.696341][ T6982] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.793910][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.906275][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.525605][ T4439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.533816][ T4439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.630436][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.630589][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.740540][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.805485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 341.255790][ T7176] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 341.264839][ T7176] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 343.806551][ T7202] blktrace: Concurrent blktraces are not allowed on sg0 [ 344.120459][ T7213] gfs2: gfs2 mount does not exist [ 345.591419][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 345.591434][ T26] audit: type=1326 audit(1748006135.940:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 345.732739][ T26] audit: type=1326 audit(1748006135.940:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 345.776234][ T26] audit: type=1326 audit(1748006135.940:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 346.785259][ T26] audit: type=1326 audit(1748006135.940:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 346.810449][ T26] audit: type=1326 audit(1748006135.940:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 346.883393][ T26] audit: type=1326 audit(1748006135.970:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 346.948230][ T26] audit: type=1326 audit(1748006135.970:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 346.982780][ T26] audit: type=1326 audit(1748006135.970:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.4.771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7ffc0000 [ 348.717179][ T7258] gfs2: gfs2 mount does not exist [ 351.066790][ T26] audit: type=1326 audit(1748006141.290:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.4.784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b22ce969 code=0x7fc00000 [ 351.254367][ T7279] ======================================================= [ 351.254367][ T7279] WARNING: The mand mount option has been deprecated and [ 351.254367][ T7279] and is ignored by this kernel. Remove the mand [ 351.254367][ T7279] option from the mount to silence this warning. [ 351.254367][ T7279] ======================================================= [ 351.307437][ T7279] (syz.0.788,7279,1):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 351.392403][ T7279] (syz.0.788,7279,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 353.018205][ T7299] gfs2: gfs2 mount does not exist [ 355.891155][ T7314] blktrace: Concurrent blktraces are not allowed on sg0 [ 355.931299][ T7316] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 357.359754][ T7322] fuseblk: Bad value for 'fd' [ 359.601563][ T7352] gfs2: gfs2 mount does not exist [ 360.284533][ T7363] netlink: 1624 bytes leftover after parsing attributes in process `syz.6.812'. [ 361.191087][ T7373] netlink: zone id is out of range [ 361.210460][ T7373] netlink: zone id is out of range [ 361.432504][ T4919] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 361.635390][ T4919] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.049635][ T7404] gfs2: gfs2 mount does not exist [ 370.245246][ T7445] blktrace: Concurrent blktraces are not allowed on sg0 [ 371.045166][ T4919] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 371.675058][ T4919] usb 2-1: Using ep0 maxpacket: 32 [ 371.825231][ T4919] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 373.285113][ T7467] could not allocate digest TFM handle cbcmac-aes-neon [ 374.506330][ T4919] usb 2-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 374.516557][ T4919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.524877][ T4919] usb 2-1: Product: syz [ 374.529072][ T4919] usb 2-1: Manufacturer: syz [ 374.554951][ T4919] usb 2-1: can't set config #2, error -71 [ 374.583223][ T4919] usb 2-1: USB disconnect, device number 3 [ 378.489200][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.497195][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.552319][ T7533] sg_write: data in/out 2031668/8 bytes for SCSI command 0x26-- guessing data in; [ 379.552319][ T7533] program syz.1.859 not setting count and/or reply_len properly [ 380.874909][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 380.975021][ T144] Bluetooth: hci1: Frame reassembly failed (-84) [ 380.985568][ T144] Bluetooth: hci1: Frame reassembly failed (-84) [ 381.615064][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 381.965341][ T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.009121][ T21] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.049708][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.083606][ T21] usb 6-1: config 0 descriptor?? [ 382.095008][ T5872] Bluetooth: hci0: command 0x0c20 tx timeout [ 382.449635][ T21] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 382.861545][ T5872] usb 6-1: USB disconnect, device number 3 [ 383.478099][ T21] Bluetooth: hci1: command 0x1003 tx timeout [ 383.486217][ T4185] Bluetooth: hci1: sending frame failed (-49) [ 384.780769][ T7584] ufs: You didn't specify the type of your ufs filesystem [ 384.780769][ T7584] [ 384.780769][ T7584] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 384.780769][ T7584] [ 384.780769][ T7584] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 384.811683][ T7584] ufs: ufstype=old is supported read-only [ 384.818734][ T7584] ufs: ufs_fill_super(): bad magic number [ 386.959428][ T4214] Bluetooth: hci1: command 0x1001 tx timeout [ 387.010050][ T4185] Bluetooth: hci1: sending frame failed (-49) [ 389.801661][ T4214] Bluetooth: hci1: command 0x1009 tx timeout [ 389.992602][ T7638] ufs: You didn't specify the type of your ufs filesystem [ 389.992602][ T7638] [ 389.992602][ T7638] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 389.992602][ T7638] [ 389.992602][ T7638] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 390.024058][ T7638] ufs: ufstype=old is supported read-only [ 390.040875][ T7638] ufs: ufs_fill_super(): bad magic number [ 391.965027][ T7656] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 391.974071][ T7656] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 394.923244][ T7685] infiniband syz1: set active [ 394.928104][ T7685] infiniband syz1: added bond0 [ 395.638166][ T7685] infiniband syz1: Couldn't open port 1 [ 395.947354][ T7685] RDS/IB: syz1: added [ 395.951424][ T7685] smc: adding ib device syz1 with port count 1 [ 395.957881][ T7685] smc: ib device syz1 port 1 has pnetid [ 397.819745][ T7703] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 397.828684][ T7703] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 398.695294][ T7723] ufs: You didn't specify the type of your ufs filesystem [ 398.695294][ T7723] [ 398.695294][ T7723] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 398.695294][ T7723] [ 398.695294][ T7723] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 398.726433][ T7723] ufs: ufstype=old is supported read-only [ 399.254532][ T7723] ufs: ufs_fill_super(): bad magic number [ 402.656223][ T7747] netlink: set zone limit has 8 unknown bytes [ 403.330992][ T7747] sp0: Synchronizing with TNC [ 404.052180][ T7757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.926'. [ 405.266866][ T7777] ufs: You didn't specify the type of your ufs filesystem [ 405.266866][ T7777] [ 405.266866][ T7777] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 405.266866][ T7777] [ 405.266866][ T7777] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 405.297879][ T7777] ufs: ufstype=old is supported read-only [ 405.323167][ T7777] ufs: ufs_fill_super(): bad magic number [ 412.125721][ T7832] netlink: 'syz.5.950': attribute type 5 has an invalid length. [ 414.336118][ T7855] blktrace: Concurrent blktraces are not allowed on sg0 [ 418.686274][ T7894] blktrace: Concurrent blktraces are not allowed on sg0 [ 423.188441][ T7944] blktrace: Concurrent blktraces are not allowed on sg0 [ 428.037444][ T7990] blktrace: Concurrent blktraces are not allowed on sg0 [ 433.386677][ T8038] blktrace: Concurrent blktraces are not allowed on sg0 [ 435.195093][ T8041] UBIFS error (pid: 8041): cannot open "./file0", error -22 [ 440.232367][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.252586][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.635562][ T8083] blktrace: Concurrent blktraces are not allowed on sg0 [ 441.776755][ T8085] vxcan1 speed is unknown, defaulting to 1000 [ 442.324956][ T21] Bluetooth: hci4: command 0x0406 tx timeout [ 443.114891][ T5872] Bluetooth: hci1: command 0x0409 tx timeout [ 444.101498][ T8130] netlink: 'syz.6.1031': attribute type 5 has an invalid length. [ 444.114330][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.231098][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 444.332540][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.204846][ T4245] Bluetooth: hci1: command 0x041b tx timeout [ 447.350109][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 447.654531][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.731719][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.797080][ T8150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1038'. [ 448.122305][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.142538][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.249088][ T8085] device bridge_slave_0 entered promiscuous mode [ 448.403368][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.420263][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.509549][ T8085] device bridge_slave_1 entered promiscuous mode [ 448.837174][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.862218][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.372192][ T4245] Bluetooth: hci1: command 0x0419 tx timeout [ 450.020742][ T8085] team0: Port device team_slave_0 added [ 450.088066][ T8085] team0: Port device team_slave_1 added [ 450.510443][ T8203] ufs: You didn't specify the type of your ufs filesystem [ 450.510443][ T8203] [ 450.510443][ T8203] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 450.510443][ T8203] [ 450.510443][ T8203] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 450.541226][ C1] vkms_vblank_simulate: vblank timer overrun [ 450.547591][ T8203] ufs: ufstype=old is supported read-only [ 450.554525][ T8203] ufs: ufs_fill_super(): bad magic number [ 451.345476][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.364880][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.485754][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.822242][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.833795][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.591891][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.896589][ T8085] device hsr_slave_0 entered promiscuous mode [ 455.927951][ T8085] device hsr_slave_1 entered promiscuous mode [ 456.053651][ T8085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.071637][ T8085] Cannot create hsr debugfs directory [ 457.011400][ T8085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 457.075932][ T8085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.121048][ T8085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 457.171594][ T8287] gfs2: gfs2 mount does not exist [ 457.190356][ T8085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 457.517712][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.554459][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.570217][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.589823][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.606499][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.627603][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.646607][ T8223] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.653777][ T8223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.686532][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.712607][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.744404][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.822281][ T8223] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.829532][ T8223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.941400][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.352952][ T4332] device hsr_slave_0 left promiscuous mode [ 458.421334][ T4332] device hsr_slave_1 left promiscuous mode [ 458.489849][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.581331][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.592052][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.599888][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.608593][ T4332] device bridge_slave_1 left promiscuous mode [ 458.614950][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.642821][ T4332] device bridge_slave_0 left promiscuous mode [ 458.688833][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.876407][ T4332] device veth1_macvtap left promiscuous mode [ 458.932127][ T4332] device veth0_macvtap left promiscuous mode [ 458.996842][ T4332] device veth1_vlan left promiscuous mode [ 459.065338][ T4332] device veth0_vlan left promiscuous mode [ 461.652965][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 461.694177][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 461.740359][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.793307][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.991208][ T4332] bond0 (unregistering): Released all slaves [ 462.201593][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 462.237041][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 462.248580][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 462.259557][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 462.271541][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 462.293537][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 462.313214][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 462.364828][ T5872] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 463.411784][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.457512][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.469506][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.519977][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.325015][ T5872] usb 6-1: unable to read config index 0 descriptor/all [ 466.332045][ T5872] usb 6-1: can't read configurations, error -71 [ 468.497532][ T8365] gfs2: gfs2 mount does not exist [ 471.025341][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 471.033178][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 472.093986][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.472021][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 474.489849][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.534431][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.546313][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.568512][ T8085] device veth0_vlan entered promiscuous mode [ 474.597067][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.614328][ T8268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.648583][ T8085] device veth1_vlan entered promiscuous mode [ 474.733669][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.750759][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.774461][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.925755][ T8223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 475.153199][ T8085] device veth0_macvtap entered promiscuous mode [ 475.995348][ T8085] device veth1_macvtap entered promiscuous mode [ 476.104980][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.162832][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.248336][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.303541][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.372466][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.423718][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.465934][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.512345][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.722263][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.794586][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.108055][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.117890][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.145456][ T8267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 478.172098][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.204726][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.424854][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.445903][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.967093][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.981631][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.017421][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.032379][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.138744][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.162832][ T8085] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.179445][ T8085] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.234814][ T8085] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.264066][ T8085] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.308872][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 479.336247][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 479.468455][ T4216] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 479.575819][ T8268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.608259][ T8268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.702001][ T8218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.730978][ T8218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.855086][ T4216] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.873602][ T4216] usb 7-1: config 0 has no interface number 0 [ 479.909667][ T4216] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 479.932099][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 479.944340][ T8253] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 479.965633][ T4216] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.020106][ T4216] usb 7-1: config 0 descriptor?? [ 480.068894][ T4216] usb 7-1: selecting invalid altsetting 1 [ 480.084361][ T4216] dvb_ttusb_budget: ttusb_init_controller: error [ 480.130692][ T4216] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 480.184885][ T5872] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 480.401050][ T4216] DVB: Unable to find symbol cx22700_attach() [ 480.444953][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 480.459675][ T4216] DVB: Unable to find symbol tda10046_attach() [ 480.469510][ T4216] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 480.521690][ T4216] usb 7-1: USB disconnect, device number 2 [ 480.565147][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.604836][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.677267][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 480.735191][ T5872] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 480.762588][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.811801][ T5872] usb 2-1: config 0 descriptor?? [ 481.451455][ T5872] creative-sb0540 0003:041E:3100.0002: item fetching failed at offset 2/5 [ 481.461186][ T5872] creative-sb0540 0003:041E:3100.0002: parse failed [ 481.468265][ T5872] creative-sb0540: probe of 0003:041E:3100.0002 failed with error -22 [ 481.689406][ T4216] usb 2-1: USB disconnect, device number 4 [ 482.574329][ T4332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.816143][ T4332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.758442][ T4332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.912391][ T4332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.480089][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.498575][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.515876][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.523489][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.532866][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.541521][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.550293][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.635131][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.692338][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.708432][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.716071][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.723485][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.731113][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.738860][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.746519][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.754046][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 487.761726][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.083468][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.091015][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.099461][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.106917][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.114320][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.121766][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 488.129327][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.130818][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.140099][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.147648][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.156896][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.164316][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.172173][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.180502][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.200062][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.228187][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.296428][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.304340][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.312820][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.323824][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.332069][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.916300][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.923974][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.931683][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 489.940271][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.015633][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.023087][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.030917][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.039879][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.048084][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.056004][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.063426][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.071281][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.083687][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.110590][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.250958][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.259072][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.266794][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.274316][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.282945][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.290865][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.300036][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.753586][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 491.268664][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 491.458183][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 491.466082][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.284888][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.336536][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.404948][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.461791][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.475844][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.483585][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.761760][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.893072][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.972429][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 492.983549][ T26] audit: type=1326 audit(1748006283.330:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 493.006304][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.015947][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.027372][ T26] audit: type=1326 audit(1748006283.330:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 493.031476][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.072914][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.086074][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.099939][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.114835][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.129856][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.139197][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.151569][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.161641][ T5872] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 493.190342][ T5872] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.03 Device [syz1] on syz1 [ 493.473085][ T26] audit: type=1326 audit(1748006283.350:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 493.636173][ T8562] fido_id[8562]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 494.513497][ T26] audit: type=1326 audit(1748006283.350:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 494.562957][ T26] audit: type=1326 audit(1748006283.350:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 494.707664][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 494.841843][ T26] audit: type=1326 audit(1748006283.350:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 494.896516][ T26] audit: type=1326 audit(1748006283.350:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 495.175201][ T26] audit: type=1326 audit(1748006283.350:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 495.358479][ T26] audit: type=1326 audit(1748006283.350:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6293cef2d0 code=0x7ffc0000 [ 495.771996][ T26] audit: type=1326 audit(1748006283.350:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.1144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6293cf0969 code=0x7ffc0000 [ 499.673350][ T8615] ufs: You didn't specify the type of your ufs filesystem [ 499.673350][ T8615] [ 499.673350][ T8615] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 499.673350][ T8615] [ 499.673350][ T8615] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 499.704258][ T8615] ufs: ufstype=old is supported read-only [ 500.528522][ T8615] ufs: ufs_fill_super(): bad magic number [ 501.367987][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.391231][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.638590][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 502.309057][ T8636] device batadv_slave_0 entered promiscuous mode [ 506.403965][ T8670] ufs: You didn't specify the type of your ufs filesystem [ 506.403965][ T8670] [ 506.403965][ T8670] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 506.403965][ T8670] [ 506.403965][ T8670] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 506.435796][ T8670] ufs: ufstype=old is supported read-only [ 506.443352][ T8670] ufs: ufs_fill_super(): bad magic number [ 506.955676][ T4332] device hsr_slave_0 left promiscuous mode [ 506.982877][ T4332] device hsr_slave_1 left promiscuous mode [ 507.435681][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.443151][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.457514][ T4332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.476531][ T4332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.536987][ T4332] device bridge_slave_1 left promiscuous mode [ 507.543456][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.143798][ T4332] device bridge_slave_0 left promiscuous mode [ 509.207061][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.716039][ T4332] device veth1_macvtap left promiscuous mode [ 509.746366][ T4332] device veth0_macvtap left promiscuous mode [ 509.785602][ T4332] device veth1_vlan left promiscuous mode [ 509.799106][ T4332] device veth0_vlan left promiscuous mode [ 513.140356][ T4332] team0 (unregistering): Port device team_slave_1 removed [ 513.158435][ T4332] team0 (unregistering): Port device team_slave_0 removed [ 513.174131][ T4332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.202593][ T4332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.479259][ T4332] bond0 (unregistering): Released all slaves [ 521.045982][ T8782] Cannot find add_set index 1 as target [ 523.076146][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.361798][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.510978][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.542427][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.569279][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.603951][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.771266][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.781786][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.792598][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 523.802965][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1210'. [ 526.130745][ T8826] gfs2: gfs2 mount does not exist [ 528.115046][ T8848] tmpfs: Unknown parameter 'usrquota' [ 530.076910][ T8868] gfs2: gfs2 mount does not exist [ 535.266366][ T8914] gfs2: gfs2 mount does not exist [ 541.027920][ T8974] gfs2: gfs2 mount does not exist [ 542.864523][ T8992] __nla_validate_parse: 43 callbacks suppressed [ 542.864541][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1270'. [ 544.554912][ T4216] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 545.369311][ T9024] gfs2: gfs2 mount does not exist [ 545.645133][ T4216] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 545.667979][ T4216] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.729076][ T4216] usb 6-1: config 0 descriptor?? [ 545.812423][ T4216] gspca_main: spca508-2.14.0 probing 8086:0110 [ 546.055005][ T4216] gspca_spca508: reg_read err -32 [ 546.104979][ T4216] gspca_spca508: reg_read err -32 [ 546.162704][ T4216] gspca_spca508: reg_read err -32 [ 546.254608][ T4216] gspca_spca508: reg_read err -32 [ 546.356032][ T4216] gspca_spca508: reg_read err -32 [ 546.628590][ T4216] gspca_spca508: reg write: error -71 [ 546.635427][ T4216] spca508: probe of 6-1:0.0 failed with error -71 [ 547.471694][ T4216] usb 6-1: USB disconnect, device number 6 [ 549.242952][ T9065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 551.547270][ T9085] gfs2: gfs2 mount does not exist [ 558.989986][ T9163] gfs2: gfs2 mount does not exist [ 559.905855][ T9176] tmpfs: Unknown parameter 'usrquota' [ 559.930900][ T9176] overlayfs: failed to resolve './file1': -2 [ 562.807730][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.814111][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.845622][ T4245] Bluetooth: hci1: command 0x0406 tx timeout [ 566.601640][ T9216] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 566.610683][ T9216] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 571.874345][ T9273] gfs2: gfs2 mount does not exist [ 581.475787][ T9337] gfs2: gfs2 mount does not exist [ 587.748154][ T9378] ufs: You didn't specify the type of your ufs filesystem [ 587.748154][ T9378] [ 587.748154][ T9378] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 587.748154][ T9378] [ 587.748154][ T9378] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 587.778867][ C1] vkms_vblank_simulate: vblank timer overrun [ 587.785044][ T9378] ufs: ufstype=old is supported read-only [ 587.792403][ T9378] ufs: ufs_fill_super(): bad magic number [ 588.849471][ T9388] gfs2: gfs2 mount does not exist [ 591.182507][ T4213] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 591.554776][ T4213] usb 6-1: Using ep0 maxpacket: 16 [ 591.685377][ T4213] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.783902][ T4213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 591.971164][ T4213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.166338][ T4213] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 592.295247][ T4213] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.514948][ T4213] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.534448][ T4213] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.554271][ T4213] usb 6-1: Manufacturer: syz [ 592.572697][ T4213] usb 6-1: config 0 descriptor?? [ 594.154985][ T4213] rc_core: IR keymap rc-hauppauge not found [ 594.161234][ T4213] Registered IR keymap rc-empty [ 594.197874][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.327076][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.471583][ T4213] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 594.723653][ T4213] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 594.885936][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.925095][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.973104][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.025090][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.064322][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.114836][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.115766][ T9445] ufs: You didn't specify the type of your ufs filesystem [ 595.115766][ T9445] [ 595.115766][ T9445] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 595.115766][ T9445] [ 595.115766][ T9445] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 595.153119][ T9445] ufs: ufstype=old is supported read-only [ 595.156354][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.159529][ T9445] ufs: ufs_fill_super(): bad magic number [ 595.225252][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.265032][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.319531][ T4213] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 595.356413][ T4213] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 595.406979][ T4213] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 595.539019][ T4213] usb 6-1: USB disconnect, device number 7 [ 596.974421][ T9460] 9pnet_virtio: no channels available for device 127.0.0.1 [ 603.601290][ T4215] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 604.455787][ T4215] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 604.518284][ T4215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.716654][ T4215] usb 6-1: config 0 descriptor?? [ 604.756446][ T4215] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 605.000605][ T4215] usb 6-1: Detected FT232BM [ 605.662240][ T4215] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 605.691249][ T4215] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 605.748813][ T4215] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 605.830725][ T4215] usb 6-1: USB disconnect, device number 8 [ 605.884533][ T4215] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 605.911992][ T4215] ftdi_sio 6-1:0.0: device disconnected [ 618.958410][ T146] Bluetooth: hci1: ACL packet too small [ 624.248368][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.263061][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.550873][ T9717] syz.1.1474 uses obsolete (PF_INET,SOCK_PACKET) [ 628.579286][ T9745] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 628.588458][ T9745] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 633.264461][ T9785] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 633.273656][ T9785] netdevsim netdevsim7: Falling back to sysfs fallback for: ./file0 [ 641.811420][ T9850] o2cb: This node has not been configured. [ 641.839515][ T9850] o2cb: Cluster check failed. Fix errors before retrying. [ 641.938359][ T9850] (syz.0.1513,9850,0):user_dlm_register:675 ERROR: status = -22 [ 642.087415][ T9850] (syz.0.1513,9850,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1" [ 643.435109][ T9862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1514'. [ 643.661613][ T9862] device batadv_slave_0 entered promiscuous mode [ 648.361894][ T9904] netlink: 'syz.5.1528': attribute type 1 has an invalid length. [ 652.128396][ T9956] autofs4:pid:9956:autofs_fill_super: called with bogus options [ 656.036646][ T9994] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1553'. [ 660.247311][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1566'. [ 660.515288][T10036] ufs: You didn't specify the type of your ufs filesystem [ 660.515288][T10036] [ 660.515288][T10036] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 660.515288][T10036] [ 660.515288][T10036] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 660.546836][T10036] ufs: ufstype=old is supported read-only [ 660.553010][T10036] ufs: ufs_fill_super(): bad magic number [ 666.146611][T10096] gfs2: gfs2 mount does not exist [ 674.646208][ T4919] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 674.758251][ T4919] Bluetooth: hci3: Injecting HCI hardware error event [ 674.766091][ T4185] Bluetooth: hci3: hardware error 0x00 [ 674.907623][T10167] netlink: 'syz.0.1604': attribute type 4 has an invalid length. [ 676.457241][T10173] vxcan1 speed is unknown, defaulting to 1000 [ 677.676348][T10191] gfs2: gfs2 mount does not exist [ 682.959507][T10234] autofs4:pid:10234:autofs_fill_super: called with bogus options [ 685.688847][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.695462][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.393026][T10267] gfs2: gfs2 mount does not exist [ 690.724648][ T4216] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 691.874966][ T4216] usb 1-1: Using ep0 maxpacket: 32 [ 692.895052][ T4216] usb 1-1: unable to get BOS descriptor or descriptor too short [ 692.955037][ T4216] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 692.962665][ T4216] usb 1-1: can't read configurations, error -71 [ 694.370581][T10323] tipc: Started in network mode [ 694.386339][T10323] tipc: Node identity c6b4410815c2, cluster identity 4711 [ 694.394097][T10323] tipc: Enabled bearer , priority 0 [ 694.544398][T10323] device syzkaller0 entered promiscuous mode [ 694.762866][T10322] tipc: Resetting bearer [ 695.673037][ T4216] tipc: Node number set to 3547742472 [ 695.716425][T10322] tipc: Disabling bearer [ 695.834338][T10339] autofs4:pid:10339:autofs_fill_super: called with bogus options [ 697.388707][T10351] ufs: You didn't specify the type of your ufs filesystem [ 697.388707][T10351] [ 697.388707][T10351] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 697.388707][T10351] [ 697.388707][T10351] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 697.419679][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.426203][T10351] ufs: ufstype=old is supported read-only [ 697.432539][T10351] ufs: ufs_fill_super(): bad magic number [ 702.617478][T10391] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 702.626746][T10391] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 707.799702][T10434] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 707.809103][T10434] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 708.548617][T10441] ufs: You didn't specify the type of your ufs filesystem [ 708.548617][T10441] [ 708.548617][T10441] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 708.548617][T10441] [ 708.548617][T10441] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 708.579551][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.586012][T10441] ufs: ufstype=old is supported read-only [ 708.592388][T10441] ufs: ufs_fill_super(): bad magic number [ 713.823375][T10496] gfs2: gfs2 mount does not exist [ 716.010245][T10521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1701'. [ 719.136970][ T4919] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 719.384697][ T4919] usb 1-1: Using ep0 maxpacket: 16 [ 719.504781][ T4919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.533426][ T4919] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 719.589635][ T4919] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 719.729252][T10555] gfs2: gfs2 mount does not exist [ 719.972221][T10557] rdma_rxe: ignoring netdev event = 26 for bond0 [ 719.979746][T10557] rdma_rxe: ignoring netdev event = 21 for bond0 [ 720.024941][ T4919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 720.039165][ T4919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.058695][ T4919] usb 1-1: Product: syz [ 720.065947][ T4919] usb 1-1: Manufacturer: syz [ 720.074924][ T4919] usb 1-1: SerialNumber: syz [ 720.189311][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1715'. [ 721.435294][ T4919] usb 1-1: USB disconnect, device number 6 [ 722.095911][T10561] udevd[10561]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.003647][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1727'. [ 729.114714][ T4185] Bluetooth: hci4: ACL packet too small [ 738.451511][T10686] siw: device registration error -23 [ 742.213841][T10733] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 747.127659][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.134054][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.641625][T10814] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 754.084414][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1804'. [ 756.875510][T10894] autofs4:pid:10894:autofs_fill_super: called with bogus options [ 757.672981][T10902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1819'. [ 763.310626][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 773.473983][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 773.512712][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 773.543119][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 773.558897][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 773.588010][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 773.619656][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.041286][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.049426][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.057358][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.065789][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.073424][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.082822][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.090894][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.099277][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.108573][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.116431][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.125408][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.132871][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.142097][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.151247][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.154786][ T4919] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 775.159227][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.174646][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.182113][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.189801][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.197627][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.205142][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.212662][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.220217][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.237278][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.253669][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.269850][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.373999][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.420315][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.475544][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.511625][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.535354][ T4919] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 775.540330][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.555757][ T4919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 775.574496][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.578259][ T4919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 775.597287][ T4919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.613387][ T4919] usb 2-1: config 0 descriptor?? [ 775.628806][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.658226][ T4919] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 775.686538][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.695790][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.757773][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.794070][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.829485][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.856486][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.876328][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.897759][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.962064][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 775.991131][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.063727][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.120857][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.178125][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.235501][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.354908][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.362788][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.371406][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.379540][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.387278][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.424654][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.440114][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.458125][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.478376][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.486255][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.503926][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.524149][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.531818][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.549783][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.558457][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.574620][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.592270][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.602408][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.622666][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.639912][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.647664][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.656201][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.663745][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.671454][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.679180][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.687107][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.701695][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.709637][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.723406][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.731737][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.745541][ T5870] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 776.773478][ T5870] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.03 Device [syz1] on syz1 [ 777.207833][T11067] fido_id[11067]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 777.701854][ T4919] usb 2-1: USB disconnect, device number 5 [ 781.494709][ T4919] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 782.337107][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 782.444731][ T4919] usb 2-1: Using ep0 maxpacket: 8 [ 782.481629][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 782.565439][ T4919] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 782.606032][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 782.644114][ T4919] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 782.720662][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 783.065425][ T4919] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 783.090326][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.174068][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.277459][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.385935][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.522840][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.585223][ T4919] usb 2-1: string descriptor 0 read error: -71 [ 784.598493][ T4919] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 784.655319][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.729251][ T4919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.758805][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.858189][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 784.905042][ T4919] usb 2-1: config 0 descriptor?? [ 785.109753][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.118961][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.143036][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.151104][ T4919] usb 2-1: can't set config #0, error -71 [ 785.875950][ T4919] usb 2-1: USB disconnect, device number 6 [ 785.882000][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.890742][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.900908][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.908823][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.916633][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.924166][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.932113][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.940149][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.955863][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.964853][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 785.973109][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 786.092561][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 786.170079][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 786.240379][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 786.310751][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 786.386679][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 786.626118][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.423398][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.488679][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.553598][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.616697][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.651937][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.660182][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.674467][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.682305][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.697489][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.708884][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.719834][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.731242][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.836631][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.855442][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.863555][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.877240][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.887860][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 787.899196][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.037234][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.045351][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.052788][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.069743][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.094709][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.300258][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.329481][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.364700][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.398790][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.432516][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.468138][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.577221][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.666657][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.792560][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.800359][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.808037][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.815767][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.823173][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.830969][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.860578][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.888633][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.919006][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.949410][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 788.979816][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.032559][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.057908][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.078245][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.107161][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.234241][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.634103][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.641898][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.649868][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.661722][ T4214] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 789.705182][ T4214] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 790.218546][T11152] fido_id[11152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 794.118823][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 794.922274][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 794.932701][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 794.965113][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 794.973759][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 794.990830][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.004656][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.023890][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.052714][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.067194][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.092042][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.112565][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.134332][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.153831][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.171756][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.187359][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.241750][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.254731][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.282589][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.297239][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.314470][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.324813][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.332239][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.345021][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.352598][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.365188][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.372927][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.385549][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.393102][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.406453][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.413886][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.425785][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.434257][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.446748][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.454291][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.699566][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.707557][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.726563][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.734329][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.742106][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.797336][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 795.931982][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.025560][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.114205][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.144659][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.152454][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.188140][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.446947][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.454995][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.462962][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.473562][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.482362][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.491357][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.500494][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.509643][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.520909][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.533547][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.542896][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.552083][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.574793][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.582776][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.614391][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.836589][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.870193][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.901540][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.911443][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.920854][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.929756][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.943576][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.951181][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.959639][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.967228][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.974955][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.982611][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.990334][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 796.997905][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.005634][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.021807][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.029818][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.038339][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.046405][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.054013][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.061591][ T4215] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 797.117037][ T4215] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.03 Device [syz1] on syz1 [ 797.275132][T11229] fido_id[11229]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 807.523712][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1940'. [ 808.578227][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.585212][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.099420][ T4214] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 809.875321][ T4214] usb 6-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 809.926766][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.094067][ T4214] usb 6-1: config 0 descriptor?? [ 810.310382][ T4214] usb 6-1: selecting invalid altsetting 1 [ 810.325152][ T4214] flexcop_usb: set interface failed. [ 811.156268][ T4214] b2c2_flexcop_usb: probe of 6-1:0.0 failed with error -22 [ 812.853677][ T4214] usb 6-1: USB disconnect, device number 9 [ 813.870719][T11389] gfs2: gfs2 mount does not exist [ 821.854951][T11462] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1978'. [ 846.134622][T11644] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2029'. [ 848.754876][T11660] overlayfs: failed to resolve './file0': -2 [ 849.194739][ T4212] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 849.354602][ T4214] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 849.444963][ T4212] usb 8-1: Using ep0 maxpacket: 16 [ 849.765573][ T4214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.808219][ T4214] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 849.891694][ T4214] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 849.971999][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.069228][ T4214] usb 2-1: config 0 descriptor?? [ 850.173722][ T4214] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 850.253845][ T4214] dvb-usb: bulk message failed: -22 (3/0) [ 850.370609][ T4212] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 850.460739][ T4214] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 850.462984][T11671] dvb-usb: bulk message failed: -22 (2/0) [ 850.495031][ T4214] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 850.508010][ T4214] usb 2-1: media controller created [ 850.521338][ T4214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 850.565186][ T4212] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 850.577864][ T4214] dvb-usb: bulk message failed: -22 (6/0) [ 850.584709][ T4212] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.598024][ T4214] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 850.606826][ T4212] usb 8-1: Product: syz [ 850.621029][ T4212] usb 8-1: Manufacturer: syz [ 850.637256][ T4212] usb 8-1: SerialNumber: syz [ 850.657209][ T4214] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 850.669894][ T4212] usb 8-1: config 0 descriptor?? [ 850.714721][ T4214] dvb-usb: schedule remote query interval to 150 msecs. [ 850.740529][ T4214] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 850.794389][ T4214] usb 2-1: USB disconnect, device number 7 [ 850.850158][ T4214] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 852.119395][ T4212] usb 8-1: USB disconnect, device number 2 [ 853.151283][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 853.618462][T11710] overlayfs: failed to resolve './file0': -2 [ 858.176149][T11747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2054'. [ 858.750791][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2058'. [ 864.677003][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2071'. [ 867.278082][T11825] dlm: dev_write: no op 0 0 [ 867.857304][ T4245] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 868.254884][ T4245] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.287156][ T4245] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.297899][ T4245] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 868.308355][ T4245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.331385][ T4245] usb 8-1: config 0 descriptor?? [ 869.550767][ T4245] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 869.564381][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 870.045449][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.056599][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.188687][ T4245] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 870.385257][ T4245] cp2112 0003:10C4:EA90.0007: Part Number: 0x82 Device Version: 0xFE [ 870.453697][T11852] UBIFS error (pid: 11852): cannot open "", error -22 [ 871.314926][ T4245] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 872.227152][ T4245] cp2112: probe of 0003:10C4:EA90.0007 failed with error -71 [ 872.246440][ T4245] usb 8-1: USB disconnect, device number 3 [ 872.910050][T11871] fido_id[11871]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 874.456882][T11895] device lo entered promiscuous mode [ 874.462800][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2096'. [ 874.486953][T11895] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 874.774022][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2097'. [ 874.819498][T11902] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 874.827458][T11902] UDF-fs: Scanning with blocksize 512 failed [ 874.836604][T11902] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 874.844142][T11902] UDF-fs: Scanning with blocksize 1024 failed [ 874.983750][T11902] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 874.991403][T11902] UDF-fs: Scanning with blocksize 2048 failed [ 874.998121][T11902] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 875.006031][T11902] UDF-fs: Scanning with blocksize 4096 failed [ 878.548159][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2112'. [ 878.644987][ T4214] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 879.714884][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.727340][T11953] netlink: 'syz.5.2113': attribute type 5 has an invalid length. [ 879.740729][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 879.754263][ T4214] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 879.763865][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.787978][ T4214] usb 2-1: config 0 descriptor?? [ 880.534742][ T4214] ath6kl: Failed to submit usb control message: -71 [ 880.541825][ T4214] ath6kl: unable to send the bmi data to the device: -71 [ 880.575494][ T4214] ath6kl: Unable to send get target info: -71 [ 880.612442][ T4214] ath6kl: Failed to init ath6kl core: -71 [ 881.456000][ T4214] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 881.482169][ T4214] usb 2-1: USB disconnect, device number 8 [ 881.875000][ T5870] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 882.189266][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 882.764859][ T5870] usb 7-1: unable to get BOS descriptor or descriptor too short [ 882.849144][ T5870] usb 7-1: config 0 has an invalid interface number: 213 but max is 0 [ 882.868339][ T5870] usb 7-1: config 0 has no interface number 0 [ 882.888032][ T5870] usb 7-1: config 0 interface 213 has no altsetting 0 [ 883.060566][T11965] gfs2: gfs2 mount does not exist [ 883.065059][ T5870] usb 7-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=de.91 [ 883.082419][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.184908][ T4919] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 883.485064][ T4919] usb 1-1: Using ep0 maxpacket: 16 [ 883.626477][ T4919] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 883.790578][ T4919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 883.811474][ T4919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 883.882891][ T5870] usb 7-1: Product: syz [ 883.887412][ T5870] usb 7-1: Manufacturer: syz [ 883.892025][ T5870] usb 7-1: SerialNumber: syz [ 883.918567][ T5870] usb 7-1: config 0 descriptor?? [ 884.174962][ T4919] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 884.210644][ T4919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.240608][ T4919] usb 1-1: Product: syz [ 884.261468][ T4919] usb 1-1: Manufacturer: syz [ 884.284614][ T4919] usb 1-1: SerialNumber: syz [ 885.394773][ T5870] usb 7-1: probing VID:PID(0424:012C) [ 885.402130][ T5870] usb 7-1: Could not find two sets of bulk-in/out endpoint pairs [ 885.447032][ T5870] vub300: probe of 7-1:0.213 failed with error -22 [ 885.464064][ T5870] usb 7-1: USB disconnect, device number 3 [ 885.560711][ T4919] usb 1-1: 0:2 : does not exist [ 886.755047][ T4216] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 887.124728][ T4216] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 887.133964][ T4216] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 887.152706][ T4216] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 888.111763][ T4216] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 888.122901][ T4216] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 888.754774][ T4216] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 888.763863][ T4216] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 888.772708][ T4216] usb 8-1: Product: syz [ 888.795137][ T4216] usb 8-1: can't set config #1, error -71 [ 888.802515][ T4216] usb 8-1: USB disconnect, device number 4 [ 888.854960][ T4919] usb 1-1: USB disconnect, device number 7 [ 889.437404][T11684] udevd[11684]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.470510][T12062] gfs2: gfs2 mount does not exist [ 892.620960][T12090] netlink: 'syz.0.2153': attribute type 21 has an invalid length. [ 892.655105][T12090] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2153'. [ 893.398672][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2155'. [ 899.460264][T12154] gfs2: gfs2 mount does not exist [ 903.257786][ T4215] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 903.334602][ T4214] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 903.514651][ T4215] usb 7-1: Using ep0 maxpacket: 8 [ 903.574670][ T4214] usb 6-1: Using ep0 maxpacket: 8 [ 903.634853][ T4215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.660501][ T4215] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.695931][ T4214] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 903.724360][ T4215] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 903.744636][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.772916][ T4215] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.801052][ T4214] usb 6-1: config 0 descriptor?? [ 903.823262][ T4215] usb 7-1: config 0 descriptor?? [ 903.985492][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2184'. [ 904.184872][ T4214] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 905.498339][ T4215] usbhid 7-1:0.0: can't add hid device: -71 [ 906.287866][ T4215] usbhid: probe of 7-1:0.0 failed with error -71 [ 906.301870][ T4215] usb 7-1: USB disconnect, device number 4 [ 906.544792][ T4214] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 906.587841][ T4214] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 906.639493][ T4214] asix: probe of 6-1:0.0 failed with error -71 [ 906.701396][ T4214] usb 6-1: USB disconnect, device number 10 [ 909.071566][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2195'. [ 909.081293][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2195'. [ 910.118519][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2196'. [ 913.996941][T12271] overlayfs: failed to resolve './file1': -2 [ 917.605997][ T4216] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 917.985121][ T4216] usb 7-1: Using ep0 maxpacket: 8 [ 918.774960][ T4216] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 918.782658][ T4216] usb 7-1: can't read configurations, error -71 [ 920.098807][T12335] overlayfs: failed to resolve './file0': -2 [ 921.547680][T12349] block nbd0: shutting down sockets [ 922.524947][T12244] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 922.548934][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2226'. [ 923.004797][T12244] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.022208][T12244] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 923.060548][T12244] usb 7-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 923.085362][T12244] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.305617][T12244] usb 7-1: config 0 descriptor?? [ 923.507546][T12244] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 923.786758][T12368] vxcan1 speed is unknown, defaulting to 1000 [ 923.942355][T12374] overlayfs: failed to resolve './file0': -2 [ 926.095113][ T3532] bcm5974 7-1:0.0: could not read from device [ 926.171107][T12244] usb 7-1: USB disconnect, device number 7 [ 926.183545][ T3532] bcm5974 7-1:0.0: could not read from device [ 928.325658][T12425] overlayfs: failed to resolve './file0': -2 [ 928.374872][ T4245] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 928.383168][ T4245] Bluetooth: hci6: Injecting HCI hardware error event [ 928.390673][ T4185] Bluetooth: hci6: hardware error 0x00 [ 931.458409][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.468319][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.584549][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 935.602579][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 935.611572][T12498] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 935.666333][T12498] device vlan0 left promiscuous mode [ 940.914522][ C1] hrtimer: interrupt took 61887 ns [ 943.496894][T12575] netlink: 'syz.0.2290': attribute type 39 has an invalid length. [ 945.065877][T12594] atomic_op ffff888075d70998 conn xmit_atomic 0000000000000000 [ 947.863209][T12623] netlink: 'syz.5.2304': attribute type 10 has an invalid length. [ 948.199521][T12623] team0: Port device wlan1 added [ 953.984743][T12697] overlayfs: missing 'lowerdir' [ 957.599975][T12731] overlayfs: missing 'lowerdir' [ 959.751543][T12771] overlayfs: missing 'workdir' [ 961.844150][T12798] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2362'. [ 961.975739][T12803] overlayfs: missing 'workdir' [ 961.982540][T12806] netlink: 'syz.1.2365': attribute type 39 has an invalid length. [ 962.042497][T12811] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2367'. [ 962.091421][T12811] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2367'. [ 962.127456][T12808] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2367'. [ 963.429047][T12839] overlayfs: missing 'workdir' [ 963.449997][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2377'. [ 963.464673][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 963.494374][T12842] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2377'. [ 963.503642][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 963.538031][T12842] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2377'. [ 963.570245][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 964.839924][T12867] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 964.865919][T12867] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 966.681438][T12899] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 966.703147][T12899] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 967.284780][T12896] vxcan1 speed is unknown, defaulting to 1000 [ 968.596447][T12932] __nla_validate_parse: 2 callbacks suppressed [ 968.596468][T12932] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2411'. [ 969.204952][ T5870] Bluetooth: hci0: command 0x0409 tx timeout [ 969.302917][T12940] netlink: 'syz.0.2414': attribute type 39 has an invalid length. [ 971.138362][T12957] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 971.164893][T12957] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 971.695097][ T4216] Bluetooth: hci0: command 0x041b tx timeout [ 974.614348][T12896] chnl_net:caif_netlink_parms(): no params data found [ 974.777945][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2422'. [ 974.997086][ T4216] Bluetooth: hci0: command 0x040f tx timeout [ 975.312733][T12896] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.351257][T12896] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.388841][T12896] device bridge_slave_0 entered promiscuous mode [ 975.398945][T12896] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.406462][T12896] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.415750][T12896] device bridge_slave_1 entered promiscuous mode [ 976.219312][T12896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 976.231668][T12896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 976.311215][T12896] team0: Port device team_slave_0 added [ 976.347380][T12896] team0: Port device team_slave_1 added [ 976.441605][T12896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.480136][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.506999][T12896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.540590][T12896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.640468][T12896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 977.224656][T12896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 977.336683][ T4245] Bluetooth: hci0: command 0x0419 tx timeout [ 977.474125][T12896] device hsr_slave_0 entered promiscuous mode [ 977.481251][T12896] device hsr_slave_1 entered promiscuous mode [ 978.533018][T13011] overlayfs: failed to resolve './file1': -2 [ 979.869590][T12896] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.063488][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2435'. [ 980.558283][T12896] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.564829][T12896] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.172334][T12896] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.407832][T12896] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 984.617777][T12896] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 984.759823][T12896] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 984.848796][T12896] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 985.337062][T12896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.405968][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 985.423607][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 985.497885][T12896] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.168387][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 986.198020][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.253930][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.261126][ T8269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.179099][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 987.206696][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 987.386119][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.260862][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.268095][ T8269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.365973][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 988.376061][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 988.423104][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 988.449534][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 988.531570][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 988.592144][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 988.642733][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 988.712734][T12896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 988.777167][T12896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.010843][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 990.226510][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 990.465511][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 990.485029][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 990.508872][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 990.964667][ T4919] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 991.063131][T13126] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2466'. [ 991.244553][ T4919] usb 2-1: Using ep0 maxpacket: 32 [ 991.411590][ T4919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 991.522537][ T4919] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 991.544898][ T4919] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 991.604390][ T4919] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 991.615819][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 991.623379][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 991.671870][ T4919] usb 2-1: config 128 has no interface number 0 [ 991.686899][T13132] UBIFS error (pid: 13132): cannot open "", error -22 [ 991.845062][ T4919] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 991.936628][T12896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.162738][ T4919] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 992.310259][ T4919] usb 2-1: config 128 interface 127 has no altsetting 0 [ 992.505036][ T4919] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 992.524784][ T4919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.532928][ T4919] usb 2-1: Product: syz [ 992.548854][T13137] loop5: detected capacity change from 0 to 2048 [ 992.551252][ T4919] usb 2-1: Manufacturer: syz [ 992.588144][ T4919] usb 2-1: SerialNumber: syz [ 992.812937][T13137] EXT4-fs (loop5): mounted filesystem without journal. Opts: min_batch_time=0x000000000000000d,mb_optimize_scan=0x0000000000000001,noblock_validity,,errors=continue. Quota mode: none. [ 992.824067][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 992.844814][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 992.900438][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.927249][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.002501][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 993.021618][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 994.001151][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 994.009270][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.035971][T12896] device veth0_vlan entered promiscuous mode [ 994.049354][ T4919] usb 2-1: USB disconnect, device number 9 [ 994.215404][T12896] device veth1_vlan entered promiscuous mode [ 995.335587][T12972] udevd[12972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 995.385629][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.417361][ T8218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.659078][T12896] device veth0_macvtap entered promiscuous mode [ 996.895446][T12896] device veth1_macvtap entered promiscuous mode [ 996.932934][ T8269] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 997.320897][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.111630][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.126306][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.137064][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.147869][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 998.167372][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.182176][T12896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.197897][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.210712][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.221087][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.232109][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.242332][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.281669][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.308618][T13201] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2485'. [ 998.308746][T12896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 998.344519][T12896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 998.370375][T12896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.384195][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 998.432128][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 998.445718][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 998.463068][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 998.475675][T12896] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.484429][T12896] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.563022][T12896] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.635581][T12896] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.427226][ T8255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.442260][ T4332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.451904][ T8255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.466762][ T4332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.153052][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1001.182302][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1002.687238][ T8255] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.890832][ T4245] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1003.305104][ T8255] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.372839][ T8255] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.461271][ T8255] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.605171][T13248] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1003.620067][T13248] Error parsing options; rc = [-22] [ 1004.391758][ T4245] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1004.405259][ T4245] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.515116][ T4245] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1004.540321][ T4245] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1004.548809][ T4245] usb 6-1: Manufacturer: syz [ 1004.632156][ T4245] usb 6-1: config 0 descriptor?? [ 1004.707940][ T4245] igorplugusb 6-1:0.0: incorrect number of endpoints [ 1005.613162][T13261] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1005.638883][T13252] vxcan1 speed is unknown, defaulting to 1000 [ 1007.030157][ T4213] Bluetooth: hci0: command 0x0409 tx timeout [ 1007.180881][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2497'. [ 1007.192222][T12244] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1007.216088][ T4919] usb 6-1: USB disconnect, device number 11 [ 1008.264876][T12244] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.344581][T12244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1008.390065][T12244] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1008.464981][T12244] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1008.482009][T13284] loop7: detected capacity change from 0 to 256 [ 1008.557064][T13287] input: syz0 as /devices/virtual/input/input10 [ 1008.586959][T12244] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1008.608753][T12244] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1008.652621][T12244] usb 2-1: Manufacturer: syz [ 1008.726301][T12244] usb 2-1: config 0 descriptor?? [ 1009.065901][ T4212] Bluetooth: hci0: command 0x041b tx timeout [ 1009.584642][T12244] rc_core: IR keymap rc-hauppauge not found [ 1009.590863][T12244] Registered IR keymap rc-empty [ 1009.617236][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1009.694613][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1009.725554][T12244] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1009.795885][T12244] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 1009.995890][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.025728][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.084823][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.124657][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.174752][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.245029][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.281469][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.317324][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.354781][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.394672][T12244] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1010.426589][T12244] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1010.454814][T12244] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1010.506642][T12244] usb 2-1: USB disconnect, device number 10 [ 1010.576827][T13252] chnl_net:caif_netlink_parms(): no params data found [ 1010.611604][T13293] loop1: detected capacity change from 0 to 40427 [ 1010.683004][T13293] F2FS-fs (loop1): Invalid log blocks per segment (4278190089) [ 1010.728009][T13293] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1010.789649][T13293] F2FS-fs (loop1): invalid crc value [ 1010.831127][T13293] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1010.985937][T13252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.016458][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.051958][T13252] device bridge_slave_0 entered promiscuous mode [ 1011.077081][T13252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.098812][T13293] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1011.109359][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.124682][T13293] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1011.155805][T13252] device bridge_slave_1 entered promiscuous mode [ 1011.295364][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 1011.303974][T13252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.345526][T13252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.515221][T13252] team0: Port device team_slave_0 added [ 1011.568053][ T8255] device hsr_slave_0 left promiscuous mode [ 1011.603780][ T8255] device hsr_slave_1 left promiscuous mode [ 1011.631878][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1011.878453][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.029511][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.122791][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.209310][ T8255] device bridge_slave_1 left promiscuous mode [ 1012.286443][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.316037][ T8255] device bridge_slave_0 left promiscuous mode [ 1012.322317][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.402356][ T8255] device veth1_macvtap left promiscuous mode [ 1012.415920][ T8255] device veth0_macvtap left promiscuous mode [ 1012.422371][ T8255] device veth1_vlan left promiscuous mode [ 1012.485696][ T8255] device veth0_vlan left promiscuous mode [ 1012.780975][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2518'. [ 1013.563515][ T4216] Bluetooth: hci0: command 0x0419 tx timeout [ 1015.192072][ T8255] team0 (unregistering): Port device team_slave_1 removed [ 1015.223397][ T8255] team0 (unregistering): Port device team_slave_0 removed [ 1015.251877][ T8255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.280506][ T8255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.393368][ T8255] bond0 (unregistering): Released all slaves [ 1015.458405][T13252] team0: Port device team_slave_1 added [ 1015.502995][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2519'. [ 1015.518642][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2521'. [ 1016.526407][T13252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.533512][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.559458][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.568948][T13252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.582470][T13252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.599913][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.625840][ C1] vkms_vblank_simulate: vblank timer overrun [ 1016.877744][T13252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.267495][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2525'. [ 1017.793075][T13349] 8021q: adding VLAN 0 to HW filter on device team1 [ 1018.136508][T13368] blk_update_request: I/O error, dev loop7, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 1018.161918][T13368] hfsplus: unable to find HFS+ superblock [ 1123.304433][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1123.311418][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8268/1:b..l P13252/1:b..l [ 1123.321244][ C0] (detected by 0, t=10503 jiffies, g=58733, q=54) [ 1123.327748][ C0] task:syz-executor state:R running task stack:22016 pid:13252 ppid: 13242 flags:0x00004000 [ 1123.339603][ C0] Call Trace: [ 1123.343017][ C0] [ 1123.345969][ C0] __schedule+0x11b8/0x43b0 [ 1123.350514][ C0] ? mark_lock+0x94/0x320 [ 1123.354870][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1123.360785][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 1123.366088][ C0] preempt_schedule_irq+0xb1/0x150 [ 1123.371207][ C0] ? __cond_resched+0xb0/0xb0 [ 1123.375911][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1123.381728][ C0] irqentry_exit+0x63/0x70 [ 1123.386152][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1123.391631][ C0] RIP: 0010:lock_acquire+0x1f2/0x3f0 [ 1123.396927][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 1123.416759][ C0] RSP: 0018:ffffc900030cea20 EFLAGS: 00000206 [ 1123.422836][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 44470720f9400a00 [ 1123.430815][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a700 [ 1123.438817][ C0] RBP: ffffc900030ceb28 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 1123.446801][ C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffffffff8c11c060 [ 1123.454790][ C0] R13: 1ffff92000619d50 R14: 0000000000000246 R15: dffffc0000000000 [ 1123.462804][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1123.468207][ C0] ? batadv_hardif_get_by_netdev+0x349/0x390 [ 1123.474212][ C0] ? batadv_hardif_release+0xd0/0xd0 [ 1123.479504][ C0] ? cfusbl_device_notify+0x196/0x5b0 [ 1123.484912][ C0] rcu_lock_acquire+0x2a/0x30 [ 1123.489599][ C0] ? rcu_lock_acquire+0x5/0x30 [ 1123.494368][ C0] veth_get_iflink+0x1d/0x230 [ 1123.499052][ C0] batadv_hard_if_event+0x991/0x17e0 [ 1123.504346][ C0] ? lockdep_rtnl_is_held+0x22/0x30 [ 1123.509559][ C0] raw_notifier_call_chain+0xcb/0x160 [ 1123.514944][ C0] register_netdevice+0x1275/0x16b0 [ 1123.520166][ C0] ? netif_stacked_transfer_operstate+0x200/0x200 [ 1123.526606][ C0] veth_newlink+0x668/0xda0 [ 1123.531119][ C0] ? rtnl_newlink+0x105e/0x17d0 [ 1123.535983][ C0] ? veth_validate+0x1f0/0x1f0 [ 1123.540802][ C0] ? validate_linkmsg+0x3db/0x4c0 [ 1123.545857][ C0] ? veth_validate+0x1f0/0x1f0 [ 1123.550669][ C0] rtnl_newlink+0x114c/0x17d0 [ 1123.555363][ C0] ? rtnl_newlink+0x371/0x17d0 [ 1123.560138][ C0] ? rtnl_setlink+0x450/0x450 [ 1123.564822][ C0] ? mark_lock+0x94/0x320 [ 1123.569295][ C0] ? rtnl_setlink+0x450/0x450 [ 1123.573979][ C0] rtnetlink_rcv_msg+0x9b9/0xe60 [ 1123.578930][ C0] ? rtnetlink_bind+0x80/0x80 [ 1123.583616][ C0] ? __lock_acquire+0x12d9/0x7c60 [ 1123.588683][ C0] ? verify_lock_unused+0x140/0x140 [ 1123.593892][ C0] ? verify_lock_unused+0x140/0x140 [ 1123.599137][ C0] netlink_rcv_skb+0x1e0/0x430 [ 1123.603910][ C0] ? rtnetlink_bind+0x80/0x80 [ 1123.608596][ C0] ? netlink_ack+0xb60/0xb60 [ 1123.613205][ C0] netlink_unicast+0x77c/0x920 [ 1123.617992][ C0] netlink_sendmsg+0x8ab/0xbc0 [ 1123.622778][ C0] ? netlink_getsockopt+0x560/0x560 [ 1123.627988][ C0] ? aa_sock_msg_perm+0x94/0x150 [ 1123.632933][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1123.638227][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 1123.643697][ C0] __sys_sendto+0x423/0x580 [ 1123.648214][ C0] ? __ia32_sys_getpeername+0x80/0x80 [ 1123.653637][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 1123.658687][ C0] ? lock_chain_count+0x20/0x20 [ 1123.663547][ C0] ? vtime_user_exit+0x2dc/0x400 [ 1123.668495][ C0] __x64_sys_sendto+0xda/0xf0 [ 1123.673184][ C0] do_syscall_64+0x4c/0xa0 [ 1123.677658][ C0] ? clear_bhb_loop+0x30/0x80 [ 1123.682339][ C0] ? clear_bhb_loop+0x30/0x80 [ 1123.687025][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1123.692950][ C0] RIP: 0033:0x7f0759de57fc [ 1123.697370][ C0] RSP: 002b:00007fff845926f0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1123.705804][ C0] RAX: ffffffffffffffda RBX: 00007f075ab39620 RCX: 00007f0759de57fc [ 1123.713784][ C0] RDX: 0000000000000064 RSI: 00007f075ab39670 RDI: 0000000000000003 [ 1123.721761][ C0] RBP: 0000000000000000 R08: 00007fff84592744 R09: 000000000000000c [ 1123.729737][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1123.737710][ C0] R13: 0000000000000000 R14: 00007f075ab39670 R15: 0000000000000000 [ 1123.745705][ C0] [ 1123.748727][ C0] task:kworker/u4:39 state:R running task stack:22656 pid: 8268 ppid: 2 flags:0x00004000 [ 1123.759515][ C0] Workqueue: bat_events batadv_nc_worker [ 1123.765157][ C0] Call Trace: [ 1123.768435][ C0] [ 1123.771400][ C0] __schedule+0x11b8/0x43b0 [ 1123.775930][ C0] ? mark_lock+0x94/0x320 [ 1123.780280][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1123.786186][ C0] ? preempt_schedule_irq+0xd0/0x150 [ 1123.791481][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 1123.796783][ C0] preempt_schedule_irq+0xb1/0x150 [ 1123.801906][ C0] ? __cond_resched+0xb0/0xb0 [ 1123.806600][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1123.812411][ C0] irqentry_exit+0x63/0x70 [ 1123.816836][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 1123.822300][ C0] RIP: 0010:rcu_lock_acquire+0x11/0x30 [ 1123.827767][ C0] Code: 03 38 c1 0f 8c 6c ff ff ff 4c 89 f7 e8 d8 34 46 f8 e9 5f ff ff ff 0f 1f 00 e8 0b bf 00 f8 e8 06 bf 00 f8 48 c7 c7 60 c0 11 8c <31> f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 68 35 02 77 89 e8 56 [ 1123.847383][ C0] RSP: 0018:ffffc9000451fbd8 EFLAGS: 00000293 [ 1123.853473][ C0] RAX: ffffffff8977023a RBX: dffffc0000000000 RCX: ffff888029770000 [ 1123.861453][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8c11c060 [ 1123.869433][ C0] RBP: ffff888062512380 R08: dffffc0000000000 R09: fffffbfff1ad1556 [ 1123.877421][ C0] R10: fffffbfff1ad1556 R11: 1ffffffff1ad1555 R12: 000000000000026b [ 1123.885398][ C0] R13: ffff88807b989358 R14: ffff888023134c80 R15: ffff888062512390 [ 1123.893383][ C0] ? rcu_lock_acquire+0xa/0x30 [ 1123.898162][ C0] ? rcu_lock_acquire+0xa/0x30 [ 1123.902933][ C0] batadv_nc_worker+0xc9/0x5c0 [ 1123.907713][ C0] process_one_work+0x863/0x1000 [ 1123.912673][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1123.918313][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1123.923610][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 1123.928642][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1123.934032][ C0] ? wq_worker_running+0x97/0x170 [ 1123.939069][ C0] worker_thread+0xaa8/0x12a0 [ 1123.943781][ C0] kthread+0x436/0x520 [ 1123.947860][ C0] ? rcu_lock_release+0x20/0x20 [ 1123.952716][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1123.957313][ C0] ret_from_fork+0x1f/0x30 [ 1123.961755][ C0] [ 1123.964780][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10500 jiffies! g58733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1123.977110][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=60293 [ 1123.984996][ C0] rcu: rcu_preempt kthread starved for 10501 jiffies! g58733 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1123.996363][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1124.006331][ C0] rcu: RCU grace-period kthread stack dump: [ 1124.012217][ C0] task:rcu_preempt state:I stack:28032 pid: 15 ppid: 2 flags:0x00004000 [ 1124.021438][ C0] Call Trace: [ 1124.024717][ C0] [ 1124.027652][ C0] __schedule+0x11b8/0x43b0 [ 1124.032162][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1124.037915][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1124.043836][ C0] schedule+0x11b/0x1e0 [ 1124.048004][ C0] schedule_timeout+0x15c/0x280 [ 1124.052862][ C0] ? console_conditional_schedule+0x40/0x40 [ 1124.058765][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 1124.064675][ C0] ? update_process_times+0x200/0x200 [ 1124.070061][ C0] ? prepare_to_swait_event+0x331/0x350 [ 1124.075620][ C0] rcu_gp_fqs_loop+0x29e/0x11b0 [ 1124.080486][ C0] ? dump_blkd_tasks+0x7e0/0x7e0 [ 1124.085434][ C0] ? rcu_gp_init+0x10e0/0x10e0 [ 1124.090207][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1124.095415][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.100631][ C0] rcu_gp_kthread+0x98/0x350 [ 1124.105232][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1124.110492][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1124.116419][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1124.121481][ C0] kthread+0x436/0x520 [ 1124.125570][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1124.130702][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1124.135310][ C0] ret_from_fork+0x1f/0x30 [ 1124.139749][ C0] [ 1124.142779][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1124.149100][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1124.154322][ C1] NMI backtrace for cpu 1 [ 1124.154333][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.15.184-syzkaller #0 [ 1124.154349][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1124.154358][ C1] RIP: 0010:lock_is_held_type+0xd4/0x190 [ 1124.154380][ C1] Code: 49 ff c4 48 63 83 e8 0a 00 00 49 83 c7 28 49 39 c4 7c d8 eb 11 48 c7 c7 a0 b8 fe 8b 4c 89 e6 e8 52 03 5a fa eb cb 31 ed eb 20 <83> fd ff 74 16 89 e9 31 c0 41 f6 47 22 03 0f 95 c0 31 ed 39 c1 40 [ 1124.154395][ C1] RSP: 0018:ffffc90000dd0c38 EFLAGS: 00000002 [ 1124.154410][ C1] RAX: 0000000000000001 RBX: ffff88813fe38000 RCX: 0000000000000001 [ 1124.154421][ C1] RDX: 0000000000010000 RSI: ffff8880744d4b00 RDI: ffff88813fe38af0 [ 1124.154434][ C1] RBP: 00000000ffffffff R08: 0000000000000004 R09: 0000000000000003 [ 1124.154444][ C1] R10: fffff520001ba180 R11: 1ffff920001ba180 R12: 0000000000000000 [ 1124.154456][ C1] R13: 0000000000000046 R14: ffff8880744d4b00 R15: ffff88813fe38af0 [ 1124.154468][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1124.154482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1124.154494][ C1] CR2: 0000200000036000 CR3: 000000006760f000 CR4: 00000000003506e0 [ 1124.154513][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1124.154523][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1124.154533][ C1] Call Trace: [ 1124.154539][ C1] [ 1124.154547][ C1] advance_sched+0x141/0x940 [ 1124.154568][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1124.154586][ C1] ? debug_object_deactivate+0x63/0x340 [ 1124.154607][ C1] __hrtimer_run_queues+0x53d/0xc40 [ 1124.154630][ C1] ? taprio_free_sched_cb+0x190/0x190 [ 1124.154653][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 1124.154671][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1124.154690][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 1124.154719][ C1] __sysvec_apic_timer_interrupt+0x137/0x4a0 [ 1124.154741][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 1124.154760][ C1] [ 1124.154764][ C1] [ 1124.154769][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1124.154786][ C1] RIP: 0010:default_idle+0xb/0x10 [ 1124.154803][ C1] Code: bf 48 89 df e8 16 c9 12 f8 eb b5 e8 4f be f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d a7 53 5b 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1124.154817][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 1124.154830][ C1] RAX: 6198ecfff928fc00 RBX: ffff88813fe38000 RCX: 6198ecfff928fc00 [ 1124.154842][ C1] RDX: 0000000000000001 RSI: ffffffff8a0b11c0 RDI: ffffffff8a59a700 [ 1124.154853][ C1] RBP: ffffc90000d67e80 R08: dffffc0000000000 R09: ffffed101722765a [ 1124.154866][ C1] R10: ffffed101722765a R11: 1ffff11017227659 R12: ffffffff8d68aaa8 [ 1124.154878][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11027fc7000 [ 1124.154896][ C1] default_idle_call+0x81/0xc0 [ 1124.154913][ C1] do_idle+0x21b/0x5b0 [ 1124.154933][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1124.154949][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1124.154968][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1124.154989][ C1] cpu_startup_entry+0x14/0x20 [ 1124.155006][ C1] start_secondary+0x31f/0x430 [ 1124.155025][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 1124.155047][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 1124.155071][ C1]