last executing test programs: 6m21.524635096s ago: executing program 4 (id=574): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x100000, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000006000000feffffff00"]}, 0xa5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) getpid() syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) vmsplice(r3, &(0x7f00000001c0), 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r6, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) sendto$inet(r6, &(0x7f0000000100), 0x0, 0x4040004, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) getsockname$packet(r7, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4c0c0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x2}]}, {0x0, [0x2e, 0x5f, 0xe]}}, 0x0, 0x29, 0x0, 0x1, 0x1, 0x0, @void, @value}, 0x28) 6m20.477283589s ago: executing program 4 (id=580): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x7, 0x60000000, 0x2968236e, 0x40552, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$kcm(0xf, 0x3, 0x2) fsopen(&(0x7f0000000540)='pipefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x34000, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) 6m20.300713103s ago: executing program 4 (id=581): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80102) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f00000001c0), 0x95) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x0, 0x5ab, {{0x14, 0x4, 0x0, 0x5, 0x50, 0x67, 0x0, 0x73, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @local, {[@timestamp={0x44, 0x10, 0x58, 0x0, 0x1, [0x6, 0x2, 0x3]}, @timestamp_addr={0x44, 0x24, 0xa, 0x1, 0x4, [{@empty, 0x5}, {@rand_addr=0x64010101, 0x3}, {@local, 0xfffffff7}, {@rand_addr=0x64010102, 0x1}]}, @rr={0x7, 0x7, 0x41, [@broadcast]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltclass={0x9c, 0x29, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x2, 0x10}, {0xfff2, 0xffe0}, {0xffe0}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x24, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0xfc87}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x68}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x100}]}}, @TCA_RATE={0x6}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x8}}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}, @TCA_RATE={0x6, 0x5, {0x7}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x9c}, 0x1, 0x0, 0x0, 0x804}, 0x4010) writev(r0, &(0x7f0000000000), 0x0) 6m20.265904201s ago: executing program 4 (id=582): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xf8, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xe8, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e58"]}]}, 0xf8}], 0x1}, 0x0) 6m20.213763384s ago: executing program 4 (id=583): r0 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000a0000000000000003000003850000002a00000085000000a000000e95001f0000210000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000000)={&(0x7f00000001c0)=[{0x3, 0x3000, 0xfedc, &(0x7f0000000380)="eb3a64a0c33bcb9e939486dce887df219156c806f959908aa69c4285c84047581bea920d6c0a7926fa8a683e50c3622ae069803fdaed003aaa14475da3410435cefa2d908452355844e1114b3071f01cc623ccc87b51818b44f732a623ea5ad8e6931393af83eb751b58a014f40f7a11f3ab32a4f0fe30ec21c349cf871142464ed712a0655c7ff16548bfa81032501d20403561107487db27d1a414bb17335f35bce6823cfbfd237e6e5684991d7ae1dab97835a0af500c02672c3c82c803af1b663c67df2081a0b09efefebbdd22fca22eb1619f"}], 0x1}) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x2001ff, 0x8401) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRES8=r4, @ANYRES64=r2], 0x28}}, 0x40040c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000840)={0x0, 0x0}) write$cgroup_pid(r6, &(0x7f00000008c0)=r7, 0x12) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) dup(r9) tkill(r8, 0x13) wait4(r8, 0x0, 0x4000000a, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x52) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 6m20.067807469s ago: executing program 4 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)="9e77c5e04e47fd82e5ebd4de3e69e6940343de5ad743d8d0a4137e6b24826171dc16266250f7296743857ffd494f929de41aef0f7fc6fdfe74a5e6a63b404b877f38cc65c54fbea52bdf3af4ec3d7021e7e8d40218d95e3900000000", &(0x7f0000000740), 0x77, r0}, 0x6f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000200)="abb5", &(0x7f00000002c0)=""/56}, 0x20) 6m4.948947176s ago: executing program 32 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)="9e77c5e04e47fd82e5ebd4de3e69e6940343de5ad743d8d0a4137e6b24826171dc16266250f7296743857ffd494f929de41aef0f7fc6fdfe74a5e6a63b404b877f38cc65c54fbea52bdf3af4ec3d7021e7e8d40218d95e3900000000", &(0x7f0000000740), 0x77, r0}, 0x6f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000200)="abb5", &(0x7f00000002c0)=""/56}, 0x20) 5m47.160106194s ago: executing program 0 (id=698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x4fc94c3d, 0x9, 0x34424752, 0x5, 0x8, [{0x10000, 0x100}, {0x1, 0x6}, {0x4, 0x7}, {0x2, 0x53}, {0xb88, 0xaec6}, {0xca2, 0x5}, {0xa, 0xac2}, {0xfffffff9}], 0x1, 0x10, 0x1, 0x2, 0x6}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000001840)={0x1, 0x0, @pic={0x0, 0x3, 0xfd, 0xb4, 0x0, 0x7f, 0x0, 0x8, 0x8, 0x1d, 0x29, 0x5, 0x1, 0x8, 0x2, 0x3}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000003800048034000180090001007866726d000000002400028005000300250000000800014000000001080002400000000208080440000000020900010073797a30000000000900020073797a32"], 0x8c}}, 0x4000044) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x18, 0x140b, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000c5}, 0x4) 5m43.758124591s ago: executing program 0 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8a}, 0x0) (async) getrlimit(0xe, &(0x7f00000000c0)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) (async) keyctl$setperm(0x5, 0x0, 0x9290101) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, &(0x7f0000000600)={0x0, [[0x9], [0x1000], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x1}, {}, {}, {}, {}, {}, {0x0, 0x8000}, {}, {0x0, 0x401}], '\x00', 0x0, 0x0, 0x0, 0x2}) (async) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2710, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) (async) connect$l2tp6(r3, &(0x7f0000000140)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}, 0x20) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix_mp={0x3, 0x6, 0x0, 0x7, 0xb, [{0xd, 0x2}, {0xfffffffc}, {0x3, 0x7}, {0x7fffffff, 0x1aa}, {0x3, 0x8}, {0x6, 0x7fff}, {0x9e1, 0x4}, {0x9}], 0x7, 0x80, 0x1, 0x1, 0x7}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r9, 0x4b3a, 0x1) (async) ioctl$TCXONC(r9, 0x4b3a, 0x2) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m43.353444834s ago: executing program 0 (id=712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000cc0)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x2d0, 0x178, 0x178, 0x2d0, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {}, 0x9}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}, {[{}, {0xe}]}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x2, 0x0, 0x1ff}}, @common=@unspec=@connlimit={{0x40}, {[0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x3, 0x1, {0x4413}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5}, {0x1, 0x4, 0x5}, 0xb}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3c8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="911052000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffffe}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20004801) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0x10f, @time}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=':'], 0x38}}, 0x20000080) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0300000007000000000000000400000000000000000003000000000008"], 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x1120000, &(0x7f0000000140)={[{@xino_off, 0x3a}], [{@fowner_gt={'fowner>', r5}}], 0x2f}) 5m41.450145074s ago: executing program 0 (id=717): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) dup(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) dup(r2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5m40.400054003s ago: executing program 0 (id=721): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) setpgid(r0, r1) setpgid(0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x4}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) (async) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000080)='tmpfs\x00', 0x800, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 5m39.964708314s ago: executing program 0 (id=724): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 5m24.928329115s ago: executing program 33 (id=724): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 26.548693768s ago: executing program 2 (id=1693): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000050) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) fallocate(r0, 0x1, 0x3, 0x2d22) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0) 26.243307586s ago: executing program 2 (id=1697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)={0x8, 0x0, 0x0, 0xd}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xdc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300, {[@timestamp={0x44, 0x4, 0x7f, 0x0, 0x9}]}}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xffef}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x2}, {0x6, 0xffff}, {0xffea}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r10, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x1c, "fee8a2ab780e00001ea8ffffffff0000000000000004ddb49a000000000000000000f8ff000800000000000000000000000000001400", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) 24.902408695s ago: executing program 2 (id=1702): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB="de440c0fe48cfd0c8492fe71e4bd460c3de2ff44008ce0", @ANYRES8=r0, @ANYRES16=r1, @ANYRES16=r0], 0xd0}, 0x1, 0x0, 0x0, 0x48840}, 0x20014884) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r7, &(0x7f0000000300)={'full', 0x20, 0x10000, 0x20, 0x8001}, 0x2f) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r9 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r9, &(0x7f0000000100)={0x20}, 0xfdef) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x2200080, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r8}}) read$FUSE(r9, &(0x7f0000000240)={0x2020}, 0xffa6) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) r13 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000340)=0x400, 0x4) io_uring_register$IORING_REGISTER_FILES(r10, 0x2, &(0x7f00000008c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r10], 0x1}) 23.782173331s ago: executing program 2 (id=1709): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x5}) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='msdos\x00', 0x5, 0x0) 23.518410693s ago: executing program 2 (id=1710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}}, 0x14}}, 0x20004000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}}}, 0x9) setrlimit(0x1, &(0x7f0000000000)={0x5, 0x3ff}) syz_open_procfs$pagemap(0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 22.483128673s ago: executing program 2 (id=1714): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0xff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}]}, 0x3c}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) 8.057187015s ago: executing program 5 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000008000741000000032c0003800800024000000000080001400000000018000380140001006e657464657673696d300000000000001400000010000100f64eab6ecc4321ac489700000000000000000000000a"], 0x88}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r3 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x2007, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x4}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001900)=ANY=[], 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) 7.19742193s ago: executing program 1 (id=1764): socket$kcm(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x20040800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x5, 0xffffff6a, 0x180, 0x0, 0x320, 0x258, 0x258, 0x320, 0x258, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 6.919502956s ago: executing program 34 (id=1714): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) setrlimit(0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x8}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0xff}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x9}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x2}]}, 0x3c}}, 0x14) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c0017800400ad0014"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x3b, 0x0, "6606ca7ce41b346ac33e74fc00d9165a44e86835fec0b518269fd4c21a897da3d787c09dcb8216a272aea67961649d1590065253e07bd0b461b349eb64746d76c42fb2623034078188f0009f9f10d5f0"}, 0xd8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x0) 6.711542156s ago: executing program 3 (id=1766): gettid() pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6.468587135s ago: executing program 6 (id=1767): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000050) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x4) landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0) 6.346334363s ago: executing program 5 (id=1768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 6.310607067s ago: executing program 3 (id=1769): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) fcntl$notify(r2, 0x402, 0x2a2cb87e9b60c13d) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x161, 0x40000867, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) getrlimit(0x5, 0x0) r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0x27) 5.926369136s ago: executing program 6 (id=1770): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback={0x41}, 0x800000}, 0x1c) 5.924607995s ago: executing program 1 (id=1771): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x3c5, 0x6, {0x0}, {0xee01}, 0x7ff, 0x2}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xb000000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000200000000000000ff", @ANYBLOB="0000000000000000b7080000c50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000185000000a0000000000", @ANYRES32, @ANYBLOB="000000ed00000000b7020000000000008500000086000040431b000008000000180000000500000000000000d500000018610000020000000000000006000000950000000000000031f5db0e7352af50b864c0e85d"], &(0x7f0000000280)='GPL\x00', 0x13a, 0xba, &(0x7f00000002c0)=""/186, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x1], 0x0, 0x10, 0x7fff, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=@newlinkprop={0xbc, 0x6c, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa000, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0x80}, @IFLA_MACSEC_ES={0x5, 0xa, 0xff}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x80}, @IFLA_PHYS_SWITCH_ID={0x5, 0x24, 'M'}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4800000}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "a79039465843a1ec4aa821777502dfb0"}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_batadv\x00'}, @IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}, @IFLA_XDP_FLAGS={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0xa900c5d3f2347a22}]}, @IFLA_NET_NS_PID={0x8, 0x13, r0}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4854}, 0x800) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = getuid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004b80)=ANY=[@ANYBLOB="302500002a0007010000000000000000037c000008009a00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00%\x00', @ANYRES32, @ANYBLOB="0b7681a473cb56c91a581358367444d3301f58f27334d9ebfb8420ea25c1ea41c1dc5a9115a27a19e6a6d92fb2806df783f1fc641d3f68183dfed5586b2cf9bb363341edf38f069d4aa735f4707079799c3760b7dbc36956b4e13a3e96ceeb1699fa0021c0c772e7d71c4afcf3d57d102ca7e8942234c68675d5cc1d04f4b8a6b18a3dc35d33e858b9cb1bd00736617684a6208e8050684743021666593593e38d2169cebb3e6c276451654380d4f04ed7193d4ee7f94ae908791ea47dab15af25f3ca040058000008005800", @ANYRES32, @ANYBLOB="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"], 0x2530}}, 0x0) 5.860119405s ago: executing program 3 (id=1772): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0x1a, r3, 0xb, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r9, &(0x7f00000003c0), 0x0, 0x0, 0x0) writev(r9, &(0x7f00000003c0), 0x100000000000022d) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8, @ANYBLOB="13919949f6f00ae0cc01e71ca8c02bf6601ce0000000f147cb3721e660491665278fc70cd9f21680403e72bd6abbf4983386745b4f18dd6ba8f08bee693db9c6e29eaaff6f509ab47ef0ee58d3c10afc9ea845afed05ba361bea98e963f9a8fc307b822e887a72b51bb220c0bad5a6028c8ec58e5dcddfa3bdd2de9dd13ba7cf8fa6fba86895da5e31c232249610fb289ba4a674540745895d2a490f9c5bf155f391f7ac054cc2f80a77732c779c1eb9e35b44ead29bd4bdfdedec60989873"], 0xfd45}}, 0x0) bind$nfc_llcp(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000680), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000008000180000000000000000b7080000000000007baaf0ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa420000000000007040000f0ffffffb70200000800000418230000", @ANYRESOCT, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.96822791s ago: executing program 5 (id=1773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xa, 0x9}) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) syz_emit_ethernet(0xae, &(0x7f0000019440)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000001340)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private1}}}}}}, 0x0) r1 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r4, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0xc) r5 = syz_clone(0x1950b00, &(0x7f00000193c0)="b09f98ee3ad20f5ca07a00d32b061f06605dc1b9550589a72539ec299028ca670ad87ec10af976bf4db7c9f66da85a37cbda2f000000000000000000002776ede5c2adca00"/81, 0x51, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000019300)="558266934b200c326d84ff4eeb10936c439c8d6b2cb43f88ab56cd6b8009c02944785913573b01cb1314a39c0b64bfd64a4ae0a1a1696b2343558fc91a49407854bbfc6c2ea2dcb083a497dd5a24a2b5d330eeeba79a776d9c3261addc") openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000019380)=0x8ce3) semop(0x0, 0x0, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(0x0, 0x7, 0x80040) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x80) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x1) 4.931279447s ago: executing program 3 (id=1774): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(r0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r6 = syz_io_uring_setup(0x72ae, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x0, 0x36}, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x20044000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000380)="5e73663bf4082f7c6c9ed7f09d6dd7be5a06dfd645630500c1a303434a36bfc41f1c1eb3c4f54167ec77ffdc0fb243c3111dda42112650cc00000000000000000200", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 4.414615384s ago: executing program 6 (id=1775): socket$packet(0x11, 0x3, 0x300) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vcan0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x181341, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0), 0x0, 0x0) 4.413610554s ago: executing program 1 (id=1776): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(0x0, 0xd21, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, 0x0, 0x20040000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdb3, &(0x7f0000000080)={0x0}}, 0x15) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xd}}, './file0\x00'}) syz_io_uring_setup(0x1639, &(0x7f0000000100)={0x0, 0x80d4, 0x400, 0x0, 0x38f, 0x0, r4}, &(0x7f0000000040), &(0x7f0000000180)) 4.412734641s ago: executing program 5 (id=1777): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x1}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x2a2cb87e9b60c13d) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x161, 0x40000867, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r5, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c0", 0x10, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1ab8ff00000000bfa100000000000007010000f0ffffffb702000002000000b70300000000000085000000c700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.394116308s ago: executing program 3 (id=1778): gettid() pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x87}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x800000000000002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.513275943s ago: executing program 6 (id=1779): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000050) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0) 2.373366966s ago: executing program 6 (id=1780): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de0108000109021b0001000003000904000001785ecc00090585020004"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x10}}}, 0x24}}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f00000014c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r5, 0xfffffffffffffffe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000d80)={0x5f, 0x7d, 0x1, {{0x0, 0x3a, 0xd87, 0x3, {0x8, 0x4, 0x8}, 0x10000, 0x0, 0xf86, 0x3ff, 0x0, '', 0x1, '#', 0x6, '\\.+\')$'}, 0x10, 'signal_generate\x00', r3, r4, r3}}, 0x5f) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) (async) r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffa000/0x4000)=nil, 0x4) (async) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffa000/0x4000)=nil, 0x4) syz_usb_control_io(r7, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r7, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x20, 0x8, 0x14, {0x14, 0x11, "ec374c2685509825497316c4204c9eb8cadb"}}, &(0x7f0000000540)={0x0, 0x3, 0x63, @string={0x63, 0x3, "d372bae982b2bcea28517f06cd2c5e72bcead3cbb7141229866c89d16714ae68241b091d2e4d544c6ce81618472df3c9b55b684dbe4e8db29e86bcbb9b57ae21584e4a440281274eeaff75f3907e547932fdc5182f32c5bb02ff260e0b21e1cee6"}}, &(0x7f0000000400)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xb, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x8, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "28040ce22d9b8eb6275666f4b6917b59"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x1, 0x2, 0xa8, "e366f33f", "3333e26e"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf, 0x3, 0x46, 0x1, 0x401}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="0010d7000000e3e8e03b30e0f27d8fcaca2ab91f35c9c86dd8d8a622a11aaa998dcc4f465fb62c33845944d6ba184601f2fbb23ff5bf0d1b5d5db2aa1b2116d1ac60386d851fa5f83058c576104318aeb0be7e6c209c85a37f5534010b41b43e3eb9825a8a1ccfb70ce03fa4887939c98e13b5ee4c460493ccc5e09295f3315a87671c672e5cebd92516b945156ddded2e6f598fcc5ba687a98d4e7cac2894266f991392cbdf8fd8c2e987cea897fc9b590119f809310f4d83903aca9ef90b0b647ca588003e28ac29a85dbca89b284dccbca88b9cfbaba85ce1fb6ddf"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x160, 0x1}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x58}, &(0x7f0000000940)={0x40, 0xb, 0x2, "e8ef"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x200}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8560"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x56}}) (async) syz_usb_control_io(r7, &(0x7f0000000600)={0x2c, &(0x7f00000003c0)={0x20, 0x8, 0x14, {0x14, 0x11, "ec374c2685509825497316c4204c9eb8cadb"}}, &(0x7f0000000540)={0x0, 0x3, 0x63, @string={0x63, 0x3, "d372bae982b2bcea28517f06cd2c5e72bcead3cbb7141229866c89d16714ae68241b091d2e4d544c6ce81618472df3c9b55b684dbe4e8db29e86bcbb9b57ae21584e4a440281274eeaff75f3907e547932fdc5182f32c5bb02ff260e0b21e1cee6"}}, &(0x7f0000000400)={0x0, 0xf, 0x2a, {0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0xb, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x4, 0x8, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "28040ce22d9b8eb6275666f4b6917b59"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x1, 0x2, 0xa8, "e366f33f", "3333e26e"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0xf, 0x3, 0x46, 0x1, 0x401}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="0010d7000000e3e8e03b30e0f27d8fcaca2ab91f35c9c86dd8d8a622a11aaa998dcc4f465fb62c33845944d6ba184601f2fbb23ff5bf0d1b5d5db2aa1b2116d1ac60386d851fa5f83058c576104318aeb0be7e6c209c85a37f5534010b41b43e3eb9825a8a1ccfb70ce03fa4887939c98e13b5ee4c460493ccc5e09295f3315a87671c672e5cebd92516b945156ddded2e6f598fcc5ba687a98d4e7cac2894266f991392cbdf8fd8c2e987cea897fc9b590119f809310f4d83903aca9ef90b0b647ca588003e28ac29a85dbca89b284dccbca88b9cfbaba85ce1fb6ddf"], &(0x7f0000000640)={0x0, 0xa, 0x1, 0xf9}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x160, 0x1}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x58}, &(0x7f0000000940)={0x40, 0xb, 0x2, "e8ef"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x200}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "8560"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0xb}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1}, &(0x7f0000000c00)={0x40, 0x21, 0x1, 0x56}}) socket(0x2a, 0x2, 0x0) (async) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000d00)={@random="80120fe09cb1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@llc={0x4, {@snap={0x0, 0xab, "a9", "4e501d", 0x9200, "d8b53f02d009349b50c8a8da105d27aff7774df1a0b8137be9cb1157e30ec29e7dec87f4b7a31d7d28e72e9d7cd27c9a13a7ab03fc9bfd7c939b6762803f90aa9bd4ab76226fe344140e8ababaa534b28418e3e0a62464231fd7c990c996967dddac4ac59624"}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x5, 0xb}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x50, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 2.242954761s ago: executing program 3 (id=1781): r0 = io_uring_setup(0x6503, &(0x7f0000001300)={0x0, 0x0, 0x1046}) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f00000007c0)={0x2020}, 0x2020) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x101, r2, 0x80000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xffff, 0xb}}, './file0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f00000003c0)={0x1, 0x4, 0xeee48000, 0x2000, &(0x7f0000306000/0x2000)=nil, 0x84, r7}) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f0000000200)={0x0, 0x9a82, 0x800, 0x1, 0x110}, 0x1) syz_usb_connect(0x0, 0x48, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xa9, 0x98, 0x33, 0x10, 0x12d1, 0x6456, 0x89a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x3, 0x9, 0x6, 0x40, 0x90, [{{0x9, 0x4, 0xf3, 0x8, 0x1, 0xff, 0x4, 0x3f, 0x5, [], [{{0x9, 0x5, 0x4, 0x3, 0x10, 0x3, 0x2, 0x2}}]}}, {{0x9, 0x4, 0xf3, 0x7, 0x0, 0x4f, 0x89, 0xa8, 0x5}}, {{0x9, 0x4, 0x23, 0x7, 0x1, 0xd0, 0x91, 0x9f, 0x7f, [], [{{0x9, 0x5, 0x6, 0x2, 0x40, 0x7, 0x4, 0xb}}]}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 1.957248901s ago: executing program 5 (id=1782): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400001, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80282, 0x8) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000480)={[&(0x7f0000000440)='\x00']}, 0x100) rt_sigpending(&(0x7f00000004c0), 0x8) getrlimit(0x9, &(0x7f0000000680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="8d", 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200), 0x111881, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6(0xa, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib={0x1b, 0x5, 0x1, {"0d8bcc9b3fbe86726ac6cbfa5e9d39a6"}, 0x10001, 0xa, 0xfffffffffffffffd}}}, 0x90) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000080) 1.949788765s ago: executing program 1 (id=1783): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 907.04667ms ago: executing program 1 (id=1784): r0 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x15) dup(r1) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x80000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 232.705ms ago: executing program 5 (id=1785): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e22, 0x0, @mcast2}}, 0x5c) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="ac28a6e078b0fb6b0e08d80b4dce71d529fb7261801fbb3eb727c933d1f62b10f0b94a7f49adaa7f56e82c7fe79d859a51f50779899f126384ac98f3a2e37f80d7e52c2a490804a46ffd6eebe2f96f65045fa6f82d184f31b22bb4a4644b734f40789024c95989ca8d0226c4db13", 0x6e}], 0x1}, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 84.923808ms ago: executing program 6 (id=1786): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x2, 0x10, 0x409, 0x11}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKDIR(r2, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x4, 0x1, 0x8}}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000500)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb}) 0s ago: executing program 1 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000c3041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x508a, 0xa3}}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x2, 0x6, 0xfffffffa, 0x3ff, 0x4, 0x0, 0x10}, 0x1c) kernel console output (not intermixed with test programs): 7f33921b5fa0 R15: 00007ffcc0f3e3a8 [ 308.738120][ T8929] [ 309.019818][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.114364][ T5821] Bluetooth: hci4: command tx timeout [ 309.159789][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 309.205357][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 309.288647][ T30] audit: type=1804 audit(2000000107.180:8): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.807" name="bus" dev="ramfs" ino=23309 res=1 errno=0 [ 309.307940][ T24] usb 4-1: device descriptor read/64, error -71 [ 309.324977][ T8931] Invalid ELF header magic: != ELF [ 309.343811][ T8783] team0: Port device team_slave_0 added [ 309.359073][ T8783] team0: Port device team_slave_1 added [ 309.370180][ T8922] ptrace attach of "./syz-executor exec"[5825] was attempted by "\x07  ┐°\x0b          Б `  \x09 Х ramfs  \x09 syzkaller М ╨  Ёе └  └  ╨  └Х Ё  ░  └       [ 309.505734][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.546725][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 309.596802][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.675311][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.701314][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.770276][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.781038][ T24] usb 4-1: device descriptor read/64, error -71 [ 309.807427][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.827038][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.852959][ C0] vkms_vblank_simulate: vblank timer overrun [ 309.897596][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.926998][ T24] usb usb4-port1: attempt power cycle [ 310.035334][ T8783] hsr_slave_0: entered promiscuous mode [ 310.071017][ T8783] hsr_slave_1: entered promiscuous mode [ 310.087738][ T8783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.095509][ T8783] Cannot create hsr debugfs directory [ 310.287198][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 310.327397][ T24] usb 4-1: device descriptor read/8, error -71 [ 310.577770][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 310.596266][ T8783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 310.608128][ T24] usb 4-1: device descriptor read/8, error -71 [ 310.616916][ T1210] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 310.628220][ T8783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 310.644150][ T8783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 310.659790][ T8783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 310.687009][ T5905] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 310.717527][ T24] usb usb4-port1: unable to enumerate USB device [ 310.786716][ T1210] usb 3-1: Using ep0 maxpacket: 8 [ 310.795029][ T1210] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 310.804809][ T8783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.826973][ T1210] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 310.835452][ T1210] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 310.845830][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 310.848407][ T8783] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.871828][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.884897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.892140][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.907356][ T1210] usb 3-1: config 250 has no interface number 0 [ 310.916860][ T5905] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.919669][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.931640][ T1210] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 310.936749][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.954496][ T5905] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 310.979054][ T1210] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 310.997613][ T5905] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.013853][ T1210] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 311.035791][ T1210] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 311.056928][ T5905] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 311.066286][ T5905] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 311.074785][ T1210] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 311.099522][ T5905] usb 2-1: Manufacturer: syz [ 311.106141][ T1210] usb 3-1: config 250 interface 228 has no altsetting 0 [ 311.118675][ T5905] usb 2-1: config 0 descriptor?? [ 311.139272][ T1210] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 311.150561][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 311.163184][ T1210] usb 3-1: Product: syz [ 311.167946][ T1210] usb 3-1: SerialNumber: syz [ 311.189395][ T1210] hub 3-1:250.228: bad descriptor, ignoring hub [ 311.208314][ T1210] hub 3-1:250.228: probe with driver hub failed with error -5 [ 311.246940][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 311.247176][ T5821] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 311.398966][ T1210] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 311.457455][ T5905] rc_core: IR keymap rc-hauppauge not found [ 311.478345][ T5905] Registered IR keymap rc-empty [ 311.488156][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 311.518554][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 311.559884][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 311.560747][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.666999][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 311.721760][ C1] usblp0: nonzero read bulk status received: -71 [ 311.758654][ T2152] usb 3-1: USB disconnect, device number 35 [ 311.777726][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 311.793237][ T2152] usblp0: removed [ 311.839180][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 311.874954][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.044521][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.199672][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.389966][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.499723][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.550546][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.597433][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.629429][ T5905] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 312.668255][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 312.685521][ T5905] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 312.736286][ T5905] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 312.952741][ T5905] usb 2-1: USB disconnect, device number 31 [ 314.097425][ T9014] netlink: 'syz.2.821': attribute type 2 has an invalid length. [ 314.249826][ T8783] veth0_vlan: entered promiscuous mode [ 314.316270][ T8783] veth1_vlan: entered promiscuous mode [ 314.374635][ T30] audit: type=1804 audit(2000000112.270:9): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.823" name="bus" dev="ramfs" ino=23683 res=1 errno=0 [ 314.375600][ T9022] Invalid ELF header magic: != ELF [ 314.407026][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 314.421455][ T8783] veth0_macvtap: entered promiscuous mode [ 314.422664][ T9029] vivid-000: ================= START STATUS ================= [ 314.454897][ T8783] veth1_macvtap: entered promiscuous mode [ 314.463687][ T9029] vivid-000: Generate PTS: true [ 314.470260][ T9029] vivid-000: Generate SCR: true [ 314.476003][ T9029] tpg source WxH: 320x240 (Luma) [ 314.486116][ T9029] tpg field: 1 [ 314.497912][ T9029] tpg crop: (0,0)/320x240 [ 314.504877][ T9030] binder: 9024:9030 ioctl c00c620f 0 returned -14 [ 314.512714][ T9029] tpg compose: (0,0)/320x240 [ 314.517229][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.534060][ T9029] tpg colorspace: 8 [ 314.534583][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.545104][ T9029] tpg transfer function: 0/0 [ 314.558325][ T8783] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.560597][ T9029] tpg quantization: 0/0 [ 314.568136][ T8783] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.582746][ T8783] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.591695][ T8783] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.592874][ T9029] tpg RGB range: 0/2 [ 314.625511][ T9029] vivid-000: ================== END STATUS ================== [ 314.679567][ T5905] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 314.723957][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.737266][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.781902][ T6394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.793968][ T6394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.827115][ T5905] usb 4-1: device descriptor read/64, error -71 [ 315.067054][ T5905] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 315.282022][ T5905] usb 4-1: device descriptor read/64, error -71 [ 315.818152][ T5905] usb usb4-port1: attempt power cycle [ 316.368943][ T5822] Bluetooth: hci5: command 0xfc11 tx timeout [ 316.384788][ T5821] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 316.861649][ T5905] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 316.887605][ T5905] usb 4-1: device descriptor read/8, error -71 [ 316.980281][ T9059] kvm: pic: non byte write [ 316.991976][ T9061] netlink: 'syz.2.832': attribute type 2 has an invalid length. [ 317.136853][ T5905] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 317.171657][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.178178][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.191661][ T5905] usb 4-1: device descriptor read/8, error -71 [ 317.489904][ T5905] usb usb4-port1: unable to enumerate USB device [ 319.056744][ T5874] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 319.290686][ T5874] usb 3-1: config 0 has an invalid interface number: 95 but max is 0 [ 319.310619][ T5874] usb 3-1: config 0 has no interface number 0 [ 319.336134][ T5874] usb 3-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 319.379832][ T5874] usb 3-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 319.406721][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.436861][ T5874] usb 3-1: Product: syz [ 319.450419][ T5874] usb 3-1: Manufacturer: syz [ 319.462718][ T9098] netlink: 32 bytes leftover after parsing attributes in process `syz.5.841'. [ 319.494155][ T5874] usb 3-1: SerialNumber: syz [ 319.534802][ T5874] usb 3-1: config 0 descriptor?? [ 319.546768][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 319.556460][ T9106] netlink: 32 bytes leftover after parsing attributes in process `syz.5.841'. [ 319.573909][ T9081] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.736705][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 319.746044][ T9110] netlink: 'syz.1.844': attribute type 2 has an invalid length. [ 319.793092][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 319.802880][ T24] usb 7-1: config 1 has an invalid interface number: 196 but max is 1 [ 319.826738][ T24] usb 7-1: config 1 has an invalid interface number: 164 but max is 1 [ 319.862161][ T24] usb 7-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config [ 319.916709][ T24] usb 7-1: config 1 has no interface number 0 [ 319.923286][ T24] usb 7-1: config 1 has no interface number 1 [ 319.998601][ T24] usb 7-1: config 1 interface 196 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 320.067055][ T24] usb 7-1: config 1 interface 164 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.142135][ T24] usb 7-1: config 1 interface 196 has no altsetting 0 [ 320.147265][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 320.172400][ T24] usb 7-1: config 1 interface 164 has no altsetting 0 [ 320.196108][ T24] usb 7-1: New USB device found, idVendor=08ca, idProduct=0104, bcdDevice=4b.81 [ 320.216294][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.261177][ T24] usb 7-1: Product: ╨Х [ 320.276370][ T24] usb 7-1: Manufacturer: ╨Щ [ 320.286094][ T9127] netlink: 48 bytes leftover after parsing attributes in process `syz.1.849'. [ 320.396793][ T24] usb 7-1: SerialNumber: syz [ 320.403921][ T9127] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.849'. [ 320.476693][ T5905] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 320.563855][ T5874] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.596840][ T5874] usb 3-1: MIDIStreaming interface descriptor not found [ 320.656707][ T5905] usb 4-1: device descriptor read/64, error -71 [ 320.667655][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.850'. [ 320.705667][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.712426][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.850'. [ 320.713246][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.771724][ T5874] usb 3-1: USB disconnect, device number 36 [ 320.796070][ T24] usb 7-1: USB disconnect, device number 2 [ 320.813991][ T9136] bridge0: entered allmulticast mode [ 320.952589][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.067309][ T5905] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 321.128681][ T9136] bridge_slave_1: left allmulticast mode [ 321.189161][ T9136] bridge_slave_1: left promiscuous mode [ 321.208745][ T5905] usb 4-1: device descriptor read/64, error -71 [ 321.218780][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.331424][ T5905] usb usb4-port1: attempt power cycle [ 321.386887][ T9136] bridge_slave_0: left allmulticast mode [ 321.392763][ T9136] bridge_slave_0: left promiscuous mode [ 321.427995][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.739646][ T5905] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 321.967423][ T5905] usb 4-1: device descriptor read/8, error -71 [ 322.053542][ T9153] netlink: 'syz.6.856': attribute type 2 has an invalid length. [ 322.346694][ T5905] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 322.457381][ T5905] usb 4-1: device descriptor read/8, error -71 [ 322.585116][ T5905] usb usb4-port1: unable to enumerate USB device [ 322.847227][ T2152] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 323.009615][ T2152] usb 7-1: Using ep0 maxpacket: 32 [ 323.037482][ T2152] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.112796][ T2152] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.163739][ T2152] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.231385][ T2152] usb 7-1: Product: syz [ 323.248515][ T2152] usb 7-1: Manufacturer: syz [ 323.260591][ T2152] usb 7-1: SerialNumber: syz [ 323.313454][ T2152] usb 7-1: config 0 descriptor?? [ 323.351439][ T9156] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 324.334914][ T5874] usb 7-1: USB disconnect, device number 3 [ 324.499877][ T9198] netlink: 'syz.1.867': attribute type 2 has an invalid length. [ 324.948688][ T9202] netlink: 'syz.6.868': attribute type 25 has an invalid length. [ 325.840637][ T9212] ./bus: Can't lookup blockdev [ 325.881068][ T9212] 9pnet_fd: Insufficient options for proto=fd [ 326.161933][ T5906] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 326.292243][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 326.367357][ T5906] usb 3-1: no configurations [ 326.383412][ T5906] usb 3-1: can't read configurations, error -22 [ 326.556854][ T5906] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 326.588185][ T5942] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 326.763145][ T9230] tap0: tun_chr_ioctl cmd 1074812118 [ 326.777947][ T5942] usb 4-1: device descriptor read/64, error -71 [ 326.807801][ T5906] usb 3-1: no configurations [ 326.816390][ T5906] usb 3-1: can't read configurations, error -22 [ 326.833805][ T5906] usb usb3-port1: attempt power cycle [ 327.031609][ T5942] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 327.549866][ T9235] block nbd5: shutting down sockets [ 327.937915][ T5942] usb 4-1: device descriptor read/64, error -71 [ 327.944334][ T5906] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 327.992845][ T5906] usb 3-1: no configurations [ 328.006830][ T5906] usb 3-1: can't read configurations, error -22 [ 328.226918][ T5942] usb usb4-port1: attempt power cycle [ 328.286724][ T5906] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 328.326298][ T5906] usb 3-1: no configurations [ 328.420460][ T5906] usb 3-1: can't read configurations, error -22 [ 328.649190][ T5942] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 328.778795][ T5906] usb usb3-port1: unable to enumerate USB device [ 329.047088][ T5942] usb 4-1: device descriptor read/8, error -71 [ 329.296693][ T5942] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 329.551093][ T5942] usb 4-1: device not accepting address 54, error -71 [ 329.587185][ T5942] usb usb4-port1: unable to enumerate USB device [ 331.567029][ T5906] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 331.878932][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 331.984058][ T5906] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8 [ 332.003618][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.026065][ T5906] usb 3-1: config 0 descriptor?? [ 332.054543][ T5906] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 332.068759][ T5906] gspca_mr97310a: reg write [21] error -22 [ 332.097337][ T5906] mr97310a 3-1:0.0: probe with driver mr97310a failed with error -22 [ 332.373941][ T5906] usb 3-1: USB disconnect, device number 41 [ 333.326770][ T9321] syz.3.896: attempt to access beyond end of device [ 333.326770][ T9321] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 333.340113][ T9321] gfs2: error -5 reading superblock [ 333.384278][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.898'. [ 333.687399][ T5891] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 333.826691][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 333.839912][ T5891] usb 7-1: device descriptor read/64, error -71 [ 333.955353][ T9339] tipc: Started in network mode [ 333.963686][ T9339] tipc: Node identity 7f000001, cluster identity 4711 [ 333.973569][ T9339] tipc: Enabled bearer , priority 10 [ 333.986668][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 334.000304][ T24] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 334.019044][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.068648][ T24] usb 6-1: config 0 descriptor?? [ 334.101590][ T5891] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 334.127378][ T24] as10x_usb: device has been detected [ 334.148387][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 334.266850][ T5891] usb 7-1: device descriptor read/64, error -71 [ 334.285776][ T24] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 334.341557][ T9342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.434350][ T5891] usb usb7-port1: attempt power cycle [ 334.454928][ T9342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.108425][ T9361] netlink: 'syz.2.905': attribute type 2 has an invalid length. [ 335.110622][ T1210] tipc: Node number set to 2130706433 [ 335.318608][ T24] as10x_usb: error during firmware upload part1 [ 335.369561][ T9342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.460473][ T24] Registered device nBox DVB-T Dongle [ 335.497167][ T5891] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 335.617791][ T9342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.649972][ T9342] x_tables: duplicate underflow at hook 1 [ 335.674939][ T5891] usb 7-1: device descriptor read/8, error -71 [ 335.680342][ T9] usb 6-1: USB disconnect, device number 7 [ 336.280141][ T9] Unregistered device nBox DVB-T Dongle [ 336.282418][ T9] as10x_usb: device has been disconnected [ 336.286893][ T5891] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 336.687876][ T5891] usb 7-1: device not accepting address 7, error -71 [ 336.727016][ T5891] usb usb7-port1: unable to enumerate USB device [ 338.506927][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 339.051887][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 339.088953][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 339.100672][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 339.111022][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 339.125177][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.152516][ T9414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 339.152531][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.200792][ T9] usb 3-1: config 0 descriptor?? [ 339.326773][ T5942] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 339.438490][ T9405] netlink: 164 bytes leftover after parsing attributes in process `syz.2.917'. [ 339.461805][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 339.477415][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 339.478498][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.493040][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 339.508852][ T5942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.535099][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.554688][ T9] usb 3-1: USB disconnect, device number 42 [ 339.586678][ T5942] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 339.609515][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.629776][ T24] usb 2-1: device descriptor read/64, error -71 [ 339.631503][ T5942] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 339.655527][ T5942] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 339.675815][ T5942] usb 7-1: Manufacturer: syz [ 339.721434][ T5942] usb 7-1: config 0 descriptor?? [ 339.895739][ T9433] netlink: 'syz.5.924': attribute type 2 has an invalid length. [ 339.937093][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 340.207909][ T5874] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 340.336819][ T5942] rc_core: IR keymap rc-hauppauge not found [ 340.342777][ T5942] Registered IR keymap rc-empty [ 340.343177][ T24] usb 2-1: device descriptor read/64, error -71 [ 340.354920][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 340.494024][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 340.580130][ T24] usb usb2-port1: attempt power cycle [ 340.583797][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 340.708911][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 173, changing to 11 [ 340.796975][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 340.814309][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18276, setting to 1024 [ 340.829245][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.867908][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input19 [ 340.912325][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.986880][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 341.117327][ T24] usb 2-1: device descriptor read/8, error -71 [ 341.121591][ T5874] usb 4-1: config 0 descriptor?? [ 341.155877][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.170170][ T9429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.190260][ T5874] hub 4-1:0.0: USB hub found [ 341.227063][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.267772][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.307077][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.357077][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.376867][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 341.393266][ T5874] hub 4-1:0.0: 1 port detected [ 341.401084][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.440353][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.459002][ T24] usb 2-1: device descriptor read/8, error -71 [ 341.548935][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.577396][ T24] usb usb2-port1: unable to enumerate USB device [ 341.609590][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.658404][ T5942] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 341.673156][ T5874] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 341.700377][ T5874] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 341.722081][ T5942] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 341.778264][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 341.796464][ T5942] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 341.819871][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 341.917960][ T5874] usb 4-1: USB disconnect, device number 55 [ 343.007532][ T9473] vivid-000: kernel_thread() failed [ 343.182480][ T5874] usb 7-1: USB disconnect, device number 8 [ 343.183947][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.932'. [ 343.262613][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.932'. [ 344.866774][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 345.406203][ T9502] netlink: 'syz.1.937': attribute type 2 has an invalid length. [ 345.626524][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.092754][ T5891] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 346.519969][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 346.743174][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.699071][ T24] usb 4-1: config 0 descriptor?? [ 347.746690][ T5891] usb 7-1: unable to get BOS descriptor or descriptor too short [ 347.769765][ T24] usb 4-1: can't set config #0, error -71 [ 347.807048][ T5891] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 347.819652][ T24] usb 4-1: USB disconnect, device number 56 [ 347.827669][ T5891] usb 7-1: can't read configurations, error -71 [ 347.970325][ T1210] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 348.936763][ T1210] usb 3-1: device descriptor read/64, error -71 [ 349.307289][ T1210] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 349.890725][ T5942] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 350.348254][ T1210] usb 3-1: device descriptor read/64, error -71 [ 351.030349][ T1210] usb usb3-port1: attempt power cycle [ 351.667208][ T5891] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 351.778173][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.946'. [ 351.817425][ T5942] usb 2-1: device not accepting address 36, error -71 [ 351.846937][ T5891] usb 4-1: device descriptor read/64, error -71 [ 351.872202][ T9561] netlink: 60 bytes leftover after parsing attributes in process `syz.5.950'. [ 352.281849][ T5891] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 352.774268][ T9571] binder: BINDER_SET_CONTEXT_MGR already set [ 352.780401][ T9571] binder: 9570:9571 ioctl 4018620d 200000000040 returned -16 [ 353.005032][ T9580] fuse: Bad value for 'group_id' [ 353.066130][ T9580] fuse: Bad value for 'group_id' [ 353.312709][ T9590] binder: 9581:9590 ioctl c018620c 200000000040 returned -1 [ 353.552579][ T9599] Bluetooth: MGMT ver 1.23 [ 353.616717][ T5942] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 353.674127][ T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 353.786749][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 353.798833][ T5942] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.813510][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 353.841531][ T5942] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 353.865016][ T9] usb 7-1: config 0 has an invalid interface number: 20 but max is 0 [ 353.882851][ T9] usb 7-1: config 0 has no interface number 0 [ 353.889866][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.913630][ T9] usb 7-1: config 0 interface 20 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 353.936270][ T9] usb 7-1: config 0 interface 20 has no altsetting 0 [ 353.949375][ T5942] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 353.983921][ T9] usb 7-1: New USB device found, idVendor=104d, idProduct=3000, bcdDevice=e2.87 [ 354.003951][ T5942] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 354.034233][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.065340][ T5942] usb 3-1: Manufacturer: syz [ 354.074087][ T9] usb 7-1: Product: syz [ 354.080684][ T5942] usb 3-1: config 0 descriptor?? [ 354.097032][ T9] usb 7-1: Manufacturer: syz [ 354.102156][ T9] usb 7-1: SerialNumber: syz [ 354.133360][ T9] usb 7-1: config 0 descriptor?? [ 354.143027][ T9] ftdi_sio 7-1:0.20: FTDI USB Serial Device converter detected [ 354.154993][ T9] ftdi_sio ttyUSB0: unknown device type: 0xe287 [ 354.823267][ T9] usb 7-1: USB disconnect, device number 11 [ 354.872030][ T9] ftdi_sio 7-1:0.20: device disconnected [ 354.927059][ T5942] rc_core: IR keymap rc-hauppauge not found [ 354.934277][ T5942] Registered IR keymap rc-empty [ 354.953904][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 354.988119][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 355.001261][ T9618] netlink: 48 bytes leftover after parsing attributes in process `syz.3.968'. [ 355.015058][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 355.083302][ T9618] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.968'. [ 355.096072][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 355.153028][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 355.177329][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 355.227367][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 355.625432][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 355.636349][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 355.658382][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 355.699774][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 355.711741][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 355.766968][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 355.827382][ T9628] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 355.827382][ T9628] program syz.3.969 not setting count and/or reply_len properly [ 355.865602][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 357.013441][ T5906] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 357.114451][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.189857][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 357.729960][ T5906] usb 6-1: config 0 descriptor?? [ 357.735209][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 357.743193][ T9614] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 357.803363][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 357.827941][ T5906] usb 6-1: can't set config #0, error -71 [ 357.835886][ T5906] usb 6-1: USB disconnect, device number 8 [ 357.842710][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 357.881032][ T5942] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 358.742469][ T5942] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 358.751831][ T5942] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 358.765257][ T5942] usb 3-1: USB disconnect, device number 46 [ 359.187827][ T9657] program syz.6.975 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 360.157886][ T9671] netlink: 48 bytes leftover after parsing attributes in process `syz.1.979'. [ 360.742377][ T9671] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.979'. [ 361.409067][ T9682] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.409067][ T9682] program syz.6.981 not setting count and/or reply_len properly [ 361.688246][ T9668] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.714090][ T9668] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.753582][ T9668] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.777977][ T9668] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 361.790023][ T9668] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 361.853141][ T9668] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 361.935967][ T9668] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.943634][ T9668] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.008147][ T9668] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 362.436866][ T5906] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 362.526746][ T5821] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.626852][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 362.647096][ T5906] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.700811][ T9698] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.726906][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 362.761013][ T5906] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 362.804741][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.878407][ T5906] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.880593][ T9698] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.897450][ T5906] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.935977][ T5906] usb 6-1: Manufacturer: syz [ 362.978762][ T5906] usb 6-1: config 0 descriptor?? [ 363.034073][ T9698] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.238836][ T9698] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.348833][ T5906] rc_core: IR keymap rc-hauppauge not found [ 363.355284][ T5906] Registered IR keymap rc-empty [ 363.403976][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 363.447813][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 363.489136][ T9722] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.568543][ T9722] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.737560][ T9727] bridge0: entered promiscuous mode [ 363.755179][ T5821] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.833069][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 363.843150][ T9727] batman_adv: batadv0: Adding interface: macsec1 [ 363.866759][ T9727] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.892105][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.905222][ T5822] Bluetooth: hci3: command 0x0401 tx timeout [ 363.957171][ T9727] batman_adv: batadv0: Interface activated: macsec1 [ 364.008647][ T5906] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 364.213614][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 364.625982][ T9722] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.266946][ T5906] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 365.287944][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.308335][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.337022][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.376849][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.418039][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.429826][ T9698] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.484374][ T9698] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.501239][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.556947][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.584507][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.599647][ T9698] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.617403][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 365.651103][ T5906] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 366.067834][ T5906] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 366.089043][ T9698] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.097662][ T5906] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 366.121615][ T9722] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.140744][ T9722] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.155671][ T9722] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.172082][ T9722] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.266926][ T5906] usb 6-1: USB disconnect, device number 9 [ 366.286927][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.293147][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 368.408654][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 368.414887][ T5822] Bluetooth: hci0: command 0x0c1a tx timeout [ 373.807247][ T9770] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 373.807247][ T9770] program syz.5.996 not setting count and/or reply_len properly [ 374.404577][ T9783] xt_TCPMSS: Only works on TCP SYN packets [ 374.692065][ T9784] netlink: 'syz.1.999': attribute type 2 has an invalid length. [ 375.396683][ T5942] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 375.657536][ T5942] usb 6-1: no configurations [ 375.702689][ T5942] usb 6-1: can't read configurations, error -22 [ 376.286988][ T5942] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 376.617440][ T5942] usb 6-1: no configurations [ 376.622123][ T5942] usb 6-1: can't read configurations, error -22 [ 376.975450][ T9813] macvlan2: entered allmulticast mode [ 376.994998][ T9813] bond0: entered allmulticast mode [ 377.144194][ T5942] usb usb6-port1: attempt power cycle [ 377.398319][ T9813] bond_slave_0: entered allmulticast mode [ 377.404926][ T9813] bond_slave_1: entered allmulticast mode [ 377.430079][ T9813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 377.475340][ T9813] team0: Port device macvlan2 added [ 377.736665][ T5942] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 378.143369][ T5942] usb 6-1: device not accepting address 12, error -71 [ 378.594734][ T9846] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1013'. [ 378.621831][ T9845] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1013'. [ 378.632415][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.639231][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.193662][ T9853] netlink: 'syz.1.1015': attribute type 11 has an invalid length. [ 381.108459][ T9867] kAFS: No cell specified [ 384.230857][ T9886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.316706][ T9901] netlink: 'syz.1.1023': attribute type 2 has an invalid length. [ 385.036941][ T9912] overlayfs: missing 'lowerdir' [ 386.566805][ T9941] 9pnet: p9_errstr2errno: server reported unknown error Э@э╬╟pюСAч┴ЫмЮ;KZь44з/@оqцЮk°p [ 386.566805][ T9941] щC<+иж│P5Е"k▄╘ЎнжЇ╬xUТ [ 386.688597][ T9945] netlink: 'syz.6.1035': attribute type 4 has an invalid length. [ 386.798327][ T9941] fuse: Bad value for 'rootmode' [ 387.708366][ T9959] lo speed is unknown, defaulting to 1000 [ 389.191490][ T9979] overlayfs: failed to clone upperpath [ 390.148358][ T9993] netlink: 'syz.2.1043': attribute type 2 has an invalid length. [ 390.808444][T10001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1047'. [ 390.873387][T10006] netlink: 'syz.5.1049': attribute type 25 has an invalid length. [ 391.289331][ T5942] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 391.506711][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 391.538219][ T5942] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 391.575721][ T5942] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.639201][ T5942] usb 7-1: config 0 has no interface number 0 [ 391.645374][ T5942] usb 7-1: config 0 interface 8 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 391.900051][ T5942] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 391.917068][ T5942] usb 7-1: config 0 interface 8 has no altsetting 0 [ 392.727409][ T5942] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 392.750610][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.806751][ T5942] usb 7-1: Product: syz [ 392.819715][ T5942] usb 7-1: Manufacturer: syz [ 393.563329][ T5942] usb 7-1: SerialNumber: syz [ 393.599659][ T5942] usb 7-1: config 0 descriptor?? [ 393.779172][ T5942] usb 7-1: can't set config #0, error -71 [ 393.821067][T10034] fuse: Unknown parameter 'grou00000000000000000000' [ 393.828126][ T5942] usb 7-1: USB disconnect, device number 12 [ 397.067608][T10071] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 397.067608][T10071] program syz.6.1065 not setting count and/or reply_len properly [ 397.464701][T10077] affs: No valid root block on device nullb0 [ 397.956994][ T1210] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 398.161524][ T1210] usb 6-1: Using ep0 maxpacket: 16 [ 398.343048][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.986667][ T1210] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.996532][ T1210] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.155576][ T1210] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.164968][ T1210] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.183236][ T1210] usb 6-1: config 0 descriptor?? [ 400.535797][T10114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.544981][T10114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.930076][ T1210] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 401.073406][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.089929][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.097955][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.107516][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.115112][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.524642][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.534737][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.542855][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.550458][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.558965][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.567116][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.574382][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.589891][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.642389][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.687215][ T1210] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 401.746775][ T1210] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0002/input/input22 [ 402.428611][ T1210] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 402.571765][ T1210] usb 6-1: USB disconnect, device number 14 [ 402.815085][T10130] fido_id[10130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 403.175887][ T1210] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 403.997383][ T1210] usb 6-1: no configurations [ 404.002053][ T1210] usb 6-1: can't read configurations, error -22 [ 404.136818][ T1210] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 404.533886][T10158] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.550130][ T1210] usb 6-1: no configurations [ 405.551463][T10158] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.655107][ T1210] usb 6-1: can't read configurations, error -22 [ 406.153982][ T1210] usb usb6-port1: attempt power cycle [ 406.202148][T10158] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.396502][T10158] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.058191][T10158] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.077795][T10158] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.097677][T10158] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.116269][T10158] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.825524][T10195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.195121][T10195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.264363][T10195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.034255][T10195] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.245828][T10195] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.260214][T10195] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.274418][T10195] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.294320][T10195] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.439160][ T6000] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 411.460936][T10225] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1106'. [ 411.826957][ T6000] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 411.834639][ T6000] usb 3-1: can't read configurations, error -61 [ 412.016818][ T6000] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 412.808993][ T6000] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 412.946038][ T6000] usb 3-1: can't read configurations, error -61 [ 413.022321][ T6000] usb usb3-port1: attempt power cycle [ 415.011155][T10260] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.385359][T10260] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.485792][T10260] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.542564][T10260] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.653339][T10260] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.669260][T10260] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.683969][T10260] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.699305][T10260] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.928224][T10275] fuse: Unknown parameter 'group_i00000000000000000000' [ 418.896745][ T5874] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 419.243573][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 420.111224][ T5874] usb 6-1: can't read configurations, error -61 [ 420.251382][ T5874] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 420.469617][ T5874] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 420.526677][ T5874] usb 6-1: can't read configurations, error -61 [ 420.540975][ T5874] usb usb6-port1: attempt power cycle [ 420.544403][T10313] fuse: Unknown parameter 'group_id00000000000000000000' [ 420.816643][T10321] netlink: 'syz.1.1133': attribute type 2 has an invalid length. [ 420.966875][ T5874] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 421.284329][ T5874] usb 6-1: device descriptor read/8, error -71 [ 423.538382][T10350] o2cb: This node has not been configured. [ 423.544515][T10350] o2cb: Cluster check failed. Fix errors before retrying. [ 423.551975][T10350] (syz.1.1143,10350,1):user_dlm_register:674 ERROR: status = -22 [ 423.559953][T10350] (syz.1.1143,10350,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 424.487233][T10352] syz.5.1141: attempt to access beyond end of device [ 424.487233][T10352] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 424.605647][T10352] gfs2: error -5 reading superblock [ 424.703852][T10358] fuse: Unknown parameter 'group_id00000000000000000000' [ 425.307662][ T5942] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 425.506945][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 425.602023][T10372] netlink: 'syz.3.1148': attribute type 2 has an invalid length. [ 426.303784][ T5942] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 426.311706][ T5942] usb 3-1: can't read configurations, error -61 [ 426.516655][ T5942] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 426.526765][ T6000] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 427.183483][ T5942] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 427.265663][ T5942] usb 3-1: can't read configurations, error -61 [ 427.307232][ T5942] usb usb3-port1: attempt power cycle [ 427.349329][T10394] IPv6: addrconf: prefix option has invalid lifetime [ 427.419670][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 428.278795][ T5942] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 428.388645][ T5942] usb 3-1: device descriptor read/8, error -71 [ 428.469925][T10412] fuse: Unknown parameter 'group_id00000000000000000000' [ 430.447064][ T43] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 431.951420][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 431.959572][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 431.976010][ T43] usb 6-1: config 2 has an invalid interface number: 120 but max is 0 [ 431.987891][ T43] usb 6-1: config 2 has no interface number 0 [ 431.994139][ T43] usb 6-1: config 2 interface 120 has no altsetting 0 [ 432.005286][ T43] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 432.158461][T10456] overlayfs: failed to clone upperpath [ 432.226717][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.240445][ T43] usb 6-1: Product: syz [ 432.244672][ T43] usb 6-1: Manufacturer: syz [ 432.256739][ T43] usb 6-1: SerialNumber: syz [ 432.360822][T10460] fuse: Bad value for 'user_id' [ 432.365792][T10460] fuse: Bad value for 'user_id' [ 432.411440][ T5942] libceph: connect (1)[c::]:6789 error -101 [ 432.467136][ T5942] libceph: mon0 (1)[c::]:6789 connect error [ 432.555403][T10456] ceph: No mds server is up or the cluster is laggy [ 432.697161][ T43] usb 6-1: USB disconnect, device number 22 [ 433.136219][T10487] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1176'. [ 433.240621][T10487] vivid-000: disconnect [ 433.246032][T10486] vivid-000: reconnect [ 433.486256][T10494] block nbd5: NBD_DISCONNECT [ 434.532462][T10504] fuse: Bad value for 'user_id' [ 434.576635][T10504] fuse: Bad value for 'user_id' [ 440.644732][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.664722][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.878866][T10556] fuse: Bad value for 'user_id' [ 441.883750][T10556] fuse: Bad value for 'user_id' [ 442.107075][T10559] vlan2: entered promiscuous mode [ 442.160529][T10559] ip6gretap0: entered promiscuous mode [ 443.321341][T10576] dvmrp1: entered allmulticast mode [ 443.690378][T10579] hsr_slave_0: left promiscuous mode [ 444.412402][T10579] hsr_slave_1: left promiscuous mode [ 445.507994][T10606] fuse: Bad value for 'fd' [ 449.595558][T10627] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.1215'. [ 450.083353][T10653] fuse: Bad value for 'fd' [ 450.528773][T10644] netlink: 129704 bytes leftover after parsing attributes in process `syz.5.1218'. [ 453.534462][T10699] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.1233'. [ 453.591468][T10702] fuse: Bad value for 'fd' [ 455.501344][T10736] netlink: 'syz.5.1241': attribute type 2 has an invalid length. [ 455.909320][ T43] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 456.851066][ T43] usb 3-1: config 0 has no interfaces? [ 456.870219][ T43] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 456.913172][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.321429][T10751] fuse: Bad value for 'fd' [ 457.381506][ T43] usb 3-1: config 0 descriptor?? [ 457.626262][T10739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.638310][T10739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.669104][ T43] usb 3-1: USB disconnect, device number 54 [ 459.148606][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 459.346929][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 459.359271][T10784] netlink: 'syz.1.1255': attribute type 2 has an invalid length. [ 459.440860][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.534882][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.720400][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.826683][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.956080][ T24] usb 7-1: Product: syz [ 459.961300][ T24] usb 7-1: Manufacturer: syz [ 459.966001][ T24] usb 7-1: SerialNumber: syz [ 460.103518][T10789] kvm: pic: non byte write [ 463.856861][T10796] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 463.856861][T10796] program syz.5.1257 not setting count and/or reply_len properly [ 464.222707][ T24] usb 7-1: skipping empty audio interface (v1) [ 464.276383][T10800] fuse: Bad value for 'fd' [ 464.305240][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 464.400741][ T24] usb 7-1: USB disconnect, device number 14 [ 464.609960][T10805] netlink: 'syz.5.1260': attribute type 2 has an invalid length. [ 465.121191][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.186059][T10808] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.311617][T10808] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.518606][ T24] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 465.542455][T10808] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.606413][ T5905] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 465.810041][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 465.917011][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 465.959649][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 466.085378][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.103140][ T24] usb 6-1: config 0 has no interface number 0 [ 466.122084][T10808] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.149172][ T24] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 466.161454][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.178225][ T24] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 466.220690][T10808] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.238956][T10808] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.258336][T10808] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.276415][T10808] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.307443][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 466.318173][ T24] usb 6-1: Product: syz [ 466.322497][ T24] usb 6-1: Manufacturer: syz [ 466.327508][ T24] usb 6-1: SerialNumber: syz [ 466.332390][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 466.360982][ T24] usb 6-1: config 0 descriptor?? [ 466.374044][ T5905] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 466.414932][ T24] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 466.436634][ T5905] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 466.454972][ T24] usb 6-1: selecting invalid altsetting 1 [ 466.461027][ T5905] usb 7-1: Manufacturer: syz [ 466.472008][ T24] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 467.029077][ T5905] usb 7-1: config 0 descriptor?? [ 467.048389][ T24] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 467.059210][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 467.079322][ T24] usb 6-1: media controller created [ 467.153662][T10825] cgroup: name respecified [ 467.160684][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.385770][T10832] dlm: no locking on control device [ 467.396913][ T5905] rc_core: IR keymap rc-hauppauge not found [ 467.403637][ T5905] Registered IR keymap rc-empty [ 467.465224][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 467.610319][T10833] lo speed is unknown, defaulting to 1000 [ 467.645944][ T5906] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 467.698077][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.038106][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 468.136198][T10811] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 468.141274][ T5906] usb 2-1: config 0 has no interfaces? [ 468.486816][ T5906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 468.535607][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input23 [ 468.550128][ T24] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 468.563648][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.566242][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.571168][ T24] zl10353_read_register: readreg error (reg=127, ret==-32) [ 468.607025][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.648653][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.764083][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.790300][ T5906] usb 2-1: config 0 descriptor?? [ 468.852322][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.931800][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 468.987341][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 469.017024][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 469.024959][ T1210] usb 2-1: USB disconnect, device number 38 [ 469.057403][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 469.108666][ T5905] mceusb 7-1:0.0: Error: mce write urb status = -71 [ 469.148128][ T5905] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 469.163259][ T5905] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 469.361276][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.373866][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.424984][T10848] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1272'. [ 470.006797][ T5884] usb 7-1: USB disconnect, device number 15 [ 473.463195][T10864] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.749840][T10864] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.501343][T10864] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.621573][T10864] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.676639][ T43] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 475.764495][T10864] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.788410][T10864] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.811823][T10864] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.834361][T10864] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.848431][ T43] usb 2-1: config 0 has no interfaces? [ 475.856856][ T43] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 475.882756][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.905537][ T43] usb 2-1: config 0 descriptor?? [ 476.173324][ T43] usb 2-1: USB disconnect, device number 39 [ 476.335371][T10907] netlink: 'syz.5.1287': attribute type 1 has an invalid length. [ 476.729348][T10907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.795638][T10907] bond1: (slave dummy0): making interface the new active one [ 476.805800][T10907] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 477.637423][T10915] netlink: 'syz.6.1289': attribute type 2 has an invalid length. [ 480.521519][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1305'. [ 480.696862][ T6000] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 480.803224][T10968] netlink: 'syz.5.1306': attribute type 2 has an invalid length. [ 480.873294][ T6000] usb 2-1: config 0 has no interfaces? [ 480.886801][ T6000] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 480.895893][ T6000] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.926214][ T6000] usb 2-1: config 0 descriptor?? [ 481.052277][T10975] ALSA: mixer_oss: invalid OSS volume '' [ 481.149066][T10227] usb 2-1: USB disconnect, device number 40 [ 482.835124][ T6000] IPVS: starting estimator thread 0... [ 482.923422][T11013] netlink: 'syz.1.1318': attribute type 2 has an invalid length. [ 482.966793][T11011] IPVS: using max 28 ests per chain, 67200 per kthread [ 483.992231][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 484.535714][T11026] netlink: 129704 bytes leftover after parsing attributes in process `syz.5.1323'. [ 486.210857][ T5822] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 486.540078][T11049] bad cache= option: no%e [ 486.540078][T11049] [ 486.546797][T11049] CIFS: VFS: bad cache= option: no%e [ 487.394656][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.421012][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.431280][T11061] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.444366][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.463031][T11061] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.465636][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.498630][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1334'. [ 487.586704][ T5884] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 487.608952][ T5906] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 487.746667][ T5906] usb 2-1: device descriptor read/64, error -71 [ 487.760693][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.811971][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.831862][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 487.852298][ T5884] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.864182][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.900586][ T5884] usb 3-1: config 0 descriptor?? [ 488.127126][ T5906] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 488.266750][ T5906] usb 2-1: device descriptor read/64, error -71 [ 488.457557][ T5906] usb usb2-port1: attempt power cycle [ 488.473464][ T5884] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 489.231804][ T5884] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 489.348703][ T5906] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 489.391177][ T5906] usb 2-1: device descriptor read/8, error -71 [ 489.616652][ T5884] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 489.656887][ T5906] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 489.690713][ T5906] usb 2-1: device descriptor read/8, error -71 [ 490.026888][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 490.109181][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 490.117340][ T6000] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 490.119771][ T5884] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 490.134290][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.142781][ T5884] usb 7-1: Product: syz [ 490.147623][ T5884] usb 7-1: Manufacturer: syz [ 490.148764][ T6000] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 490.152325][ T5884] usb 7-1: SerialNumber: syz [ 490.184229][ T5884] usb 7-1: config 0 descriptor?? [ 490.194844][ T6000] hid-generic 0000:0003:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 490.227115][ T5906] usb usb2-port1: unable to enumerate USB device [ 490.261943][T11094] netlink: 'syz.3.1347': attribute type 2 has an invalid length. [ 490.331302][T11092] fido_id[11092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 490.575337][ T1210] usb 3-1: USB disconnect, device number 55 [ 491.338094][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.345811][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.524853][T11110] kvm: pic: non byte write [ 491.536185][ T5884] gs_usb 7-1:0.0: Couldn't get device config: (err=-110) [ 491.548619][ T5884] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 491.846727][ T1210] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 492.263300][ T5906] usb 7-1: USB disconnect, device number 16 [ 492.832413][T11127] overlayfs: conflicting lowerdir path [ 492.926616][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 492.933502][ T1210] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 492.942293][ T1210] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 492.953349][ T1210] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 492.964544][ T1210] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 492.985433][ T1210] usb 3-1: config 0 interface 0 has no altsetting 0 [ 493.029466][ T1210] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 493.050383][ T1210] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 493.081320][ T1210] usb 3-1: Product: syz [ 493.085547][ T1210] usb 3-1: Manufacturer: syz [ 493.106641][ T1210] usb 3-1: SerialNumber: syz [ 493.126872][ T1210] usb 3-1: config 0 descriptor?? [ 493.155336][ T1210] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 493.195305][ T1210] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 493.533218][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.580181][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.664433][T11139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.739208][T11106] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 493.743939][T11142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.746065][T11106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 493.762046][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.856802][T11142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.929254][T11106] vhci_hcd vhci_hcd.0: Device attached [ 494.166385][ T5905] usb 3-1: USB disconnect, device number 56 [ 494.166594][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 494.203676][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 494.436645][T11141] vhci_hcd: connection closed [ 494.469946][T10571] vhci_hcd: stop threads [ 494.684707][ T5905] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 494.708899][T10571] vhci_hcd: release socket [ 494.740949][T10227] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 494.767051][T10571] vhci_hcd: disconnect device [ 494.797756][T10227] usb 37-1: enqueue for inactive port 0 [ 494.976743][T10227] vhci_hcd: vhci_device speed not set [ 496.156334][ T5884] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 496.336934][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 496.864015][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 496.969095][ T5884] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 496.987906][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.995960][ T5884] usb 3-1: Product: syz [ 497.016593][ T5884] usb 3-1: Manufacturer: syz [ 497.032753][ T5884] usb 3-1: SerialNumber: syz [ 497.052983][ T5884] usb 3-1: config 0 descriptor?? [ 497.326729][ T5906] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 497.488509][ T5906] usb 2-1: config 0 has no interfaces? [ 497.503732][ T5906] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 497.549658][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.583075][ T5906] usb 2-1: config 0 descriptor?? [ 497.643615][ T5884] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 497.651606][ T5884] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 497.701792][ T5884] usb 3-1: USB disconnect, device number 57 [ 497.777897][T11195] overlayfs: failed to clone lowerpath [ 498.589120][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.607082][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.708146][ T6000] usb 2-1: USB disconnect, device number 45 [ 498.823996][T11192] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1374'. [ 500.036901][T11217] IPVS: ip_vs_add_dest(): server weight less than zero [ 501.066439][T11233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.124112][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1385'. [ 501.250366][T11233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.278265][T11239] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.356069][T11233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.377046][T11239] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.450333][T11233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.473379][T11239] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.508544][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.515176][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.557798][T11233] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.614375][T11233] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.636475][T11233] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.654024][T10227] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 501.657449][T11239] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.696864][T11233] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.806114][T11239] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.825318][T11239] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.845213][T11239] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.864394][T11239] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.996247][T10227] usb 3-1: Using ep0 maxpacket: 32 [ 502.005133][T10227] usb 3-1: config 0 interface 0 has no altsetting 0 [ 502.027743][T10227] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 502.037100][T10227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.045684][T10227] usb 3-1: Product: syz [ 502.049935][T10227] usb 3-1: Manufacturer: syz [ 502.054891][T10227] usb 3-1: SerialNumber: syz [ 502.358606][T10227] usb 3-1: config 0 descriptor?? [ 503.088604][T11259] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1393'. [ 503.109861][T10227] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 503.137111][T10227] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 503.550826][T10227] usb 3-1: USB disconnect, device number 58 [ 503.562041][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.589734][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.766623][ T5906] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 503.937033][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 503.956635][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 503.992035][ T5906] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 504.034268][ T5906] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 504.058942][T11280]       : renamed from veth0_to_team (while UP) [ 504.069684][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.101245][ T5906] usb 2-1: Product: syz [ 504.110739][ T5906] usb 2-1: Manufacturer: syz [ 504.134102][ T5906] usb 2-1: SerialNumber: syz [ 504.153847][ T5906] usb 2-1: config 0 descriptor?? [ 504.163626][T11266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 504.226691][T11266] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 504.235658][ T5906] usb 2-1: ucan: probing device on interface #0 [ 504.520281][ T5906] usb 2-1: ucan: could not read protocol version, ret=0 [ 504.545409][ T5906] usb 2-1: ucan: probe failed; try to update the device firmware [ 504.637313][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 505.176066][ T5822] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 505.443762][T11307] bad cache= option: no%e [ 505.443762][T11307] [ 505.450617][T11307] CIFS: VFS: bad cache= option: no%e [ 505.961074][T11309] Smack: duplicate mount options [ 506.177560][T11314] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1410'. [ 506.368201][ T43] usb 2-1: USB disconnect, device number 46 [ 506.729822][T11317] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 506.729822][T11317] program syz.2.1409 not setting count and/or reply_len properly [ 509.216743][ T1210] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 510.007678][T11335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 510.046107][T11335] macsec1: entered allmulticast mode [ 510.260377][T11339] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1417'. [ 510.273137][ T1210] usb 2-1: config 0 has no interfaces? [ 510.278881][ T1210] usb 2-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 510.288054][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.298949][ T1210] usb 2-1: config 0 descriptor?? [ 510.956438][ T6000] usb 2-1: USB disconnect, device number 47 [ 511.206103][ T5822] Bluetooth: hci4: unexpected event for opcode 0x0c1b [ 513.702197][T11382] bad cache= option: no%e [ 513.702197][T11382] [ 513.708765][T11382] CIFS: VFS: bad cache= option: no%e [ 513.983012][ T5905] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 514.178702][ T5905] usb 3-1: config 0 has no interfaces? [ 514.189810][ T5905] usb 3-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 514.200237][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.220866][ T5905] usb 3-1: config 0 descriptor?? [ 514.511132][ T5942] usb 3-1: USB disconnect, device number 59 [ 515.926747][ T5822] Bluetooth: hci2: SCO packet for unknown connection handle 100 [ 516.039258][T11424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.054658][T11424] IPv6: NLM_F_CREATE should be set when creating new route [ 516.063199][T11424] IPv6: NLM_F_CREATE should be set when creating new route [ 517.391640][T11444] netlink: 'syz.1.1439': attribute type 2 has an invalid length. [ 517.941622][ T5822] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 518.430391][T11467] bad cache= option: no%e [ 518.430391][T11467] [ 518.438025][T11467] CIFS: VFS: bad cache= option: no%e [ 521.247092][ T6000] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 521.428472][ T6000] usb 7-1: config 0 has no interfaces? [ 521.441649][ T6000] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 521.502611][ T6000] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.585784][ T5905] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 521.806679][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 522.018759][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.060171][ T6000] usb 7-1: config 0 descriptor?? [ 522.082814][ T5905] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.200449][ T5905] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 522.212727][ T5905] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 522.239704][ T5905] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 522.254517][ T5905] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 522.262893][ T5905] usb 3-1: Manufacturer: syz [ 522.327462][ T5905] usb 3-1: config 0 descriptor?? [ 522.433550][T11489] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1455'. [ 522.731090][T11489] vlan2: entered promiscuous mode [ 522.736194][T11489] team0: entered promiscuous mode [ 522.799567][T11489] team_slave_0: entered promiscuous mode [ 522.827124][T11489] team_slave_1: entered promiscuous mode [ 522.851525][ T5905] rc_core: IR keymap rc-hauppauge not found [ 522.879095][ T5905] Registered IR keymap rc-empty [ 522.894342][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 522.946932][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 522.979174][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 523.112248][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 523.131988][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 523.163767][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 523.709043][ T5906] usb 7-1: USB disconnect, device number 17 [ 523.712443][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 523.880034][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 523.951165][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 524.306122][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 524.327086][ T5822] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 524.366976][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 524.513752][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 524.538133][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 524.573051][ T5905] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 524.643686][T11515] bad cache= option: no%e [ 524.643686][T11515] [ 524.650592][T11515] CIFS: VFS: bad cache= option: no%e [ 525.107916][ T5905] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 525.147644][ T5905] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 525.373001][T11517] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.396997][T11520] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1464'. [ 525.497371][ T5942] usb 3-1: USB disconnect, device number 60 [ 525.500578][T11517] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.682883][T11517] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.802507][T11528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1465'. [ 526.034579][T11517] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.301327][T11517] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.315869][T11517] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.330184][T11517] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.344151][T11517] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.613684][T11528] netlink: 129704 bytes leftover after parsing attributes in process `syz.2.1465'. [ 528.127292][T11551] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.764886][T11551] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.820482][T11551] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.895224][T11551] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.948788][T11558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.985776][T11558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.029587][T11558] openvswitch: netlink: IPv4 tun info is not correct [ 529.256719][ T6000] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 529.457598][ T6000] usb 3-1: Using ep0 maxpacket: 32 [ 529.476112][ T6000] usb 3-1: config 0 interface 0 has no altsetting 0 [ 529.754079][ T6000] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 529.763531][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.772492][ T6000] usb 3-1: Product: syz [ 529.776960][ T6000] usb 3-1: Manufacturer: syz [ 529.781558][ T6000] usb 3-1: SerialNumber: syz [ 529.794509][ T6000] usb 3-1: config 0 descriptor?? [ 530.284126][T11573] tap0: tun_chr_ioctl cmd 2147767506 [ 530.370362][ T6000] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 530.407431][ T6000] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 530.533878][ T6000] usb 3-1: USB disconnect, device number 61 [ 531.832584][T11551] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.852412][T11551] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.868664][T11551] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.882072][T11551] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.624881][ T30] audit: type=1326 audit(2000000331.521:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.385088][ T30] audit: type=1326 audit(2000000331.521:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.506601][ T30] audit: type=1326 audit(2000000331.521:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.606620][ T1210] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 533.617865][ T30] audit: type=1326 audit(2000000331.521:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.662390][ T30] audit: type=1326 audit(2000000331.521:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.685925][ T30] audit: type=1326 audit(2000000331.521:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.720614][ T30] audit: type=1326 audit(2000000331.521:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 533.770297][T11610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'. [ 533.798895][ T30] audit: type=1326 audit(2000000331.521:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 534.141949][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.488958][ T30] audit: type=1326 audit(2000000331.521:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 534.511616][ T30] audit: type=1326 audit(2000000331.611:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11591 comm="syz.2.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5df238e929 code=0x7ffc0000 [ 534.696996][ T1210] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 534.753477][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.864282][ T1210] usb 2-1: config 0 descriptor?? [ 535.281194][ T1210] pwc: Askey VC010 type 2 USB webcam detected. [ 535.525611][ T1210] pwc: recv_control_msg error -32 req 02 val 2b00 [ 535.526925][T11600] openvswitch: netlink: IPv4 tun info is not correct [ 535.584241][ T1210] pwc: recv_control_msg error -32 req 02 val 2700 [ 535.851128][ T1210] pwc: recv_control_msg error -71 req 04 val 1000 [ 535.878758][ T1210] pwc: recv_control_msg error -71 req 04 val 1300 [ 535.896603][ T1210] pwc: recv_control_msg error -71 req 04 val 1400 [ 536.047986][ T1210] pwc: recv_control_msg error -71 req 02 val 2000 [ 536.679031][ T1210] pwc: recv_control_msg error -71 req 02 val 2100 [ 536.686025][ T1210] pwc: recv_control_msg error -71 req 04 val 1500 [ 536.693895][ T1210] pwc: recv_control_msg error -71 req 02 val 2500 [ 536.701161][ T1210] pwc: recv_control_msg error -71 req 02 val 2400 [ 536.814284][ T1210] pwc: recv_control_msg error -71 req 02 val 2600 [ 536.828577][ T1210] pwc: recv_control_msg error -71 req 02 val 2900 [ 536.843424][ T1210] pwc: recv_control_msg error -71 req 02 val 2800 [ 536.854853][ T1210] pwc: recv_control_msg error -71 req 04 val 1100 [ 536.862990][ T1210] pwc: recv_control_msg error -71 req 04 val 1200 [ 536.871477][ T1210] pwc: Registered as video103. [ 537.022489][ T1210] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 537.863155][ T1210] usb 2-1: USB disconnect, device number 48 [ 538.450136][T11658] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1500'. [ 539.193287][ T1210] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 539.313435][T11658] netlink: 129704 bytes leftover after parsing attributes in process `syz.6.1500'. [ 539.687474][ T1210] usb 2-1: Using ep0 maxpacket: 16 [ 539.698503][ T1210] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.722811][ T1210] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 539.776736][ T1210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.806376][ T1210] usb 2-1: config 0 descriptor?? [ 540.647441][T11676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.759283][T11676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.870084][T11676] openvswitch: netlink: IPv4 tun info is not correct [ 541.785460][ T5884] usb 2-1: USB disconnect, device number 49 [ 541.906902][ T1210] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 542.080985][ T1210] usb 7-1: Using ep0 maxpacket: 16 [ 542.102055][ T1210] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 542.116761][ T1210] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 542.154669][ T1210] usb 7-1: Product: syz [ 542.169638][ T1210] usb 7-1: SerialNumber: syz [ 542.200803][ T1210] usb 7-1: config 0 descriptor?? [ 542.216947][ T1210] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 542.236762][ T5942] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 542.239671][ T1210] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 542.258967][ T1210] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 542.261413][ T5906] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 542.265932][ T1210] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 542.566752][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 542.572196][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 542.585193][ T5906] usb 2-1: config 0 interface 0 has no altsetting 0 [ 542.593382][ T5942] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 542.610358][ T5906] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 542.625070][ T5942] usb 3-1: can't read configurations, error -61 [ 542.632026][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.645843][ T5906] usb 2-1: Product: syz [ 542.650355][ T5906] usb 2-1: Manufacturer: syz [ 542.655762][ T5906] usb 2-1: SerialNumber: syz [ 542.672326][ T5906] usb 2-1: config 0 descriptor?? [ 542.768498][ T5942] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 542.926682][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 542.944859][ T5942] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 542.954126][ T5942] usb 3-1: can't read configurations, error -61 [ 542.972338][ T5942] usb usb3-port1: attempt power cycle [ 543.100588][ T5906] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 543.130829][ T5906] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 543.187812][ T5906] usb 2-1: USB disconnect, device number 50 [ 543.375237][ T5942] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 543.526363][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 543.608094][ T5942] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 543.622695][ T5942] usb 3-1: can't read configurations, error -61 [ 543.806784][ T5942] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 543.841945][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 543.860823][ T5942] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 543.875336][ T5942] usb 3-1: can't read configurations, error -61 [ 543.898980][ T5942] usb usb3-port1: unable to enumerate USB device [ 543.912461][ T6000] usb 7-1: USB disconnect, device number 18 [ 545.161379][T11728] openvswitch: netlink: IPv4 tun info is not correct [ 546.550491][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 547.190010][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.213705][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.281511][T11749] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1534'. [ 547.846637][ T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 547.864179][T11758] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.032747][T11758] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.421290][T11758] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.634067][T11758] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.909076][T11758] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.061187][T11758] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.609088][T11776] netlink: 'syz.2.1540': attribute type 2 has an invalid length. [ 549.933597][ T43] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 550.607361][T11758] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.625985][T11758] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.691126][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.704872][ T43] usb 7-1: Product: syz [ 551.709208][ T43] usb 7-1: Manufacturer: syz [ 551.713821][ T43] usb 7-1: SerialNumber: syz [ 551.721389][ T43] usb 7-1: config 0 descriptor?? [ 551.755970][ T43] usb 7-1: can't set config #0, error -71 [ 551.770422][ T43] usb 7-1: USB disconnect, device number 19 [ 551.858722][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.867412][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.083536][T11803] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.700877][T11803] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.848604][T11803] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.935213][T11803] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.579048][T11816] netlink: 'syz.2.1554': attribute type 2 has an invalid length. [ 555.856097][T11831] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 555.856097][T11831] program syz.6.1558 not setting count and/or reply_len properly [ 556.848603][T11803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.867055][T11803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.885103][T11803] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.903025][T11803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.054028][T11841] overlayfs: failed to clone upperpath [ 557.209377][T11844] netlink: 'syz.5.1563': attribute type 2 has an invalid length. [ 558.981818][T11859] netlink: 'syz.6.1568': attribute type 2 has an invalid length. [ 559.697949][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1569'. [ 559.922867][T11870] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.955094][T11866] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.004709][T11870] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.042967][T11866] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.077661][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1573'. [ 560.078508][T11870] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.183572][T11875] hsr_slave_1 (unregistering): left promiscuous mode [ 560.215538][T11866] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.243376][T11870] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.303839][T11866] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.365200][T11870] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.385304][T11870] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.406353][T11870] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.425988][T11870] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.471120][T11866] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.485994][T11866] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.505851][T11866] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.525469][T11866] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.913329][ T6000] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 561.901403][ T6000] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 561.912426][ T6000] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.922950][ T6000] usb 7-1: Product: syz [ 561.927970][ T6000] usb 7-1: Manufacturer: syz [ 561.941808][ T6000] usb 7-1: SerialNumber: syz [ 561.952901][ T6000] usb 7-1: config 0 descriptor?? [ 562.457048][ T6000] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 020 [ 562.810286][T11895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.480616][T11893] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 563.480616][T11893] program syz.2.1578 not setting count and/or reply_len properly [ 563.638929][T11895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.649809][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.656183][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.850845][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.877521][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.940560][ T6000] (null): failure reading functionality [ 563.950955][ T6000] i2c i2c-2: failure reading functionality [ 563.963690][ T6000] i2c i2c-2: connected i2c-tiny-usb device [ 563.992736][ T6000] usb 7-1: USB disconnect, device number 20 [ 564.643292][T11906] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 564.653994][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 564.666863][T11906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1581'. [ 565.792607][T11914] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 566.241449][T11918] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.341108][T11918] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.384248][T11918] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.475234][T11918] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.573631][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 566.593869][T11929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'. [ 566.622042][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 566.652537][T11929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1589'. [ 566.853051][T11918] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.868594][T11918] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.883067][T11918] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.897241][T11918] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.275320][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'. [ 567.284710][T11942] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1593'. [ 567.332727][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'. [ 567.376649][T11942] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1593'. [ 568.226065][T11955] netlink: 'syz.6.1595': attribute type 2 has an invalid length. [ 568.473864][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805793ac00: rx timeout, send abort [ 568.983606][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805793ac00: abort rx timeout. Force session deactivation [ 569.083221][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1600'. [ 569.446630][ T5906] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 569.618224][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 569.638371][ T5906] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 569.658870][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.675766][ T5906] usb 3-1: Product: syz [ 569.688372][ T5906] usb 3-1: Manufacturer: syz [ 569.703302][ T5906] usb 3-1: SerialNumber: syz [ 569.727511][ T5906] usb 3-1: config 0 descriptor?? [ 569.815136][T11977] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1603'. [ 571.248231][ T5906] airspy 3-1:0.0: Board ID: 00 [ 571.253068][ T5906] airspy 3-1:0.0: Firmware version: [ 571.714644][ T6000] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 571.728301][ T5906] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 571.757313][ T5906] airspy 3-1:0.0: Registered as swradio24 [ 571.771847][ T5906] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 571.795214][ T5906] usb 3-1: USB disconnect, device number 66 [ 571.936763][ T6000] usb 2-1: Using ep0 maxpacket: 16 [ 571.956695][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 571.971383][ T6000] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.984155][ T6000] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 384 [ 571.994921][ T6000] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 572.012833][T11992] batadv0: entered promiscuous mode [ 572.018137][T11992] batadv0: entered allmulticast mode [ 572.030566][ T6000] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 572.041164][ T6000] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 572.050843][ T6000] usb 2-1: Manufacturer: syz [ 572.082639][ T6000] usb 2-1: config 0 descriptor?? [ 572.201039][T11994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.213796][T11994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.419997][ T6000] rc_core: IR keymap rc-hauppauge not found [ 572.427002][ T6000] Registered IR keymap rc-empty [ 572.432697][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.457443][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.488271][ T6000] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 572.512021][ T6000] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 572.537888][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.577412][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.607216][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.645981][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.695490][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.736954][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.766973][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 572.782774][T12012] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 572.892427][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 573.235458][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 573.277103][ T6000] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 573.338422][ T6000] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 573.388033][ T6000] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 574.197823][T12026] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.254055][T12026] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.313958][T12026] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.376030][T12026] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.500081][T12026] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.516969][T12026] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.534374][T12026] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.551765][T12026] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.576093][ T6000] usb 2-1: USB disconnect, device number 51 [ 575.120553][T12037] fuse: Unknown parameter 'fd00000000000000000000' [ 577.290744][T12056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 578.789883][T12080] netlink: 'syz.1.1631': attribute type 2 has an invalid length. [ 579.430048][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 579.430068][ T30] audit: type=1326 audit(2000000378.331:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12085 comm="syz.1.1633" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8d238e929 code=0x0 [ 579.512763][T12088] __nla_validate_parse: 1 callbacks suppressed [ 579.512776][T12088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1633'. [ 580.234905][T12102] tap0: tun_chr_ioctl cmd 2147767506 [ 580.541194][T12072] syz.2.1626: attempt to access beyond end of device [ 580.541194][T12072] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 582.237492][T12072] XFS (nbd2): SB validate failed with error -5. [ 582.562725][ T5822] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 582.648441][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 583.108474][T12124] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1643'. [ 583.186150][T12124] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 586.534057][T12160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.573966][T12160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.719480][T12156] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.130343][T12156] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.663545][T12156] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.792010][T12156] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.894107][T12156] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.913456][T12156] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.931076][T12156] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.944945][T12156] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.469374][T12176] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 588.844676][ T30] audit: type=1326 audit(2000000387.741:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12177 comm="syz.1.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8d238e929 code=0x0 [ 589.399278][T12194] (syz.2.1663,12194,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 589.408511][T12194] (syz.2.1663,12194,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 589.724677][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 589.960143][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 590.137203][T12206] netlink: 'syz.5.1666': attribute type 1 has an invalid length. [ 590.145581][T12206] netlink: 'syz.5.1666': attribute type 2 has an invalid length. [ 590.153836][T12206] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.1666'. [ 590.623233][T12210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 592.291772][T12232] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 592.639586][T12231] netlink: 'syz.6.1676': attribute type 2 has an invalid length. [ 592.782571][T12233] input: syz1 as /devices/virtual/input/input27 [ 593.969171][T12249] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.982359][ T5884] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 594.059298][T12257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1681'. [ 594.620760][T12249] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.834828][T12260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.845111][T12260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.858752][T12249] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.898690][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 594.916209][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.957847][T12249] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.985618][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.017556][T12249] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.033761][T12249] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.047573][T12249] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.063418][T12249] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.083296][ T5884] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 595.092457][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.107424][ T5884] usb 3-1: config 0 descriptor?? [ 595.115115][T12262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 595.162695][T12264] netlink: 165 bytes leftover after parsing attributes in process `syz.6.1686'. [ 595.163941][T12262] vlan2: entered promiscuous mode [ 595.322530][ T5884] usb 3-1: USB disconnect, device number 67 [ 595.682931][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1688'. [ 595.692021][T12274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1688'. [ 596.356569][ T5884] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 596.508129][ T5884] usb 3-1: device descriptor read/64, error -71 [ 596.508684][T12280] netlink: 'syz.6.1690': attribute type 2 has an invalid length. [ 597.036126][T12281] set match dimension is over the limit! [ 597.096933][ T5884] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 597.514078][T12293] syz_tun: entered allmulticast mode [ 597.601283][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1697'. [ 597.652099][T12291] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.688332][T12293] loop8: detected capacity change from 0 to 7 [ 597.819628][ T6064] Dev loop8: unable to read RDB block 7 [ 597.826184][ T6064] loop8: unable to read partition table [ 597.832687][ T6064] loop8: partition table beyond EOD, truncated [ 597.863012][T12291] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.465923][T12292] syz_tun: left allmulticast mode [ 598.485590][T12291] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.501799][T12293] Dev loop8: unable to read RDB block 7 [ 598.508345][T12293] loop8: unable to read partition table [ 598.514608][T12293] loop8: partition table beyond EOD, truncated [ 598.524163][T12293] loop_reread_partitions: partition scan of loop8 (■швлx) failed (rc=-5) [ 598.627011][T12291] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.737488][T12291] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.751189][T12291] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.764724][T12291] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.780327][T12291] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.045390][T12311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.073522][T12311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.102594][ T5905] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 599.305749][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.442220][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 599.474630][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 599.514445][ T5905] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 599.557517][ T5905] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 599.594893][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.639392][ T5905] usb 7-1: config 0 descriptor?? [ 599.875269][T12304] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1698'. [ 599.958993][T12337] /dev/nullb0: Can't open blockdev [ 600.300426][T12341] netlink: 'syz.2.1710': attribute type 2 has an invalid length. [ 601.109030][T12345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1712'. [ 601.241226][ T5905] usbhid 7-1:0.0: can't add hid device: -71 [ 601.257646][ T5905] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 601.297773][ T5905] usb 7-1: USB disconnect, device number 21 [ 601.463833][T12354] macsec1: entered promiscuous mode [ 601.469960][T12354] macsec1: entered allmulticast mode [ 601.648683][T12352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.706597][ T5905] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 602.316809][ T5905] usb 7-1: Using ep0 maxpacket: 8 [ 602.334271][ T5905] usb 7-1: config 1 has an invalid interface number: 128 but max is 1 [ 602.348810][ T5905] usb 7-1: config 1 has an invalid descriptor of length 193, skipping remainder of the config [ 602.468522][ T5905] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 602.564899][ T5905] usb 7-1: config 1 has no interface number 0 [ 602.619540][ T5905] usb 7-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 602.635196][ T5905] usb 7-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid maxpacket 41339, setting to 1024 [ 602.868122][ T5905] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.892870][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.911988][ T5905] usb 7-1: Product: syz [ 602.946666][ T5905] usb 7-1: Manufacturer: syz [ 602.961601][ T5905] usb 7-1: SerialNumber: syz [ 602.993367][ T5905] cdc_wdm 7-1:1.128: skipping garbage [ 603.003234][ T5905] cdc_wdm 7-1:1.128: cdc-wdm0: USB WDM device [ 603.009433][ T5905] cdc_wdm 7-1:1.128: Unknown control protocol [ 603.281117][ T5905] usb 7-1: USB disconnect, device number 22 [ 603.391215][T12370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1720'. [ 604.024344][T12370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 604.030463][T12370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 604.036811][T12370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 604.043044][T12370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 604.049428][T12370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 604.351556][T12373] netlink: 'syz.5.1721': attribute type 14 has an invalid length. [ 606.060752][T12393] netlink: 'syz.5.1725': attribute type 2 has an invalid length. [ 606.186650][T12372] Bluetooth: hci4: command 0x0405 tx timeout [ 606.192767][T12372] Bluetooth: hci0: command 0x0c1a tx timeout [ 606.199274][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 606.205313][ T5833] Bluetooth: hci3: command 0x0401 tx timeout [ 606.211620][ T5822] Bluetooth: hci1: command 0x0c1a tx timeout [ 608.207713][T12411] xt_recent: Unsupported userspace flags (000000de) [ 608.542550][ T5906] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 608.744421][ T5906] usb 7-1: config 0 has no interfaces? [ 608.764935][ T5906] usb 7-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 608.815826][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.854626][ T5906] usb 7-1: config 0 descriptor?? [ 609.592869][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1733'. [ 609.614205][T12413] vlan2: entered promiscuous mode [ 610.287549][ T5942] usb 7-1: USB disconnect, device number 23 [ 610.508813][ T5862] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 610.921080][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 610.932439][ T5862] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 610.946552][ T5862] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 610.955625][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.963989][ T5862] usb 2-1: Product: syz [ 610.968530][ T5862] usb 2-1: Manufacturer: syz [ 610.973519][ T5862] usb 2-1: SerialNumber: syz [ 610.981407][ T5862] usb 2-1: config 0 descriptor?? [ 611.001166][ T5862] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 611.333252][ T5862] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 611.412211][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.896615][ T5862] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 612.058972][ T5862] usb 7-1: config 0 has an invalid interface number: 223 but max is 0 [ 612.071432][ T5862] usb 7-1: config 0 has no interface number 0 [ 612.080282][ T5862] usb 7-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice=63.f3 [ 612.089872][ T5862] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.093070][T12465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.109426][T12465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.114083][ T5862] usb 7-1: config 0 descriptor?? [ 612.141892][ T5862] snd-usb-caiaq 7-1:0.223: can't set alt interface. [ 612.149195][ T5862] usb 7-1: unable to init card! (ret=-5) [ 612.155769][ T5862] snd-usb-caiaq 7-1:0.223: probe with driver snd-usb-caiaq failed with error -5 [ 612.570501][ T5874] usb 7-1: USB disconnect, device number 24 [ 613.223316][ T5862] usb 2-1: USB disconnect, device number 52 [ 613.285437][T12473] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1752'. [ 614.171110][T12481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1755'. [ 614.189836][T12481] vlan2: entered promiscuous mode [ 614.194920][T12481] syz_tun: entered promiscuous mode [ 615.670429][T12503] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1761'. [ 620.184278][T12546] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1776'. [ 621.348958][T12395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.366679][T12395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.386752][T12395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.396333][T12395] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.405782][T12395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 621.500384][T12554] lo speed is unknown, defaulting to 1000 [ 621.747264][ T5942] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 621.997164][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 622.029017][ T5942] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 622.090684][ T5942] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 622.283315][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=8, SerialNumber=0 [ 622.362322][ T5942] usb 7-1: Product: syz [ 622.675306][ T5942] usb 7-1: Manufacturer: syz [ 622.693494][ T5942] usb 7-1: config 0 descriptor?? [ 622.699622][T12557] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 622.930884][T12557] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 622.947246][ T5942] usb 7-1: USB disconnect, device number 25 [ 623.486702][T12395] Bluetooth: hci5: command tx timeout [ 623.727512][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 623.782203][ T31] Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 [ 624.382247][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.400256][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.506717][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 624.515532][ T31] task:kworker/1:0 state:D stack:14488 pid:24 tgid:24 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 624.729024][ T31] Workqueue: usb_hub_wq hub_event [ 624.734154][ T31] Call Trace: [ 624.737735][ T31] [ 624.740697][ T31] __schedule+0x16a2/0x4cb0 [ 624.745256][ T31] ? schedule+0x165/0x360 [ 624.749663][ T31] ? __pfx___schedule+0x10/0x10 [ 624.754558][ T31] ? schedule+0x91/0x360 [ 624.766696][ T31] schedule+0x165/0x360 [ 624.770916][ T31] schedule_timeout+0x9a/0x270 [ 624.775695][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 624.796725][ T31] ? wait_for_completion+0x267/0x5d0 [ 624.802410][ T31] wait_for_completion+0x2bf/0x5d0 [ 624.816521][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 624.822231][ T31] i2c_del_adapter+0x581/0x6e0 [ 624.857088][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 624.862375][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 624.976525][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 624.981455][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 624.986390][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 625.096490][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 625.146514][ T31] usb_probe_interface+0x641/0xbc0 [ 625.151712][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 625.315245][ T31] really_probe+0x26a/0x9a0 [ 625.387528][ T31] __driver_probe_device+0x18c/0x2f0 [ 625.392895][ T31] driver_probe_device+0x4f/0x430 [ 625.489333][ T31] ? idr_get_free+0x8dc/0xa70 [ 625.494093][ T31] ? check_path+0x21/0x40 [ 625.538822][ T31] ? __lock_acquire+0xab9/0xd20 [ 625.566880][T12395] Bluetooth: hci5: command tx timeout [ 625.572654][ T24] usb 6-1: USB disconnect, device number 23 [ 625.585033][ T31] ? console_flush_all+0x13a/0xc40 [ 625.607062][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 625.613038][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 625.646014][ T31] ? kvm_sched_clock_read+0x11/0x20 [ 625.653422][ T31] ? sched_clock+0x3f/0x60 [ 625.662180][ T31] ? sched_clock_cpu+0x74/0x430 [ 625.667359][ T31] ? unwind_next_frame+0xa5/0x2390 [ 625.672499][ T31] ? psi_task_switch+0x318/0x6d0 [ 625.677734][ T31] ? psi_group_change+0xbc7/0x1210 [ 625.682872][ T31] ? rcu_read_lock_sched_held+0x89/0x100 [ 625.689088][ T31] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 625.695193][ T31] ? psi_task_switch+0x318/0x6d0 [ 625.701356][ T31] ? __schedule+0x1670/0x4cb0 [ 625.706083][ T31] ? __schedule+0x16a2/0x4cb0 [ 625.711260][ T31] ? schedule+0x165/0x360 [ 625.715613][ T31] ? __pfx___schedule+0x10/0x10 [ 625.720852][ T31] ? schedule+0x91/0x360 [ 625.725121][ T31] ? schedule+0x165/0x360 [ 625.729781][ T31] ? schedule_timeout+0x12b/0x270 [ 625.734826][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 625.740248][ T31] ? usb_control_msg+0x2bf/0x3e0 [ 625.745200][ T31] ? __pfx_process_timeout+0x10/0x10 [ 625.750780][ T31] ? hub_ext_port_status+0x52d/0x820 [ 625.756309][ T31] ? msleep+0x39/0x100 [ 625.760688][ T31] ? msleep+0xa2/0x100 [ 625.764782][ T31] ? hub_port_debounce+0x204/0x310 [ 625.770024][ T31] ? hub_event+0x1d6f/0x4a00 [ 625.774804][ T31] ? do_raw_spin_lock+0x121/0x290 [ 625.779964][ T31] ? register_lock_class+0x51/0x320 [ 625.785185][ T31] ? __pfx_hub_event+0x10/0x10 [ 625.790236][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 625.795981][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.801341][ T31] ? schedule+0x165/0x360 [ 625.805934][ T31] ? __pfx___schedule+0x10/0x10 [ 625.810924][ T31] ? schedule+0x91/0x360 [ 625.815182][ T31] ? schedule+0x165/0x360 [ 625.819630][ T31] ? worker_thread+0xa82/0xda0 [ 625.824454][ T31] ? kthread+0x70e/0x8a0 [ 625.828842][ T31] ? __pfx_worker_thread+0x10/0x10 [ 625.833977][ T31] ? __pfx_kthread+0x10/0x10 [ 625.838624][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 625.843814][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 625.849854][ T31] ? __pfx_kthread+0x10/0x10 [ 625.854680][ T31] ? ret_from_fork+0x3f9/0x770 [ 625.859649][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 625.864783][ T31] ? __switch_to_asm+0x39/0x70 [ 625.869589][ T31] ? __switch_to_asm+0x33/0x70 [ 625.874356][ T31] ? __pfx_kthread+0x10/0x10 [ 625.879026][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 625.883979][ T31] [ 625.888377][ T31] [ 625.888377][ T31] Showing all locks held in the system: [ 626.008773][ T31] 3 locks held by kworker/1:0/24: [ 626.013856][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 626.025002][ T31] #1: ffffc900001e7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 626.176685][ T31] #2: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 626.202991][ T31] 1 lock held by khungtaskd/31: [ 626.208402][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 626.226580][ T31] 2 locks held by getty/5578: [ 626.231661][ T31] #0: ffff888034eaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 626.269895][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 626.291648][ T31] 3 locks held by kworker/0:3/5874: [ 626.306581][ T31] 1 lock held by syz.3.1674/12227: [ 626.311706][ T31] 2 locks held by syz.6.1749/12460: [ 626.341428][ T31] #0: ffffffff8f4fd988 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 626.361354][ T31] #1: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 626.398884][ T31] 1 lock held by syz-executor/12554: [ 626.404198][ T31] 1 lock held by syz.5.1785/12580: [ 626.451181][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.526584][ T31] [ 626.546527][ T31] ============================================= [ 626.546527][ T31] [ 626.555177][ T31] NMI backtrace for cpu 1 [ 626.555198][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 626.555222][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.555234][ T31] Call Trace: [ 626.555242][ T31] [ 626.555250][ T31] dump_stack_lvl+0x189/0x250 [ 626.555281][ T31] ? __wake_up_klogd+0xd9/0x110 [ 626.555304][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 626.555331][ T31] ? __pfx__printk+0x10/0x10 [ 626.555363][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 626.555391][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 626.555411][ T31] ? _printk+0xcf/0x120 [ 626.555435][ T31] ? __pfx__printk+0x10/0x10 [ 626.555462][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 626.555488][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 626.555514][ T31] watchdog+0xfee/0x1030 [ 626.555540][ T31] ? watchdog+0x1de/0x1030 [ 626.555572][ T31] kthread+0x70e/0x8a0 [ 626.555594][ T31] ? __pfx_watchdog+0x10/0x10 [ 626.555617][ T31] ? __pfx_kthread+0x10/0x10 [ 626.555639][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.555663][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.555688][ T31] ? __pfx_kthread+0x10/0x10 [ 626.555708][ T31] ret_from_fork+0x3f9/0x770 [ 626.555735][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 626.555766][ T31] ? __switch_to_asm+0x39/0x70 [ 626.555783][ T31] ? __switch_to_asm+0x33/0x70 [ 626.555799][ T31] ? __pfx_kthread+0x10/0x10 [ 626.555820][ T31] ret_from_fork_asm+0x1a/0x30 [ 626.555854][ T31] [ 626.555861][ T31] Sending NMI from CPU 1 to CPUs 0: [ 626.714034][ C0] NMI backtrace for cpu 0 [ 626.714050][ C0] CPU: 0 UID: 0 PID: 12618 Comm: kworker/u8:15 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 626.714071][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 626.714083][ C0] Workqueue: events_unbound toggle_allocation_gate [ 626.714108][ C0] RIP: 0010:do_raw_spin_unlock+0xc2/0x240 [ 626.714127][ C0] Code: 8d 7b 08 4c 89 fd 48 c1 ed 03 42 0f b6 44 25 00 84 c0 0f 85 42 01 00 00 41 8b 07 65 8b 0d 6a d6 fa 10 39 c8 0f 85 d4 00 00 00 <43> 80 7c 25 00 00 74 08 4c 89 f7 e8 ee d5 82 00 49 c7 06 ff ff ff [ 626.714141][ C0] RSP: 0018:ffffc90003447698 EFLAGS: 00000246 [ 626.714155][ C0] RAX: 0000000000000000 RBX: ffff88801a47b060 RCX: 0000000000000000 [ 626.714166][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801a47b060 [ 626.714177][ C0] RBP: 1ffff1100348f60d R08: ffff88801a47b063 R09: 1ffff1100348f60c [ 626.714189][ C0] R10: dffffc0000000000 R11: ffffed100348f60d R12: dffffc0000000000 [ 626.714202][ C0] R13: 1ffff1100348f60e R14: ffff88801a47b070 R15: ffff88801a47b068 [ 626.714215][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 626.714228][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.714239][ C0] CR2: 00007fbc4d846e9c CR3: 000000000df38000 CR4: 00000000003526f0 [ 626.714254][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.714264][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 626.714275][ C0] Call Trace: [ 626.714282][ C0] [ 626.714291][ C0] ? __kmalloc_node_track_caller_noprof+0xe8/0x4e0 [ 626.714312][ C0] _raw_spin_unlock+0x1e/0x50 [ 626.714333][ C0] __text_poke+0x7b1/0xa10 [ 626.714352][ C0] ? __pfx_text_poke_memcpy+0x10/0x10 [ 626.714368][ C0] ? __kmalloc_node_track_caller_noprof+0xe8/0x4e0 [ 626.714388][ C0] ? __pfx___text_poke+0x10/0x10 [ 626.714402][ C0] ? rcu_is_watching+0x15/0xb0 [ 626.714425][ C0] ? trace_contention_end+0x39/0x120 [ 626.714452][ C0] smp_text_poke_batch_finish+0x8af/0x1100 [ 626.714473][ C0] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 626.714493][ C0] ? arch_jump_label_transform_queue+0x97/0x110 [ 626.714518][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 626.714538][ C0] static_key_enable_cpuslocked+0x128/0x250 [ 626.714555][ C0] static_key_enable+0x1a/0x20 [ 626.714570][ C0] toggle_allocation_gate+0xad/0x240 [ 626.714590][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 626.714610][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 626.714636][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 626.714658][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 626.714680][ C0] process_scheduled_works+0xade/0x17b0 [ 626.714716][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.714746][ C0] worker_thread+0x8a0/0xda0 [ 626.714781][ C0] kthread+0x70e/0x8a0 [ 626.714798][ C0] ? __pfx_worker_thread+0x10/0x10 [ 626.714820][ C0] ? __pfx_kthread+0x10/0x10 [ 626.714837][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 626.714857][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 626.714878][ C0] ? __pfx_kthread+0x10/0x10 [ 626.714895][ C0] ret_from_fork+0x3f9/0x770 [ 626.714917][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.714938][ C0] ? __switch_to_asm+0x39/0x70 [ 626.714953][ C0] ? __switch_to_asm+0x33/0x70 [ 626.714968][ C0] ? __pfx_kthread+0x10/0x10 [ 626.714985][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.715008][ C0] [ 627.139019][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 627.145926][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 627.157756][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 627.167829][ T31] Call Trace: [ 627.171131][ T31] [ 627.174073][ T31] dump_stack_lvl+0x99/0x250 [ 627.178693][ T31] ? __asan_memcpy+0x40/0x70 [ 627.183303][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.188522][ T31] ? __pfx__printk+0x10/0x10 [ 627.193140][ T31] panic+0x2db/0x790 [ 627.197064][ T31] ? __pfx_panic+0x10/0x10 [ 627.201500][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 627.207332][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 627.212730][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 627.218911][ T31] watchdog+0x102d/0x1030 [ 627.223261][ T31] ? watchdog+0x1de/0x1030 [ 627.227701][ T31] kthread+0x70e/0x8a0 [ 627.231796][ T31] ? __pfx_watchdog+0x10/0x10 [ 627.236489][ T31] ? __pfx_kthread+0x10/0x10 [ 627.241099][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 627.246314][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 627.251527][ T31] ? __pfx_kthread+0x10/0x10 [ 627.256127][ T31] ret_from_fork+0x3f9/0x770 [ 627.260729][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 627.265848][ T31] ? __switch_to_asm+0x39/0x70 [ 627.270606][ T31] ? __switch_to_asm+0x33/0x70 [ 627.275359][ T31] ? __pfx_kthread+0x10/0x10 [ 627.279949][ T31] ret_from_fork_asm+0x1a/0x30 [ 627.284726][ T31] [ 627.288101][ T31] Kernel Offset: disabled [ 627.292446][ T31] Rebooting in 86400 seconds..