last executing test programs: 15.082017333s ago: executing program 0 (id=2944): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.320924505s ago: executing program 2 (id=2966): semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000340)=""/148) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x10, 0x20, 0x0, 0x38000, {{0x21, 0x4, 0x0, 0x1, 0x84, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x6e, 0x3, [{0x5, 0xd, "0835c286a40a650aa20932"}, {0x7, 0x9, "a312a41cee6653"}, {0x6, 0x10, "8cdd1000000000000000004d04ca"}, {0x5, 0x4, "ae3d"}, {0x5, 0x5, "520101"}, {0x2, 0x9, "92d848500ce930"}, {0x5, 0x11, "c5e0fce1d41d6974dbea8414d17a6b"}, {0x5, 0x4, "6f16"}, {0x6, 0x11, "3f8890325232702bf59d2206928b44"}, {0x7, 0xa, "ca547b81cc4194e0"}]}]}}}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x4, &(0x7f00000002c0)=[{0x3, 0x9, 0xb, 0x5}, {0x2, 0x8, 0x1, 0x8}, {0x1, 0x7, 0x3, 0xe5}, {0x8, 0x4, 0x3, 0x5}]}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001d000100000000000000000000020900f1928fdf47952ac6798fe9974df6af4e23dfc35be1693761baf477bdfd48a0c1ae45b9c771b2bfd276af1a8ff65e929388d8b2de3b896f589965113a11a15098b1a8e87ed79a78b720d03119ed64e034a08006783f42a486b371908eb267596a44f07d7626b3aa1ebd2c2ebc4142f16a4e40e42a67ca8f8cab0c3ba97792f101acf62d8f"], 0x14}}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x1, 0x0, 0x0, 0x3d0, 0x8, 0x0, 0xa, 0x40, 0x0, 0xe0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4, 0x0, '\x00', 0x0, 0x20000000}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000200)='./bus/file0\x00', 0x0) socket$inet(0x2, 0xa, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b000300"], 0xfc}}, 0x0) 7.816057157s ago: executing program 2 (id=2967): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) unshare(0x22020600) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.813991723s ago: executing program 1 (id=2968): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x40, {}, {0x8000000, 0xce6}, {0x0, 0x0, 0x1}, {0x400, 0x200}, 0x0, 0x3f0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2d, 0x3f, 0x0, 0x5}) 7.346024632s ago: executing program 1 (id=2969): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404282, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000097000040"]) 7.266803987s ago: executing program 1 (id=2970): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r1, 0x8000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a6500000001090212000100000000090400000003040200ca829a3d7eb301d007d6d74897d35b1759ff577d27ef4707cd05d9150081f6436b1d4c0022339acdf9ce42ed2b97770b67b8f1de2a52abc8a941f52068b3359d3a1f0afa32bb52cec7f7e2af94f488f225b6dab0ef812941eec30177784d275202bb1436639349d25ca652b7da643454d39f5e441c78cfe9fae4"], 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) r4 = memfd_create(0x0, 0x0) fallocate(r4, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfc, {0x11, 0x0, 0x0, r5, 0x3, 0x2, 0xc2, 0x7, 0x0, 0x10001, 0x8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x40000) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2c, 0x2}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x11}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x1068) socket(0x0, 0x6, 0x8) 6.868061538s ago: executing program 2 (id=2971): getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r1 = syz_io_uring_setup(0x652b, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000000)='5', 0xfdef}], 0x1) writev(r2, &(0x7f00000013c0)=[{&(0x7f00000001c0)="f3", 0x1}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000880)={0x1, 0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001940)=""/251, 0xfb}], 0x0}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x48031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x0, 0x1}, 0x20) 6.648237691s ago: executing program 2 (id=2972): r0 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0) openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) openat$nvram(0xffffff9c, &(0x7f0000002000), 0x62802, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) syz_emit_ethernet(0x6a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080046f0005c00000000802f9078ac1414aa0a0101000189036b0420880b0000fffc00000800000086dd080088be00000000100600000100000000e00000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0), 0x4, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000002040)={0x0, 0x0, 0x0, &(0x7f0000001d40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000200)=""/227, 0xe3}], 0x1, 0xfff, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002100)=ANY=[@ANYRESHEX=r3, @ANYRES64=r4], 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r5, 0xf505, 0x0) shmget(0x2, 0x1000, 0x1000, &(0x7f0000629000/0x1000)=nil) userfaultfd(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000020c0)="30e1d7fb8c769a1c8d645bf6f07f98e776c2e942a1682de78274c31cc668feb6c3c17fde4baa9fff01379054", 0x2c}, {&(0x7f0000002140)="ae033df5ee7efdabd0b3fe63cbff2d15288fc1eaf7cb86136654", 0x1a}, {&(0x7f0000002180)="68cbe28f8b34c398e5034fbfb3d25784077fb270df333fd554973c92cc56d9e66f7ca5dd2755a178a0f40cf84ee0bc8d13934eb1f3ce7c53ec0a823db9d7ea822e9a9aef5702717c9b4d5b20dea303e0fac17a8d405f7cd02b379e620f99300930bf2c908d", 0x65}, {&(0x7f0000002200)="ff65fbe315dbdccf655ccd215061d4be77579099e219e09700bac6e334ce740bb85812e9f5458e6eaecac363542f684f1c18bc5965632d6e09d11a509f7ce68f491c37051bdcde35252127a97502a35489f2dd3459b412e0329eb95441b79b21d58aebcfdcbc4548e4791e928b47ec010d86efe6e2c04b289524e9cc4731ff60", 0x80}], 0x4}, 0x20004811) socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000022c0)={0xc, 0x40, 0x20000}, 0x10) 5.48639425s ago: executing program 1 (id=2976): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB=' '], 0xb) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8901}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000180), 0x0, 0x0, 0x1) 5.267068131s ago: executing program 4 (id=2978): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f00000000c0)='H', 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={r3, @multicast1, @multicast2}, 0xc) getsockopt$inet_opts(r2, 0x0, 0x400000000000009, 0x0, &(0x7f0000000100)) (async) getsockopt$inet_opts(r2, 0x0, 0x400000000000009, 0x0, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = dup(r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r5, 0x4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000ce"]) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) (async) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000028000000000a01040000000000000000030000020900010073797a3000000000080002"], 0xcc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn(#e', 0x0) 4.93082161s ago: executing program 4 (id=2979): r0 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000640)={0x6, 0x0, 0x1, {0xa, @pix_mp={0x8, 0x0, 0x3147504d, 0x9, 0x3, [{0x9, 0x4}, {0xa}, {0x0, 0xfffffffd}, {0x0, 0x9}, {0x9}, {0xfffffffe}, {0xfffffffc, 0xfffffffc}, {0x8, 0x5}], 0x10, 0xf, 0x1}}}) r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000880), 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000240)={0x8}) bind$alg(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r3, 0xf505, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xff, 0x2, 0x1, 0x3}, 0x8) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x44}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000380)=""/185, 0xb9}], 0x2, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$apparmor_current(r1, &(0x7f00000008c0)=ANY=[@ANYBLOB="7065726d686174203078303030303030303030303030303019325e637075616363742e7573546f2c71bc7b74bfc797803582e5341ff3204147743d59926167655f7065906370755f73797300637275616363742e75736167655f7065726370755f7379"], 0x6a) r6 = socket(0x18, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x11, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000001f80)={'veth1_macvtap\x00', {0x2, 0x0, @loopback}}) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000000c0)={'erspan0\x00', &(0x7f00000004c0)={'gretap0\x00', r9, 0x9, 0x20, 0x7fffffff, 0x80000001, {{0x14, 0x4, 0x2, 0x4, 0x50, 0x65, 0x0, 0xf7, 0x2f, 0x0, @local, @multicast2, {[@cipso={0x86, 0x12, 0x1, [{0x2, 0x3, "03"}, {0x6, 0xe, "7bcb1ec712f70cd24c10a52c"}, {0x7, 0x3, "fa782fcc12ab3850d0df0f97c40a1398"}, {0x0, 0x4, "727f"}, {0x0, 0x12, "b3f2b0c37257eca1000000000b2f47f4"}, {0x1, 0x5, '\x00\x00\x00'}, {0x6, 0x6, "48311c8b"}]}]}}}}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000040)=""/42) 4.462922286s ago: executing program 3 (id=2912): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x3b, 0x7f, 0x300, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0xfffffffd}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r2 = openat$fuse(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x29632}}, 0x50) write$FUSE_INTERRUPT(r2, &(0x7f0000000380)={0x10, 0x0, r4}, 0x10) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x16, @loopback, 0x5}}, 0x0, 0x0, 0x5, 0x0, "3c982b2bf01cf3cba642d936a9b478c7242d59b62119a4bba38fc8ab386ef786347944d5c551445dd5a59b3d8ce81fc117f007a585e6f6a140426a7a49dacf54de15a7a47759f3108084409aa8b2f15d"}, 0xd8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) 3.558609481s ago: executing program 0 (id=2945): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x200000a, 0x10050, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) creat(0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(0xffffffffffffffff, 0x4004510f, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket(0x10, 0x2, 0x81) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket(0xa, 0x80000, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xd4, 0x0, 0x4) (async) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x8, r3) syz_pidfd_open(r3, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000006e80), 0x0, 0x8080) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async) r8 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000020c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, 0x0) 3.46004757s ago: executing program 3 (id=2980): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000008000000000000000000850000005600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0xa74, 0x910, 0x11, 0x148, 0x910, 0x10, 0x9e0, 0x2a8, 0x2a8, 0x9e0, 0x2a8, 0xac, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'bridge0\x00', 'macvlan0\x00'}, 0x10, 0x8a8, 0x910, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x5}}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0xad0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_CARRIER={0x5, 0x21, 0xee}]}, 0x28}}, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @phonet={0x23, 0x5, 0x4, 0xc}, @ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @ethernet={0x306, @local}, 0x8001, 0x0, 0x0, 0x0, 0xe09f, &(0x7f0000000000)='team_slave_0\x00', 0x7, 0xe18, 0x2}) 3.455777702s ago: executing program 2 (id=2981): set_mempolicy(0x6, &(0x7f0000000000)=0x40006, 0x3) set_mempolicy(0x8001, &(0x7f0000000200)=0xd7, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) unshare(0x400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r2, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000003c0)="ea", 0x1}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) fcntl$dupfd(0xffffffffffffffff, 0x406, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0102000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000be98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.280773403s ago: executing program 0 (id=2982): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000b80c00000000000000f504010007c01c00"], 0x11fc}}, 0x0) 3.273458222s ago: executing program 3 (id=2983): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r1, 0x8000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a6500000001090212000100000000090400000003040200ca829a3d7eb301d007d6d74897d35b1759ff577d27ef4707cd05d9150081f6436b1d4c0022339acdf9ce42ed2b97770b67b8f1de2a52abc8a941f52068b3359d3a1f0afa32bb52cec7f7e2af94f488f225b6dab0ef812941eec30177784d275202bb1436639349d25ca652b7da643454d39f5e441c78cfe9fae4"], 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = memfd_create(0x0, 0x0) fallocate(r4, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3fc00, 0x0, 0xf0}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfc, {0x11, 0x0, 0x0, r5, 0x3, 0x2, 0xc2, 0x7, 0x0, 0x10001, 0x8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x40000) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2c, 0x2}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x11}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x1068) socket(0x0, 0x6, 0x8) 3.226843371s ago: executing program 4 (id=2984): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') setns(r1, 0x8000000) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a6500000001090212000100000000090400000003040200ca829a3d7eb301d007d6d74897d35b1759ff577d27ef4707cd05d9150081f6436b1d4c0022339acdf9ce42ed2b97770b67b8f1de2a52abc8a941f52068b3359d3a1f0afa32bb52cec7f7e2af94f488f225b6dab0ef812941eec30177784d275202bb1436639349d25ca652b7da643454d39f5e441c78cfe9fae4"], 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) r4 = memfd_create(0x0, 0x0) fallocate(r4, 0x0, 0x0, 0xffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r3, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x3c, 0x3e9, 0x200, 0x70bd2a, 0x25dfdbfc, {0x11, 0x0, 0x0, r5, 0x3, 0x2, 0xc2, 0x7, 0x0, 0x10001, 0x8}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x40000) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2c, 0x2}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x24, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x11}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r9, &(0x7f0000000040)="e2", 0x1068) socket(0x0, 0x6, 0x8) 3.007916457s ago: executing program 0 (id=2985): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.205477176s ago: executing program 1 (id=2986): fsopen(&(0x7f0000000040)='sockfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x1007}], 0x1, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) close(r2) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003ca12a102c105161e64400000001090212000100000000090400000070cc4e00a101dc1cd50d2e31ca928ad348f26361c1cbbd8b35bcc36f0427376d79bf71c6977cf24fa73d2a50e3530c8bad06313ac951cc2e505d94a716369cdb8f435d5f39507c"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) sendfile64(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, 0x0, 0x0) listen(r5, 0x3) unshare(0xc040400) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r7, 0x80000003, {0x2, 0x0, 0x3}, 0xfe}, 0x18) accept4(r5, 0x0, 0x0, 0x80000) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x40044591, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x7, 0x2eff) 1.967806296s ago: executing program 2 (id=2987): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r0, 0x3, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000040)={{}, {0x0, 0x0}}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbff, {0x81, 0x0, 0x0, 0x6, 0xfd}}, 0x1c}, 0x1, 0x0, 0x0, 0x2401c080}, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESDEC=r2, @ANYRES8=r3, @ANYRES16=r2, @ANYRES16=r2, @ANYRESDEC=r1], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r4) epoll_create(0xffff) (async) r7 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_pwait2(r7, &(0x7f0000000080)=[{}], 0x1, 0x0, 0x0, 0x0) 1.904028876s ago: executing program 0 (id=2988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20, 0x10000000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.670924435s ago: executing program 1 (id=2989): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000741c9934000000010440000000c0a01020000000000000000010000000900020073797a32000000000900010073797a30000000001800038014000080040001800c"], 0xd0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240100003b0007010000000000000000047c0000040000000c00018006000600800a000000010280f90014"], 0x124}, 0x1, 0x0, 0x0, 0x7000000}, 0xc000) 1.261493907s ago: executing program 0 (id=2991): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3400000010001fff0000000000007fff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0) 1.021207272s ago: executing program 3 (id=2992): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback={0xfec0ffff00000000, 0x2}, 0x0, 0x0, 0x108}}) 1.02043521s ago: executing program 4 (id=2993): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c06000000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) unshare(0x40000000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x9, 0x0, &(0x7f0000000040)) sendmsg$AUDIT_USER(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x84, 0x3ed, 0x200, 0x1070bd2d, 0x25dfdbff, "cbc12c05a25476f7d9c1d1486a0fe72bfca804ec95ef73296710f78f45b46fad662db580889b635277fe7f167f46719b812bbc36e3eed340aa896e551b08dc9da7c437417c73341c2c5d84d12b01d37e40402d6a8e6325ac07eb13044291baf7c9d84b94043cfe707d793a1e92301d9368", [""]}, 0x84}, 0x1, 0x0, 0x0, 0x24008850}, 0x840) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000000080)="ec"}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @empty}]}}}]}, 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003540)=ANY=[@ANYBLOB="3c00000010000104000000000000000000480000", @ANYRES32=r5, @ANYBLOB="0000000000000000180001"], 0x3c}}, 0x0) fallocate(0xffffffffffffffff, 0x2e, 0x200, 0xff9) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x8}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfffffffffffffea9, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000c00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded01007eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r6, 0xc0185500, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) pipe2(&(0x7f0000000000), 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0xb87, 0x0) 731.560264ms ago: executing program 3 (id=2994): unshare(0x2c020400) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{}, {0x95, 0x0, 0x1b00}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xc}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x16, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 411.811551ms ago: executing program 3 (id=2995): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x005'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) fcntl$setpipe(r0, 0x407, 0x1) pwritev(r0, &(0x7f0000000940)=[{&(0x7f0000000480)="80fd02000000", 0x6}], 0x1, 0x0, 0x0) 200.018435ms ago: executing program 4 (id=2996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x30, 0x0, 0x0, 0xee01}, {}, {0x0, 0xffffe000}, 0x4}}, 0xb8}}, 0x0) 0s ago: executing program 4 (id=2997): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0xd}]}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="82000000040000000500", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r8}, 0x10) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x7f], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x35}]}]}]}}]}, 0xa4}}, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000300), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[0x1], &(0x7f00000003c0)=[r12], &(0x7f0000000340)}) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r13 = gettid() process_vm_writev(r13, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8000, 0x0, 0x0, 0xfffe}) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 769.051914][T18193] team0: Port device netdevsim0 added [ 769.097982][T18200] netlink: 'syz.4.2715': attribute type 10 has an invalid length. [ 769.118578][T18200] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 769.134819][T18200] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 769.163256][T18200] team0: Port device netdevsim0 removed [ 769.187168][T18200] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 769.234363][T18216] openvswitch: netlink: Actions may not be safe on all matching packets [ 769.260556][ T29] audit: type=1326 audit(1727017611.055:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.285583][ T46] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 769.316574][ T29] audit: type=1326 audit(1727017611.055:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.404753][ T29] audit: type=1326 audit(1727017611.055:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.468531][ T29] audit: type=1326 audit(1727017611.055:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.504081][ T46] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 769.522770][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.540092][T18230] loop9: detected capacity change from 0 to 7 [ 769.583161][ T46] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 769.592745][ T29] audit: type=1326 audit(1727017611.055:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.621032][T18230] Dev loop9: unable to read RDB block 7 [ 769.633409][ T46] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 769.645954][T18230] loop9: unable to read partition table [ 769.674037][ T46] usb 5-1: Manufacturer: syz [ 769.680795][T18230] loop9: partition table beyond EOD, truncated [ 769.700034][ T46] usb 5-1: config 0 descriptor?? [ 769.715417][T18230] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 769.715417][T18230] U) failed (rc=-5) [ 769.734530][ T29] audit: type=1326 audit(1727017611.055:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.777030][ T29] audit: type=1326 audit(1727017611.055:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.830746][ T29] audit: type=1326 audit(1727017611.055:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18217 comm="syz.0.2719" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000 [ 769.897149][ T46] rc_core: IR keymap rc-hauppauge not found [ 769.930890][ T46] Registered IR keymap rc-empty [ 769.959837][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 770.031412][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input98 [ 770.069410][T18238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2724'. [ 770.110247][ T46] usb 5-1: USB disconnect, device number 96 [ 770.155988][ T5343] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 770.325818][ T5343] usb 2-1: Using ep0 maxpacket: 16 [ 770.368329][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.390128][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.411503][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 770.433280][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 770.443687][ T5343] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 770.453131][ T5343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.472440][ T5343] usb 2-1: config 0 descriptor?? [ 770.645637][ T8] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 770.665343][T18256] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2729'. [ 770.681214][T18256] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.2729'. [ 770.836089][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 770.845250][ T8] usb 3-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 770.861090][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.889521][ T8] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 770.919469][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.945161][ T8] usb 3-1: config 0 descriptor?? [ 770.973732][T18264] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2732'. [ 770.988829][T18264] geneve2: entered promiscuous mode [ 770.995576][T18264] geneve2: entered allmulticast mode [ 770.997490][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 771.140362][ T5343] usbhid 2-1:0.0: can't add hid device: -71 [ 771.146690][ T5343] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 771.183364][ T5343] usb 2-1: USB disconnect, device number 104 [ 771.401935][T18285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.414737][T18285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.424808][T18285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.434859][T18285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.139652][T18299] netlink: 'syz.1.2741': attribute type 10 has an invalid length. [ 772.153519][T18299] team0: Port device netdevsim0 added [ 772.164884][T18299] netlink: 'syz.1.2741': attribute type 10 has an invalid length. [ 772.184563][T18299] team0: Port device netdevsim0 removed [ 772.194014][T18299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 772.207283][T18299] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q{tǗ54 AGt=Yage_pecpu_sys' [ 772.445768][ T5269] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 772.638877][ T5269] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 772.647658][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.659427][ T5269] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 772.669432][ T5269] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 772.677983][ T5269] usb 2-1: Manufacturer: syz [ 772.687133][ T5269] usb 2-1: config 0 descriptor?? [ 772.755642][ T5269] rc_core: IR keymap rc-hauppauge not found [ 772.761891][ T5269] Registered IR keymap rc-empty [ 772.767845][ T5269] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 772.786246][ T5269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input99 [ 772.906357][ T5269] usb 2-1: USB disconnect, device number 105 [ 773.098887][T18312] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 773.422200][ T5276] usb 3-1: USB disconnect, device number 91 [ 773.717102][T18331] loop9: detected capacity change from 0 to 7 [ 773.726596][T18331] Dev loop9: unable to read RDB block 7 [ 773.732269][T18331] loop9: unable to read partition table [ 773.739829][T18331] loop9: partition table beyond EOD, truncated [ 773.759098][T18331] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 773.759098][T18331] ) failed (rc=-5) [ 773.775653][ T5343] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 773.779971][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 773.823379][T18333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2757'. [ 773.906058][ T5343] usb 2-1: device descriptor read/64, error -71 [ 773.948128][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 773.967849][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2759'. [ 774.053634][T11250] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.156103][ T5343] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 774.286584][ T5343] usb 2-1: device descriptor read/64, error -71 [ 774.310472][T11250] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.343787][T18343] netlink: 'syz.2.2763': attribute type 10 has an invalid length. [ 774.381661][T18343] bond0: (slave netdevsim0): Releasing backup interface [ 774.409647][ T5343] usb usb2-port1: attempt power cycle [ 774.434606][T18343] team0: Port device netdevsim0 added [ 774.456792][T18347] netlink: 'syz.2.2763': attribute type 10 has an invalid length. [ 774.527519][T18347] team0: Port device netdevsim0 removed [ 774.551136][T18347] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 774.600141][ T4619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 774.610146][ T4619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 774.623200][ T4619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 774.637458][T11250] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.648654][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 774.659437][ T5227] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 774.668804][ T5227] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 774.678022][ T5227] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 774.706944][ T4619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 774.715707][ T4619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 774.724175][ T4619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 774.738836][ T4619] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 774.747366][ T5276] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 774.757407][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 774.795634][ T5343] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 774.816387][ T5343] usb 2-1: device descriptor read/8, error -71 [ 774.830609][T11250] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.923999][ T5276] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 774.953136][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.997482][ T5276] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 775.026553][ T5276] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 775.034723][ T5276] usb 3-1: Manufacturer: syz [ 775.041877][ T5276] usb 3-1: config 0 descriptor?? [ 775.055788][ T5343] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 775.086630][ T5343] usb 2-1: device descriptor read/8, error -71 [ 775.175781][ T5276] rc_core: IR keymap rc-hauppauge not found [ 775.181865][ T5276] Registered IR keymap rc-empty [ 775.200930][T11250] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.214572][ T5343] usb usb2-port1: unable to enumerate USB device [ 775.229369][ T5276] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 775.250268][ T5276] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input100 [ 775.290611][ T8] usb 3-1: USB disconnect, device number 92 [ 775.426461][T11250] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.566772][T11250] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.636088][T18352] chnl_net:caif_netlink_parms(): no params data found [ 775.677165][ T4619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 775.689141][ T4619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 775.698865][ T4619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 775.709689][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 775.717998][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 775.725411][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.733755][T11250] bond0: (slave netdevsim0): Releasing backup interface [ 775.774213][T11250] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.925859][T18351] chnl_net:caif_netlink_parms(): no params data found [ 776.172699][T18352] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.185850][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.193166][T18352] bridge_slave_0: entered allmulticast mode [ 776.202287][T18352] bridge_slave_0: entered promiscuous mode [ 776.292208][T11250] team0: left allmulticast mode [ 776.298429][T11250] team_slave_0: left allmulticast mode [ 776.303944][T11250] team_slave_1: left allmulticast mode [ 776.331523][T11250] team0: left promiscuous mode [ 776.341628][T11250] team_slave_0: left promiscuous mode [ 776.351870][T11250] team_slave_1: left promiscuous mode [ 776.360463][T11250] bridge0: port 3(team0) entered disabled state [ 776.369614][ T29] audit: type=1326 audit(1727017618.165:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18390 comm="syz.2.2770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 776.392300][ T29] audit: type=1326 audit(1727017618.165:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18390 comm="syz.2.2770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 776.414691][ C0] vkms_vblank_simulate: vblank timer overrun [ 776.425796][T11250] bridge_slave_1: left allmulticast mode [ 776.431515][T11250] bridge_slave_1: left promiscuous mode [ 776.436197][ T29] audit: type=1326 audit(1727017618.165:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18390 comm="syz.2.2770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 776.446820][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.470174][ T29] audit: type=1326 audit(1727017618.165:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18390 comm="syz.2.2770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 776.502536][ T29] audit: type=1326 audit(1727017618.165:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18390 comm="syz.2.2770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 776.503175][T11250] bridge_slave_0: left allmulticast mode [ 776.539184][ T29] audit: type=1326 audit(1727017618.165:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18390 comm="syz.2.2770" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 776.561759][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 776.566006][T11250] bridge_slave_0: left promiscuous mode [ 776.589943][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2771'. [ 776.591842][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.696167][ T54] Bluetooth: hci0: command tx timeout [ 776.855679][ T54] Bluetooth: hci2: command tx timeout [ 777.575848][ T8] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 777.729004][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 777.737895][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.749551][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 777.769325][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 777.779061][ T8] usb 2-1: Manufacturer: syz [ 777.786516][ T8] usb 2-1: config 0 descriptor?? [ 777.827021][ T54] Bluetooth: hci3: command tx timeout [ 777.844253][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 777.878906][T11250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.895146][T11250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.895631][ T8] rc_core: IR keymap rc-hauppauge not found [ 777.910996][ T8] Registered IR keymap rc-empty [ 777.917209][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 777.927908][T11250] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 777.929137][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input101 [ 777.953115][T11250] bond0 (unregistering): Released all slaves [ 778.020208][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 778.035912][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.044036][ T9] usb 3-1: Product: syz [ 778.057358][ T9] usb 3-1: Manufacturer: syz [ 778.063512][ T9] usb 3-1: SerialNumber: syz [ 778.106947][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 778.285992][T11250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.294766][ T8] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 778.314768][T11250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.335379][T11250] bond0 (unregistering): Released all slaves [ 778.356081][T18352] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.363439][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.374574][T18352] bridge_slave_1: entered allmulticast mode [ 778.383690][T18352] bridge_slave_1: entered promiscuous mode [ 778.574776][T18403] netlink: 'syz.1.2775': attribute type 10 has an invalid length. [ 778.591548][T18403] bond0: (slave netdevsim0): Releasing backup interface [ 778.614143][T18403] team0: Port device netdevsim0 added [ 778.621863][T18404] netlink: 'syz.1.2775': attribute type 10 has an invalid length. [ 778.640000][T18404] team0: Port device netdevsim0 removed [ 778.657109][T18404] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 778.666773][T11250] tipc: Disabling bearer [ 778.686975][ T5276] usb 2-1: USB disconnect, device number 110 [ 778.693362][T11250] tipc: Left network mode [ 778.731562][T18351] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.740451][T18412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.781688][T18351] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.786445][ T54] Bluetooth: hci0: command tx timeout [ 778.796748][T18412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.815952][T18351] bridge_slave_0: entered allmulticast mode [ 778.823375][T18351] bridge_slave_0: entered promiscuous mode [ 778.834878][T18351] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.842258][T18351] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.850112][T18351] bridge_slave_1: entered allmulticast mode [ 778.858611][T18351] bridge_slave_1: entered promiscuous mode [ 778.871206][T18352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.917919][T16445] usb 3-1: USB disconnect, device number 93 [ 778.945753][ T54] Bluetooth: hci2: command tx timeout [ 778.985314][T18352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.003246][T18351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.061533][T18351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.116141][T18352] team0: Port device team_slave_0 added [ 779.153870][T18352] team0: Port device team_slave_1 added [ 779.198747][T18351] team0: Port device team_slave_0 added [ 779.246473][T18352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.259083][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.316208][T18352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.332051][T18351] team0: Port device team_slave_1 added [ 779.345747][ T8] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 779.353104][ T8] ath9k_htc: Failed to initialize the device [ 779.375293][T16445] usb 3-1: ath9k_htc: USB layer deinitialized [ 779.537727][T18352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.544762][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.586114][T18352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.666393][T18351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.694738][T18351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.757750][T18351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.773864][T18351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.785555][T18351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.886594][T18351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.897304][ T54] Bluetooth: hci3: command tx timeout [ 779.993122][T18452] loop9: detected capacity change from 0 to 7 [ 780.025477][T18452] Dev loop9: unable to read RDB block 7 [ 780.035799][T18452] loop9: unable to read partition table [ 780.051162][T18452] loop9: partition table beyond EOD, truncated [ 780.058367][T18452] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 780.058367][T18452] V) failed (rc=-5) [ 780.082749][T18367] chnl_net:caif_netlink_parms(): no params data found [ 780.269780][ T29] audit: type=1326 audit(1727017622.065:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.2.2784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 780.325056][T18352] hsr_slave_0: entered promiscuous mode [ 780.337418][ T29] audit: type=1326 audit(1727017622.065:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.2.2784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 780.362620][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 780.368251][ T29] audit: type=1326 audit(1727017622.065:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.2.2784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 780.394190][T18352] hsr_slave_1: entered promiscuous mode [ 780.401058][T18352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.409038][T18352] Cannot create hsr debugfs directory [ 780.409375][ T29] audit: type=1326 audit(1727017622.065:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.2.2784" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd579 code=0x7ffc0000 [ 780.450656][T18351] hsr_slave_0: entered promiscuous mode [ 780.466700][T18351] hsr_slave_1: entered promiscuous mode [ 780.476318][T18351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.484035][T18351] Cannot create hsr debugfs directory [ 780.698698][T18367] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.706509][T18367] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.713900][T18367] bridge_slave_0: entered allmulticast mode [ 780.722846][T18367] bridge_slave_0: entered promiscuous mode [ 780.798894][T18367] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.806661][T18367] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.814042][T18367] bridge_slave_1: entered allmulticast mode [ 780.821322][T18367] bridge_slave_1: entered promiscuous mode [ 780.857515][ T54] Bluetooth: hci0: command tx timeout [ 780.940368][T11250] hsr_slave_0: left promiscuous mode [ 780.969756][T11250] hsr_slave_1: left promiscuous mode [ 780.988444][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.007206][T11250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.016036][ T54] Bluetooth: hci2: command tx timeout [ 781.043791][T11250] hsr_slave_0: left promiscuous mode [ 781.065806][T11250] hsr_slave_1: left promiscuous mode [ 781.090114][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 781.098392][T11250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.114546][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.124237][T11250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.191660][T11250] veth1_macvtap: left promiscuous mode [ 781.207894][T11250] veth0_macvtap: left promiscuous mode [ 781.213583][T11250] veth1_vlan: left promiscuous mode [ 781.223440][T11250] veth0_vlan: left promiscuous mode [ 781.230188][T11250] veth1_macvtap: left promiscuous mode [ 781.237623][T11250] veth0_macvtap: left promiscuous mode [ 781.249534][T11250] veth1_vlan: left promiscuous mode [ 781.254837][T11250] veth0_vlan: left promiscuous mode [ 781.316132][ T5343] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 781.489552][ T5343] usb 2-1: Using ep0 maxpacket: 16 [ 781.524063][ T5343] usb 2-1: config 0 has no interfaces? [ 781.532396][ T5343] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 781.557227][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.565303][ T5343] usb 2-1: Product: syz [ 781.570694][ T5343] usb 2-1: Manufacturer: syz [ 781.575358][ T5343] usb 2-1: SerialNumber: syz [ 781.592879][ T5343] usb 2-1: config 0 descriptor?? [ 781.870714][ T937] usb 2-1: USB disconnect, device number 111 [ 781.980155][ T54] Bluetooth: hci3: command tx timeout [ 782.060760][T11250] team0 (unregistering): Port device team_slave_1 removed [ 782.115131][T11250] team0 (unregistering): Port device team_slave_0 removed [ 782.938804][ T54] Bluetooth: hci0: command tx timeout [ 783.096018][ T54] Bluetooth: hci2: command tx timeout [ 783.234346][T11250] team0 (unregistering): Port device team_slave_1 removed [ 783.288852][T11250] team0 (unregistering): Port device team_slave_0 removed [ 783.758703][ T5269] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 783.867451][T18367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.879078][T18367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.925735][ T5269] usb 2-1: Using ep0 maxpacket: 16 [ 783.941166][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.952403][ T5269] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.962952][ T5269] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 783.972465][ T5269] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.983783][ T5269] usb 2-1: config 0 descriptor?? [ 784.066112][ T54] Bluetooth: hci3: command tx timeout [ 784.075082][T18489] netlink: 844 bytes leftover after parsing attributes in process `syz.2.2794'. [ 784.119458][T18367] team0: Port device team_slave_0 added [ 784.139595][T18367] team0: Port device team_slave_1 added [ 784.327818][T18367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.335199][T18367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.415621][T18367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.417143][ T5269] elan 0003:04F3:0755.002B: item fetching failed at offset 1/5 [ 784.458840][ T5269] elan 0003:04F3:0755.002B: Hid Parse failed [ 784.464952][ T5269] elan 0003:04F3:0755.002B: probe with driver elan failed with error -22 [ 784.554195][T18367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.568430][T18367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 784.594807][T18367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.627163][T16445] usb 2-1: USB disconnect, device number 112 [ 784.872398][T18367] hsr_slave_0: entered promiscuous mode [ 784.879598][T18367] hsr_slave_1: entered promiscuous mode [ 785.332031][T18514] openvswitch: netlink: Actions may not be safe on all matching packets [ 785.640522][T18351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.659094][T18351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 785.685297][T18351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 785.733691][T18351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.850817][T11250] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.855652][T16445] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 785.979464][T11250] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.051112][T16445] usb 3-1: Using ep0 maxpacket: 8 [ 786.093180][T16445] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.106999][T11250] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.125591][T16445] usb 3-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 786.153173][T16445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.178234][T16445] usb 3-1: config 0 descriptor?? [ 786.228642][T11250] bond0: (slave netdevsim0): Releasing backup interface [ 786.239157][T11250] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.307248][T18352] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 786.327494][T18352] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 786.348510][T18351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.367615][T18352] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 786.402898][T18351] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.410616][T18352] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 786.515000][T11263] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.522369][T11263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.568610][T11250] bridge_slave_1: left allmulticast mode [ 786.574520][T11250] bridge_slave_1: left promiscuous mode [ 786.581681][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.606963][T11250] bridge_slave_0: left allmulticast mode [ 786.612848][T11250] bridge_slave_0: left promiscuous mode [ 786.620456][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.633609][T16445] kye 0003:0458:5014.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 786.650279][T16445] kye 0003:0458:5014.002C: unknown main item tag 0x0 [ 786.669449][T16445] kye 0003:0458:5014.002C: unknown main item tag 0x0 [ 786.686079][T16445] kye 0003:0458:5014.002C: unknown main item tag 0x0 [ 786.703229][T16445] kye 0003:0458:5014.002C: unknown main item tag 0x0 [ 786.713624][T16445] kye 0003:0458:5014.002C: unknown main item tag 0x0 [ 786.733814][T16445] kye 0003:0458:5014.002C: hidraw0: USB HID v0.00 Device [HID 0458:5014] on usb-dummy_hcd.2-1/input0 [ 786.748799][T16445] kye 0003:0458:5014.002C: tablet-enabling feature report not found [ 786.757723][T16445] kye 0003:0458:5014.002C: tablet enabling failed [ 786.842609][T16445] usb 3-1: USB disconnect, device number 94 [ 787.203530][T11250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.216739][T11250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.230755][T11250] bond0 (unregistering): Released all slaves [ 787.261334][T11263] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.268544][T11263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.308631][T18540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2803'. [ 787.766771][ T8] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 787.804471][T11250] hsr_slave_0: left promiscuous mode [ 787.816420][T16445] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 787.831045][T11250] hsr_slave_1: left promiscuous mode [ 787.837368][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.844844][T11250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.853552][T11250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.864757][T11250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.904721][T11250] veth1_macvtap: left promiscuous mode [ 787.914313][T11250] veth0_macvtap: left promiscuous mode [ 787.924783][T11250] veth1_vlan: left promiscuous mode [ 787.930321][T11250] veth0_vlan: left promiscuous mode [ 787.939968][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 787.959473][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.987470][ T8] usb 3-1: config 0 descriptor?? [ 787.994893][T16445] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 788.020874][T16445] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.034224][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input102 [ 788.052449][T16445] usb 2-1: Product: syz [ 788.077594][T16445] usb 2-1: Manufacturer: syz [ 788.082344][T16445] usb 2-1: SerialNumber: syz [ 788.110682][T16445] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 788.145923][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 788.624808][T18550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.646670][T18550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.679110][ T4665] bcm5974 3-1:0.0: could not read from device [ 788.707200][ T8] usb 3-1: USB disconnect, device number 95 [ 788.714245][ T4665] bcm5974 3-1:0.0: could not read from device [ 788.754118][T10874] bcm5974 3-1:0.0: could not read from device [ 788.850043][T10874] udevd[10874]: Error opening device "/dev/input/event4": No such device [ 788.864920][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 788.875737][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 788.886717][ T5269] usb 2-1: USB disconnect, device number 113 [ 788.935753][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 788.953007][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 789.256635][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 789.273371][ T9] ath9k_htc: Failed to initialize the device [ 789.295849][ T5269] usb 2-1: ath9k_htc: USB layer deinitialized [ 789.460131][T11250] team0 (unregistering): Port device team_slave_1 removed [ 789.595859][T11250] team0 (unregistering): Port device team_slave_0 removed [ 789.927296][ T937] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 790.085685][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 790.092682][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 790.102837][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.109159][ T5269] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 790.134332][ T937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 790.160784][ T937] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 790.179618][ T937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.205628][ T937] usb 3-1: Product: syz [ 790.214067][ T937] usb 3-1: Manufacturer: syz [ 790.225716][ T937] usb 3-1: SerialNumber: syz [ 790.240912][ T937] usb 3-1: config 0 descriptor?? [ 790.297351][ T5269] usb 2-1: Using ep0 maxpacket: 32 [ 790.322796][ T5269] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 790.341357][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.354038][ T5269] usb 2-1: Product: syz [ 790.367970][ T5269] usb 2-1: Manufacturer: syz [ 790.372726][ T5269] usb 2-1: SerialNumber: syz [ 790.391245][ T5269] usb 2-1: config 0 descriptor?? [ 790.727934][T18351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.807165][T18352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.944976][T18352] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.974563][T18367] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 790.989815][T18367] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 791.003937][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.011253][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.030030][T18367] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 791.049524][T18367] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 791.073274][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.080531][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.090594][T18351] veth0_vlan: entered promiscuous mode [ 791.109646][T18351] veth1_vlan: entered promiscuous mode [ 791.202673][T18351] veth0_macvtap: entered promiscuous mode [ 791.232878][T18351] veth1_macvtap: entered promiscuous mode [ 791.289240][T18351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.301049][T18351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.312181][T18351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.323916][T18351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.334207][T18351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 791.345248][T18351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.357663][T18351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.374886][T18351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.386896][T18351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.396828][T18351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.407497][T18351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.418329][T18351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.429954][T18351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.441542][T18351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.469795][T18351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.481158][T18351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.504244][T18351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.505545][T18601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.515377][T18351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.531146][T18601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.540290][T18352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.620428][ T5269] (unnamed net_device) (uninitialized): Assigned a random MAC address: 3e:c6:a3:5f:a7:09 [ 791.663354][T18367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.691332][ T5269] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 791.731862][ T5269] usb 2-1: USB disconnect, device number 114 [ 791.808823][T18352] veth0_vlan: entered promiscuous mode [ 791.818218][T18367] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.844397][T11263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.857619][T11263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.862887][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.872146][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.914002][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.921251][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.946716][T18352] veth1_vlan: entered promiscuous mode [ 791.978113][T11254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.998204][T11254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.042619][T18352] veth0_macvtap: entered promiscuous mode [ 792.092146][T18352] veth1_macvtap: entered promiscuous mode [ 792.144949][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.161246][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.171726][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.187737][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.201703][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.220683][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.233248][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.250294][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.268369][T18352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.288504][T18367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.314931][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.328553][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.338868][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.349942][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.365782][T16445] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 792.369600][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.385881][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.397256][T18352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 792.408028][T18352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.420412][T18352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.468556][ T5343] usb 3-1: USB disconnect, device number 96 [ 792.485045][T18352] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.518042][T18352] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.525621][T16445] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 792.536386][T18352] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.555466][T18352] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.556078][T16445] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.632455][T16445] usb 4-1: config 0 descriptor?? [ 792.705808][T18367] veth0_vlan: entered promiscuous mode [ 792.744778][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'. [ 792.757623][T18635] netlink: 'syz.1.2812': attribute type 10 has an invalid length. [ 792.783375][T18636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2811'. [ 792.798724][T18635] bond0: (slave netdevsim0): Releasing backup interface [ 792.819622][T18635] team0: Port device netdevsim0 added [ 792.833353][T18367] veth1_vlan: entered promiscuous mode [ 792.847544][T18637] netlink: 'syz.1.2812': attribute type 10 has an invalid length. [ 792.869603][T18637] team0: Port device netdevsim0 removed [ 792.897461][T18637] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 792.933363][T16445] hackrf 4-1:0.0: usb_control_msg() failed -71 request 0f [ 792.945866][T16445] hackrf 4-1:0.0: Could not detect board [ 792.951627][T16445] hackrf 4-1:0.0: probe with driver hackrf failed with error -71 [ 792.992498][T16445] usb 4-1: USB disconnect, device number 96 [ 793.061085][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.086187][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.102143][T18367] veth0_macvtap: entered promiscuous mode [ 793.164148][T18367] veth1_macvtap: entered promiscuous mode [ 793.201993][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.221468][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.236070][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.246514][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.285546][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.293867][T18646] raw_sendmsg: syz.1.2815 forgot to set AF_INET. Fix it! [ 793.316778][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.327084][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.355596][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.366118][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.388136][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.411113][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.435914][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.457182][T18367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.517805][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.529421][T16445] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 793.546419][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.565775][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.576806][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.586925][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.597485][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.607572][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.625542][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.635420][T18367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.646245][T18367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.659459][T18367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.671156][T18367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.679935][T18367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.688698][T18367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.697519][T18367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.855650][T16445] usb 4-1: device descriptor read/64, error -71 [ 793.891369][T11254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.927944][T11254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.013875][T11254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.046084][T11254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.078881][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 794.101664][T16445] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 794.116604][T18665] binder: 18660:18665 ioctl 4018620d 0 returned -22 [ 794.122557][T18664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 794.275689][T16445] usb 4-1: device descriptor read/64, error -71 [ 794.386130][T16445] usb usb4-port1: attempt power cycle [ 794.565028][T18686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2831'. [ 794.580141][T18682] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 794.586725][T18682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 794.595161][ T5282] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 794.605868][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2832'. [ 794.623003][T18682] vhci_hcd vhci_hcd.0: Device attached [ 794.665112][T18683] vhci_hcd: connection closed [ 794.666401][T11254] vhci_hcd: stop threads [ 794.675945][T11254] vhci_hcd: release socket [ 794.686609][T11254] vhci_hcd: disconnect device [ 794.746240][T16445] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 794.768173][ T5282] usb 3-1: Using ep0 maxpacket: 8 [ 794.777425][ T5282] usb 3-1: too many endpoints for config 0 interface 0 altsetting 1: 65, using maximum allowed: 30 [ 794.790300][T16445] usb 4-1: device descriptor read/8, error -71 [ 794.803462][ T5282] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.824404][ T5282] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.835443][ T5282] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 794.860537][ T5282] usb 3-1: config 0 interface 0 has no altsetting 0 [ 794.869652][ T5282] usb 3-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 794.880175][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.891246][ T5282] usb 3-1: config 0 descriptor?? [ 795.063795][T16445] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 795.116976][T16445] usb 4-1: device descriptor read/8, error -71 [ 795.247272][T16445] usb usb4-port1: unable to enumerate USB device [ 795.521946][ T5282] usbhid 3-1:0.0: can't add hid device: -71 [ 795.535705][ T5282] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 795.543204][T18715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2843'. [ 795.573666][ T5282] usb 3-1: USB disconnect, device number 97 [ 795.633985][T18718] netlink: 'syz.1.2844': attribute type 1 has an invalid length. [ 795.819536][T18720] netlink: 'syz.4.2845': attribute type 1 has an invalid length. [ 796.148301][T18726] loop9: detected capacity change from 0 to 7 [ 796.160512][T18726] Dev loop9: unable to read RDB block 7 [ 796.169197][T18726] loop9: unable to read partition table [ 796.175176][T18726] loop9: partition table beyond EOD, truncated [ 796.177146][ T8] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 796.196445][ T5276] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 796.214511][T18726] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 796.214511][T18726] ) failed (rc=-5) [ 796.385763][ T5276] usb 5-1: Using ep0 maxpacket: 16 [ 796.393310][T18730] openvswitch: netlink: Actions may not be safe on all matching packets [ 796.413788][ T5276] usb 5-1: config 0 has an invalid interface number: 249 but max is 0 [ 796.434010][ T5276] usb 5-1: config 0 has an invalid interface number: 43 but max is 0 [ 796.444146][ T5276] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 796.463811][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.477366][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.493673][ T8] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 796.500054][ T5276] usb 5-1: config 0 has no interface number 0 [ 796.521899][T18732] fuse: Unknown parameter 'group_id00000000000000000000' [ 796.525541][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.529151][ T5276] usb 5-1: config 0 has no interface number 1 [ 796.544291][ T5276] usb 5-1: config 0 interface 249 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 796.588978][ T5276] usb 5-1: config 0 interface 249 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 796.607354][ T5276] usb 5-1: too many endpoints for config 0 interface 43 altsetting 115: 249, using maximum allowed: 30 [ 796.610245][ T8] usb 2-1: config 0 descriptor?? [ 796.639728][ T5276] usb 5-1: config 0 interface 43 altsetting 115 has 1 endpoint descriptor, different from the interface descriptor's value: 249 [ 796.655898][ T5276] usb 5-1: config 0 interface 249 has no altsetting 0 [ 796.662752][ T5276] usb 5-1: config 0 interface 43 has no altsetting 0 [ 796.673610][ T5276] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=a5.06 [ 796.685975][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.696604][ T5276] usb 5-1: Product: syz [ 796.704474][ T5276] usb 5-1: Manufacturer: syz [ 796.709742][ T5276] usb 5-1: SerialNumber: syz [ 796.717251][ T5276] usb 5-1: config 0 descriptor?? [ 796.918279][T16445] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 797.083139][T18744] syz.0.2854 (18744): drop_caches: 2 [ 797.101753][ T46] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 797.108981][T16445] usb 3-1: Using ep0 maxpacket: 8 [ 797.481808][T18722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.504708][T18751] loop9: detected capacity change from 0 to 7 [ 797.519637][T16445] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 797.528247][T16445] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.538957][T18722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.582481][T16445] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.586491][T18751] Dev loop9: unable to read RDB block 7 [ 797.593075][T16445] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.614211][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 797.621709][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 797.629745][T16445] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.642961][T18751] loop9: unable to read partition table [ 797.651313][ T8] usb 2-1: USB disconnect, device number 115 [ 797.658560][T18751] loop9: partition table beyond EOD, truncated [ 797.665385][T16445] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 797.687007][T18751] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 797.687007][T18751] U) failed (rc=-5) [ 797.704929][T16445] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.786973][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2857'. [ 797.800864][ T5276] ljca 5-1:0.249: bulk endpoints not found [ 797.858615][T18753] vlan2: entered promiscuous mode [ 797.863861][T18753] ip6gretap0: entered promiscuous mode [ 797.884892][T18753] vlan2: entered allmulticast mode [ 797.890687][T18753] ip6gretap0: entered allmulticast mode [ 797.902040][T18753] ip6gretap0: left allmulticast mode [ 797.907781][T18753] ip6gretap0: left promiscuous mode [ 797.940804][T16445] usb 3-1: usb_control_msg returned -32 [ 797.953834][T16445] usbtmc 3-1:16.0: can't read capabilities [ 798.161877][ T5276] ljca 5-1:0.43: bulk endpoints not found [ 798.181620][ T5276] usb 5-1: USB disconnect, device number 97 [ 798.452618][T18762] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 798.519556][T18762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 798.858343][T16445] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 799.035743][T16445] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 799.045320][T16445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.088497][T16445] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 799.098065][T16445] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 799.106435][T16445] usb 1-1: Manufacturer: syz [ 799.133015][T16445] usb 1-1: config 0 descriptor?? [ 799.243539][ T46] usb 3-1: USB disconnect, device number 98 [ 799.257238][T16445] rc_core: IR keymap rc-hauppauge not found [ 799.265770][T16445] Registered IR keymap rc-empty [ 799.271329][T16445] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 799.288618][T16445] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input103 [ 799.365765][ T5282] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 799.374037][T16445] usb 1-1: USB disconnect, device number 105 [ 799.528279][ T5282] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 799.540759][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.551786][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.561626][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 799.583730][ T5282] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 799.593812][ T5282] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 799.602000][ T5282] usb 4-1: Manufacturer: syz [ 799.608816][ T5282] usb 4-1: config 0 descriptor?? [ 799.715771][ T8] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 799.846943][T18787] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 799.864977][T18787] bond0: (slave netdevsim0): Releasing backup interface [ 799.879296][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 799.887141][ T8] usb 2-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 799.887657][T18787] team0: Port device netdevsim0 added [ 799.916556][T18788] netlink: 'syz.2.2868': attribute type 10 has an invalid length. [ 799.918595][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.967368][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 799.980902][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.001810][T18788] team0: Port device netdevsim0 removed [ 800.007322][ T8] usb 2-1: config 0 descriptor?? [ 800.027217][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 800.039154][T18788] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 800.062856][ T5282] appleir 0003:05AC:8243.002D: unknown main item tag 0x0 [ 800.081269][ T5282] appleir 0003:05AC:8243.002D: No inputs registered, leaving [ 800.110187][ T5282] appleir 0003:05AC:8243.002D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 800.223725][T18795] netlink: 'syz.4.2871': attribute type 10 has an invalid length. [ 800.252930][T18795] team0: Port device netdevsim0 added [ 800.283593][T18799] netlink: 'syz.4.2871': attribute type 10 has an invalid length. [ 800.284970][T18785] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2867'. [ 800.318044][T18800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 800.352136][T18795] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q{tǗ54 AGt=Yage_pecpu_sys' [ 800.357981][T18800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2872'. [ 800.421508][T18799] team0: Port device netdevsim0 removed [ 800.442613][T18799] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 800.451794][T18805] vxcan1: tx address claim with different name [ 800.725619][ T5276] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 800.887504][ T5276] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 800.912209][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.931932][ T5276] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 800.945939][ T5276] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 800.954325][ T5276] usb 5-1: Manufacturer: syz [ 800.962134][ T5276] usb 5-1: config 0 descriptor?? [ 801.070798][ T5276] rc_core: IR keymap rc-hauppauge not found [ 801.080918][ T5276] Registered IR keymap rc-empty [ 801.106251][ T5276] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 801.127389][ T5276] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input104 [ 801.308760][ T9] usb 5-1: USB disconnect, device number 98 [ 801.473242][T18813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2875'. [ 801.577081][ T46] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 801.735613][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 801.742668][ T46] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 801.755036][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 801.768934][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 801.780361][ T46] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 801.785685][ T5269] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 801.789499][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.809798][ T46] usb 1-1: config 0 descriptor?? [ 801.823701][T18809] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 801.832820][ T46] hub 1-1:0.0: USB hub found [ 801.955873][ T5269] usb 3-1: device descriptor read/64, error -71 [ 802.044736][ T46] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 802.074057][ T8] usb 4-1: USB disconnect, device number 101 [ 802.121905][T18826] netlink: 'syz.3.2880': attribute type 10 has an invalid length. [ 802.145164][T18826] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 802.169497][T18826] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q{tǗ54 AGt=Yage_pecpu_sys' [ 802.223320][T18828] loop9: detected capacity change from 0 to 7 [ 802.243934][ T5269] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 802.254722][T18828] Dev loop9: unable to read RDB block 7 [ 802.262471][T18828] loop9: unable to read partition table [ 802.268522][T18828] loop9: partition table beyond EOD, truncated [ 802.274918][T18828] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 802.274918][T18828] ) failed (rc=-5) [ 802.371379][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 802.371401][ T29] audit: type=1326 audit(1727017644.165:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18829 comm="syz.4.2882" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 802.386502][ T5269] usb 3-1: device descriptor read/64, error -71 [ 802.399440][ C1] vkms_vblank_simulate: vblank timer overrun [ 802.495665][ T8] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 802.522889][T16445] usb 2-1: USB disconnect, device number 116 [ 802.529384][ T5269] usb usb3-port1: attempt power cycle [ 802.648065][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 802.654609][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 802.690406][ T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 802.701986][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.731544][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 802.744293][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 802.753275][ T8] usb 4-1: Manufacturer: syz [ 802.766302][ T8] usb 4-1: config 0 descriptor?? [ 802.827861][ T8] rc_core: IR keymap rc-hauppauge not found [ 802.833978][ T8] Registered IR keymap rc-empty [ 802.841199][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 802.853568][ T46] usb 1-1: reset high-speed USB device number 106 using dummy_hcd [ 802.854554][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input105 [ 802.906334][ T5269] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 802.927806][ T5269] usb 3-1: device descriptor read/8, error -71 [ 802.981561][ T8] usb 4-1: USB disconnect, device number 102 [ 803.041123][T18809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 803.075911][T16445] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 803.175842][ T5269] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 803.213156][ T5269] usb 3-1: device descriptor read/8, error -71 [ 803.219640][T16445] usb 2-1: device descriptor read/64, error -71 [ 803.234171][T18839] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2885'. [ 803.325279][T18841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2886'. [ 803.348329][ T5269] usb usb3-port1: unable to enumerate USB device [ 803.485754][T16445] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 803.527465][ T937] usb 1-1: USB disconnect, device number 106 [ 803.583839][T18846] netlink: 'syz.3.2887': attribute type 10 has an invalid length. [ 803.597621][T18846] bond0: (slave netdevsim0): Releasing backup interface [ 803.612150][T18846] team0: Port device netdevsim0 added [ 803.627921][T16445] usb 2-1: device descriptor read/64, error -71 [ 803.641329][T18846] netlink: 'syz.3.2887': attribute type 10 has an invalid length. [ 803.672296][T18846] team0: Port device netdevsim0 removed [ 803.681884][T18846] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 803.705280][T18846] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q{tǗ54 AGt=Yage_pecpu_sys' [ 803.753863][T16445] usb usb2-port1: attempt power cycle [ 803.946089][ T937] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 804.039274][T18854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.051647][T18854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.074634][T18854] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 804.094004][T18854] bond0 (unregistering): Released all slaves [ 804.114123][T18858] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 804.117517][ T937] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 804.130267][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.135800][T16445] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 804.143834][ T937] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 804.158818][ T937] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 804.186471][T16445] usb 2-1: device descriptor read/8, error -71 [ 804.193319][ T937] usb 4-1: Manufacturer: syz [ 804.201289][ T937] usb 4-1: config 0 descriptor?? [ 804.265622][ T937] rc_core: IR keymap rc-hauppauge not found [ 804.271804][ T937] Registered IR keymap rc-empty [ 804.279977][ T937] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 804.291351][ T937] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input106 [ 804.434442][ T937] usb 4-1: USB disconnect, device number 103 [ 804.445667][T16445] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 804.486926][ T5269] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 804.495339][T16445] usb 2-1: device descriptor read/8, error -71 [ 804.583689][T18864] FAULT_INJECTION: forcing a failure. [ 804.583689][T18864] name failslab, interval 1, probability 0, space 0, times 0 [ 804.596932][T18864] CPU: 0 UID: 0 PID: 18864 Comm: syz.2.2895 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 804.607438][T18864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 804.617517][T18864] Call Trace: [ 804.620805][T18864] [ 804.623763][T18864] dump_stack_lvl+0x241/0x360 [ 804.628681][T18864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 804.633927][T18864] ? __pfx__printk+0x10/0x10 [ 804.638542][T18864] ? __kmalloc_noprof+0xb0/0x400 [ 804.643516][T18864] ? __pfx___might_resched+0x10/0x10 [ 804.648883][T18864] should_fail_ex+0x3b0/0x4e0 [ 804.653601][T18864] ? sk_prot_alloc+0xe0/0x210 [ 804.658310][T18864] should_failslab+0xac/0x100 [ 804.663016][T18864] ? sk_prot_alloc+0xe0/0x210 [ 804.667715][T18864] __kmalloc_noprof+0xd8/0x400 [ 804.672502][T18864] sk_prot_alloc+0xe0/0x210 [ 804.677028][T18864] ? sk_alloc+0x26/0x370 [ 804.681300][T18864] sk_alloc+0x38/0x370 [ 804.685390][T18864] ? __pfx_genl_release+0x10/0x10 [ 804.690588][T18864] __netlink_create+0x65/0x260 [ 804.695412][T18864] ? __pfx_genl_release+0x10/0x10 [ 804.700466][T18864] netlink_create+0x3ab/0x560 [ 804.705166][T18864] ? __pfx_genl_unbind+0x10/0x10 [ 804.710126][T18864] ? __pfx_genl_bind+0x10/0x10 [ 804.714915][T18864] ? __sock_create+0x337/0x920 [ 804.719782][T18864] __sock_create+0x490/0x920 [ 804.724396][T18864] __sys_socket+0x150/0x3c0 [ 804.728922][T18864] ? __pfx___sys_socket+0x10/0x10 [ 804.733965][T18864] ? __might_fault+0xc6/0x120 [ 804.738672][T18864] __se_compat_sys_socketcall+0xa73/0x1430 [ 804.744502][T18864] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 804.750811][T18864] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 804.757438][T18864] ? lockdep_hardirqs_on+0x99/0x150 [ 804.762661][T18864] __do_fast_syscall_32+0xb4/0x110 [ 804.767795][T18864] ? exc_page_fault+0x590/0x8c0 [ 804.772666][T18864] do_fast_syscall_32+0x34/0x80 [ 804.777537][T18864] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 804.783885][T18864] RIP: 0023:0xf73cd579 [ 804.787994][T18864] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 804.807620][T18864] RSP: 002b:00000000f56b5500 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 804.816057][T18864] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f56b5510 [ 804.824220][T18864] RDX: 00000000f73bbff4 RSI: 0000000000000000 RDI: 00000000f73bbff4 [ 804.832204][T18864] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 804.840208][T18864] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 804.848209][T18864] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 804.856217][T18864] [ 804.874598][T16445] usb usb2-port1: unable to enumerate USB device [ 804.895734][ T5269] usb 1-1: Using ep0 maxpacket: 32 [ 804.905542][ T5269] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 804.924538][ T5269] usb 1-1: config 0 has no interface number 0 [ 804.932480][ T5269] usb 1-1: config 0 interface 186 has no altsetting 0 [ 804.948719][ T5269] usb 1-1: New USB device found, idVendor=0c45, idProduct=602c, bcdDevice=28.c2 [ 804.970843][ T5269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.989099][ T5269] usb 1-1: Product: syz [ 804.994472][ T5269] usb 1-1: Manufacturer: syz [ 805.000404][ T5269] usb 1-1: SerialNumber: syz [ 805.007745][ T5269] usb 1-1: config 0 descriptor?? [ 805.018274][ T5269] gspca_main: sonixb-2.14.0 probing 0c45:602c [ 805.032383][T18868] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 805.046399][T18868] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q{tǗ54 AGt=Yage_pecpu_sys' [ 805.195923][ T937] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 805.235725][ T5269] sonixb 1-1:0.186: Error reading register 00: -71 [ 805.275331][ T5269] usb 1-1: USB disconnect, device number 107 [ 805.345638][ T8] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 805.391403][ T937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 805.401239][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 805.420260][ T937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.432204][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 805.443633][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 805.457244][ T937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 805.464777][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 805.475840][ T937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.487747][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 805.499101][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 805.513626][ T937] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 805.517711][ T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 805.527603][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 805.530397][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.545207][ T937] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 805.556022][ T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 805.571007][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 805.573150][ T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 805.590916][ T937] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 805.592093][ T8] usb 3-1: Manufacturer: syz [ 805.614491][ T937] usb 5-1: string descriptor 0 read error: -22 [ 805.614986][ T8] usb 3-1: config 0 descriptor?? [ 805.626564][ T937] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 805.635780][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.659338][ T937] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 805.708125][ T5269] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 805.716069][ T8] rc_core: IR keymap rc-hauppauge not found [ 805.722107][ T8] Registered IR keymap rc-empty [ 805.733056][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 805.746319][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input107 [ 805.899758][ T5269] usb 4-1: Using ep0 maxpacket: 32 [ 805.926408][ T5269] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 805.926996][ T5276] usb 3-1: USB disconnect, device number 103 [ 805.935331][ T5269] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 805.955084][ T5269] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 805.965224][ T5269] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.975021][T18882] bridge0: port 3(team0) entered blocking state [ 805.982002][T18882] bridge0: port 3(team0) entered disabled state [ 805.990781][T18882] team0: entered allmulticast mode [ 805.996093][ T5269] usb 4-1: Product: syz [ 806.000357][ T5269] usb 4-1: Manufacturer: syz [ 806.005098][T18882] team_slave_0: entered allmulticast mode [ 806.012320][ T5269] usb 4-1: SerialNumber: syz [ 806.019210][T18882] team_slave_1: entered allmulticast mode [ 806.028661][ T5269] usb 4-1: config 0 descriptor?? [ 806.039658][T18882] team0: entered promiscuous mode [ 806.044758][T18882] team_slave_0: entered promiscuous mode [ 806.053950][ T5269] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 806.061568][T18882] team_slave_1: entered promiscuous mode [ 806.074090][T18882] bridge0: port 3(team0) entered blocking state [ 806.080651][T18882] bridge0: port 3(team0) entered forwarding state [ 806.211244][T18888] openvswitch: netlink: Actions may not be safe on all matching packets [ 806.471552][ T5269] gspca_stk1135: reg_w 0x0 err -71 [ 806.478349][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.485155][ T5269] gspca_stk1135: Sensor write failed [ 806.498714][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.517576][ T5269] gspca_stk1135: Sensor write failed [ 806.533513][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.550399][ T5269] gspca_stk1135: Sensor read failed [ 806.565686][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.575772][ T46] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 806.577075][ T5269] gspca_stk1135: Sensor read failed [ 806.589326][ T5269] gspca_stk1135: Detected sensor type unknown (0x0) [ 806.596521][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.604076][ T5269] gspca_stk1135: Sensor read failed [ 806.607011][T18900] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2906'. [ 806.610054][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.631965][ T5269] gspca_stk1135: Sensor read failed [ 806.645624][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.658767][ T5269] gspca_stk1135: Sensor write failed [ 806.674536][ T5269] gspca_stk1135: serial bus timeout: status=0x00 [ 806.694774][ T5269] gspca_stk1135: Sensor write failed [ 806.700411][ T5269] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 806.729840][ T5269] usb 4-1: USB disconnect, device number 104 [ 806.745647][ T46] usb 2-1: Using ep0 maxpacket: 32 [ 806.761677][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.783082][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 806.784568][ T46] usb 2-1: config 0 has no interfaces? [ 806.799288][T18902] vlan2: entered promiscuous mode [ 806.814068][ T46] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 806.819801][T18902] ip6gretap0: entered promiscuous mode [ 806.829000][T18902] vlan2: entered allmulticast mode [ 806.831532][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.835823][T18902] ip6gretap0: entered allmulticast mode [ 806.852271][T18902] ip6gretap0: left allmulticast mode [ 806.853596][ T46] usb 2-1: Product: syz [ 806.857807][T18902] ip6gretap0: left promiscuous mode [ 806.867794][ T46] usb 2-1: Manufacturer: syz [ 806.872838][ T46] usb 2-1: SerialNumber: syz [ 806.893706][ T46] usb 2-1: config 0 descriptor?? [ 807.180377][T18905] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.191285][ T937] usb 2-1: USB disconnect, device number 121 [ 807.391654][T11259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.458232][ T46] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 807.518349][T11259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.630441][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 807.671540][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.691818][T11259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.699270][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.724830][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 807.750124][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.784560][ T46] usb 3-1: config 0 descriptor?? [ 807.843709][T11259] bond0: (slave netdevsim0): Releasing backup interface [ 807.875356][T11259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.990327][T18912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.049893][T18912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.163512][ T5269] usb 5-1: USB disconnect, device number 99 [ 808.275719][ T8] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 808.372435][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 808.396994][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 808.419391][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 808.430366][T11259] bridge_slave_1: left allmulticast mode [ 808.436913][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 808.443391][T11259] bridge_slave_1: left promiscuous mode [ 808.450333][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 808.459199][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.472665][ T46] usb 3-1: USB disconnect, device number 104 [ 808.530079][T11259] bridge_slave_0: left allmulticast mode [ 808.543734][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 808.560149][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 808.564824][T11259] bridge_slave_0: left promiscuous mode [ 808.577178][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 808.587249][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.035986][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.042379][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.415828][ T8] usb 2-1: device descriptor read/64, error -71 [ 809.680717][ T8] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 809.760640][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2926'. [ 809.853324][ T8] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 809.861938][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.873057][ T8] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 809.894387][ T8] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 809.902635][ T8] usb 2-1: Manufacturer: syz [ 809.913112][T11259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.930237][ T8] usb 2-1: config 0 descriptor?? [ 809.931919][T11259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.938180][T11259] bond0 (unregistering): Released all slaves [ 809.951933][T18931] netlink: 'syz.1.2917': attribute type 10 has an invalid length. [ 809.971264][T18963] bridge0: port 3(team0) entered blocking state [ 809.971342][T18963] bridge0: port 3(team0) entered disabled state [ 809.971487][T18963] team0: entered allmulticast mode [ 809.971507][T18963] team_slave_0: entered allmulticast mode [ 809.971529][T18963] team_slave_1: entered allmulticast mode [ 809.973164][T18963] team0: entered promiscuous mode [ 809.973190][T18963] team_slave_0: entered promiscuous mode [ 809.973334][T18963] team_slave_1: entered promiscuous mode [ 809.974541][T18963] bridge0: port 3(team0) entered blocking state [ 809.974614][T18963] bridge0: port 3(team0) entered forwarding state [ 810.125691][ T8] rc_core: IR keymap rc-hauppauge not found [ 810.125725][ T8] Registered IR keymap rc-empty [ 810.126486][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 810.127682][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input108 [ 810.159714][ T46] usb 2-1: USB disconnect, device number 123 [ 810.617348][ T5236] Bluetooth: hci0: command tx timeout [ 810.679247][T18925] chnl_net:caif_netlink_parms(): no params data found [ 810.807384][T11259] hsr_slave_0: left promiscuous mode [ 810.844653][T11259] hsr_slave_1: left promiscuous mode [ 810.873858][T11259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.902339][T11259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.921845][T11259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.934388][T11259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.979823][T11259] veth1_macvtap: left promiscuous mode [ 810.987810][T11259] veth0_macvtap: left promiscuous mode [ 811.000823][T11259] veth1_vlan: left promiscuous mode [ 811.009172][T11259] veth0_vlan: left promiscuous mode [ 811.100363][T19012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2934'. [ 811.791912][T11259] team0 (unregistering): Port device team_slave_1 removed [ 811.868237][T11259] team0 (unregistering): Port device team_slave_0 removed [ 812.445624][ T46] usb 5-1: new low-speed USB device number 100 using dummy_hcd [ 812.601755][ T46] usb 5-1: device descriptor read/64, error -71 [ 812.695879][ T5236] Bluetooth: hci0: command tx timeout [ 812.823130][T19004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 812.925648][ T46] usb 5-1: new low-speed USB device number 101 using dummy_hcd [ 812.976158][T19018] bridge0: port 3(team0) entered blocking state [ 812.983529][T19018] bridge0: port 3(team0) entered disabled state [ 813.016326][T19018] team0: entered allmulticast mode [ 813.021527][T19018] team_slave_0: entered allmulticast mode [ 813.032496][T19018] team_slave_1: entered allmulticast mode [ 813.055644][ T46] usb 5-1: device descriptor read/64, error -71 [ 813.069863][T19018] team0: entered promiscuous mode [ 813.075091][T19018] team_slave_0: entered promiscuous mode [ 813.115679][T19018] team_slave_1: entered promiscuous mode [ 813.124490][T19018] bridge0: port 3(team0) entered blocking state [ 813.130933][T19018] bridge0: port 3(team0) entered forwarding state [ 813.165825][ T46] usb usb5-port1: attempt power cycle [ 813.287470][ T8] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 813.289453][T18925] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.339661][T18925] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.369984][T18925] bridge_slave_0: entered allmulticast mode [ 813.410738][T18925] bridge_slave_0: entered promiscuous mode [ 813.457455][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.458173][T19039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2946'. [ 813.468676][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.506414][ T46] usb 5-1: new low-speed USB device number 102 using dummy_hcd [ 813.521931][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 813.525840][T18925] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.553583][ T46] usb 5-1: device descriptor read/8, error -71 [ 813.563463][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 813.593255][T18925] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.595537][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.613658][T18925] bridge_slave_1: entered allmulticast mode [ 813.637637][ T8] usb 3-1: config 0 descriptor?? [ 813.648135][T18925] bridge_slave_1: entered promiscuous mode [ 813.763788][T18925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 813.805626][ T46] usb 5-1: new low-speed USB device number 103 using dummy_hcd [ 813.815962][ T5236] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 813.825884][T18925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 813.826381][ T5236] Bluetooth: hci4: Injecting HCI hardware error event [ 813.844537][ T5236] Bluetooth: hci4: hardware error 0x00 [ 813.857687][ T46] usb 5-1: device descriptor read/8, error -71 [ 813.876469][ T4619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 813.888385][ T4619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 813.906260][ T4619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 813.940827][ T4619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 813.965909][ T4619] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 813.978127][ T4619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 813.986021][ T46] usb usb5-port1: unable to enumerate USB device [ 814.049823][T18925] team0: Port device team_slave_0 added [ 814.131134][T11259] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.174382][T18925] team0: Port device team_slave_1 added [ 814.264302][ T8] plantronics 0003:047F:FFFF.002E: ignoring exceeding usage max [ 814.276693][ T46] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 814.291639][ T8] plantronics 0003:047F:FFFF.002E: unbalanced collection at end of report description [ 814.311055][ T8] plantronics 0003:047F:FFFF.002E: parse failed [ 814.319335][ T8] plantronics 0003:047F:FFFF.002E: probe with driver plantronics failed with error -22 [ 814.331683][T11259] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.400450][T18925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.412492][T18925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.439152][T18925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.474465][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 814.489518][T11259] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.500037][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.517335][T18925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.520799][ T46] usb 2-1: config 0 descriptor?? [ 814.531690][T18925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.543936][ T46] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input109 [ 814.595589][T18925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.659410][T11259] bond0: (slave netdevsim0): Releasing backup interface [ 814.676934][T11259] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.695814][ T937] usb 3-1: USB disconnect, device number 105 [ 814.768202][T18925] hsr_slave_0: entered promiscuous mode [ 814.775038][T18925] hsr_slave_1: entered promiscuous mode [ 814.781096][ T54] Bluetooth: hci0: command tx timeout [ 814.795656][T18925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.803720][T18925] Cannot create hsr debugfs directory [ 814.883565][ T4665] bcm5974 2-1:0.0: could not read from device [ 814.915092][ T4665] bcm5974 2-1:0.0: could not read from device [ 814.956374][ T4665] bcm5974 2-1:0.0: could not read from device [ 814.985181][ T46] usb 2-1: USB disconnect, device number 124 [ 815.001121][T10874] bcm5974 2-1:0.0: could not read from device [ 815.066677][T10874] udevd[10874]: Error opening device "/dev/input/event4": No such file or directory [ 815.114436][T19052] chnl_net:caif_netlink_parms(): no params data found [ 815.123138][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 815.146339][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 815.179470][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 815.211512][T10874] udevd[10874]: Unable to EVIOCGABS device "/dev/input/event4" [ 815.236426][T10874] udevd[10874]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 815.294685][T10874] coredump: 10874(udevd): over coredump resource limit, skipping core dump [ 815.319215][T10874] coredump: 10874(udevd): coredump has not been created, error -7 [ 815.355378][ T4680] udevd[4680]: worker [10874] terminated by signal 6 (Aborted) [ 815.379144][T11259] team0: left allmulticast mode [ 815.394004][T11259] team_slave_0: left allmulticast mode [ 815.395443][ T4680] udevd[4680]: worker [10874] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input109/event4' [ 815.415219][T11259] team_slave_1: left allmulticast mode [ 815.455629][T11259] team0: left promiscuous mode [ 815.460502][T11259] team_slave_0: left promiscuous mode [ 815.477987][T11259] team_slave_1: left promiscuous mode [ 815.491628][T11259] bridge0: port 3(team0) entered disabled state [ 815.546257][T11259] bridge_slave_1: left allmulticast mode [ 815.552267][T11259] bridge_slave_1: left promiscuous mode [ 815.565712][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.591744][T11259] bridge_slave_0: left allmulticast mode [ 815.602815][T11259] bridge_slave_0: left promiscuous mode [ 815.610356][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.635696][ T8] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 815.815667][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 815.831797][ T8] usb 5-1: config 0 has an invalid descriptor of length 160, skipping remainder of the config [ 815.845971][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 815.876920][ T8] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 815.886278][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.897680][ T8] usb 5-1: config 0 descriptor?? [ 815.906703][ T8] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 815.986380][ T5236] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 816.056638][ T5236] Bluetooth: hci3: command tx timeout [ 816.198891][T19090] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2949'. [ 816.344476][T11259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.362209][T11259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.374415][T11259] bond0 (unregistering): Released all slaves [ 816.856608][ T5236] Bluetooth: hci0: command tx timeout [ 816.875277][T19052] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.888862][T19052] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.906358][T19052] bridge_slave_0: entered allmulticast mode [ 816.921575][T19052] bridge_slave_0: entered promiscuous mode [ 816.993396][T11259] hsr_slave_0: left promiscuous mode [ 817.000577][T19106] FAULT_INJECTION: forcing a failure. [ 817.000577][T19106] name failslab, interval 1, probability 0, space 0, times 0 [ 817.016258][T11259] hsr_slave_1: left promiscuous mode [ 817.026038][T19106] CPU: 1 UID: 0 PID: 19106 Comm: syz.2.2956 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 817.036608][T19106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 817.046795][T19106] Call Trace: [ 817.050121][T19106] [ 817.053092][T19106] dump_stack_lvl+0x241/0x360 [ 817.057830][T19106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.063081][T19106] ? __pfx__printk+0x10/0x10 [ 817.067727][T19106] ? __kmalloc_noprof+0xb0/0x400 [ 817.072888][T19106] ? __pfx___might_resched+0x10/0x10 [ 817.078231][T19106] should_fail_ex+0x3b0/0x4e0 [ 817.082966][T19106] ? security_sk_alloc+0x53/0x360 [ 817.088067][T19106] should_failslab+0xac/0x100 [ 817.092787][T19106] ? security_sk_alloc+0x53/0x360 [ 817.097857][T19106] __kmalloc_noprof+0xd8/0x400 [ 817.102663][T19106] ? sk_prot_alloc+0xe0/0x210 [ 817.107383][T19106] ? rcu_is_watching+0x15/0xb0 [ 817.112197][T19106] security_sk_alloc+0x53/0x360 [ 817.117101][T19106] sk_prot_alloc+0xfa/0x210 [ 817.121655][T19106] ? sk_alloc+0x26/0x370 [ 817.125945][T19106] sk_alloc+0x38/0x370 [ 817.130057][T19106] ? __pfx_genl_release+0x10/0x10 [ 817.135130][T19106] __netlink_create+0x65/0x260 [ 817.139914][T19106] ? __pfx_genl_release+0x10/0x10 [ 817.144962][T19106] netlink_create+0x3ab/0x560 [ 817.149663][T19106] ? __pfx_genl_unbind+0x10/0x10 [ 817.154809][T19106] ? __pfx_genl_bind+0x10/0x10 [ 817.159591][T19106] ? __sock_create+0x337/0x920 [ 817.164383][T19106] __sock_create+0x490/0x920 [ 817.169043][T19106] __sys_socket+0x150/0x3c0 [ 817.173603][T19106] ? __pfx___sys_socket+0x10/0x10 [ 817.178765][T19106] ? __might_fault+0xc6/0x120 [ 817.183480][T19106] __se_compat_sys_socketcall+0xa73/0x1430 [ 817.189353][T19106] ? __pfx___se_compat_sys_socketcall+0x10/0x10 [ 817.195683][T19106] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 817.202337][T19106] ? lockdep_hardirqs_on+0x99/0x150 [ 817.207588][T19106] __do_fast_syscall_32+0xb4/0x110 [ 817.212746][T19106] ? exc_page_fault+0x590/0x8c0 [ 817.217620][T19106] do_fast_syscall_32+0x34/0x80 [ 817.222580][T19106] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 817.228942][T19106] RIP: 0023:0xf73cd579 [ 817.233036][T19106] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 817.252699][T19106] RSP: 002b:00000000f56b5500 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 817.261168][T19106] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f56b5510 [ 817.269182][T19106] RDX: 00000000f73bbff4 RSI: 0000000000000000 RDI: 00000000f73bbff4 [ 817.277309][T19106] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 817.285507][T19106] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 817.293539][T19106] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 817.301562][T19106] [ 817.304727][ C1] vkms_vblank_simulate: vblank timer overrun [ 817.312648][T11259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.324062][T11259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.337002][T11259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.354381][T11259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.401790][T11259] veth1_macvtap: left promiscuous mode [ 817.416828][T11259] veth0_macvtap: left promiscuous mode [ 817.422463][T11259] veth1_vlan: left promiscuous mode [ 817.428298][T11259] veth0_vlan: left promiscuous mode [ 817.441265][T19114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 817.780531][ T937] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 817.965049][ T937] usb 3-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 817.984433][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.009481][ T937] usb 3-1: config 0 descriptor?? [ 818.034372][ T937] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input110 [ 818.137584][ T5236] Bluetooth: hci3: command tx timeout [ 818.179268][T11259] team0 (unregistering): Port device team_slave_1 removed [ 818.331753][T11259] team0 (unregistering): Port device team_slave_0 removed [ 818.410060][ T5269] usb 5-1: USB disconnect, device number 104 [ 818.551645][ T4665] bcm5974 3-1:0.0: could not read from device [ 818.581375][ T4665] bcm5974 3-1:0.0: could not read from device [ 818.585900][ T937] usb 3-1: USB disconnect, device number 106 [ 818.614182][T17841] bcm5974 3-1:0.0: could not read from device [ 818.631380][T17841] bcm5974 3-1:0.0: could not read from device [ 818.653424][T17841] udevd[17841]: Error opening device "/dev/input/event4": Input/output error [ 818.671826][T17841] udevd[17841]: Unable to EVIOCGABS device "/dev/input/event4" [ 818.955821][ T5269] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 819.145768][ T5269] usb 5-1: Using ep0 maxpacket: 8 [ 819.157254][ T5269] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 819.173185][ T5269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 819.194565][ T5269] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 819.205025][ T5269] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 819.228054][ T5269] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 819.238424][ T5269] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.373336][T19052] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.396661][T19052] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.436157][T19052] bridge_slave_1: entered allmulticast mode [ 819.443461][T19052] bridge_slave_1: entered promiscuous mode [ 819.462343][ T5269] usb 5-1: GET_CAPABILITIES returned 0 [ 819.472935][ T5269] usbtmc 5-1:16.0: can't read capabilities [ 819.482025][T19111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 819.532721][T19111] vlan2: entered promiscuous mode [ 819.538096][T19111] ip6gretap0: entered promiscuous mode [ 819.543886][T19111] vlan2: entered allmulticast mode [ 819.558206][T19111] ip6gretap0: entered allmulticast mode [ 819.571937][T19111] ip6gretap0: left allmulticast mode [ 819.577888][T19111] ip6gretap0: left promiscuous mode [ 819.676485][T19120] netlink: 'syz.4.2961': attribute type 3 has an invalid length. [ 819.678392][T19052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.684280][T19120] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2961'. [ 819.770578][T19120] netlink: 300 bytes leftover after parsing attributes in process `syz.4.2961'. [ 819.814052][T19052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.003700][T19052] team0: Port device team_slave_0 added [ 820.041354][T19052] team0: Port device team_slave_1 added [ 820.172990][T18925] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 820.246515][T19052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.253137][ T5236] Bluetooth: hci3: command tx timeout [ 820.297604][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.378293][T19052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.402050][T18925] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 820.420204][T19052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.420223][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.420246][T19052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.442137][T18925] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 820.490643][T18925] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 820.612508][T19052] hsr_slave_0: entered promiscuous mode [ 820.613798][T19052] hsr_slave_1: entered promiscuous mode [ 821.193441][T18925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.278101][T18925] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.290103][ T5278] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 821.352288][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.359527][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.424585][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.431863][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.474305][ T5278] usb 2-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 821.520281][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.546954][ T5278] usb 2-1: config 0 descriptor?? [ 821.590521][ T5278] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input111 [ 821.775158][T19052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 821.798649][ T937] usb 5-1: USB disconnect, device number 105 [ 821.839218][T18925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.887634][T19052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 821.929235][T19052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 821.976855][T19052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 822.025574][ T5343] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 822.041666][ T4665] bcm5974 2-1:0.0: could not read from device [ 822.080643][ T4665] bcm5974 2-1:0.0: could not read from device [ 822.092921][ T5278] usb 2-1: USB disconnect, device number 125 [ 822.107326][ T4665] bcm5974 2-1:0.0: could not read from device [ 822.144773][T17841] bcm5974 2-1:0.0: could not read from device [ 822.173918][T18925] veth0_vlan: entered promiscuous mode [ 822.183823][ T4665] bcm5974 2-1:0.0: could not read from device [ 822.196978][ T5343] usb 3-1: device descriptor read/64, error -71 [ 822.204827][T19176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2974'. [ 822.225336][T17841] udevd[17841]: Error opening device "/dev/input/event4": No such device [ 822.256127][T17841] udevd[17841]: Unable to EVIOCGABS device "/dev/input/event4" [ 822.265054][T18925] veth1_vlan: entered promiscuous mode [ 822.271513][T17841] udevd[17841]: Unable to EVIOCGABS device "/dev/input/event4" [ 822.290843][T17841] udevd[17841]: Unable to EVIOCGABS device "/dev/input/event4" [ 822.299851][ T5236] Bluetooth: hci3: command tx timeout [ 822.317704][T17841] udevd[17841]: Unable to EVIOCGABS device "/dev/input/event4" [ 822.331069][T17841] udevd[17841]: Assertion 'close_nointr(fd) != -EBADF' failed at util.c:228, function safe_close(). Aborting. [ 822.344154][T17841] coredump: 17841(udevd): over coredump resource limit, skipping core dump [ 822.353237][T17841] coredump: 17841(udevd): coredump has not been created, error -7 [ 822.376491][ T4680] udevd[4680]: worker [17841] terminated by signal 6 (Aborted) [ 822.384480][ T4680] udevd[4680]: worker [17841] failed while handling '/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input111/event4' [ 822.433544][T19052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.443231][T18925] veth0_macvtap: entered promiscuous mode [ 822.457120][ T5343] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 822.489472][T19052] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.504514][T19181] geneve2: entered promiscuous mode [ 822.514228][T19181] geneve2: entered allmulticast mode [ 822.550312][T18925] veth1_macvtap: entered promiscuous mode [ 822.567219][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.574494][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.605880][ T5343] usb 3-1: device descriptor read/64, error -71 [ 822.632541][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.639854][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.717231][T19052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 822.725642][ T5343] usb usb3-port1: attempt power cycle [ 822.727833][T19052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.788040][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.809463][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.829875][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.847212][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.865869][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.888349][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.925713][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.940903][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.954743][T18925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.997253][T19052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.010008][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.022008][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.036209][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.046819][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.059353][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.074544][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.086301][T18925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.090643][ T5343] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 823.104598][T18925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.133507][T18925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.145692][ T5343] usb 3-1: device descriptor read/8, error -71 [ 823.176367][T18925] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.194630][T18925] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.212370][T18925] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.235688][T18925] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.337880][T19205] netlink: 'syz.4.2979': attribute type 10 has an invalid length. [ 823.354727][T19205] AppArmor: change_hat: Invalid input '0x000000000000002^cpuacct.usTo,q{tǗ54 AGt=Yage_pecpu_sys' [ 823.387101][ T5343] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 823.439751][T19052] veth0_vlan: entered promiscuous mode [ 823.465050][ T5343] usb 3-1: device descriptor read/8, error -71 [ 823.484471][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.490825][T19052] veth1_vlan: entered promiscuous mode [ 823.502338][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.571246][ T5422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.586184][ T5343] usb usb3-port1: unable to enumerate USB device [ 823.593509][ T5422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.636250][ T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 823.638444][T19052] veth0_macvtap: entered promiscuous mode [ 823.682277][T19052] veth1_macvtap: entered promiscuous mode [ 823.714738][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.768369][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.782885][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.794418][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.807284][ T9] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 823.811944][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.827386][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.836252][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.839447][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.859889][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.870392][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.881744][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.890911][ T9] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 823.894654][T19052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.925003][ T9] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 823.931834][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.951050][ T9] usb 5-1: Manufacturer: syz [ 823.953356][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.974200][ T9] usb 5-1: config 0 descriptor?? [ 823.975560][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.005673][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.025639][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.047737][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.071417][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.075680][ T9] rc_core: IR keymap rc-hauppauge not found [ 824.093787][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.095639][ T9] Registered IR keymap rc-empty [ 824.114278][T19052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.118000][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 824.135322][T19052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.154329][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input112 [ 824.157464][T19052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.191544][T19052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.241438][T19052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.265558][T19052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.293767][T19052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.313643][ T46] usb 5-1: USB disconnect, device number 106 [ 824.455396][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.479204][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.537871][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.552149][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.759203][T19240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 825.267761][ T8] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 825.315653][T16445] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 825.448095][ T8] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 825.477332][T16445] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 825.488645][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.506541][T16445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.526873][ T8] usb 4-1: config 0 descriptor?? [ 825.549849][T16445] usb 5-1: config 0 descriptor?? [ 825.561789][ T8] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input113 [ 825.593194][T16445] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input114 [ 826.140556][ T4665] bcm5974 4-1:0.0: could not read from device [ 826.215675][ T937] usb 4-1: USB disconnect, device number 105 [ 826.232722][T12736] bcm5974 4-1:0.0: could not read from device [ 826.335988][T12736] udevd[12736]: Error opening device "/dev/input/event4": No such device [ 826.345091][T12736] udevd[12736]: Unable to EVIOCGABS device "/dev/input/event4" [ 826.356682][ T5276] usb 5-1: USB disconnect, device number 107 [ 826.358081][T10952] bcm5974 5-1:0.0: could not read from device [ 826.397460][ T4665] bcm5974 5-1:0.0: could not read from device [ 826.420428][T10952] coredump: 10952(udevd): over coredump resource limit, skipping core dump [ 826.462182][T10952] coredump: 10952(udevd): coredump has not been created, error -7 [ 826.620582][ T5269] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 826.633271][T11250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.797125][ T5269] usb 3-1: device descriptor read/64, error -71 [ 826.847688][T11250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.036905][ T5269] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 827.160261][T11250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.195312][ T5269] usb 3-1: device descriptor read/64, error -71 [ 827.245065][T19306] binder: BINDER_SET_CONTEXT_MGR already set [ 827.285908][T19306] binder: 19303:19306 ioctl 4018620d 20000100 returned -16 [ 827.293331][T19306] binder: BINDER_SET_CONTEXT_MGR already set [ 827.316031][ T5269] usb usb3-port1: attempt power cycle [ 827.336686][T19306] binder: 19303:19306 ioctl 4018620d 20000100 returned -16 [ 827.446173][T11250] bond0: (slave netdevsim0): Releasing backup interface [ 827.489106][T11250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.563027][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 827.574466][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 827.588861][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 827.607946][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 827.626279][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 827.634877][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 827.685776][ T5269] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 827.716269][ T5269] usb 3-1: device descriptor read/8, error -71 [ 827.841262][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 827.852208][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 827.861307][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 827.871523][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 827.880182][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 827.887690][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 827.958420][T11250] team0: left allmulticast mode [ 827.980741][T11250] team_slave_0: left allmulticast mode [ 827.995717][T11250] team_slave_1: left allmulticast mode [ 828.006589][ T5269] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 828.014932][T11250] team0: left promiscuous mode [ 828.028594][T11250] team_slave_0: left promiscuous mode [ 828.040011][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2996'. [ 828.040242][ T5269] usb 3-1: device descriptor read/8, error -71 [ 828.048828][T11250] team_slave_1: left promiscuous mode [ 828.071038][T11250] bridge0: port 3(team0) entered disabled state [ 828.084231][T11250] bridge_slave_1: left allmulticast mode [ 828.094820][T11250] bridge_slave_1: left promiscuous mode [ 828.103895][T11250] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.121662][T11250] bridge_slave_0: left allmulticast mode [ 828.133322][T11250] bridge_slave_0: left promiscuous mode [ 828.145701][T11250] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.167850][ T5269] usb usb3-port1: unable to enumerate USB device [ 828.185648][ T937] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 828.389213][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.406861][ T937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.445572][ T937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 828.464766][ T937] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 828.499542][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.538519][ T937] usb 4-1: config 0 descriptor?? [ 828.917718][T11250] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.934026][T11250] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.957109][T11250] bond0 (unregistering): Released all slaves [ 829.132736][ T937] cherry 0003:046A:0027.002F: unknown main item tag 0x0 [ 829.140020][ T937] cherry 0003:046A:0027.002F: unknown main item tag 0x0 [ 829.147081][ T937] cherry 0003:046A:0027.002F: unknown main item tag 0x0 [ 829.147796][ C0] vkms_vblank_simulate: vblank timer overrun [ 829.154043][ T937] cherry 0003:046A:0027.002F: unknown main item tag 0x0 [ 829.170423][ T937] cherry 0003:046A:0027.002F: unknown main item tag 0x0 [ 829.209385][ T937] cherry 0003:046A:0027.002F: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.3-1/input0 [ 829.915745][ T5236] Bluetooth: hci1: command tx timeout [ 832.015791][ T5236] Bluetooth: hci1: command tx timeout [ 834.065944][ T5236] Bluetooth: hci1: command tx timeout [ 836.165882][ T5236] Bluetooth: hci1: command tx timeout [ 840.954927][ C0] vkms_vblank_simulate: vblank timer overrun [ 841.470076][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 841.479940][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 841.488162][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 841.497936][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 841.505991][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 841.513299][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 841.963827][ T4619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 841.976466][ T4619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 841.988763][ T4619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 841.997052][ T4619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 842.006512][ T4619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 842.013863][ T4619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 842.027350][ T4619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 842.036933][ T4619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 842.044271][ T4619] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 842.052360][ T4619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 842.061419][ T4619] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 842.075072][ T4619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 843.616021][ T5227] Bluetooth: hci5: command tx timeout [ 844.165918][ T5227] Bluetooth: hci7: command tx timeout [ 844.172461][ T5227] Bluetooth: hci6: command tx timeout [ 845.665730][ T5227] Bluetooth: hci5: command tx timeout [ 846.215870][ T4619] Bluetooth: hci7: command tx timeout [ 846.222031][ T5227] Bluetooth: hci6: command tx timeout [ 847.765812][ T5227] Bluetooth: hci5: command tx timeout [ 848.315782][ T5227] Bluetooth: hci6: command tx timeout [ 848.321269][ T5227] Bluetooth: hci7: command tx timeout [ 849.815694][ T5227] Bluetooth: hci5: command tx timeout [ 850.415837][ T4619] Bluetooth: hci6: command tx timeout [ 850.421345][ T5227] Bluetooth: hci7: command tx timeout [ 934.015455][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 934.022503][ C1] rcu: 0-...!: (2 ticks this GP) idle=fd5c/1/0x4000000000000000 softirq=153514/153514 fqs=531 [ 934.034252][ C1] rcu: (detected by 1, t=10505 jiffies, g=159245, q=1734 ncpus=2) [ 934.042179][ C1] Sending NMI from CPU 1 to CPUs 0: [ 934.042222][ C0] NMI backtrace for cpu 0 [ 934.042238][ C0] CPU: 0 UID: 0 PID: 19338 Comm: syz.4.2997 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 934.042261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 934.042273][ C0] RIP: 0010:__lock_acquire+0x605/0x2050 [ 934.042309][ C0] Code: a1 ed 8d 00 48 0f a3 1d f9 5f b5 12 73 26 48 69 c3 c8 00 00 00 48 8d 98 c0 06 c2 93 48 ba 00 00 00 00 00 fc ff df 48 8b 34 24 <48> 8b 7c 24 08 e9 9f 00 00 00 48 c7 c0 40 f9 3a 9a 48 c1 e8 03 48 [ 934.042325][ C0] RSP: 0018:ffffc90000007950 EFLAGS: 00000002 [ 934.042343][ C0] RAX: 00000000000000c8 RBX: ffffffff93c20788 RCX: ffffffff817027bf [ 934.042357][ C0] RDX: dffffc0000000000 RSI: ffff88801df70ae0 RDI: ffffffff942587c0 [ 934.042372][ C0] RBP: 0000000000000002 R08: ffffffff942587c7 R09: 1ffffffff284b0f8 [ 934.042386][ C0] R10: dffffc0000000000 R11: fffffbfff284b0f9 R12: ffff88801df70000 [ 934.042400][ C0] R13: 0000000000000001 R14: 1ffff11003bee16f R15: ffff88801df70b78 [ 934.042414][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f5746b40 [ 934.042431][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 934.042445][ C0] CR2: 00000000f51141d3 CR3: 000000007b57a000 CR4: 00000000003506f0 [ 934.042462][ C0] DR0: 0000000000002000 DR1: 0000000000000000 DR2: 0000000000000000 [ 934.042474][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 934.042486][ C0] Call Trace: [ 934.042494][ C0] [ 934.042503][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 934.042532][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 934.042559][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 934.042593][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 934.042617][ C0] ? nmi_handle+0x14f/0x5a0 [ 934.042635][ C0] ? nmi_handle+0x2a/0x5a0 [ 934.042654][ C0] ? __lock_acquire+0x605/0x2050 [ 934.042680][ C0] ? default_do_nmi+0x63/0x160 [ 934.042712][ C0] ? exc_nmi+0x123/0x1f0 [ 934.042738][ C0] ? end_repeat_nmi+0xf/0x53 [ 934.042763][ C0] ? __lock_acquire+0x5df/0x2050 [ 934.042790][ C0] ? __lock_acquire+0x605/0x2050 [ 934.042816][ C0] ? __lock_acquire+0x605/0x2050 [ 934.042843][ C0] ? __lock_acquire+0x605/0x2050 [ 934.042869][ C0] [ 934.042876][ C0] [ 934.042889][ C0] lock_acquire+0x1ed/0x550 [ 934.042914][ C0] ? debug_object_deactivate+0x158/0x390 [ 934.042943][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 934.042973][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 934.042998][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 934.043020][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 934.043039][ C0] ? debug_object_deactivate+0x158/0x390 [ 934.043064][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 934.043088][ C0] debug_object_deactivate+0x158/0x390 [ 934.043116][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 934.043143][ C0] ? timerqueue_add+0x260/0x290 [ 934.043168][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 934.043190][ C0] debug_deactivate+0x1b/0x220 [ 934.043210][ C0] __hrtimer_run_queues+0x305/0xd50 [ 934.043228][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 934.043259][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 934.043278][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 934.043305][ C0] hrtimer_interrupt+0x396/0x990 [ 934.043331][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 934.043351][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 934.043372][ C0] [ 934.043379][ C0] [ 934.043386][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 934.043409][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 934.043430][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 4e 82 32 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 f3 73 97 f5 65 8b 05 04 47 38 74 85 c0 74 43 48 c7 04 24 0e 36 [ 934.043446][ C0] RSP: 0018:ffffc900099c6dc0 EFLAGS: 00000206 [ 934.043462][ C0] RAX: 774412212b437a00 RBX: 1ffff92001338dbc RCX: ffffffff81708f1a [ 934.043477][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0aca40 RDI: 0000000000000001 [ 934.043491][ C0] RBP: ffffc900099c6e50 R08: ffffffff9425896f R09: 1ffffffff284b12d [ 934.043505][ C0] R10: dffffc0000000000 R11: fffffbfff284b12e R12: dffffc0000000000 [ 934.043520][ C0] R13: 1ffff92001338db8 R14: ffffc900099c6de0 R15: 0000000000000246 [ 934.043537][ C0] ? mark_lock+0x9a/0x360 [ 934.043575][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 934.043599][ C0] taprio_change+0x26d2/0x44c0 [ 934.043630][ C0] ? __pfx_taprio_change+0x10/0x10 [ 934.043652][ C0] ? __pfx_lock_release+0x10/0x10 [ 934.043677][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 934.043699][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 934.043735][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 934.043762][ C0] taprio_init+0x9da/0xc80 [ 934.043783][ C0] ? ____sys_sendmsg+0x52a/0x7e0 [ 934.043807][ C0] ? __sys_sendmsg+0x2aa/0x390 [ 934.043830][ C0] ? __do_fast_syscall_32+0xb4/0x110 [ 934.043859][ C0] ? __pfx_taprio_init+0x10/0x10 [ 934.043882][ C0] ? lockdep_rtnl_is_held+0x26/0x40 [ 934.043903][ C0] ? qdisc_lookup+0x350/0x6b0 [ 934.043930][ C0] ? __pfx_taprio_init+0x10/0x10 [ 934.043951][ C0] qdisc_create+0x9d4/0x11a0 [ 934.043974][ C0] ? __pfx_qdisc_create+0x10/0x10 [ 934.043996][ C0] tc_modify_qdisc+0xa26/0x1e40 [ 934.044019][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 934.044046][ C0] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 934.044064][ C0] rtnetlink_rcv_msg+0x73f/0xcf0 [ 934.044082][ C0] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 934.044102][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.044124][ C0] ? ref_tracker_free+0x643/0x7e0 [ 934.044153][ C0] netlink_rcv_skb+0x1e3/0x430 [ 934.044176][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 934.044195][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.044224][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 934.044246][ C0] netlink_unicast+0x7f6/0x990 [ 934.044269][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 934.044287][ C0] ? __virt_addr_valid+0x183/0x530 [ 934.044307][ C0] ? __check_object_size+0x48e/0x900 [ 934.044328][ C0] netlink_sendmsg+0x8e4/0xcb0 [ 934.044355][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.044378][ C0] ? __pfx_lock_release+0x10/0x10 [ 934.044404][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 934.044425][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.044447][ C0] __sock_sendmsg+0x221/0x270 [ 934.044466][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 934.044495][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.044525][ C0] __sys_sendmsg+0x2aa/0x390 [ 934.044550][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.044593][ C0] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 934.044616][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 934.044638][ C0] __do_fast_syscall_32+0xb4/0x110 [ 934.044662][ C0] ? exc_page_fault+0x590/0x8c0 [ 934.044683][ C0] do_fast_syscall_32+0x34/0x80 [ 934.044712][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 934.044737][ C0] RIP: 0023:0xf7fc1579 [ 934.044763][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 934.044779][ C0] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 934.044796][ C0] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000200007c0 [ 934.044810][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 934.044821][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 934.044832][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 934.044844][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 934.044861][ C0] [ 934.045215][ C1] rcu: rcu_preempt kthread starved for 7850 jiffies! g159245 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 934.796072][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 934.806064][ C1] rcu: RCU grace-period kthread stack dump: [ 934.811971][ C1] task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 934.823855][ C1] Call Trace: [ 934.827162][ C1] [ 934.830122][ C1] __schedule+0x1895/0x4b30 [ 934.834681][ C1] ? __pfx___schedule+0x10/0x10 [ 934.839565][ C1] ? __pfx_lock_release+0x10/0x10 [ 934.844627][ C1] ? __asan_memset+0x23/0x50 [ 934.849263][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 934.855141][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.861517][ C1] ? schedule+0x90/0x320 [ 934.865796][ C1] schedule+0x14b/0x320 [ 934.869997][ C1] schedule_timeout+0x1be/0x310 [ 934.874901][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 934.880320][ C1] ? __pfx_process_timeout+0x10/0x10 [ 934.885655][ C1] ? prepare_to_swait_event+0x330/0x350 [ 934.891256][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 934.896132][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 934.901375][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 934.907560][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 934.912919][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 934.917560][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 934.922799][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 934.928744][ C1] ? __kthread_parkme+0x169/0x1d0 [ 934.933818][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 934.939045][ C1] kthread+0x2f0/0x390 [ 934.943144][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 934.948370][ C1] ? __pfx_kthread+0x10/0x10 [ 934.952989][ C1] ret_from_fork+0x4b/0x80 [ 934.957439][ C1] ? __pfx_kthread+0x10/0x10 [ 934.962058][ C1] ret_from_fork_asm+0x1a/0x30 [ 934.966875][ C1] [ 934.969923][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 934.976269][ C1] CPU: 1 UID: 0 PID: 1127 Comm: kworker/u8:6 Not tainted 6.11.0-syzkaller-08481-g88264981f208 #0 [ 934.986806][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 934.996884][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 935.002934][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 935.009736][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 96 f9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 41 f5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 25 f5 [ 935.029367][ C1] RSP: 0018:ffffc90004485fa0 EFLAGS: 00000293 [ 935.035473][ C1] RAX: ffffffff8188c48b RBX: 1ffff110170c8ca1 RCX: ffff888027309e00 [ 935.043483][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 935.051478][ C1] RBP: ffffc900044861a0 R08: ffffffff8188c45a R09: 1ffff92000890be4 [ 935.059472][ C1] R10: dffffc0000000000 R11: ffffffff8142e160 R12: dffffc0000000000 [ 935.067470][ C1] R13: ffff8880b8646508 R14: ffff8880b873fc80 R15: 0000000000000000 [ 935.075494][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 935.084493][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 935.091132][ C1] CR2: 00007fae932e4866 CR3: 000000000e734000 CR4: 00000000003506f0 [ 935.099136][ C1] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000 [ 935.107136][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 935.115135][ C1] Call Trace: [ 935.118435][ C1] [ 935.121305][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 935.127688][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 935.133359][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 935.138693][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 935.144551][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 935.150852][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 935.156285][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 935.161962][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 935.167200][ C1] ? acct_account_cputime+0x207/0x210 [ 935.172615][ C1] ? update_process_times+0x1ce/0x230 [ 935.178025][ C1] ? tick_nohz_handler+0x37c/0x500 [ 935.183202][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 935.188694][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 935.194117][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 935.200166][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 935.205928][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 935.212043][ C1] ? hrtimer_interrupt+0x396/0x990 [ 935.217208][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 935.223392][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 935.229228][ C1] [ 935.232183][ C1] [ 935.235137][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 935.241326][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 935.246644][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 935.252836][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 935.259029][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 935.265225][ C1] ? mark_lock+0x9a/0x360 [ 935.269585][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 935.274900][ C1] ? __lock_acquire+0x1384/0x2050 [ 935.279963][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 935.285209][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 935.291585][ C1] ? rcu_is_watching+0x15/0xb0 [ 935.296388][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 935.301611][ C1] ? __pfx_tlb_is_not_lazy+0x10/0x10 [ 935.306932][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 935.312090][ C1] flush_tlb_mm_range+0x329/0x5c0 [ 935.317173][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 935.322748][ C1] ? page_ext_get+0x1d6/0x2a0 [ 935.327462][ C1] ptep_clear_flush+0x11a/0x170 [ 935.332352][ C1] page_vma_mkclean_one+0x58a/0x9a0 [ 935.337594][ C1] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 935.343352][ C1] ? __pfx_validate_chain+0x10/0x10 [ 935.348599][ C1] page_mkclean_one+0x280/0x420 [ 935.353485][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 935.358890][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 935.364382][ C1] ? vma_interval_tree_iter_next+0x307/0x340 [ 935.370392][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 935.375791][ C1] rmap_walk_file+0x52f/0x9f0 [ 935.380510][ C1] folio_mkclean+0x262/0x440 [ 935.385133][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 935.390276][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 935.395677][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 935.401339][ C1] ? __pfx_lock_release+0x10/0x10 [ 935.406408][ C1] ? folio_mapping+0x1b2/0x430 [ 935.411214][ C1] folio_clear_dirty_for_io+0x22b/0xd00 [ 935.416792][ C1] ? xas_find_marked+0xf67/0x10e0 [ 935.421853][ C1] ? __pfx_folio_clear_dirty_for_io+0x10/0x10 [ 935.427968][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 935.432978][ C1] ? filemap_get_folios_tag+0x1ce/0x890 [ 935.438569][ C1] mpage_submit_folio+0x88/0x230 [ 935.443561][ C1] mpage_process_page_bufs+0x6c9/0x8d0 [ 935.449064][ C1] mpage_prepare_extent_to_map+0xec7/0x1c80 [ 935.454989][ C1] ? kasan_save_track+0x51/0x80 [ 935.459907][ C1] ? kasan_save_track+0x3f/0x80 [ 935.464816][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 935.471202][ C1] ? ext4_init_io_end+0x29/0x130 [ 935.476177][ C1] ? rcu_is_watching+0x15/0xb0 [ 935.480970][ C1] ? ext4_init_io_end+0x29/0x130 [ 935.485944][ C1] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 935.491621][ C1] ext4_do_writepages+0xc55/0x3d20 [ 935.496903][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 935.502519][ C1] ? rcu_read_lock_any_held+0xb7/0x160 [ 935.508024][ C1] ext4_writepages+0x213/0x3c0 [ 935.512823][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 935.518151][ C1] ? reacquire_held_locks+0x3eb/0x690 [ 935.523560][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 935.528888][ C1] do_writepages+0x35d/0x870 [ 935.533523][ C1] ? __pfx_do_writepages+0x10/0x10 [ 935.538677][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 935.543740][ C1] ? writeback_sb_inodes+0x595/0x1370 [ 935.549150][ C1] ? __pfx_lock_release+0x10/0x10 [ 935.554211][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 935.559281][ C1] __writeback_single_inode+0x14f/0x10d0 [ 935.564947][ C1] ? wbc_attach_and_unlock_inode+0x565/0x580 [ 935.570977][ C1] writeback_sb_inodes+0x80c/0x1370 [ 935.576206][ C1] ? mark_lock+0x9a/0x360 [ 935.580598][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 935.586313][ C1] ? __pfx_move_expired_inodes+0x10/0x10 [ 935.591981][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 935.597048][ C1] __writeback_inodes_wb+0x11b/0x260 [ 935.602376][ C1] wb_writeback+0x42f/0xbd0 [ 935.606923][ C1] ? queue_io+0x3a1/0x5a0 [ 935.611289][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 935.616361][ C1] wb_workfn+0xba1/0x1090 [ 935.620741][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 935.625550][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 935.631581][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 935.637978][ C1] ? process_scheduled_works+0x976/0x1850 [ 935.643734][ C1] process_scheduled_works+0xa63/0x1850 [ 935.649346][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 935.655374][ C1] ? assign_work+0x364/0x3d0 [ 935.660008][ C1] worker_thread+0x870/0xd30 [ 935.664652][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 935.670580][ C1] ? __kthread_parkme+0x169/0x1d0 [ 935.675653][ C1] ? __pfx_worker_thread+0x10/0x10 [ 935.680803][ C1] kthread+0x2f0/0x390 [ 935.684900][ C1] ? __pfx_worker_thread+0x10/0x10 [ 935.690050][ C1] ? __pfx_kthread+0x10/0x10 [ 935.694671][ C1] ret_from_fork+0x4b/0x80 [ 935.699127][ C1] ? __pfx_kthread+0x10/0x10 [ 935.703760][ C1] ret_from_fork_asm+0x1a/0x30 [ 935.708577][ C1]