last executing test programs: 7m33.086363899s ago: executing program 2 (id=242): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x0, 0xfffd, 0x1000}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 7m32.971396489s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r3, 0x0, 0x0, 0x1001f0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 7m30.147060189s ago: executing program 2 (id=249): mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000001680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noxattr}], [], 0x6b}}) 7m27.972348581s ago: executing program 2 (id=256): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='./file1\x00', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000001240)='./file1/file0\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x1) unlink(0x0) open(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 7m25.767435013s ago: executing program 2 (id=261): r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x5, 0xffff133e, 0x3], [{0x0, 0x7}, {0x31, 0x85}, {0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x1}], 0x10}) 7m24.686309038s ago: executing program 2 (id=267): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 7m24.521731108s ago: executing program 32 (id=267): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x560f, 0x0) 5m53.690363662s ago: executing program 4 (id=617): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010400000000000000000000ffff", @ANYRES32=r1, @ANYBLOB="0000000002000000140003007866726d3000"], 0x44}}, 0x0) 5m53.614795171s ago: executing program 4 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) 5m52.573991347s ago: executing program 4 (id=622): syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x109b01) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r1, 0x1000006) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0) open_by_handle_at(r7, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000200000007"], 0x100040) 5m50.237922819s ago: executing program 4 (id=630): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'macvlan1\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x7ff, 0x1}, {0xd, 0x9}, {0x2, 0xedf2}, {0x5, 0x8e}, {0x80000000, 0x9}, {0x7, 0x9}]}}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x6, 0x0, 0x20000000, 0x0, 0xfffffffc}}) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 5m49.688717497s ago: executing program 4 (id=632): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0xc8c58f04116dd30d, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001000000000000000000040100800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="32a781ca1220c50df1850403ff67a4f14c330606dc5818ac962ba0cbbbd616cb330be68c1f904becc972c9526d22104f74746efc5cf198cc44ce8c74e88aaad35db66e381b1cc41bff34a5b53c62b5caae2eb921054b123810af3ad38085a20fd88f647a981b70d71e76d34b6b011a614d8dda3cf5eb116c65394be5a233b0475f6c24cbce9f105c74efcdd627fc0b8d6bcf3f2338e55bdd8ec1b52942cc4b186b5f2b2fc5bfff0fe753062cf846009d21e32a770f6054aa3322606c9fa652e0a5820de4aeca270b9c688f19", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="0000f500000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(r4, &(0x7f0000001300), 0x8f) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) r6 = fsopen(&(0x7f0000000140)='dax\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='\x00', &(0x7f0000000280)='fuse\x00', 0x0) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000480)={0x3, r2, 0x10, {0x3, 0x8509}, 0x5}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 5m48.516980282s ago: executing program 4 (id=636): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c02102c4f0000000109021b0001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) shutdown(r3, 0x1) 5m48.325773541s ago: executing program 33 (id=636): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ad183840f30c02102c4f0000000109021b0001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) shutdown(r3, 0x1) 2m48.880529906s ago: executing program 5 (id=1265): fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000000)="36d8af10000f20e066355a0020000f22e0360f0144f23f7cec10a7148a10a7148a758a67f32e0f23e966b8010000000f01c1dbe20f01c3f0290b", 0x3a}], 0x1, 0x54, 0x0, 0x19) setresuid(0x0, 0xee00, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m48.518457685s ago: executing program 5 (id=1271): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, 0x0, 0x4000000) sendmsg$sock(0xffffffffffffffff, 0x0, 0x80) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) 2m48.402024664s ago: executing program 5 (id=1272): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mmap(&(0x7f00008bb000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x3f) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x168, 0x9, 0x270, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xffffff00, 0xffffffff, 0xff], [0xff000000, 0xff, 0xff000000, 0xff], 'rose0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x3c, 0x0, 0x0, 0x40}, 0x6000000, 0xa8, 0x110, 0x0, {0x0, 0x28e}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x27}, 0x19}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000180)="ca6840b6bcf374e5377a25", 0xb}, {&(0x7f0000000800)="67f596402044fbf6e88e3f6c24f9fa5f5d9389f7446ca3e4d6b2e20f1198754009a04fcdd6e6ba4338b1c59cedb15599f97783c439786bf6938a14263787ca4cfc0e168e81b94abb6d3d1eb2dc03503a27847c3b2ea7bbeac7c6ac32130c52a13496aeb69a02396a8290d6f1ec0c226fd635a21feec342b450542b671042f7b33783e4c66cfb98bc53aac094708de6cf035b20e6da3f4c0592c8277f02ac4cf2658a5ac08b4c7aad53b4f403fe6d6a4ba3f7c74a1ba589433f03129bc8bc5c2f87014047bb33c9f2ad65a98951ec114e6fdef9318046a6af9a5fbd013fd60f41337e3678da780c19c963c242ac", 0xed}, {&(0x7f0000000300)="656f3d8bc2bf88a076310175cbb016b385c690654483d3f893710e5b04af92000060dfc9054b485fb43c6767cb430d76dd12fe142c910046db4f38ee915e370d47688ec31ca79d4b66e8a92d15ead658b98814a8873a30fdeddb43340a64edda572e4c362aecbd4361f5b7632ee0e83c1d13a64cf21bf35fad2f5337bfc19713e7174c495cc5b65c446ac3ff662ddc1ad41d5d6efc2f14e30a7addeee5", 0x9d}, {&(0x7f0000003680)="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", 0x42c}], 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x80080c5) 2m46.912338729s ago: executing program 5 (id=1277): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000240)='./file0/../file0\x00', r0, &(0x7f0000000040)='./file0/../file0\x00', 0x0) 2m46.054237506s ago: executing program 5 (id=1278): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) r2 = dup(r1) read$char_usb(r2, 0x0, 0x0) 2m45.798140935s ago: executing program 5 (id=1281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001880)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x2}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x100}, 0x38, 0x162) 2m45.530163394s ago: executing program 34 (id=1281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001880)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x2}], 0x1, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg$qrtr(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/207, 0xcf}], 0x1, 0x0, 0x0, 0x100}, 0x38, 0x162) 2m34.160805692s ago: executing program 6 (id=1324): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d, 0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x8aa, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x28, 0x3f, 0xb, 0x70bd25, 0x0, {0x2}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xb5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m33.066251938s ago: executing program 6 (id=1326): syz_usb_connect(0x3, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000366345940d112c10e23290102030109024600015109f00309040d0200ff013906052406000105240001000d24"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 2m28.166402159s ago: executing program 6 (id=1340): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000000)="14000000140005b7ffcc", 0xa) 2m27.925419639s ago: executing program 6 (id=1342): syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e00fd260c"], 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000) socket$packet(0x11, 0x3, 0x300) 2m27.590067867s ago: executing program 6 (id=1343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002600)={0x11, 0x5, &(0x7f00000026c0)=ANY=[@ANYBLOB="180000000000000000000000000000001600000000000000670000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) connect$netlink(r3, &(0x7f0000000400)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r4, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x1c, 0x1e, 0x1}, 0x1c}}, 0x0) 2m23.557112212s ago: executing program 6 (id=1346): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) 2m8.475397496s ago: executing program 35 (id=1346): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) epoll_create1(0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) mount(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000001fc0)={0x42, 0x3, 0x0, {0x0, 0x21, 0x0, '/proc/sys/net/ipv4/vs/secure_tcp\x00'}}, 0x42) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)=ANY=[]) 1m12.248107628s ago: executing program 3 (id=1570): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r3, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r5], [0x2b8]}) 1m11.766630916s ago: executing program 3 (id=1572): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000001c0)='.\x00', 0x20000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000001500)=""/4096, 0x1000) 1m10.714299332s ago: executing program 3 (id=1576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) unshare(0x2000400) clock_adjtime(0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) syz_open_dev$sndctrl(0x0, 0x6, 0x1) socket(0x10, 0x803, 0x0) unshare(0x20000400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000000)=0x2000000) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x2284, &(0x7f0000000000)) 1m9.453409548s ago: executing program 3 (id=1577): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac0009040000010700000909"], 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x7, 0x7, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xffffffee, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x6, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c77, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x5, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0xfffffffa, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xb, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xdbc1, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x6, 0x2, 0x64d, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0x2], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x20000b, 0x4, 0x800005, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x2, 0x2, 0x7, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x6, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xffffb1c7, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x5, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x3, 0x9, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x0, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) setreuid(0xee01, 0xffffffffffffffff) ioprio_set$uid(0x3, 0xee01, 0x2007) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @local}], 0x10) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x8957) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], 0xffc3}, 0x1, 0x0, 0x0, 0x4364902a12139c5c}, 0x1) 1m6.630044197s ago: executing program 3 (id=1585): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x1000}) setresuid(0xee01, 0x0, 0xffffffffffffffff) setfsuid(0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(r5) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000580)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x61, 0x11, 0x10}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @call={0x85, 0x0, 0x0, 0xcf}]}, 0x0, 0x4, 0xc1, &(0x7f000000cf3d)=""/193, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x44814) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e242000000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 1m5.304166772s ago: executing program 3 (id=1592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x2, "ac991300c166cfb80b63238040199d342d16c43394c4340e077663e80c6be465"}) close(0x3) read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 49.829330535s ago: executing program 36 (id=1592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x2, "ac991300c166cfb80b63238040199d342d16c43394c4340e077663e80c6be465"}) close(0x3) read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 12.578206057s ago: executing program 8 (id=1749): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f0000000140)='./file0\x00') symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') 12.182236206s ago: executing program 8 (id=1754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r5, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x3, [0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) 10.417879099s ago: executing program 8 (id=1759): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="10"], 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x142) 9.318262615s ago: executing program 8 (id=1762): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/25], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x2) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$key(0xf, 0x3, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 8.672581992s ago: executing program 7 (id=1768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x20}}, 0xfffd}, 0x90) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e24, @empty}], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'bridge_slave_0\x00', &(0x7f00000006c0)=@ethtool_perm_addr}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000004000000e27f00000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000f2ffffffffffff38b698d0c654d1fab6aff5cf1813c586494f1844529b8b0614ac3c2cc2cdfea1a7e8b69597aeffdf734ef86e8af32a513332f4aa0f07f1642f60e3c9661184e062f02465daef07003b2518690df0ea3ea5ea67f1140d227455db57542a15629be6ba5a19bda8b840560ecb7c647dedb3e27016cdd31369c2cc1498282d2875f57ca0b21d30480dbf1f82cb39e7bab7140988d0c89d9973d96fec9017be31", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000340)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f00000000c0)=0x1, 0x4) 6.096469263s ago: executing program 1 (id=1773): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = memfd_secret(0x0) fchmod(r0, 0x134) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) 5.897025742s ago: executing program 7 (id=1774): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0x6, 0x5}, {0x5, 0x5, 0x3, 0x9}], 0x10, 0x36, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$BTRFS_IOC_RM_DEV_V2(r4, 0x541b, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x100) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c00000010004b0400000000000000007a000000", @ANYRES32=r11, @ANYBLOB="00000000000000000a000100aaaaaaaaaa000000e2f24b9d8bad"], 0x2c}}, 0x0) 5.836755662s ago: executing program 0 (id=1776): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 4.377153476s ago: executing program 1 (id=1777): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b15, &(0x7f0000000500)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1d, 0x2, 0x6) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setreuid(0x0, r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030426bd70020000dfa5f7d7bc00", @ANYRES32=0x0, @ANYBLOB="0023000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 4.354264267s ago: executing program 7 (id=1778): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0xf4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.199435416s ago: executing program 0 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x3b, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @pid}]}, 0x34}}, 0xc000) 4.010327345s ago: executing program 7 (id=1781): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3.642016274s ago: executing program 9 (id=1782): connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000002c0)={0x0, 0xa9ac}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x4}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x3) chdir(&(0x7f0000000080)='./file1\x00') getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@mcast2}, &(0x7f00000003c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'macvtap0\x00'}) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x200408c1) 3.604769144s ago: executing program 7 (id=1783): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB, @ANYRES32], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r3, 0x0, 0x0) 3.510279543s ago: executing program 0 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x38d000, 0x38d000, 0x8}) 2.47325617s ago: executing program 7 (id=1785): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000840)={0x0, 0xe, 0x35, "2c3496fa86e60b38e9eb101deac159a6893a47dbeab65c7cf97b8c1ac6e14928880a6d8c1b98bfe8c7fc771cf95aab7d3a9e193b1e"}, 0x0, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000500)={0x20, 0x82, 0x3, "412e11"}, 0x0, &(0x7f0000000900)={0x20, 0x84, 0x1, "cc"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x40, 0xa, 0x3, "248db6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.208688519s ago: executing program 0 (id=1786): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x219b, 0x4) 2.102337268s ago: executing program 9 (id=1787): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mknod$loop(0x0, 0x100000000000600d, 0x1) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000680)=0xfffffff9, 0x4) 2.056601668s ago: executing program 1 (id=1788): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_getvlan={0x18, 0x72, 0x333, 0x8}, 0x18}}, 0x0) 2.029705248s ago: executing program 0 (id=1789): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xc8503, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x1000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000900000003000000b6", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000050000000500"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180)}}], 0x3, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) renameat2(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000040)='./file0\x00', 0x5) 1.934195457s ago: executing program 1 (id=1790): r0 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 1.726644517s ago: executing program 1 (id=1791): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x98}}}, 0x108) 1.696433707s ago: executing program 9 (id=1792): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0500040408"], 0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x80001, 0x0) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x501b40, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.546243246s ago: executing program 9 (id=1793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 1.546035606s ago: executing program 1 (id=1794): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.403711986s ago: executing program 9 (id=1795): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000", @ANYBLOB, @ANYRES32], 0x50) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) read$FUSE(r3, 0x0, 0x0) 1.308723485s ago: executing program 8 (id=1796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[], 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r6, 0x5452, &(0x7f0000000c80)=0xf4e) writev(r6, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) r7 = syz_open_procfs$userns(r1, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f00000001c0)={0x0, 0x70, 0x80000, {r7}}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000014c0)=""/4109) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x9}}, 0x20) 603.791663ms ago: executing program 9 (id=1797): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0xfffffffd, 0x2, r3}) 130.354421ms ago: executing program 0 (id=1798): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 0s ago: executing program 8 (id=1799): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000640)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0x42, 0x4, 0x408, 0xffffffff, 0x278, 0x98, 0x278, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'syzkaller1\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x1b8, 0x1e0, 0x0, {0x122}, [@common=@inet=@dscp={{0x28}, {0xfc}}, @common=@unspec=@comment={{0x120}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "53a0", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x1348, 0x1168, 0xc8, 0x8, 0x1168, 0x5803, 0x1278, 0x2e8, 0x2e8, 0x1278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1168, 0x0, {0x0, 0x2000000000000}, [@common=@eui64={{0x28}}, @common=@unspec=@cgroup1={{0x1030}, {0xfd, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x14, 0x3ff, 0xffffffd5, '\x00', 'syz1\x00', {0x7fffffffffffffff}}}}, {{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff, 0xffffffff, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000], 'ip6gretap0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x63, 0x0, 0x10}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13a8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000061c0)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130}}) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x18, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'macvlan1\x00', &(0x7f0000000500)=@ethtool_cmd={0x49, 0xffffffea, 0x0, 0x6, 0x9, 0x60, 0x4, 0x2, 0x4, 0x9, 0xd43b, 0x6, 0x400, 0x7, 0xa7, 0x5, [0xfc, 0x4]}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) write$FUSE_WRITE(r7, &(0x7f00000000c0)={0x18}, 0x18) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x0, {0x18}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130}}) kernel console output (not intermixed with test programs): 50442][ T4242] pwc: recv_control_msg error -71 req 02 val 2500 [ 295.560177][ T4212] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 295.577452][ T4242] pwc: recv_control_msg error -71 req 02 val 2400 [ 295.610078][ T4242] pwc: recv_control_msg error -71 req 02 val 2600 [ 295.637976][ T4242] pwc: recv_control_msg error -71 req 02 val 2900 [ 295.694572][ T4242] pwc: recv_control_msg error -71 req 02 val 2800 [ 295.721861][ T4242] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.742594][ T4242] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.761146][ T4242] pwc: Registered as video103. [ 295.778460][ T4242] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input8 [ 295.805016][ T4242] usb 7-1: USB disconnect, device number 5 [ 295.871907][ T4212] usb 4-1: Using ep0 maxpacket: 16 [ 296.074665][ T4212] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.084030][ T4212] usb 4-1: New USB device found, idVendor=041e, idProduct=3a00, bcdDevice= 0.00 [ 296.093834][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.105220][ T4212] usb 4-1: config 0 descriptor?? [ 296.843480][ T4242] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 296.851118][ T1109] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 296.882738][ T4210] usb 4-1: USB disconnect, device number 12 [ 297.120187][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 297.240219][ T4242] usb 7-1: config 0 has an invalid interface number: 171 but max is 0 [ 297.240329][ T1109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.258736][ T4242] usb 7-1: config 0 has no interface number 0 [ 297.265465][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.276671][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 297.287964][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.380394][ T1109] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.399664][ T1109] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 297.420172][ T4242] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=e2.ef [ 297.440255][ T4242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.449365][ T1109] usb 1-1: Manufacturer: syz [ 297.469246][ T1109] usb 1-1: config 0 descriptor?? [ 297.476400][ T4242] usb 7-1: Product: syz [ 297.482109][ T4242] usb 7-1: Manufacturer: syz [ 297.486844][ T4242] usb 7-1: SerialNumber: syz [ 297.493977][ T4242] usb 7-1: config 0 descriptor?? [ 297.780082][ T4242] dvb-usb: found a 'Pinnacle PCTV HD USB Stick' in cold state, will try to load a firmware [ 298.550062][ T1109] rc_core: IR keymap rc-hauppauge not found [ 298.556701][ T1109] Registered IR keymap rc-empty [ 298.720512][ T4242] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 298.759005][ T4242] dib0700: firmware download failed at 7 with -22 [ 298.767565][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 298.784050][ T4242] usb 7-1: USB disconnect, device number 6 [ 298.820059][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 298.850823][ T1109] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 298.871045][ T1109] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 298.960193][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.000089][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.007414][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 299.040697][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.080109][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.121426][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.160081][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.305289][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 299.979689][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.095178][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.160234][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 300.191140][ T1109] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 300.204221][ T1109] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 300.234137][ T1109] usb 1-1: USB disconnect, device number 5 [ 303.240498][ T7854] netlink: 79 bytes leftover after parsing attributes in process `syz.3.951'. [ 303.803799][ T7864] syz.6.946 (7864): drop_caches: 2 [ 305.433351][ T7896] tipc: Enabled bearer , priority 0 [ 305.554083][ T7901] hub 6-0:1.0: USB hub found [ 305.562979][ T7901] hub 6-0:1.0: 1 port detected [ 306.363013][ T7914] capability: warning: `syz.5.971' uses 32-bit capabilities (legacy support in use) [ 306.489779][ T25] audit: type=1326 audit(2000000120.775:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7916 comm="syz.0.972" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ec9ebad29 code=0x0 [ 308.239974][ T7943] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 309.052667][ T7962] print_req_error: 2 callbacks suppressed [ 309.052683][ T7962] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.069783][ T7962] F2FS-fs (loop1): Unable to read 1th superblock [ 309.076853][ T7962] blk_update_request: I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 309.087782][ T7962] F2FS-fs (loop1): Unable to read 2th superblock [ 309.400143][ T13] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 309.730123][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 309.850245][ T13] usb 7-1: config 0 has an invalid interface number: 150 but max is 0 [ 310.143279][ T13] usb 7-1: config 0 has no interface number 0 [ 310.158685][ T13] usb 7-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice=e1.1f [ 310.168152][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.198820][ T13] usb 7-1: config 0 descriptor?? [ 310.915424][ T7976] afs: Unknown parameter '' [ 310.960643][ T7955] udc-core: couldn't find an available UDC or it's busy [ 311.311223][ T7955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 312.271169][ T13] usb 7-1: string descriptor 0 read error: -71 [ 312.283091][ T13] snd-usb-caiaq 7-1:0.150: can't set alt interface. [ 312.418051][ T13] usb 7-1: unable to init card! (ret=-5) [ 312.450601][ T13] snd-usb-caiaq: probe of 7-1:0.150 failed with error -5 [ 312.488978][ T13] usb 7-1: USB disconnect, device number 7 [ 312.510604][ T8001] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 314.765847][ T8022] tmpfs: Unknown parameter 'usrquota' [ 316.275969][ T8031] hub 6-0:1.0: USB hub found [ 316.283787][ T8031] hub 6-0:1.0: 1 port detected [ 317.336948][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.343282][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.295338][ T4180] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 321.304899][ T4180] CPU: 1 PID: 4180 Comm: kworker/u5:4 Not tainted 5.15.175-syzkaller #0 [ 321.313238][ T4180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 321.323301][ T4180] Workqueue: hci3 hci_rx_work [ 321.327996][ T4180] Call Trace: [ 321.331275][ T4180] [ 321.334203][ T4180] dump_stack_lvl+0x1e3/0x2d0 [ 321.338881][ T4180] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 321.344508][ T4180] ? panic+0x860/0x860 [ 321.348586][ T4180] ? sysfs_create_dir_ns+0x282/0x390 [ 321.353974][ T4180] sysfs_create_dir_ns+0x2c6/0x390 [ 321.359088][ T4180] ? sysfs_warn_dup+0xa0/0xa0 [ 321.363755][ T4180] ? do_raw_spin_unlock+0x137/0x8b0 [ 321.368951][ T4180] kobject_add_internal+0x6e0/0xe00 [ 321.374145][ T4180] kobject_add+0x14e/0x210 [ 321.378566][ T4180] ? device_add+0x3c2/0xfd0 [ 321.383060][ T4180] ? kobject_init+0x1d0/0x1d0 [ 321.387730][ T4180] ? __raw_spin_lock_init+0x41/0x100 [ 321.393008][ T4180] ? get_device_parent+0x128/0x400 [ 321.398111][ T4180] device_add+0x476/0xfd0 [ 321.402439][ T4180] hci_conn_add_sysfs+0xe4/0x1f0 [ 321.407372][ T4180] le_conn_complete_evt+0xc15/0x1500 [ 321.412660][ T4180] ? cs_le_create_conn+0x5f0/0x5f0 [ 321.417775][ T4180] hci_le_meta_evt+0xd86/0x3f50 [ 321.422613][ T4180] ? __lock_acquire+0x1ff0/0x1ff0 [ 321.427631][ T4180] ? __mutex_lock_common+0x444/0x25a0 [ 321.432995][ T4180] ? hci_remote_host_features_evt+0x280/0x280 [ 321.439045][ T4180] ? __mutex_unlock_slowpath+0x218/0x750 [ 321.444666][ T4180] ? hci_event_packet+0x3b4/0x1550 [ 321.449771][ T4180] ? mutex_unlock+0x10/0x10 [ 321.454263][ T4180] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 321.460231][ T4180] ? print_irqtrace_events+0x210/0x210 [ 321.465678][ T4180] hci_event_packet+0xc41/0x1550 [ 321.470614][ T4180] ? rcu_lock_release+0x20/0x20 [ 321.475466][ T4180] ? hci_send_to_monitor+0x99/0x4d0 [ 321.480653][ T4180] hci_rx_work+0x237/0xa10 [ 321.485060][ T4180] process_one_work+0x8a1/0x10c0 [ 321.489997][ T4180] ? worker_detach_from_pool+0x260/0x260 [ 321.495620][ T4180] ? _raw_spin_lock_irqsave+0x120/0x120 [ 321.501153][ T4180] ? kthread_data+0x4e/0xc0 [ 321.505643][ T4180] ? wq_worker_running+0x97/0x170 [ 321.510655][ T4180] worker_thread+0xaca/0x1280 [ 321.515338][ T4180] kthread+0x3f6/0x4f0 [ 321.519398][ T4180] ? rcu_lock_release+0x20/0x20 [ 321.524235][ T4180] ? kthread_blkcg+0xd0/0xd0 [ 321.528813][ T4180] ret_from_fork+0x1f/0x30 [ 321.533376][ T4180] [ 321.548882][ T4180] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 321.562287][ T4180] Bluetooth: hci3: failed to register connection device [ 322.419076][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 322.458681][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.495359][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.532212][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.539648][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.668026][ T4172] Bluetooth: hci3: command 0x2016 tx timeout [ 325.132928][ T8118] input: syz0 as /devices/virtual/input/input10 [ 325.720133][ T4172] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 326.270532][ T4172] usb 1-1: config 0 has an invalid interface number: 129 but max is 0 [ 326.308560][ T4172] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.341868][ T4172] usb 1-1: config 0 has no interface number 0 [ 326.368070][ T4172] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=47.ca [ 326.383184][ T4172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.504818][ T4172] usb 1-1: config 0 descriptor?? [ 326.804840][ T4172] imon 1-1:0.129: unable to register, err -19 [ 327.067771][ T4172] usb 1-1: USB disconnect, device number 6 [ 327.574718][ T8166] netlink: 'syz.5.1045': attribute type 1 has an invalid length. [ 329.388603][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 330.358942][ T8171] syz.5.1036 (8171): drop_caches: 2 [ 330.368341][ T8171] syz.5.1036 (8171): drop_caches: 2 [ 330.950517][ T8187] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 333.829997][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 334.384127][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1047'. [ 335.020104][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 335.801619][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.820058][ T13] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 335.832783][ T13] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 335.845856][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1056'. [ 335.845877][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1056'. [ 336.000599][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 336.009693][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 336.171949][ T13] usb 1-1: SerialNumber: syz [ 336.372379][ T8251] syz.3.1059 (8251): drop_caches: 2 [ 338.441178][ T13] usb 1-1: bad CDC descriptors [ 338.459388][ T13] usb 1-1: bad CDC descriptors [ 338.479096][ T13] usb-storage 1-1:1.0: USB Mass Storage device detected [ 338.646861][ T13] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 339.230185][ T4177] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 339.670153][ T4177] usb 6-1: Using ep0 maxpacket: 8 [ 339.986476][ T13] usb 1-1: USB disconnect, device number 7 [ 340.194466][ T4177] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 340.209710][ T4177] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.324993][ T4177] usb 6-1: Product: syz [ 340.579388][ T4177] usb 6-1: Manufacturer: syz [ 340.594388][ T4177] usb 6-1: SerialNumber: syz [ 340.718587][ T4177] usb 6-1: config 0 descriptor?? [ 340.802325][ T4177] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 342.840544][ T4177] gspca_sonixj: reg_w1 err -110 [ 342.887854][ T4177] sonixj: probe of 6-1:0.0 failed with error -110 [ 343.710169][ T4242] usb 6-1: USB disconnect, device number 9 [ 347.080053][ T4172] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 347.400139][ T4172] usb 4-1: Using ep0 maxpacket: 16 [ 347.521005][ T4172] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.938122][ T4172] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 347.966387][ T4172] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 348.128155][ T8349] ======================================================= [ 348.128155][ T8349] WARNING: The mand mount option has been deprecated and [ 348.128155][ T8349] and is ignored by this kernel. Remove the mand [ 348.128155][ T8349] option from the mount to silence this warning. [ 348.128155][ T8349] ======================================================= [ 348.224223][ T4172] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 348.240897][ T4172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.269626][ T4172] usb 4-1: Product: syz [ 348.289435][ T4172] usb 4-1: Manufacturer: syz [ 348.310562][ T4172] usb 4-1: SerialNumber: syz [ 348.345297][ T4172] usb 4-1: config 0 descriptor?? [ 348.370057][ T13] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 348.426572][ T4172] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 348.780158][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 348.830111][ T13] usb 7-1: not running at top speed; connect to a high speed hub [ 348.914885][ T13] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 349.045847][ T13] usb 7-1: config 129 has an invalid descriptor of length 127, skipping remainder of the config [ 349.331767][ T4172] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 349.433580][ T13] usb 7-1: config 129 has no interface number 0 [ 349.464380][ T13] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 349.503144][ T13] usb 7-1: config 129 interface 135 has no altsetting 0 [ 349.518419][ T4172] usb 4-1: USB disconnect, device number 13 [ 349.670249][ T13] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 349.689899][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.260412][ T13] usb 7-1: Product: syz [ 350.272911][ T13] usb 7-1: Manufacturer: syz [ 350.283618][ T13] usb 7-1: SerialNumber: syz [ 350.298392][ T4441] Bluetooth: hci3: command 0x0406 tx timeout [ 351.573183][ T13] usb 7-1: USB disconnect, device number 8 [ 351.875245][ T8402] syz.1.1097 (8402): drop_caches: 2 [ 351.894118][ T8402] syz.1.1097 (8402): drop_caches: 2 [ 353.870775][ T8422] tmpfs: Unknown parameter 'usrquota' [ 354.925096][ T4177] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 355.330326][ T4177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.374932][ T4177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.557124][ T4177] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 355.566854][ T4177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.596153][ T4177] usb 6-1: config 0 descriptor?? [ 356.203865][ T4177] hid-thrustmaster 0003:044F:B65D.000A: unbalanced collection at end of report description [ 356.214900][ T4177] hid-thrustmaster 0003:044F:B65D.000A: parse failed with error -22 [ 356.242503][ T8471] xt_CT: No such helper "netbios-ns" [ 356.330502][ T4177] hid-thrustmaster: probe of 0003:044F:B65D.000A failed with error -22 [ 356.355017][ T8476] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 356.453710][ T4177] usb 6-1: USB disconnect, device number 10 [ 357.420310][ T4266] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 358.150145][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.180134][ T4172] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 358.366103][ T4266] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.444694][ T4266] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.543202][ T4266] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 358.552872][ T4266] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.572039][ T4266] usb 7-1: config 0 descriptor?? [ 358.600372][ T4172] usb 1-1: Using ep0 maxpacket: 16 [ 359.000096][ T8507] batman_adv: batadv0: Adding interface: ipvlan2 [ 359.006463][ T8507] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.031795][ T8507] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 359.141885][ T4266] hid-udraw 0003:20D6:CB17.000B: item fetching failed at offset 5/7 [ 359.160217][ T4266] hid-udraw 0003:20D6:CB17.000B: parse failed [ 359.170677][ T4266] hid-udraw: probe of 0003:20D6:CB17.000B failed with error -22 [ 359.192028][ T8510] 9pnet: p9_fd_create_unix (8510): problem connecting socket: ./cgroup: -111 [ 359.240195][ T4172] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 359.249265][ T4172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.263372][ T4172] usb 1-1: Product: syz [ 359.280202][ T4172] usb 1-1: Manufacturer: syz [ 359.284825][ T4172] usb 1-1: SerialNumber: syz [ 359.303108][ T4172] usb 1-1: config 0 descriptor?? [ 359.343996][ T4242] usb 7-1: USB disconnect, device number 9 [ 359.353214][ T4172] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 359.374745][ T4172] usb 1-1: Detected FT232H [ 359.570122][ T4172] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 359.592218][ T4266] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 359.860164][ T4266] usb 6-1: Using ep0 maxpacket: 16 [ 360.000492][ T4266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.027620][ T4266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.040221][ T4266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.074188][ T4266] usb 6-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.00 [ 360.130100][ T4266] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.144452][ T4172] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 360.179367][ T4266] usb 6-1: config 0 descriptor?? [ 360.362445][ T13] usb 1-1: USB disconnect, device number 8 [ 360.407938][ T13] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 360.419839][ T8526] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.880341][ T13] ftdi_sio 1-1:0.0: device disconnected [ 360.883743][ T4266] apple 0003:05AC:0242.000C: report_id 0 is invalid [ 360.893839][ T4266] apple 0003:05AC:0242.000C: item 0 1 1 8 parsing failed [ 360.901262][ T4266] apple 0003:05AC:0242.000C: parse failed [ 360.907030][ T4266] apple: probe of 0003:05AC:0242.000C failed with error -22 [ 361.085380][ T4242] usb 6-1: USB disconnect, device number 11 [ 361.678102][ T4210] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 363.070102][ T4210] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 363.083759][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.107233][ T4210] usb 1-1: Product: syz [ 363.119716][ T4210] usb 1-1: Manufacturer: syz [ 363.124745][ T4210] usb 1-1: SerialNumber: syz [ 363.134972][ T4210] usb 1-1: config 0 descriptor?? [ 363.183628][ T4210] usb 1-1: selecting invalid altsetting 1 [ 363.199694][ T4210] comedi comedi0: could not switch to alternate setting 1 [ 363.231985][ T4210] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 363.260010][ T8520] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 363.383861][ T4210] usb 1-1: USB disconnect, device number 9 [ 363.824377][ T8520] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 363.836351][ T8520] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 363.877733][ T8520] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 363.892582][ T8520] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 364.090167][ T8520] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.094299][ T8570] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.102607][ T8520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.145735][ T8520] usb 4-1: Product: syz [ 364.152674][ T8520] usb 4-1: Manufacturer: syz [ 364.157443][ T8520] usb 4-1: SerialNumber: syz [ 364.350141][ T4210] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 364.502457][ T8520] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 364.520331][ T8520] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 364.601386][ T4210] usb 1-1: Using ep0 maxpacket: 32 [ 364.724181][ T8520] usb 4-1: USB disconnect, device number 14 [ 364.730273][ T4210] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 53, changing to 9 [ 364.730308][ T4210] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.730334][ T4210] usb 1-1: config 1 interface 0 has no altsetting 0 [ 365.319865][ T4210] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.40 [ 365.370237][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.392992][ T4210] usb 1-1: Product: syz [ 365.418830][ T4210] usb 1-1: Manufacturer: syz [ 365.490828][ T4210] usb 1-1: SerialNumber: syz [ 366.960095][ T4210] usbhid 1-1:1.0: can't add hid device: -71 [ 366.966164][ T4210] usbhid: probe of 1-1:1.0 failed with error -71 [ 367.180168][ T4266] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 367.248882][ T4210] usb 1-1: USB disconnect, device number 10 [ 367.440058][ T4266] usb 4-1: Using ep0 maxpacket: 8 [ 367.585835][ T8608] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.590067][ T4266] usb 4-1: config 0 has an invalid interface number: 224 but max is 0 [ 367.648632][ T4266] usb 4-1: config 0 has no interface number 0 [ 367.666030][ T4266] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 367.697408][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.710175][ T4266] usb 4-1: config 0 descriptor?? [ 368.430233][ T1109] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 369.252115][ T1109] usb 6-1: config 0 has an invalid interface number: 158 but max is 0 [ 369.571860][ T1109] usb 6-1: config 0 has no interface number 0 [ 369.597852][ T1109] usb 6-1: config 0 interface 158 has no altsetting 0 [ 369.770184][ T1109] usb 6-1: New USB device found, idVendor=c32a, idProduct=8339, bcdDevice=17.2b [ 369.789573][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.809832][ T1109] usb 6-1: Product: syz [ 369.814052][ T1109] usb 6-1: Manufacturer: syz [ 369.880019][ T1109] usb 6-1: SerialNumber: syz [ 369.905047][ T1109] usb 6-1: config 0 descriptor?? [ 370.351496][ T1109] cdc_eem: probe of 6-1:0.158 failed with error -22 [ 370.636876][ T1109] usb 6-1: USB disconnect, device number 12 [ 371.116559][ T4266] usb 4-1: string descriptor 0 read error: -71 [ 371.155323][ T4266] usb 4-1: USB disconnect, device number 15 [ 373.054381][ T4266] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 373.070228][ T4172] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 373.471850][ T4172] usb 7-1: Using ep0 maxpacket: 8 [ 373.584322][ T8668] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 374.211995][ T8520] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 374.260247][ T4172] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 374.270313][ T4266] usb 4-1: config 0 has an invalid interface number: 137 but max is 0 [ 374.278477][ T4266] usb 4-1: config 0 has no interface number 0 [ 374.289995][ T4172] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 374.299812][ T4266] usb 4-1: config 0 interface 137 has no altsetting 0 [ 374.304615][ T4180] Bluetooth: hci4: Dropping invalid advertising data [ 374.306675][ T4172] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 374.313784][ T4180] Bluetooth: hci4: Dropping invalid advertising data [ 374.323652][ T4266] usb 4-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=90.83 [ 374.330846][ T4180] Bluetooth: hci4: Malicious advertising data. [ 374.366715][ T4172] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 374.384815][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.393776][ T4172] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 374.410049][ T4266] usb 4-1: config 0 descriptor?? [ 374.424296][ T4172] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.480135][ T8520] usb 1-1: Using ep0 maxpacket: 8 [ 374.729641][ T4266] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 374.753536][ T4266] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 374.780249][ T4172] usb 7-1: GET_CAPABILITIES returned 0 [ 374.787288][ T4266] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 374.796332][ T4172] usbtmc 7-1:16.0: can't read capabilities [ 374.811106][ T4266] usb 4-1: media controller created [ 374.834500][ T8520] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 374.853641][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 374.863061][ T8520] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.871542][ T8520] usb 1-1: Product: syz [ 374.875808][ T8520] usb 1-1: Manufacturer: syz [ 374.883355][ T8520] usb 1-1: SerialNumber: syz [ 374.897515][ T8520] usb 1-1: config 0 descriptor?? [ 374.923362][ T4266] DVB: Unable to find symbol dib8000_attach() [ 374.929439][ T4266] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 374.972197][ T8678] delete_channel: no stack [ 374.990094][ T4266] rc_core: IR keymap rc-dib0700-rc5 not found [ 374.996173][ T4266] Registered IR keymap rc-empty [ 375.008791][ T4266] dvb-usb: could not initialize remote control. [ 375.010071][ T1109] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 375.016188][ T4266] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 375.064573][ T4172] usb 7-1: USB disconnect, device number 10 [ 375.208062][ T8520] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 375.290132][ T1109] usb 2-1: Using ep0 maxpacket: 32 [ 375.399591][ T4266] usb 4-1: USB disconnect, device number 16 [ 375.411016][ T1109] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 375.435604][ T1109] usb 2-1: config 0 has no interface number 0 [ 375.494466][ T4266] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected. [ 375.620188][ T1109] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 375.630733][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.639016][ T1109] usb 2-1: Product: syz [ 375.653529][ T1109] usb 2-1: Manufacturer: syz [ 375.673795][ T1109] usb 2-1: SerialNumber: syz [ 375.681346][ T1109] usb 2-1: config 0 descriptor?? [ 375.733795][ T1109] smsc95xx v2.0.0 [ 376.020129][ T8520] gspca_sunplus: reg_w_riv err -71 [ 376.025411][ T8520] sunplus: probe of 1-1:0.0 failed with error -71 [ 376.430866][ T8520] usb 1-1: USB disconnect, device number 11 [ 377.080238][ T8520] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 377.110254][ T1109] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 377.380266][ T8520] usb 4-1: Using ep0 maxpacket: 32 [ 377.467176][ T1109] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 377.502279][ T8520] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 377.520918][ T8520] usb 4-1: config 0 has no interface number 0 [ 377.527080][ T8520] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 377.540102][ T1109] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 377.740457][ T8520] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 377.922612][ T8720] batman_adv: batadv0: Adding interface: ipvlan2 [ 377.938917][ T8720] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.964229][ T8720] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 377.976198][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 377.986994][ T8520] usb 4-1: config 0 interface 126 has no altsetting 0 [ 378.081464][ T1109] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 378.145447][ T1109] usb 2-1: USB disconnect, device number 16 [ 378.151626][ T8731] fuse: Bad value for 'fd' [ 378.200091][ T8520] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 378.209142][ T8520] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.220072][ T8520] usb 4-1: Product: syz [ 378.224540][ T8520] usb 4-1: Manufacturer: syz [ 378.229242][ T8520] usb 4-1: SerialNumber: syz [ 378.238659][ T8520] usb 4-1: config 0 descriptor?? [ 378.272607][ T8708] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 378.304092][ T8708] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 378.353106][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.385149][ T1197] Bluetooth: (null): Invalid header checksum [ 378.430586][ T1197] Bluetooth: (null): Invalid header checksum [ 379.322186][ T8520] ir_usb 4-1:0.126: IR Dongle converter detected [ 379.421307][ T8520] usb 4-1: IRDA class descriptor not found, device not bound [ 379.624382][ T1109] usb 4-1: USB disconnect, device number 17 [ 380.563906][ T8763] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.574704][ T8763] tipc: Enabled bearer , priority 10 [ 380.717351][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.980097][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.983646][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 381.399413][ T8771] device syzkaller0 entered promiscuous mode [ 381.510091][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.590078][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 383.630327][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.670085][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 384.715582][ T8805] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 385.365716][ T8817] tipc: Started in network mode [ 385.371580][ T8817] tipc: Node identity 7f000001, cluster identity 4711 [ 385.398438][ T8817] tipc: Enabled bearer , priority 10 [ 385.710117][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.501148][ T1109] tipc: Node number set to 2130706433 [ 386.637071][ T4180] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 386.750105][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.790139][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.830087][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 389.968252][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.898386][ T8881] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 390.906338][ T8881] overlayfs: failed to set xattr on upper [ 390.912158][ T8881] overlayfs: ...falling back to index=off,metacopy=off. [ 390.919913][ T8881] overlayfs: maximum fs stacking depth exceeded [ 390.990171][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.043746][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.171724][ T8878] UBIFS error (pid: 8878): cannot open "./file0", error -22 [ 393.070119][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 393.380020][ T1109] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 394.278288][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 394.285746][ T1109] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 394.989644][ T1109] usb 1-1: config 0 has no interface number 0 [ 395.310077][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.920117][ T1109] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 395.935150][ T1109] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.970513][ T1109] usb 1-1: Product: syz [ 395.974696][ T1109] usb 1-1: Manufacturer: syz [ 396.016681][ T1109] usb 1-1: SerialNumber: syz [ 396.041093][ T1109] usb 1-1: config 0 descriptor?? [ 396.080166][ T1109] usb 1-1: can't set config #0, error -71 [ 396.090238][ T1109] usb 1-1: USB disconnect, device number 12 [ 396.217068][ T8946] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 396.350197][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.083816][ T8947] ALSA: mixer_oss: invalid OSS volume 'ELF' [ 397.120152][ T8947] ALSA: mixer_oss: invalid OSS volume 'Ô©6À~fõ`{îðÆÄÍXS¥Ô’j†ì?)]0žŽ¡\' [ 397.200870][ T8964] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 397.207911][ T8964] overlayfs: failed to set xattr on upper [ 397.213762][ T8964] overlayfs: ...falling back to index=off,metacopy=off. [ 397.221051][ T8964] overlayfs: maximum fs stacking depth exceeded [ 397.390096][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.801482][ T8947] ALSA: mixer_oss: invalid OSS volume 'ô²]qMˆ¦3³TóÝ=Ðöæ\S‚¯1å2$Ž®*' [ 398.774950][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.066746][ T4252] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.121273][ T8981] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 399.128227][ T8981] overlayfs: failed to set xattr on upper [ 399.134049][ T8981] overlayfs: ...falling back to index=off,metacopy=off. [ 399.141064][ T8981] overlayfs: maximum fs stacking depth exceeded [ 399.622861][ T4252] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.736436][ T4252] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.782755][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 399.790079][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.816386][ T4252] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.830231][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.889271][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.899033][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.907159][ T8984] device bridge_slave_0 entered promiscuous mode [ 400.921554][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.930661][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.938268][ T8984] device bridge_slave_1 entered promiscuous mode [ 401.550254][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 401.870067][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.027918][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.038774][ T4252] tipc: Disabling bearer [ 402.048584][ T4252] tipc: Left network mode [ 402.339682][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.406209][ T8984] team0: Port device team_slave_0 added [ 402.439303][ T8984] team0: Port device team_slave_1 added [ 402.603895][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.684936][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.735653][ T9017] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1289'. [ 402.740131][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.874481][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.881539][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.914228][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 403.553325][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.660800][ T4242] Bluetooth: hci4: command 0x041b tx timeout [ 403.950683][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 404.251864][ T8984] device hsr_slave_0 entered promiscuous mode [ 404.260975][ T8984] device hsr_slave_1 entered promiscuous mode [ 404.269840][ T8984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 404.290701][ T8984] Cannot create hsr debugfs directory [ 404.990133][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.893729][ T4242] Bluetooth: hci4: command 0x040f tx timeout [ 405.952382][ T8984] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 405.980275][ T8984] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 406.030083][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.203268][ T8984] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 406.567808][ T8984] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 406.869098][ T4252] device hsr_slave_0 left promiscuous mode [ 406.881973][ T4252] device hsr_slave_1 left promiscuous mode [ 406.922474][ T4252] device bridge_slave_1 left promiscuous mode [ 406.928812][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.939780][ T4252] device bridge_slave_0 left promiscuous mode [ 406.954726][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.000579][ T4252] device veth1_macvtap left promiscuous mode [ 407.029259][ T4252] device veth0_macvtap left promiscuous mode [ 407.050869][ T4252] device veth1_vlan left promiscuous mode [ 407.070243][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.073160][ T4252] device veth0_vlan left promiscuous mode [ 407.767706][ T4252] team0 (unregistering): Port device team_slave_1 removed [ 407.800909][ T4252] team0 (unregistering): Port device team_slave_0 removed [ 407.833895][ T4252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.865400][ T4252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.929752][ T9102] overlayfs: failed to resolve './file0': -2 [ 407.950041][ T4210] Bluetooth: hci4: command 0x0419 tx timeout [ 408.049901][ T4252] bond0 (unregistering): Released all slaves [ 408.110087][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.139611][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.220172][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 408.248021][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 408.272261][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.284003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 408.309140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 408.332674][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.339769][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.360283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 408.507072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 408.565903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 408.587988][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.595132][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.655703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 408.716092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 408.770463][ T9108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1311'. [ 408.790625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 408.840657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 408.906869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 409.150187][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 409.324169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 409.960771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.010811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.070519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.113534][ T8984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.151744][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 410.190081][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.282951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.326167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 410.489163][ T9150] xt_limit: Overflow, try lower: 1207959552/384 [ 410.687282][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.750520][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 410.760699][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.230219][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.880476][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.909787][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.940063][ T4177] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 411.973468][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 411.989816][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.031255][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.046176][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.070005][ T13] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 412.088412][ T8984] device veth0_vlan entered promiscuous mode [ 412.159188][ T8984] device veth1_vlan entered promiscuous mode [ 412.195801][ T4177] usb 2-1: Using ep0 maxpacket: 8 [ 412.221365][ T8984] device veth0_macvtap entered promiscuous mode [ 412.251223][ T8984] device veth1_macvtap entered promiscuous mode [ 412.270095][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.288830][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.301908][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 412.330591][ T4177] usb 2-1: config 2 has an invalid interface number: 241 but max is 0 [ 412.338876][ T4177] usb 2-1: config 2 has no interface number 0 [ 412.364764][ T4177] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.418931][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.538170][ T4177] usb 2-1: config 2 interface 241 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 412.601978][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.741284][ T4177] usb 2-1: config 2 interface 241 has no altsetting 0 [ 412.778419][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.908142][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 412.997643][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.058528][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.089981][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.106129][ T4177] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 413.115700][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.137682][ T4177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.150219][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 413.152222][ T4177] usb 2-1: Product: syz [ 413.167064][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.179139][ T4177] usb 2-1: Manufacturer: syz [ 413.188385][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.199645][ T4177] usb 2-1: SerialNumber: syz [ 413.212797][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.231449][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.261544][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.291719][ T4177] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected [ 413.311480][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.367728][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.387086][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.390225][ T13] usb 7-1: config 81 has an invalid interface number: 13 but max is 0 [ 413.418499][ T13] usb 7-1: config 81 has an invalid descriptor of length 0, skipping remainder of the config [ 413.511655][ T13] usb 7-1: config 81 has no interface number 0 [ 413.633368][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.670726][ T13] usb 7-1: config 81 interface 13 has no altsetting 0 [ 413.687830][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.723065][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.748274][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.798982][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.846458][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.860473][ T13] usb 7-1: New USB device found, idVendor=12d1, idProduct=0ec1, bcdDevice=29.23 [ 413.869525][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.899690][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.916048][ T13] usb 7-1: Product: syz [ 413.921357][ T4177] usb 2-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 413.934389][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.952266][ T4177] usb 2-1: USB disconnect, device number 17 [ 413.958717][ T13] usb 7-1: Manufacturer: syz [ 413.961817][ T4177] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 413.974373][ T4177] ti_usb_3410_5052 2-1:2.241: device disconnected [ 413.976491][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.990120][ T13] usb 7-1: SerialNumber: syz [ 414.011753][ T8984] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.024090][ T8984] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.040251][ T8984] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.049022][ T8984] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.065731][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 414.090863][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 414.350119][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 414.376043][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.419299][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.450793][ T13] qmi_wwan 7-1:81.13: bogus CDC Union: master=0, slave=1 [ 414.596735][ T13] qmi_wwan: probe of 7-1:81.13 failed with error -22 [ 414.884052][ T13] usb 7-1: USB disconnect, device number 11 [ 414.967007][ T4226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.390175][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.225570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.260092][ T4226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.285651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 416.430170][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.228601][ T9229] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 417.470137][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.483399][ T9248] sp0: Synchronizing with TNC [ 418.510061][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 419.550133][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 420.590103][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 421.630178][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 422.711435][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.053475][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 427.473872][ T9279] delete_channel: no stack [ 428.110178][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 428.882742][ T25] audit: type=1326 audit(2000000242.924:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 429.000774][ T9297] infiniband syz2: set active [ 429.005784][ T9297] infiniband syz2: added team_slave_1 [ 429.019409][ T9297] infiniband syz2: Couldn't open port 1 [ 429.146644][ T9297] RDS/IB: syz2: added [ 429.150164][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 429.151301][ T9297] smc: adding ib device syz2 with port count 1 [ 429.163985][ T9297] smc: ib device syz2 port 1 has pnetid [ 429.607584][ T25] audit: type=1326 audit(2000000242.924:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 429.688895][ T25] audit: type=1326 audit(2000000242.924:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 429.920446][ T25] audit: type=1326 audit(2000000242.924:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 430.613549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 430.785216][ T25] audit: type=1326 audit(2000000242.924:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 430.874862][ T25] audit: type=1326 audit(2000000242.924:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 430.982871][ T25] audit: type=1326 audit(2000000242.924:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 431.040300][ T25] audit: type=1326 audit(2000000242.924:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 431.630201][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 431.926601][ T25] audit: type=1326 audit(2000000242.924:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 432.670097][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 432.886267][ T25] audit: type=1326 audit(2000000242.934:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.3.1355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd64ab9d29 code=0x7ffc0000 [ 433.710176][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.750093][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 434.978574][ T4171] Bluetooth: hci5: sending frame failed (-49) [ 435.790145][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 436.112913][ T4226] Bluetooth: (null): Invalid header checksum [ 436.125312][ T4226] Bluetooth: (null): Invalid header checksum [ 436.221559][ T144] Bluetooth: (null): Invalid header checksum [ 436.332415][ T9] Bluetooth: (null): Invalid header checksum [ 436.830090][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 437.630075][ T13] Bluetooth: hci5: command 0x1003 tx timeout [ 437.709604][ T9413] Bluetooth: hci5: sending frame failed (-49) [ 437.870405][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 438.910099][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 439.279046][ T9410] chnl_net:caif_netlink_parms(): no params data found [ 439.720559][ T4172] Bluetooth: hci3: command 0x0409 tx timeout [ 439.793117][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.820420][ T4172] Bluetooth: hci5: command 0x1001 tx timeout [ 439.826532][ T9413] Bluetooth: hci5: sending frame failed (-49) [ 439.950144][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 440.072041][ T9410] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.150018][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.158130][ T9410] device bridge_slave_0 entered promiscuous mode [ 440.199200][ T9410] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.230138][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.238158][ T9410] device bridge_slave_1 entered promiscuous mode [ 440.413406][ T9410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.596438][ T9410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.893712][ T9410] team0: Port device team_slave_0 added [ 440.990078][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 441.019824][ T9410] team0: Port device team_slave_1 added [ 441.326941][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.349994][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.409103][ T9410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.444059][ T9410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.459984][ T9410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.512312][ T9410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.560789][ T9463] delete_channel: no stack [ 441.790126][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 441.797282][ T9410] device hsr_slave_0 entered promiscuous mode [ 441.804289][ T9410] device hsr_slave_1 entered promiscuous mode [ 441.811552][ T9410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.821735][ T9410] Cannot create hsr debugfs directory [ 441.870234][ T4242] Bluetooth: hci5: command 0x1009 tx timeout [ 442.030177][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 442.959102][ T9410] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 443.006866][ T9410] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 443.061967][ T9410] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 443.070075][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 443.100897][ T9410] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 443.162332][ T9489] tmpfs: Unknown parameter 'usrquota' [ 443.761512][ T4252] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.843470][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.870493][ T4242] Bluetooth: hci3: command 0x040f tx timeout [ 443.876897][ T4252] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.947900][ T9410] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.984311][ T9502] loop6: detected capacity change from 0 to 524287999 [ 443.998033][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 444.009451][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 444.017901][ C0] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 444.024684][ T9410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 444.038117][ C0] blk_update_request: I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 444.059420][ T9410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.070304][ C0] blk_update_request: I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 444.081312][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 444.100167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 444.109649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 444.117170][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 444.134800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 444.145908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 444.158949][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.166044][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.271073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 444.279745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.562746][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 445.672029][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.679144][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.781770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.807288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.842756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.851546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.860635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.869829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.878410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.886922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.895543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.904303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.913559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.925764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.936049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.950139][ T4441] Bluetooth: hci3: command 0x0419 tx timeout [ 445.962622][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1401'. [ 445.971823][ T9511] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 446.046417][ T4252] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.199590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.217105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 446.230851][ T9410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.353205][ T4252] tipc: Disabling bearer [ 446.367054][ T4252] tipc: Left network mode [ 446.590162][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 446.611851][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.627489][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.669088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 446.689195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.710272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.740958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.777790][ T9410] device veth0_vlan entered promiscuous mode [ 446.812654][ T9410] device veth1_vlan entered promiscuous mode [ 446.892389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.905623][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.932458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.962279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.000364][ T9410] device veth0_macvtap entered promiscuous mode [ 447.024983][ T9410] device veth1_macvtap entered promiscuous mode [ 447.518475][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.552611][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.561518][ T9558] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 447.561518][ T9558] [ 447.586363][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.617421][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.630161][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 447.646906][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.678124][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.706847][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.721866][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.732798][ T9563] virtio-fs: tag not found [ 447.745212][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.757678][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.803010][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.833600][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 447.958537][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 448.417614][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.441489][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.461825][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.629130][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.649559][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.670166][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 448.670601][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.689543][ T4259] Bluetooth: (null): Invalid header checksum [ 448.707613][ T4259] Bluetooth: (null): Invalid header checksum [ 448.730309][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.749735][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.780692][ T9410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.799031][ T4259] Bluetooth: (null): Invalid header checksum [ 448.816440][ T9410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.858014][ T9410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.904137][ T9] Bluetooth: (null): Invalid header checksum [ 448.928310][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 448.943532][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 448.980905][ T9410] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.154852][ T9410] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.206114][ T9410] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.215786][ T9410] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.710405][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.211372][ T4259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.219509][ T4259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.394548][ T4252] device hsr_slave_0 left promiscuous mode [ 450.750107][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 450.782877][ T4252] device hsr_slave_1 left promiscuous mode [ 450.808275][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.084076][ T4252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.130814][ T4252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.178886][ T4252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.218351][ T4252] device bridge_slave_1 left promiscuous mode [ 451.230164][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.268100][ T4252] device bridge_slave_0 left promiscuous mode [ 451.280307][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.304930][ T4252] device veth1_macvtap left promiscuous mode [ 451.343660][ T4252] device veth0_macvtap left promiscuous mode [ 451.356895][ T4252] device veth1_vlan left promiscuous mode [ 451.412269][ T4252] device veth0_vlan left promiscuous mode [ 451.611404][ T9632] syz.3.1426 (9632): drop_caches: 2 [ 451.634121][ T9632] syz.3.1426 (9632): drop_caches: 2 [ 451.870992][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.399072][ T4252] team0 (unregistering): Port device team_slave_1 removed [ 452.414825][ T4252] team0 (unregistering): Port device team_slave_0 removed [ 452.426988][ T4252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.439619][ T4252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.642739][ T4252] bond0 (unregistering): Released all slaves [ 452.910133][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 452.989053][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.702577][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.921390][ T4441] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 453.922091][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.950086][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 454.701328][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.990097][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.390045][ T4441] usb 8-1: Using ep0 maxpacket: 8 [ 455.510527][ T4441] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 455.554510][ T4441] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.660222][ T4441] usb 8-1: config 0 has no interface number 0 [ 455.666350][ T4441] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 455.723486][ T4441] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.770021][ T4441] usb 8-1: config 0 interface 52 has no altsetting 0 [ 455.850275][ T4441] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 455.869564][ T4441] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 455.879677][ T4441] usb 8-1: Manufacturer: syz [ 455.960362][ T4441] usb 8-1: config 0 descriptor?? [ 456.030100][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 456.037452][ T4441] usb 8-1: can't set config #0, error -71 [ 456.615583][ T4441] usb 8-1: USB disconnect, device number 2 [ 456.616289][ T9717] syz.7.1443 (9717): drop_caches: 2 [ 456.655476][ T9717] syz.7.1443 (9717): drop_caches: 2 [ 457.070415][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 457.110150][ T4266] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 457.640383][ T4266] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 457.700092][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.811005][ T4266] usb 1-1: config 0 descriptor?? [ 457.861259][ T4266] cp210x 1-1:0.0: cp210x converter detected [ 458.152535][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 458.429311][ T4266] usb 1-1: cp210x converter now attached to ttyUSB0 [ 458.638429][ T4441] usb 1-1: USB disconnect, device number 13 [ 458.761012][ T4441] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 458.827661][ T4441] cp210x 1-1:0.0: device disconnected [ 459.230116][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.270271][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 460.410618][ T9772] syz.1.1456 (9772): drop_caches: 2 [ 460.433924][ T9772] syz.1.1456 (9772): drop_caches: 2 [ 460.461615][ T9773] fuse: Bad value for 'fd' [ 461.310099][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 461.681753][ T9779] hugetlbfs: Bad value 'g' for mount option 'nr_inodes' [ 461.681753][ T9779] [ 461.777207][ T9785] syz.1.1469 (9785): drop_caches: 2 [ 461.785527][ T9785] syz.1.1469 (9785): drop_caches: 2 [ 462.350062][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 462.991170][ T9811] ax25_connect(): syz.7.1464 uses autobind, please contact jreuter@yaina.de [ 463.390391][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 464.893925][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 465.102977][ T9842] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1484'. [ 465.132988][ T9845] syz.8.1474 sent an empty control message without MSG_MORE. [ 465.176343][ T9842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1484'. [ 465.584520][ T9857] syz.1.1477 (9857): drop_caches: 2 [ 465.596188][ T9857] syz.1.1477 (9857): drop_caches: 2 [ 465.950147][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 466.990379][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 467.100764][ T4210] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 467.480223][ T4210] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 467.499662][ T4210] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 467.613156][ T4210] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 467.920396][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.030098][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 468.140433][ T9876] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 468.376301][ T4210] usb 1-1: USB disconnect, device number 14 [ 468.722006][ T4365] udevd[4365]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.070092][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 469.247170][ T9933] syz.3.1491 (9933): drop_caches: 2 [ 469.263621][ T9933] syz.3.1491 (9933): drop_caches: 2 [ 469.628385][ T25] kauditd_printk_skb: 6 callbacks suppressed [ 469.628397][ T25] audit: type=1326 audit(2000000283.874:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 469.657172][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.893435][ T25] audit: type=1326 audit(2000000283.914:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 469.916172][ T25] audit: type=1326 audit(2000000283.964:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 469.938332][ C0] vkms_vblank_simulate: vblank timer overrun [ 469.971257][ T25] audit: type=1326 audit(2000000283.964:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 470.006600][ T9947] netlink: 'syz.3.1497': attribute type 1 has an invalid length. [ 470.110103][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 470.153538][ T25] audit: type=1326 audit(2000000283.964:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 470.175693][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.450084][ T25] audit: type=1326 audit(2000000283.964:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 470.472698][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.581374][ T25] audit: type=1326 audit(2000000283.964:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 470.680766][ T25] audit: type=1326 audit(2000000283.964:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 470.749765][ T25] audit: type=1326 audit(2000000283.964:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 470.772051][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.859236][ T25] audit: type=1326 audit(2000000283.964:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.1.1493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 471.150235][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 471.864242][ T9979] syz.0.1504 (9979): drop_caches: 2 [ 471.876930][ T9979] syz.0.1504 (9979): drop_caches: 2 [ 472.190092][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.109001][ T4214] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 473.230373][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 473.410614][ T4214] usb 1-1: Using ep0 maxpacket: 8 [ 473.600143][ T4214] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 473.645822][ T4214] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 473.787794][ T4214] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.790157][ T7] Bluetooth: hci3: command 0x0405 tx timeout [ 473.825093][ T4214] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.845302][ T4214] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.870246][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.930040][ T4210] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 474.170031][ T4210] usb 8-1: Using ep0 maxpacket: 16 [ 474.175074][ T4214] usb 1-1: GET_CAPABILITIES returned 0 [ 474.188619][ T4214] usbtmc 1-1:16.0: can't read capabilities [ 474.221736][ T4266] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 474.270136][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 474.300092][ T4210] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 474.331337][ T4210] usb 8-1: config 0 has no interface number 0 [ 474.337763][ T4210] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 474.368923][ T4210] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 474.444086][ T4242] usb 1-1: USB disconnect, device number 15 [ 474.540155][ T4210] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 474.560111][ T4266] usb 2-1: Using ep0 maxpacket: 32 [ 474.580052][ T4210] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 474.588337][ T4210] usb 8-1: Product: syz [ 474.592620][ T4210] usb 8-1: SerialNumber: syz [ 474.610765][ T4210] usb 8-1: config 0 descriptor?? [ 474.651626][ T4210] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 474.676903][ T4210] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input14 [ 474.690447][ T4266] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 474.724699][ T4266] usb 2-1: config 0 has no interface number 0 [ 474.936084][T10008] udc-core: couldn't find an available UDC or it's busy [ 474.988033][T10008] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 475.010769][ T4266] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 475.026007][ T4266] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.042352][ T4266] usb 2-1: Product: syz [ 475.055996][ T4266] usb 2-1: Manufacturer: syz [ 475.126200][ T4266] usb 2-1: SerialNumber: syz [ 475.147630][ T4266] usb 2-1: config 0 descriptor?? [ 475.203184][ T4177] usb 8-1: USB disconnect, device number 3 [ 475.220206][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 475.227695][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 475.278546][T10047] syz.0.1515 (10047): drop_caches: 2 [ 475.310288][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 475.312896][T10047] syz.0.1515 (10047): drop_caches: 2 [ 475.434143][ T4266] smsc95xx v2.0.0 [ 475.669435][ T4177] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 476.284449][ T4266] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 476.308919][T10053] Invalid ELF header magic: != ELF [ 476.317931][ T4266] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 476.350134][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 476.496465][T10063] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1520'. [ 476.502388][ T4266] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 476.516439][ T4266] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 476.532809][ T4266] usb 2-1: USB disconnect, device number 18 [ 476.556035][T10063] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1520'. [ 476.864111][ T4259] Bluetooth: (null): Invalid header checksum [ 476.954135][ T4259] Bluetooth: (null): Invalid header checksum [ 477.157444][ T4259] Bluetooth: (null): Invalid header checksum [ 477.290082][ T4259] Bluetooth: (null): Invalid header checksum [ 477.296214][ T4259] Bluetooth: (null): Invalid header checksum [ 477.390090][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 477.540073][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1525'. [ 477.663533][T10089] syz.7.1526 (10089): drop_caches: 2 [ 477.673629][T10089] syz.7.1526 (10089): drop_caches: 2 [ 478.430309][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 479.165381][ T4214] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 479.591430][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.389060][ T4214] usb 2-1: Using ep0 maxpacket: 32 [ 480.670104][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.170321][ T4214] usb 2-1: config index 0 descriptor too short (expected 27, got 20) [ 481.188664][ T4214] usb 2-1: config 9 has an invalid interface number: 28 but max is 1 [ 481.218648][ T4214] usb 2-1: config 9 has an invalid descriptor of length 9, skipping remainder of the config [ 481.231025][ T4214] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 481.292941][ T4214] usb 2-1: config 9 has no interface number 0 [ 481.367494][T10145] syz.7.1538 (10145): drop_caches: 2 [ 481.376588][T10145] syz.7.1538 (10145): drop_caches: 2 [ 481.520767][ T4214] usb 2-1: New USB device found, idVendor=0733, idProduct=2221, bcdDevice=86.db [ 481.569816][ T4214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.642273][ T4214] usb 2-1: Product: syz [ 481.669790][ T4214] usb 2-1: Manufacturer: syz [ 481.685096][ T4214] usb 2-1: SerialNumber: syz [ 481.710089][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 481.787124][ T4214] gspca_main: sunplus-2.14.0 probing 0733:2221 [ 481.970070][ T4214] gspca_sunplus: reg_r err -71 [ 481.974899][ T4214] sunplus: probe of 2-1:9.28 failed with error -71 [ 481.988272][ T4214] usb 2-1: USB disconnect, device number 19 [ 482.206499][T10162] fuse: root generation should be zero [ 482.750085][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 483.600030][ T4212] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 483.790428][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.000023][ T4212] usb 9-1: Using ep0 maxpacket: 8 [ 484.640595][ T4212] usb 9-1: config 6 has an invalid interface number: 2 but max is 0 [ 484.657199][ T4212] usb 9-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 484.830109][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 484.958900][ T4212] usb 9-1: config 6 has no interface number 0 [ 484.965193][ T4212] usb 9-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 484.975084][ T4212] usb 9-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.082200][T10241] Bluetooth: (null): Invalid header checksum [ 485.158880][T10241] Bluetooth: (null): Invalid header checksum [ 485.180311][ T4212] usb 9-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 485.189371][ T4212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.205250][T10241] Bluetooth: (null): Invalid header checksum [ 485.219448][ T4212] usb 9-1: Product: syz [ 485.254307][T10241] Bluetooth: (null): Invalid header checksum [ 485.254474][ T4212] usb 9-1: Manufacturer: syz [ 485.270677][T10241] Bluetooth: (null): Invalid header checksum [ 485.285325][ T4212] usb 9-1: SerialNumber: syz [ 485.295440][T10241] Bluetooth: (null): Invalid header checksum [ 485.311829][T10241] Bluetooth: (null): Invalid header checksum [ 485.383422][ T4212] hso 9-1:6.2: Failed to find INT IN ep [ 485.870093][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 485.903065][ T4212] usb 9-1: USB disconnect, device number 2 [ 486.048274][T10275] syz.0.1551 (10275): drop_caches: 2 [ 486.083269][T10275] syz.0.1551 (10275): drop_caches: 2 [ 486.381587][T10262] block nbd7: shutting down sockets [ 486.910360][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 487.950375][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.240019][T10317] Cannot find add_set index 0 as target [ 489.761107][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 489.776125][ T4521] Bluetooth: (null): Invalid header checksum [ 489.884191][ T4521] Bluetooth: (null): Invalid header checksum [ 490.026038][ T4521] Bluetooth: (null): Invalid header checksum [ 490.181021][T10321] syz.0.1563 (10321): drop_caches: 2 [ 490.210674][T10321] syz.0.1563 (10321): drop_caches: 2 [ 490.477946][T10329] xt_hashlimit: size too large, truncated to 1048576 [ 490.830088][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 491.870247][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 492.585634][T10323] dhcpcd-run-hook (10323) used greatest stack depth: 18848 bytes left [ 492.640156][ T4210] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 492.880054][ T4210] usb 1-1: Using ep0 maxpacket: 16 [ 492.910154][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 493.240497][ T4210] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 493.276346][ T4210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.298790][ T4210] usb 1-1: Product: syz [ 493.313006][ T4210] usb 1-1: Manufacturer: syz [ 493.328341][ T4210] usb 1-1: SerialNumber: syz [ 493.343325][ T4210] usb 1-1: config 0 descriptor?? [ 493.391240][ T4210] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 493.411069][ T4210] usb 1-1: Detected FT232H [ 493.610072][ T4210] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 493.950400][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 494.104147][ T4210] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 495.401702][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 495.489534][ T4210] usb 1-1: USB disconnect, device number 16 [ 495.604342][ T4210] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 495.620021][ T4212] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 495.643453][ T4210] ftdi_sio 1-1:0.0: device disconnected [ 495.835380][T10404] syz.0.1578 (10404): drop_caches: 2 [ 495.842405][T10404] syz.0.1578 (10404): drop_caches: 2 [ 495.860370][ T4266] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 496.160177][ T4266] usb 4-1: Using ep0 maxpacket: 8 [ 496.283196][ T4212] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 496.292774][ T4266] usb 4-1: config 32 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.316579][ T4212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.334942][ T4266] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 496.365959][ T4212] usb 9-1: Product: syz [ 496.382600][ T4212] usb 9-1: Manufacturer: syz [ 496.389192][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.403163][ T4212] usb 9-1: SerialNumber: syz [ 496.427717][ T4212] usb 9-1: config 0 descriptor?? [ 496.430118][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 496.590326][ T4177] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 496.942527][ T4212] usb 9-1: USB disconnect, device number 3 [ 497.040918][ T4177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 497.067041][ T4177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.091321][ T4177] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 497.101338][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.112470][ T4177] usb 1-1: config 0 descriptor?? [ 497.118777][T10398] dccp_xmit_packet: Payload too large (65475) for featneg. [ 497.171970][T10417] netlink: 'syz.1.1583': attribute type 9 has an invalid length. [ 497.202517][ T25] kauditd_printk_skb: 7 callbacks suppressed [ 497.202531][ T25] audit: type=1326 audit(2000000311.494:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.1.1583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x0 [ 497.440237][ T4365] udevd[4365]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.457139][ T4266] usb 4-1: string descriptor 0 read error: -71 [ 497.464732][ T4266] hub 4-1:32.0: bad descriptor, ignoring hub [ 497.470082][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 497.471220][ T4266] hub: probe of 4-1:32.0 failed with error -5 [ 498.240331][ T4266] usb 4-1: USB disconnect, device number 18 [ 498.247681][ T4177] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 498.255117][ T4177] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 498.262377][ T4177] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 498.269373][ T4177] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 498.276664][ T4177] cougar 0003:060B:700A.000D: unknown main item tag 0x0 [ 498.291878][ T4177] cougar 0003:060B:700A.000D: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 498.308993][ T4177] usb 1-1: USB disconnect, device number 17 [ 498.510108][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 498.852637][T10446] syz.8.1590 (10446): drop_caches: 2 [ 498.858458][T10446] syz.8.1590 (10446): drop_caches: 2 [ 499.088594][T10451] sg_write: process 997 (syz.3.1585) changed security contexts after opening file descriptor, this is not allowed. [ 499.570386][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 499.662357][ T4226] Bluetooth: (null): Invalid header checksum [ 499.668565][ T4226] Bluetooth: (null): Invalid header checksum [ 500.590682][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.187552][T10489] netlink: 'syz.7.1596': attribute type 9 has an invalid length. [ 501.240618][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.514406][T10470] nfs4: Unknown parameter '»éd05Þ{—dp' [ 501.630127][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 501.666730][ T25] audit: type=1326 audit(2000000315.954:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10485 comm="syz.7.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e593ebd29 code=0x0 [ 501.688457][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.716616][T10470] xt_CT: No such helper "snmp_trap" [ 502.670964][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.710177][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 503.867897][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1600'. [ 504.688994][ T150] nbd_handle_cmd: 2 callbacks suppressed [ 504.689017][ T150] block nbd7: Attempted send on invalid socket [ 504.700919][ T150] blk_update_request: I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.713130][ T150] block nbd7: Attempted send on invalid socket [ 504.720114][ T150] blk_update_request: I/O error, dev nbd7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.731830][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 504.744882][ T150] block nbd7: Attempted send on invalid socket [ 504.750113][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 504.751323][ T150] blk_update_request: I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.768968][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 504.884057][T10526] syz.8.1604 (10526): drop_caches: 2 [ 504.890870][T10526] syz.8.1604 (10526): drop_caches: 2 [ 504.903159][ T150] block nbd7: Attempted send on invalid socket [ 504.909414][ T150] blk_update_request: I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.922367][ T150] block nbd7: Attempted send on invalid socket [ 504.928618][ T150] blk_update_request: I/O error, dev nbd7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.939699][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 504.951044][ T150] block nbd7: Attempted send on invalid socket [ 504.957259][ T150] blk_update_request: I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 504.968418][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 504.982727][ T150] block nbd7: Attempted send on invalid socket [ 504.989203][ T150] blk_update_request: I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.003137][ T150] block nbd7: Attempted send on invalid socket [ 505.009361][ T150] blk_update_request: I/O error, dev nbd7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.020635][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 505.031686][ T150] block nbd7: Attempted send on invalid socket [ 505.037928][ T150] blk_update_request: I/O error, dev nbd7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.049114][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 505.061844][ T150] block nbd7: Attempted send on invalid socket [ 505.068151][ T150] blk_update_request: I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.081288][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 505.092696][T10514] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 505.102450][T10514] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 505.790387][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 506.834543][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 507.870120][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 508.910795][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 509.950094][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 510.240469][T10561] netlink: 'syz.0.1612': attribute type 9 has an invalid length. [ 510.261656][ T25] audit: type=1326 audit(2000000324.554:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.0.1612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ec9ebad29 code=0x0 [ 510.349365][T10575] syz.0.1616 (10575): drop_caches: 2 [ 510.357877][T10575] syz.0.1616 (10575): drop_caches: 2 [ 510.403899][T10577] device gretap0 entered promiscuous mode [ 510.419442][T10580] netlink: 8180 bytes leftover after parsing attributes in process `syz.0.1618'. [ 510.424412][T10577] device vlan2 entered promiscuous mode [ 510.990071][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.030282][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 512.100077][ T4441] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 512.360010][ T4441] usb 9-1: Using ep0 maxpacket: 16 [ 512.480219][ T4441] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 512.509772][ T4441] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.538504][ T4441] usb 9-1: config 0 descriptor?? [ 512.591862][ T4441] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 513.070088][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.110079][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 514.630001][ T4441] gspca_sonixj: i2c_w8 err -71 [ 514.660177][ T4441] sonixj: probe of 9-1:0.0 failed with error -71 [ 514.683190][ T4441] usb 9-1: USB disconnect, device number 4 [ 515.150091][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.126327][T10685] nfs4: Unknown parameter '»éd05Þ{—dp' [ 516.190092][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 516.193985][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1629'. [ 516.314221][T10685] xt_CT: No such helper "snmp_trap" [ 517.230106][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.270113][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 518.610108][T10727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1637'. [ 518.632101][ T1109] Bluetooth: hci5: command 0x0409 tx timeout [ 519.170925][T10692] chnl_net:caif_netlink_parms(): no params data found [ 519.310086][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 519.362611][T10752] netlink: 'syz.0.1643': attribute type 10 has an invalid length. [ 519.440545][T10752] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 519.602154][T10692] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.626823][T10692] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.641385][T10692] device bridge_slave_0 entered promiscuous mode [ 519.649756][T10692] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.656987][T10692] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.680098][T10692] device bridge_slave_1 entered promiscuous mode [ 519.826618][T10692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.870565][ T1109] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 519.893276][T10692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.011953][T10692] team0: Port device team_slave_0 added [ 520.093379][T10692] team0: Port device team_slave_1 added [ 520.125750][ T1109] usb 1-1: Using ep0 maxpacket: 16 [ 520.142477][T10692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.159987][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.185901][ C1] vkms_vblank_simulate: vblank timer overrun [ 520.211011][T10692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.291100][ T1109] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.350132][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 520.441366][T10692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.468775][ T1109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.483717][ T1109] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 15 [ 520.494354][ T1109] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.516383][T10692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.557232][T10692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.600250][ T1109] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 520.609301][ T1109] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 520.669241][ T1109] usb 1-1: Manufacturer: syz [ 521.315071][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 521.351067][ T1109] usb 1-1: config 0 descriptor?? [ 521.390085][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 521.445329][ T4471] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.565965][ T4471] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.604346][T10692] device hsr_slave_0 entered promiscuous mode [ 521.651305][T10692] device hsr_slave_1 entered promiscuous mode [ 521.677885][T10692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.735390][T10692] Cannot create hsr debugfs directory [ 521.775209][ T4471] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.790240][ T1109] rc_core: IR keymap rc-hauppauge not found [ 521.800033][ T1109] Registered IR keymap rc-empty [ 521.820050][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 521.880150][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 521.920566][ T1109] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 521.957499][ T1109] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 522.100129][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.160119][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.280133][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.344854][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.420231][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.430036][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 522.480096][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.480737][ T4471] tipc: Disabling bearer [ 522.514401][ T4471] tipc: Left network mode [ 522.536932][T10692] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 522.540142][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.578575][T10692] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 522.607942][T10692] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 522.620115][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.660106][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.668930][T10692] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 522.700059][ T1109] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 522.741576][ T1109] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 522.769366][ T1109] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 522.899536][T10692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.960605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.977860][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.020363][T10692] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.053577][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.073591][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.110190][T10244] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.117301][T10244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.209509][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.238308][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.279470][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.308897][T10244] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.316008][T10244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.376337][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.446323][ T4210] Bluetooth: hci5: command 0x040f tx timeout [ 523.467764][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.500852][ T4210] usb 1-1: USB disconnect, device number 18 [ 523.729511][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.078304][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.172843][T10808] nvme_fabrics: missing parameter 'transport=%s' [ 524.177106][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.179503][T10808] nvme_fabrics: missing parameter 'nqn=%s' [ 524.188246][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.279828][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.306841][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.486862][T10692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 524.505054][T10692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.553685][ T4210] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 524.837213][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.894051][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.983492][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.460170][ T4210] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 525.479601][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.589478][ T4210] usb 1-1: config 0 descriptor?? [ 525.600172][ T1109] Bluetooth: hci5: command 0x0419 tx timeout [ 525.641638][ T4210] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 526.386577][T10834] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1658'. [ 526.396014][T10834] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1658'. [ 526.519003][T10692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.565704][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 526.618524][ T4259] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 526.943290][ T4471] device hsr_slave_0 left promiscuous mode [ 526.989502][ T4471] device hsr_slave_1 left promiscuous mode [ 527.035360][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.087268][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.127624][ T4471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.169543][ T4471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.215008][ T4471] device bridge_slave_1 left promiscuous mode [ 527.241759][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.315352][ T4471] device bridge_slave_0 left promiscuous mode [ 527.353030][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.377525][ T4471] rdma_rxe: ignoring netdev event = 10 for team_slave_1 [ 527.421723][ T4471] device veth1_vlan left promiscuous mode [ 527.427615][ T4471] device veth0_vlan left promiscuous mode [ 527.549457][ T4210] gp8psk: usb in 128 operation failed. [ 527.570130][ T4210] gp8psk: usb in 137 operation failed. [ 527.571784][T10859] netlink: 'syz.8.1661': attribute type 1 has an invalid length. [ 527.575645][ T4210] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 527.611603][ T4471] rdma_rxe: ignoring netdev event = 27 for team_slave_1 [ 527.620553][ T4210] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 527.638910][ T4210] usb 1-1: media controller created [ 527.728230][ T4471] infiniband syz2: set down [ 527.813083][ T4210] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.367068][ T4210] gp8psk_fe: Frontend attached [ 528.372408][ T4210] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 528.388165][ T4210] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 528.510077][ T4210] gp8psk: usb in 138 operation failed. [ 528.518084][ T4210] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 528.561852][ T4210] gp8psk: found Genpix USB device pID = 203 (hex) [ 528.612176][ T4210] usb 1-1: USB disconnect, device number 19 [ 528.715779][ T4210] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 528.846385][ T4471] rdma_rxe: ignoring netdev event = 27 for team_slave_1 [ 528.867528][T10873] xt_CT: No such helper "snmp_trap" [ 528.873490][ T4471] rdma_rxe: ignoring netdev event = 26 for team_slave_1 [ 528.899496][ T4471] rdma_rxe: ignoring netdev event = 21 for team_slave_1 [ 528.910950][ T4177] Bluetooth: hci4: command 0x0406 tx timeout [ 528.975893][ T4471] rdma_rxe: ignoring netdev event = 9 for team_slave_1 [ 528.997848][ T4471] rdma_rxe: ignoring netdev event = 8 for team_slave_1 [ 529.165765][ T4471] team0 (unregistering): Port device team_slave_1 removed [ 529.178955][ T4259] smc: removing ib device syz2 [ 529.191062][ T4471] team0 (unregistering): Port device team_slave_0 removed [ 529.214613][ T4471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.253568][ T4471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.551772][ T4471] bond0 (unregistering): Released all slaves [ 529.926734][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 529.961298][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 530.025650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 530.055901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 530.096660][T10692] device veth0_vlan entered promiscuous mode [ 530.201485][T10692] device veth1_vlan entered promiscuous mode [ 530.299233][T10692] device veth0_macvtap entered promiscuous mode [ 530.352839][T10692] device veth1_macvtap entered promiscuous mode [ 530.464599][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 530.476102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 530.488351][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 530.557842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 530.566230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 530.574955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 530.583760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 530.596480][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.607389][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.617539][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.628920][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.630277][ T4214] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 530.639351][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.657162][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.667480][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 530.679022][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.690984][T10692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.700057][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 530.711255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 530.722042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 530.741325][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.765694][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.792472][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.809243][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.822159][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.833511][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.843764][T10692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 530.932555][T10692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 530.994605][T10692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.066435][T10692] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.159326][T10692] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.193312][T10692] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.251480][T10692] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.330038][ T4214] usb 8-1: Using ep0 maxpacket: 8 [ 531.401001][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 531.429123][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 531.551823][ T4214] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 531.595273][ T4214] usb 8-1: config 0 has no interface number 0 [ 531.636615][ T4214] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 531.802152][ T4214] usb 8-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 531.968988][T10250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.980639][ T4214] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.014296][T10250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.130668][ T4214] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 532.150127][ T4214] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.240598][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 532.290380][ T4214] usb 8-1: config 0 descriptor?? [ 532.365682][T10241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.388011][T10241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.397972][ T4214] ldusb 8-1:0.55: Interrupt in endpoint not found [ 532.417260][T10244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 532.577393][ T4211] usb 8-1: USB disconnect, device number 4 [ 534.755695][T10971] overlayfs: failed to get inode (-116) [ 534.770224][T10971] overlayfs: failed to get inode (-116) [ 535.292699][T10974] overlayfs: failed to get inode (-116) [ 535.365834][T10974] overlayfs: failed to get inode (-116) [ 535.666911][T10250] Bluetooth: (null): Invalid header checksum [ 535.688813][T10250] Bluetooth: (null): Invalid header checksum [ 536.840513][ T7] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 537.090163][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 537.210506][ T7] usb 1-1: config 1 has an invalid interface number: 58 but max is 0 [ 537.239076][ T7] usb 1-1: config 1 has no interface number 0 [ 537.269404][ T7] usb 1-1: config 1 interface 58 has no altsetting 0 [ 537.450396][ T7] usb 1-1: New USB device found, idVendor=0499, idProduct=fe5f, bcdDevice=11.77 [ 537.479995][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.508422][ T7] usb 1-1: Product: syz [ 537.513313][ T7] usb 1-1: Manufacturer: syz [ 537.518030][ T7] usb 1-1: SerialNumber: syz [ 537.906450][ T8520] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 538.311144][ T7] usb 1-1: USB disconnect, device number 20 [ 538.322790][T10426] udevd[10426]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.58/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.435941][ T8520] usb 8-1: Using ep0 maxpacket: 8 [ 538.898160][T11037] input: syz1 as /devices/virtual/input/input16 [ 538.960105][ T8520] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 538.975316][ T8520] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.006210][ T8520] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.034855][ T8520] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.060589][T11047] tipc: Enabled bearer , priority 10 [ 539.120043][ T8520] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 539.131938][T11052] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 539.194011][ T8520] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.200072][ T4266] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 541.260253][ T4266] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.290269][ T4266] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 541.330779][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.397121][ T4266] usb 1-1: config 0 descriptor?? [ 541.433910][ T21] Bluetooth: hci5: command 0x0405 tx timeout [ 541.446425][ T144] Bluetooth: (null): Invalid header checksum [ 541.474336][ T4266] pwc: Askey VC010 type 2 USB webcam detected. [ 541.773736][T11103] binder: 11102:11103 ioctl c0306201 20000680 returned -14 [ 541.920603][ T4266] pwc: recv_control_msg error -32 req 02 val 2b00 [ 541.980361][ T4266] pwc: recv_control_msg error -32 req 02 val 2700 [ 542.063309][ T8520] usb 8-1: usb_control_msg returned -71 [ 542.069257][ T8520] usbtmc 8-1:16.0: can't read capabilities [ 542.926843][ T4266] pwc: recv_control_msg error -32 req 02 val 2c00 [ 542.967980][ T8520] usb 8-1: USB disconnect, device number 5 [ 542.990448][ T4266] pwc: recv_control_msg error -32 req 04 val 1000 [ 543.070364][ T4266] pwc: recv_control_msg error -32 req 04 val 1300 [ 543.200680][ T4266] pwc: recv_control_msg error -32 req 04 val 1400 [ 543.490058][ T4266] pwc: recv_control_msg error -71 req 02 val 2000 [ 543.510164][ T4266] pwc: recv_control_msg error -71 req 02 val 2100 [ 543.530071][ T4266] pwc: recv_control_msg error -71 req 04 val 1500 [ 543.553122][ T4266] pwc: recv_control_msg error -71 req 02 val 2500 [ 543.622331][ T4266] pwc: recv_control_msg error -71 req 02 val 2400 [ 543.640449][ T4266] pwc: recv_control_msg error -71 req 02 val 2600 [ 543.670218][ T4266] pwc: recv_control_msg error -71 req 02 val 2900 [ 543.690419][ T4266] pwc: recv_control_msg error -71 req 02 val 2800 [ 543.720304][ T4266] pwc: recv_control_msg error -71 req 04 val 1100 [ 543.750318][ T4266] pwc: recv_control_msg error -71 req 04 val 1200 [ 544.165730][ T4266] pwc: Registered as video103. [ 544.204090][ T4266] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 544.234007][ T4266] usb 1-1: USB disconnect, device number 21 [ 544.437004][T11149] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 544.567047][T11158] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 548.412906][ T4226] Bluetooth: (null): Invalid header checksum [ 548.424547][ T4226] Bluetooth: (null): Invalid header checksum [ 549.481053][ T1106] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 549.632079][T11122] Bluetooth: hci1: command 0x1003 tx timeout [ 549.663768][ T4182] Bluetooth: hci1: sending frame failed (-49) [ 550.320103][ T1106] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 550.329163][ T1106] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.337521][ T1106] usb 9-1: Product: syz [ 550.341961][ T1106] usb 9-1: Manufacturer: syz [ 550.349007][ T1106] usb 9-1: SerialNumber: syz [ 550.419408][ T1106] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 551.390107][ T1106] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 551.665182][T11197] usb 9-1: USB disconnect, device number 5 [ 551.720066][T11122] Bluetooth: hci1: command 0x1001 tx timeout [ 551.726157][ T4182] Bluetooth: hci1: sending frame failed (-49) [ 552.520124][ T1106] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 552.546620][ T1106] ath9k_htc: Failed to initialize the device [ 552.586652][T11197] usb 9-1: ath9k_htc: USB layer deinitialized [ 554.195042][ T4177] Bluetooth: hci1: command 0x1009 tx timeout [ 555.272287][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1760'. [ 558.944356][ T25] audit: type=1326 audit(2000000373.234:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 559.267651][ T25] audit: type=1326 audit(2000000373.274:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 559.611742][T11354] batman_adv: batadv0: Adding interface: ipvlan2 [ 559.618153][T11354] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.643458][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.649497][T11354] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 560.627785][ T25] audit: type=1326 audit(2000000373.274:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 560.774923][ T25] audit: type=1326 audit(2000000373.274:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 560.775333][T11364] openvswitch: netlink: Message has 4 unknown bytes. [ 560.803135][ T25] audit: type=1326 audit(2000000373.274:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 560.826444][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.864082][ T25] audit: type=1326 audit(2000000373.274:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 561.107249][ T25] audit: type=1326 audit(2000000373.274:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 561.129526][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.140678][T11363] device bridge1 entered promiscuous mode [ 561.236561][ T25] audit: type=1326 audit(2000000373.274:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 561.590274][ T25] audit: type=1326 audit(2000000373.274:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 562.371187][ T25] audit: type=1326 audit(2000000373.274:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.1.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04dd4f7d29 code=0x7ffc0000 [ 562.679285][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.690314][T11363] team0: Port device bridge1 added [ 563.352540][ T4242] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 564.460096][ T4242] usb 8-1: Using ep0 maxpacket: 16 [ 564.864776][T11197] Bluetooth: hci3: command 0x0406 tx timeout [ 564.880518][ T4242] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 564.977500][T11438] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1497 [ 564.987585][T11438] in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 11438, name: syz.8.1799 [ 564.996692][T11438] 1 lock held by syz.8.1799/11438: [ 565.001799][T11438] #0: ffffffff8cb456d8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 565.011571][T11438] irq event stamp: 876 [ 565.015629][T11438] hardirqs last enabled at (875): [] finish_lock_switch+0x8f/0x100 [ 565.025174][T11438] hardirqs last disabled at (876): [] _raw_spin_lock_irq+0xa9/0x110 [ 565.034722][T11438] softirqs last enabled at (802): [] ipv6_setsockopt+0x2f1f/0x4380 [ 565.044266][T11438] softirqs last disabled at (798): [] release_sock+0x2c/0x1c0 [ 565.053298][T11438] Preemption disabled at: [ 565.053308][T11438] [<0000000000000000>] 0x0 [ 565.062032][T11438] CPU: 1 PID: 11438 Comm: syz.8.1799 Not tainted 5.15.175-syzkaller #0 [ 565.070269][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 565.080319][T11438] Call Trace: [ 565.083595][T11438] [ 565.086523][T11438] dump_stack_lvl+0x1e3/0x2d0 [ 565.091203][T11438] ? ipv6_setsockopt+0x2f1f/0x4380 [ 565.096320][T11438] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 565.101960][T11438] ? panic+0x860/0x860 [ 565.106051][T11438] ___might_sleep+0x547/0x6a0 [ 565.110747][T11438] ? __might_sleep+0xc0/0xc0 [ 565.115357][T11438] down_read+0x21/0x2e0 [ 565.119514][T11438] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 565.124975][T11438] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 565.130271][T11438] ? kernfs_find_ns+0x500/0x500 [ 565.135130][T11438] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 565.141293][T11438] cgroup_get_from_path+0x5c/0x2e0 [ 565.146417][T11438] cgroup_mt_check_v1+0x1a0/0x2b0 [ 565.151446][T11438] xt_check_match+0x363/0xa30 [ 565.156128][T11438] ? xt_find_match+0x6d/0x200 [ 565.160808][T11438] ? mutex_unlock+0x10/0x10 [ 565.165317][T11438] ? xt_check_proc_name+0x110/0x110 [ 565.170541][T11438] ? xt_find_match+0x1cf/0x200 [ 565.175320][T11438] translate_table+0x1669/0x2320 [ 565.180288][T11438] ? ip6t_register_table+0x7b0/0x7b0 [ 565.185587][T11438] ? __might_fault+0xb8/0x110 [ 565.190273][T11438] ? __lock_acquire+0x1ff0/0x1ff0 [ 565.195316][T11438] ? _copy_from_user+0x10f/0x170 [ 565.200259][T11438] ? copy_from_sockptr_offset+0x6b/0xa0 [ 565.205813][T11438] do_ip6t_set_ctl+0xdcb/0x1220 [ 565.210674][T11438] ? rcu_lock_release+0x20/0x20 [ 565.215533][T11438] ? ip6t_unregister_table_exit+0x1f0/0x1f0 [ 565.221433][T11438] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 565.227077][T11438] ? __lock_acquire+0x1ff0/0x1ff0 [ 565.232120][T11438] ? __mutex_unlock_slowpath+0x218/0x750 [ 565.237758][T11438] ? nf_setsockopt+0x38/0x2b0 [ 565.242435][T11438] ? print_irqtrace_events+0x210/0x210 [ 565.247903][T11438] ? mutex_unlock+0x10/0x10 [ 565.252416][T11438] ? __local_bh_enable_ip+0x175/0x1f0 [ 565.257797][T11438] nf_setsockopt+0x28a/0x2b0 [ 565.262397][T11438] ipv6_setsockopt+0x2f9a/0x4380 [ 565.267350][T11438] ? ipv6_update_options+0x3f0/0x3f0 [ 565.272632][T11438] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 565.278618][T11438] ? print_irqtrace_events+0x210/0x210 [ 565.284082][T11438] ? reacquire_held_locks+0x660/0x660 [ 565.289456][T11438] ? do_raw_spin_unlock+0x137/0x8b0 [ 565.294660][T11438] ? finish_lock_switch+0x8f/0x100 [ 565.299777][T11438] ? lockdep_hardirqs_on+0x94/0x130 [ 565.304980][T11438] ? finish_lock_switch+0x8f/0x100 [ 565.310098][T11438] ? finish_task_switch+0x134/0x630 [ 565.315308][T11438] ? __switch_to_asm+0x34/0x60 [ 565.320079][T11438] ? __schedule+0x12cc/0x45b0 [ 565.324765][T11438] ? mark_lock+0x98/0x340 [ 565.329098][T11438] ? aa_label_sk_perm+0x453/0x630 [ 565.334134][T11438] ? aa_sk_perm+0xa30/0xa30 [ 565.338654][T11438] ? __might_sleep+0xc0/0xc0 [ 565.343248][T11438] ? rcu_lock_release+0x9/0x20 [ 565.348016][T11438] ? __lock_acquire+0x1ff0/0x1ff0 [ 565.353053][T11438] ? aa_sk_perm+0x8fc/0xa30 [ 565.357568][T11438] ? aa_af_perm+0x350/0x350 [ 565.362079][T11438] ? __fget_files+0x413/0x480 [ 565.366763][T11438] ? aa_sock_opt_perm+0x79/0x110 [ 565.371712][T11438] ? udpv6_setsockopt+0x77/0xa0 [ 565.376563][T11438] ? sock_common_recvmsg+0x240/0x240 [ 565.381849][T11438] __sys_setsockopt+0x57e/0x990 [ 565.386712][T11438] ? __ia32_sys_recv+0xb0/0xb0 [ 565.391487][T11438] ? syscall_enter_from_user_mode+0x2e/0x240 [ 565.397475][T11438] __x64_sys_setsockopt+0xb1/0xc0 [ 565.402502][T11438] do_syscall_64+0x3b/0xb0 [ 565.406915][T11438] ? clear_bhb_loop+0x15/0x70 [ 565.411592][T11438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.417488][T11438] RIP: 0033:0x7f0fb5418d29 [ 565.421904][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.441521][T11438] RSP: 002b:00007f0fb3268038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 565.449947][T11438] RAX: ffffffffffffffda RBX: 00007f0fb5609080 RCX: 00007f0fb5418d29 [ 565.457920][T11438] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 565.465895][T11438] RBP: 00007f0fb5494b08 R08: 00000000000013a8 R09: 0000000000000000 [ 565.474021][T11438] R10: 0000000020002c00 R11: 0000000000000246 R12: 0000000000000000 [ 565.482003][T11438] R13: 0000000000000000 R14: 00007f0fb5609080 R15: 00007fffe49e5d98 [ 565.489998][T11438] [ 565.493020][T11438] [ 565.495340][T11438] ============================= [ 565.500177][T11438] [ BUG: Invalid wait context ] [ 565.505012][T11438] 5.15.175-syzkaller #0 Tainted: G W [ 565.511602][T11438] ----------------------------- [ 565.516443][T11438] syz.8.1799/11438 is trying to lock: [ 565.521800][T11438] ffffffff8cc523f0 (kernfs_rwsem){++++}-{3:3}, at: kernfs_walk_and_get_ns+0x7e/0x2b0 [ 565.531282][T11438] other info that might help us debug this: [ 565.537161][T11438] context-{4:4} [ 565.540609][T11438] 1 lock held by syz.8.1799/11438: [ 565.545706][T11438] #0: ffffffff8cb456d8 (css_set_lock){..-.}-{2:2}, at: cgroup_get_from_path+0x24/0x2e0 [ 565.555455][T11438] stack backtrace: [ 565.559162][T11438] CPU: 1 PID: 11438 Comm: syz.8.1799 Tainted: G W 5.15.175-syzkaller #0 [ 565.568785][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 565.578886][T11438] Call Trace: [ 565.582151][T11438] [ 565.585060][T11438] dump_stack_lvl+0x1e3/0x2d0 [ 565.589718][T11438] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 565.595325][T11438] ? panic+0x860/0x860 [ 565.599375][T11438] __lock_acquire+0x14f5/0x1ff0 [ 565.604203][T11438] lock_acquire+0x1db/0x4f0 [ 565.608681][T11438] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 565.614114][T11438] ? read_lock_is_recursive+0x10/0x10 [ 565.619461][T11438] ? __might_sleep+0xc0/0xc0 [ 565.624028][T11438] down_read+0x45/0x2e0 [ 565.628164][T11438] ? kernfs_walk_and_get_ns+0x7e/0x2b0 [ 565.633597][T11438] ? kernfs_walk_and_get_ns+0x72/0x2b0 [ 565.639036][T11438] kernfs_walk_and_get_ns+0x7e/0x2b0 [ 565.644302][T11438] ? kernfs_find_ns+0x500/0x500 [ 565.649214][T11438] ? current_cgns_cgroup_from_root+0x2a3/0x2f0 [ 565.655343][T11438] cgroup_get_from_path+0x5c/0x2e0 [ 565.660432][T11438] cgroup_mt_check_v1+0x1a0/0x2b0 [ 565.665433][T11438] xt_check_match+0x363/0xa30 [ 565.670082][T11438] ? xt_find_match+0x6d/0x200 [ 565.674732][T11438] ? mutex_unlock+0x10/0x10 [ 565.679220][T11438] ? xt_check_proc_name+0x110/0x110 [ 565.684395][T11438] ? xt_find_match+0x1cf/0x200 [ 565.689135][T11438] translate_table+0x1669/0x2320 [ 565.694087][T11438] ? ip6t_register_table+0x7b0/0x7b0 [ 565.699348][T11438] ? __might_fault+0xb8/0x110 [ 565.703999][T11438] ? __lock_acquire+0x1ff0/0x1ff0 [ 565.708998][T11438] ? _copy_from_user+0x10f/0x170 [ 565.713931][T11438] ? copy_from_sockptr_offset+0x6b/0xa0 [ 565.719452][T11438] do_ip6t_set_ctl+0xdcb/0x1220 [ 565.724278][T11438] ? rcu_lock_release+0x20/0x20 [ 565.729277][T11438] ? ip6t_unregister_table_exit+0x1f0/0x1f0 [ 565.735141][T11438] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 565.740752][T11438] ? __lock_acquire+0x1ff0/0x1ff0 [ 565.745753][T11438] ? __mutex_unlock_slowpath+0x218/0x750 [ 565.751362][T11438] ? nf_setsockopt+0x38/0x2b0 [ 565.756015][T11438] ? print_irqtrace_events+0x210/0x210 [ 565.761450][T11438] ? mutex_unlock+0x10/0x10 [ 565.765929][T11438] ? __local_bh_enable_ip+0x175/0x1f0 [ 565.771274][T11438] nf_setsockopt+0x28a/0x2b0 [ 565.775841][T11438] ipv6_setsockopt+0x2f9a/0x4380 [ 565.780756][T11438] ? ipv6_update_options+0x3f0/0x3f0 [ 565.786011][T11438] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 565.791963][T11438] ? print_irqtrace_events+0x210/0x210 [ 565.797399][T11438] ? reacquire_held_locks+0x660/0x660 [ 565.802764][T11438] ? do_raw_spin_unlock+0x137/0x8b0 [ 565.807936][T11438] ? finish_lock_switch+0x8f/0x100 [ 565.813038][T11438] ? lockdep_hardirqs_on+0x94/0x130 [ 565.818223][T11438] ? finish_lock_switch+0x8f/0x100 [ 565.823310][T11438] ? finish_task_switch+0x134/0x630 [ 565.828483][T11438] ? __switch_to_asm+0x34/0x60 [ 565.833227][T11438] ? __schedule+0x12cc/0x45b0 [ 565.837876][T11438] ? mark_lock+0x98/0x340 [ 565.842185][T11438] ? aa_label_sk_perm+0x453/0x630 [ 565.847185][T11438] ? aa_sk_perm+0xa30/0xa30 [ 565.851665][T11438] ? __might_sleep+0xc0/0xc0 [ 565.856232][T11438] ? rcu_lock_release+0x9/0x20 [ 565.860993][T11438] ? __lock_acquire+0x1ff0/0x1ff0 [ 565.866006][T11438] ? aa_sk_perm+0x8fc/0xa30 [ 565.870507][T11438] ? aa_af_perm+0x350/0x350 [ 565.874987][T11438] ? __fget_files+0x413/0x480 [ 565.879640][T11438] ? aa_sock_opt_perm+0x79/0x110 [ 565.884568][T11438] ? udpv6_setsockopt+0x77/0xa0 [ 565.889393][T11438] ? sock_common_recvmsg+0x240/0x240 [ 565.894650][T11438] __sys_setsockopt+0x57e/0x990 [ 565.899477][T11438] ? __ia32_sys_recv+0xb0/0xb0 [ 565.904213][T11438] ? syscall_enter_from_user_mode+0x2e/0x240 [ 565.910168][T11438] __x64_sys_setsockopt+0xb1/0xc0 [ 565.915170][T11438] do_syscall_64+0x3b/0xb0 [ 565.919556][T11438] ? clear_bhb_loop+0x15/0x70 [ 565.924207][T11438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 565.930077][T11438] RIP: 0033:0x7f0fb5418d29 [ 565.934470][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.954055][T11438] RSP: 002b:00007f0fb3268038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 565.962462][T11438] RAX: ffffffffffffffda RBX: 00007f0fb5609080 RCX: 00007f0fb5418d29 [ 565.970408][T11438] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 565.978358][T11438] RBP: 00007f0fb5494b08 R08: 00000000000013a8 R09: 0000000000000000 [ 565.986301][T11438] R10: 0000000020002c00 R11: 0000000000000246 R12: 0000000000000000 [ 565.994244][T11438] R13: 0000000000000000 R14: 00007f0fb5609080 R15: 00007fffe49e5d98 [ 566.002193][T11438] [ 566.006226][T11438] xt_cgroup: invalid path, errno=-2 [ 566.300023][ T4242] usb 8-1: string descriptor 0 read error: -71 [ 566.307457][ T4242] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 566.329152][ T4242] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.338354][ T4242] usb 8-1: config 0 descriptor?? [ 566.362579][ T4242] usb 8-1: can't set config #0, error -71 [ 566.379529][ T4242] usb 8-1: USB disconnect, device number 6