last executing test programs: 14m29.02314504s ago: executing program 3 (id=756): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x13}) fanotify_init(0xf00, 0x0) 14m27.572652297s ago: executing program 3 (id=757): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$char_usb(r1, &(0x7f0000000040)="bc798c769d580805981cb9681881ebeffa43f28c3142af1faa34ffcac47c9e6df9c95b49fa999cd3425be5", 0x2b) write$binfmt_script(r1, &(0x7f00000000c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000380)) 14m26.688025907s ago: executing program 3 (id=763): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) shutdown(r3, 0x0) getgid() r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000002030102000000000000000005000003080004400000000808000340054000000000080004"], 0x3c}, 0x1, 0x0, 0x0, 0x24004054}, 0x200400d0) open(0x0, 0x1ed37e, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f00000001c0)) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) 14m26.626776196s ago: executing program 3 (id=766): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x9, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400", [0x0, 0x4b16]}) open$dir(0x0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 14m25.153032327s ago: executing program 3 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fddbdf2506000000080005006401010008000400ac1414aa1400060076657468305f746f5f62"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4004050) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000040)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "1a444a6dd56f8eed307183d286a2221c906ea9aaf52746e0ed652aa14646d563", "ea4269875724b13ec5882b01693ce179", {"c737f8525d1d1c523d88b1a6b9abddb2", "122f8f2ea4255279fdf78d8157ca37b0"}}}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket$inet(0x2, 0x801, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000) readv(r2, &(0x7f0000004c40)=[{&(0x7f0000004840)=""/3, 0x3}], 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x11) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x10, 0xffffffffffffffff, 0x82000000) 14m21.018710653s ago: executing program 3 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) close(r5) 14m20.687748142s ago: executing program 32 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x76dc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4}, 0xc) close(r5) 13m35.898691176s ago: executing program 5 (id=1028): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 13m35.64931038s ago: executing program 5 (id=1031): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 13m35.09996853s ago: executing program 5 (id=1033): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x5, @mcast2, 0x135}}}, &(0x7f0000000040)=0x9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) 13m33.506457038s ago: executing program 5 (id=1040): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20801, 0x0) epoll_create(0x8000) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) listxattr(&(0x7f00000008c0)='./file1\x00', 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) fdatasync(r0) 13m29.844107423s ago: executing program 5 (id=1048): read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "25dd80e966fae5e10da5b74de90c0c6b0d835f3b6e6e3996322cafec7ac3d8ea", "b18ad9456f70defe386fa86cc846f493", {"30b96a46282b516cd06fa8560a39ada5", "5680af680e00"}}}}}}}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[], 0x0) 13m24.63689077s ago: executing program 5 (id=1060): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000500)={&(0x7f00000009c0)=""/79, 0x4f, 0x0, &(0x7f0000000a40)=""/204, 0xcc}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f0000000080)={0x4, 0x0, 0x3}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 13m23.875135278s ago: executing program 33 (id=1060): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={r0, 0x20, &(0x7f0000000500)={&(0x7f00000009c0)=""/79, 0x4f, 0x0, &(0x7f0000000a40)=""/204, 0xcc}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f0000000080)={0x4, 0x0, 0x3}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5m34.956763628s ago: executing program 2 (id=3031): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000020000000800000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYBLOB="040000407a194bece369170200e12bde986b196b6e6c750dea3e7d5fb4970d0917058424c0c2acd6243b9e872ad1aca93a4a9c58eb6bd9512af3d9d7d391db1232e58a07856d449fa6a3ff883973f2edb5f502e76eaafeb52205df93527d1c268fdd6b29ae3e22294d604c043d7a5ff9b15b3e"], 0x48}, 0x1, 0x0, 0x0, 0x4c050}, 0x4004080) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0x7c81, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x75}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600", @ANYRES32=r11, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x8, 0x3, 0xd, 0x200, 0xffffffff, 0x1c, 0xe}) r12 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) ioctl$F2FS_IOC_DEFRAGMENT(r12, 0x541b, 0x0) r13 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r13, &(0x7f00000001c0)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48) 5m31.203658244s ago: executing program 2 (id=3036): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007028000", 0x22) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac0000000800014000000023080002400000000309"], 0xf8}}, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x50009404, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clock_adjtime(0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) dup3(r7, r6, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x200000100000011, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r1}) 5m30.176487456s ago: executing program 2 (id=3038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(0x0, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000191c0)={0x0, 0x6d89, 0x0, 0x3}, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7d7159a0, 0x0, 0x1, {0x1}}) io_uring_enter(r3, 0x8aa, 0x0, 0x0, 0x0, 0x0) 5m29.219795863s ago: executing program 2 (id=3039): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007028000", 0x22) socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac0000000800014000000023080002400000000309"], 0xf8}}, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009404, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) clock_adjtime(0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) 5m28.105037304s ago: executing program 2 (id=3045): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m27.083366961s ago: executing program 2 (id=3046): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000ac30cc90bb0c075e2eceb36e009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) write$ppp(r1, &(0x7f0000000040), 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000a40), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) mkdir(&(0x7f0000000680)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@bsdgroups}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x11, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x2e}, {&(0x7f0000000440)="51580679655d61be5471ffb09f10c1e0929427d6184c9eebcb5dc3131933ed4e854ee6bc05402e7e16e071eb061d75979732cddae46f21a7fc9f32aef95f4fbdefc740a0e9695727df65315cfd399f7c4400eeeac6572a93f9ffe504bc5335ffcd4a3a51c82ae4c300f6b30b8b79afbfb9fd8e9a2271f466ca988a1e3c1d5ab0ee644efaea8dfb20602bb6876582d3bf7160f27390b5839b9122e4801267ac262dd6bd177e8bab4db91770c9126e5af016568805de56d6c7c65fe13325e7e71b3d4b91e27006a578f3f664", 0xcb}, {&(0x7f0000000540)="4da2d5a81cb1a9fb6c2ace643266a76d1fe9a7bf3daace0c07c97f48c4f3add4ba5a5fa046cf3335e5279543c932957874af8e798785d032bb61cd1ecd1b91393d3845d862cb12393ffda78064b87aa6cff525eb26156fffbdb389ad7dee4debe8a60145c59200bf05d82f9d2843e046f8f93e7c94cb5e1f868a213b262cf0ef25f522ce07964319cf83ddf6a69452aa1a4e2204623cd9d4fc5a3dee86ce135adadb1acf959401716fe5b546d33cabf84641dfe4da3433d49b905ba74ddc2940447812dd03f194f1f5c222c97542e298e9", 0xd1}], 0x3}, 0x0) 5m11.673054343s ago: executing program 34 (id=3046): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000ac30cc90bb0c075e2eceb36e009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) write$ppp(r1, &(0x7f0000000040), 0x100000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000a40), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) mkdir(&(0x7f0000000680)='./bus\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@bsdgroups}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x11, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x9, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x2e}, {&(0x7f0000000440)="51580679655d61be5471ffb09f10c1e0929427d6184c9eebcb5dc3131933ed4e854ee6bc05402e7e16e071eb061d75979732cddae46f21a7fc9f32aef95f4fbdefc740a0e9695727df65315cfd399f7c4400eeeac6572a93f9ffe504bc5335ffcd4a3a51c82ae4c300f6b30b8b79afbfb9fd8e9a2271f466ca988a1e3c1d5ab0ee644efaea8dfb20602bb6876582d3bf7160f27390b5839b9122e4801267ac262dd6bd177e8bab4db91770c9126e5af016568805de56d6c7c65fe13325e7e71b3d4b91e27006a578f3f664", 0xcb}, {&(0x7f0000000540)="4da2d5a81cb1a9fb6c2ace643266a76d1fe9a7bf3daace0c07c97f48c4f3add4ba5a5fa046cf3335e5279543c932957874af8e798785d032bb61cd1ecd1b91393d3845d862cb12393ffda78064b87aa6cff525eb26156fffbdb389ad7dee4debe8a60145c59200bf05d82f9d2843e046f8f93e7c94cb5e1f868a213b262cf0ef25f522ce07964319cf83ddf6a69452aa1a4e2204623cd9d4fc5a3dee86ce135adadb1acf959401716fe5b546d33cabf84641dfe4da3433d49b905ba74ddc2940447812dd03f194f1f5c222c97542e298e9", 0xd1}], 0x3}, 0x0) 28.721238878s ago: executing program 6 (id=3895): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f0100008366"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB]) 25.936348555s ago: executing program 6 (id=3904): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) 23.64836997s ago: executing program 6 (id=3908): syz_clone(0x1604cc00, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b71ad9ea2f91a08b871728f41c1e0e3359080000000000007b8af8ff0000e4aee3cf08144ff4a3020000005a0300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r7, r6], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r8, 0x402c5342, &(0x7f0000000180)={0x80, 0xf8, 0x9, {0x3e31, 0x1}, 0x5, 0x8a}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000080b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 22.176772715s ago: executing program 6 (id=3910): socketpair$unix(0x1, 0x2, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0) 22.020349146s ago: executing program 6 (id=3911): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000340)={0x3c, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}]}]}, 0x3c}}, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000040)) 18.889183589s ago: executing program 6 (id=3915): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f0100008366"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00']) 16.752306031s ago: executing program 7 (id=3919): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) 15.092234264s ago: executing program 0 (id=3925): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) r6 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x28}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x86, 0x4, 0x5, 0x100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 15.091552024s ago: executing program 7 (id=3926): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x1, @ANYBLOB="faffffff000000000000c8db78ba0f47e310500060608b6f00"/34, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x72d6e6ed, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r3 = gettid() socket$igmp(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0x7000000) 13.810028058s ago: executing program 7 (id=3928): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000280)={"06528e9c6b2f3dfd54c3915912385b2b", 0x0, 0x0, {0xf, 0x15}, {0x3, 0x7}, 0xce50, [0x2, 0x200, 0xfffffffeffffffff, 0x4, 0x5, 0x1, 0x80000000008, 0x5, 0x0, 0x4ffff, 0xa, 0x1000, 0x2, 0x7, 0x1ff, 0x7]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 11.033912193s ago: executing program 0 (id=3934): socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r5, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 10.172055395s ago: executing program 7 (id=3936): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) 10.00312191s ago: executing program 0 (id=3937): r0 = io_uring_setup(0x28bc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x5000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) 9.995227723s ago: executing program 1 (id=3938): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x1, @ANYBLOB="faffffff000000000000c8db78ba0f47e310500060608b6f00"/34, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x72d6e6ed, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r3 = gettid() socket$igmp(0x2, 0x3, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0x7000000) 8.819804516s ago: executing program 0 (id=3940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x1000, 0xfffffffa, 0x4, 0xc, 0x8, 0x2, 0xfffffc00, {0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x6, 0xa, 0x2, 0x10001, 0x4}}, &(0x7f0000000180)=0xb0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8.746166833s ago: executing program 1 (id=3941): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r0, 0x0}]) 6.21033191s ago: executing program 1 (id=3944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f7fb47cc2c2fe62f43b61f3219b343cd5608876ae54a3937c3efaacdcb9b3b5f1bc61c5b0b070361575b6788828f5bee66b4c52e96450746072cfb37ca494f4f24c5b582aebcc19d0d9ff8ca3f333ce4ad293bb7f0c1c180c287fbfd561d3abcc0000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x5c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x54}}, 0x0) sendto$packet(r4, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 6.17412183s ago: executing program 7 (id=3945): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x0, ')'}]}}, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000280)={"06528e9c6b2f3dfd54c3915912385b2b", 0x0, 0x0, {0xf, 0x15}, {0x3, 0x7}, 0xce50, [0x2, 0x200, 0xfffffffeffffffff, 0x4, 0x5, 0x1, 0x80000000008, 0x5, 0x0, 0x4ffff, 0xa, 0x1000, 0x2, 0x7, 0x1ff, 0x7]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 4.867323172s ago: executing program 1 (id=3946): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff68, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) 4.563919002s ago: executing program 1 (id=3947): socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000240)={0x0, r3, r4}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x1000000, 0xffffffff, 0x290, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @private, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x220, 0x290, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8001, 0x0, 0x0, 0x0, "4d93300e9ddd69f9a8bf031d5b32564b7a48bc973dff0fa696189af20d33bff9c1ccec6dc08f69478f499163eeff981716ff9cad6ae4abbad2152c5241817082"}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x5]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x458) 4.56336929s ago: executing program 4 (id=3948): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)={'b', ' *:* ', 'wm\x00'}, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0c17278bd577b5da6b984d8a60c0c4219ffab2979174529a85124ab9af3e804f5fcbaec2c0eefe557f458a58654ea06f7296ed966072aaf259d2eae0a4d92b779910489f836e1c9e043441915bb255e524e4f5223ecfb3ed7ba9", @ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000700)={'c', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x17) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f00000000c0)=0x6) 3.534268433s ago: executing program 0 (id=3949): r0 = io_uring_setup(0x28bc, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x5000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2041, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0x0) 3.311471861s ago: executing program 4 (id=3950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) 3.095811035s ago: executing program 4 (id=3951): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) mount(&(0x7f0000000180)=@sg0, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240)='ecryptfs\x00', 0x4000, &(0x7f0000000280)='/\x00') 3.008737049s ago: executing program 7 (id=3952): r0 = syz_usb_connect(0x5, 0x90, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002202f4c20020402564d660102030109027e0001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.983072301s ago: executing program 4 (id=3953): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x60, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe800000000000", 0xf}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) statx(r2, &(0x7f0000000100)='./file0\x00', 0x100, 0x400, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000200)={0x3, @default, r3}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.400313281s ago: executing program 4 (id=3954): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syslog(0x4, &(0x7f0000000180)=""/210, 0xd2) 2.031052937s ago: executing program 0 (id=3955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f7fb47cc2c2fe62f43b61f3219b343cd5608876ae54a3937c3efaacdcb9b3b5f1bc61c5b0b070361575b6788828f5bee66b4c52e96450746072cfb37ca494f4f24c5b582aebcc19d0d9ff8ca3f333ce4ad293bb7f0c1c180c287fbfd561d3abcc0000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x27, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x5c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_ERSPAN_INDEX={0x8}]}}}]}, 0x54}}, 0x0) sendto$packet(r4, &(0x7f0000000180)="1bf22b3ee27fabb94357b62376bb", 0xe, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="2ab50e65cd6b"}, 0x14) 142.14114ms ago: executing program 1 (id=3956): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) getsockname$packet(r3, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x84c, 0x2c, 0xd27, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0x81c, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0xfff1}}, @TCA_ROUTE4_POLICE={0x80c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7, 0x2, 0x606, 0x1ff, 0x5, 0x1bbcefac, 0xfffffffd, 0xfffffff8, 0xfffff36b, 0x6, 0x7, 0xffffffc0, 0xfffffff7, 0xffff9997, 0x40, 0x8, 0x183, 0x5c, 0x9, 0x7fffffff, 0x7, 0x9, 0x5, 0x0, 0xffffff36, 0x3, 0x1000, 0x84aa, 0x1, 0x6, 0x800, 0xd20, 0xaf, 0x2, 0xd, 0x9, 0x3, 0x3, 0x8, 0x8, 0x8, 0xc8, 0xf2c, 0x0, 0x200, 0x6, 0x5, 0xffffffff, 0x7fff, 0x6, 0x401, 0x8, 0xfffffffa, 0xfffffffb, 0x400, 0xf, 0x2, 0x0, 0x101, 0xfffffff7, 0x0, 0x4, 0x8, 0xb, 0x2, 0x401, 0x5, 0x7, 0x8, 0x0, 0x0, 0x5, 0x0, 0xb870, 0x7, 0xb, 0x0, 0x807b, 0x4, 0x101, 0xff, 0x7, 0x2, 0xfffffffa, 0x4, 0x7, 0x6, 0x6, 0x5, 0xf1b, 0x5, 0x5, 0xe3, 0x1, 0x9, 0x8, 0x6, 0x1ff, 0x1, 0xd, 0x74, 0x2, 0x10001, 0x2, 0xffff, 0x9, 0xfffffff8, 0x8000, 0x5, 0x8, 0x6, 0xfffffff7, 0xfffffff8, 0x9, 0x1, 0x7, 0xeb1c, 0x7, 0x1ff, 0xb97f, 0xfffff800, 0x2, 0x1, 0x1, 0xc, 0x3, 0x4, 0x6, 0x3d16c0, 0x7, 0x4, 0x400, 0x5, 0xd, 0x7bdd67a9, 0xf, 0xe0000000, 0x7, 0x9, 0x5, 0xeff, 0xfffffffd, 0x5, 0x200, 0xa52, 0x1d19, 0x401, 0x2, 0x9, 0xf, 0x9232, 0x8, 0x8, 0x5, 0x1000, 0xfffffffa, 0x0, 0x98, 0x1, 0x7, 0x3, 0x1, 0xd207, 0xa025, 0x4, 0x1, 0x9, 0x8, 0x6, 0xa2b, 0x5, 0x800, 0x1, 0x7, 0x0, 0x80, 0x4, 0x7, 0x953b, 0xb, 0xfff, 0x8, 0x5f4, 0x5, 0xfffffffd, 0xffff, 0x7, 0x10000, 0x800, 0x0, 0x100, 0x7, 0xfffffff7, 0x80, 0x2, 0x9, 0x5, 0x1, 0x5, 0xffffff6b, 0x1, 0x100010, 0x6, 0x5, 0x1, 0x5, 0x9, 0xd679, 0x8, 0x4, 0x44c3c0ee, 0x4, 0x1, 0x0, 0xc, 0x7, 0x6, 0x100, 0x7, 0x8a6f, 0x7, 0xfffffffb, 0x1, 0x1ff, 0x0, 0x7d, 0x6, 0x2, 0x26, 0x40, 0x6, 0xf, 0x0, 0xff, 0x3, 0x8000, 0x3, 0x3, 0x3ff, 0xf000, 0xfffffff9, 0x6, 0x7, 0x61c, 0xff, 0x6, 0x5, 0xb, 0x3, 0x4, 0x5, 0x200, 0x6, 0x6, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7, 0x8, 0x5, 0x8, 0x85, 0x9b8, 0x4, 0x80, 0x8, 0x80, 0x61f2, 0x208, 0x7, 0x1, 0x5, 0x6, 0x3, 0x6, 0x9dc, 0x5, 0x2, 0xfffffffa, 0x9, 0x9, 0xd, 0x4, 0x7, 0x3, 0x81, 0x9, 0x2, 0x2, 0x3, 0x4, 0xa, 0x9, 0x7ff, 0x5, 0x914, 0xfffffff3, 0x401, 0x5, 0x54, 0x4cb8, 0x7, 0x4, 0xd50, 0xa, 0x23e98, 0x4, 0xffffff80, 0x1, 0x6, 0x7, 0x2, 0x7fff, 0x42d7be59, 0x2, 0x3, 0x200, 0x101, 0x4, 0x7fff, 0x7, 0x80000001, 0x0, 0x1, 0xfff, 0x5, 0x0, 0xc35, 0x10, 0x9, 0xb6, 0x9, 0x10, 0x1, 0x0, 0x1, 0x7f, 0x2, 0x40, 0x9, 0x790, 0x2, 0x5, 0x1, 0x7, 0x400, 0x8, 0x7cf0c765, 0xb, 0xf5ae, 0x8, 0xfee, 0x1, 0x879, 0x7, 0x3, 0x40, 0x8000, 0x6, 0x7ab3, 0x7, 0x9, 0x860, 0x5, 0x8, 0x3ff, 0xd, 0x800, 0x4, 0xffffff88, 0x8, 0x5d1d, 0x1, 0x1ff, 0x10000, 0x8, 0x9, 0x1, 0xb8c, 0x2, 0x63c7bd91, 0x7, 0x8, 0x1, 0x80000000, 0x9, 0x2, 0x2, 0x8, 0x8, 0x0, 0xffffffff, 0xcc, 0x1, 0x0, 0x7f, 0x5, 0x9, 0x1, 0x5, 0x0, 0x3, 0x0, 0x0, 0x1, 0xa62, 0x1, 0xa, 0x69319b6b, 0x1000, 0x3ff, 0x0, 0x1, 0x3, 0x8, 0x7, 0x9, 0x7, 0x3, 0x800, 0x6, 0x9, 0x10000, 0x0, 0x4, 0xfff, 0x0, 0x7, 0x2, 0xffffff6e, 0x6, 0x3, 0xffffffff, 0x6, 0x7, 0x2, 0x2, 0x2, 0x6, 0x0, 0x6, 0xd, 0x994d, 0x0, 0xffff7fff, 0x5, 0x1004000, 0x776, 0x7, 0x3ef92a03, 0x7ff, 0x47, 0x6, 0x6, 0x4, 0x3, 0x6, 0x8, 0x200, 0x7ff, 0xa8f3, 0xa4, 0xffffff7f, 0x9, 0x7, 0xffff, 0xffffff01, 0x81, 0x5, 0x8001, 0x7, 0x4, 0x1, 0x1, 0xffffffff, 0x9, 0x8000, 0x401, 0x3, 0x2, 0x7a, 0x8, 0x8, 0x5, 0x6, 0x5, 0x0, 0x2, 0x7fffffff, 0x3, 0x2, 0x1, 0x0, 0xef95, 0x1, 0xd, 0x80, 0x460, 0xfea, 0x80000000, 0x6, 0x401, 0x100, 0x6, 0x1, 0x5, 0x8d1a, 0x9, 0x2, 0x9, 0x7, 0x5]}]}]}}]}, 0x84c}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000740), &(0x7f0000000780)=0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x44014) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000", 0x36}], 0x1) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f"], 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c6361636865bf46"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x82c02, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)={0x128, 0x1403, 0x300, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pim6reg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pim6reg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x128}}, 0x4010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081", @ANYRESOCT], 0x44}}, 0x0) 0s ago: executing program 4 (id=3957): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x5) ioctl$SIOCAX25DELFWD(r0, 0x541b, &(0x7f0000000000)={@null, @null}) kernel console output (not intermixed with test programs): 8.437604][T15053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.552348][T14988] usb 7-1: USB disconnect, device number 24 [ 758.614259][T15053] veth0_vlan: entered promiscuous mode [ 758.618381][ T5914] usb 3-1: USB disconnect, device number 37 [ 758.632355][T15053] veth1_vlan: entered promiscuous mode [ 758.672801][T15053] veth0_macvtap: entered promiscuous mode [ 758.682302][T15053] veth1_macvtap: entered promiscuous mode [ 758.697521][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 758.826783][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.986735][T15053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.498365][T15053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.514097][T15053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.525297][T15254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2936'. [ 759.536034][T15053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.578365][T15053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.608752][T15053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.617502][T15053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.652387][T15053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.802822][T15262] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 759.810256][T15262] PKCS7: Only support pkcs7_signedData type [ 760.114438][ T5884] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 760.386638][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 760.442691][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.696244][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 760.707226][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 760.709110][ T7050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.717085][ T5884] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 760.724947][ T7050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.734463][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 760.778706][ T5884] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 760.787810][ T5884] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 760.798655][ T5884] usb 1-1: Manufacturer: syz [ 760.818200][ T5884] usb 1-1: config 0 descriptor?? [ 760.838132][ T7050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.846304][ T7050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.908309][T15270] fuse: Unknown parameter 'group_i00000000000000000000' [ 761.743296][T15289] loop6: detected capacity change from 0 to 512 [ 761.785944][T15289] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 761.788364][T15286] lo speed is unknown, defaulting to 1000 [ 761.829276][T15289] EXT4-fs (loop6): 1 truncate cleaned up [ 761.864199][T15289] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.154888][ T9468] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.745460][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 762.781214][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 762.791731][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 762.798934][ T974] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 762.814675][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 762.828941][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 762.839404][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 762.849106][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 762.857161][ T5884] rc_core: IR keymap rc-hauppauge not found [ 762.866018][ T5884] Registered IR keymap rc-empty [ 762.875726][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 762.893938][T15304] lo speed is unknown, defaulting to 1000 [ 762.933773][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 762.960508][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 762.967582][ T974] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 762.979591][ T974] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 762.981159][ T5884] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 762.989903][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 763.001232][ T9] usb 7-1: device descriptor read/64, error -71 [ 763.007819][ T974] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 763.023890][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.040984][ T974] usb 2-1: config 0 descriptor?? [ 763.069950][ T5884] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input32 [ 763.095311][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.136907][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.159210][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.191827][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.217952][T15304] chnl_net:caif_netlink_parms(): no params data found [ 763.225107][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.250670][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.259016][ T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 763.279088][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.299135][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.327468][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.349402][ T5884] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 763.371081][ T5884] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 763.374010][T15321] fuse: Unknown parameter 'group_i00000000000000000000' [ 763.384788][ T5884] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 763.399755][ T9] usb 7-1: device descriptor read/64, error -71 [ 763.406743][ T5884] usb 1-1: USB disconnect, device number 49 [ 763.468715][ T974] wacom 0003:056A:00C4.0010: unknown main item tag 0x0 [ 763.479429][ T974] wacom 0003:056A:00C4.0010: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 763.497134][T15304] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.510526][T15304] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.517721][T15304] bridge_slave_0: entered allmulticast mode [ 763.519490][ T9] usb usb7-port1: attempt power cycle [ 763.524805][T15304] bridge_slave_0: entered promiscuous mode [ 763.536779][T15304] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.544357][T15304] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.551897][T15304] bridge_slave_1: entered allmulticast mode [ 763.558453][T15304] bridge_slave_1: entered promiscuous mode [ 764.161689][T15304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.179759][T15304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.201751][T14988] usb 2-1: USB disconnect, device number 33 [ 764.241918][T15304] team0: Port device team_slave_0 added [ 764.263283][T15304] team0: Port device team_slave_1 added [ 764.339401][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 764.357544][T15304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.366599][ T9] usb 7-1: device descriptor read/8, error -71 [ 764.394758][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.454765][T15304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.484075][T15304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.491330][T15304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 764.518932][T15304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.570991][T15304] hsr_slave_0: entered promiscuous mode [ 764.577903][T15304] hsr_slave_1: entered promiscuous mode [ 764.633033][T15304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.641174][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 764.645088][T15336] loop4: detected capacity change from 0 to 512 [ 764.649010][T15304] Cannot create hsr debugfs directory [ 764.680070][ T9] usb 7-1: device descriptor read/8, error -71 [ 764.694471][T15336] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 764.720315][T15336] EXT4-fs (loop4): 1 truncate cleaned up [ 764.726576][T15336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.799375][ T9] usb usb7-port1: unable to enumerate USB device [ 764.922449][ T5841] Bluetooth: hci5: command tx timeout [ 765.465587][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.477925][T15304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.489449][T15304] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.886181][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 766.145744][T15304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.156313][T15304] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.199934][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 766.209874][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 766.224639][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 766.273591][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 766.302357][T15304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.338916][T15304] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.359637][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 766.383439][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 766.402400][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 766.415750][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 766.424377][ T9] usb 5-1: Manufacturer: syz [ 766.430738][ T9] usb 5-1: config 0 descriptor?? [ 766.490521][T15304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 766.566753][T15304] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.692358][T15357] fuse: Unknown parameter 'group_i00000000000000000000' [ 766.816933][T15304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 766.827631][T15304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 766.837826][T15304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 766.847451][T15304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 767.000022][ T5841] Bluetooth: hci5: command tx timeout [ 767.747284][T15304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.861922][T15304] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.887750][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.894846][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.933334][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.940517][ T7050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.456528][T15374] siw: device registration error -23 [ 768.570608][ T5883] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 768.708529][T15304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.729578][ T9] rc_core: IR keymap rc-hauppauge not found [ 768.746889][ T9] Registered IR keymap rc-empty [ 768.769481][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.785062][ T5883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.802331][ T5883] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 768.825555][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.826797][T15304] veth0_vlan: entered promiscuous mode [ 768.833951][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.855404][ T5883] usb 1-1: config 0 descriptor?? [ 768.868758][ T5883] pwc: Askey VC010 type 2 USB webcam detected. [ 768.880125][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 768.907316][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 768.951861][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 768.992555][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.060187][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.084965][ T5841] Bluetooth: hci5: command tx timeout [ 769.099883][T15304] veth1_vlan: entered promiscuous mode [ 769.110830][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.129789][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.149760][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.217979][T15304] veth0_macvtap: entered promiscuous mode [ 769.224327][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.273444][T15304] veth1_macvtap: entered promiscuous mode [ 769.286870][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00 [ 769.294045][ T5883] pwc: recv_control_msg error -32 req 02 val 2700 [ 769.300784][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.308190][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00 [ 769.316078][ T5883] pwc: recv_control_msg error -32 req 04 val 1000 [ 769.322679][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.340298][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.342918][ T5883] pwc: recv_control_msg error -32 req 04 val 1300 [ 769.359360][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.359678][ T5883] pwc: recv_control_msg error -32 req 04 val 1400 [ 769.376211][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 769.378120][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.383527][ T5883] pwc: recv_control_msg error -32 req 02 val 2000 [ 769.412072][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 769.413298][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.420118][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 769.424903][ T9] usb 5-1: USB disconnect, device number 43 [ 769.456629][T15304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.501951][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.512531][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.522539][T15304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.533073][T15304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.546107][T15304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.558457][T15304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.568402][T15304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.577440][T15304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.586206][T15304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.609238][ T5883] pwc: recv_control_msg error -71 req 04 val 1500 [ 769.616388][ T5883] pwc: recv_control_msg error -71 req 02 val 2500 [ 769.632102][ T5883] pwc: recv_control_msg error -71 req 02 val 2400 [ 769.728657][ T7047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.756294][ T5883] pwc: recv_control_msg error -71 req 02 val 2600 [ 769.765364][ T5883] pwc: recv_control_msg error -71 req 02 val 2900 [ 769.771486][ T7047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.772208][ T5883] pwc: recv_control_msg error -71 req 02 val 2800 [ 769.786024][ T5883] pwc: recv_control_msg error -71 req 04 val 1100 [ 769.792842][ T5883] pwc: recv_control_msg error -71 req 04 val 1200 [ 769.800884][ T5883] pwc: Registered as video103. [ 769.806861][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 769.835753][ T5883] usb 1-1: USB disconnect, device number 50 [ 769.848869][ T7043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.856966][ T7043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.470479][ T5883] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 770.640465][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 771.152868][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short [ 771.161013][ T5841] Bluetooth: hci5: command tx timeout [ 771.171702][ T5883] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 771.179294][ T5883] usb 3-1: can't read configurations, error -71 [ 772.155375][T15416] binder: 15415:15416 ioctl 4018620d 0 returned -22 [ 772.610040][ T5884] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 774.570261][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 774.629174][ T5884] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 774.690290][ T5884] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.738308][ T5884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 774.809259][ T5884] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 774.810330][T12361] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 774.833195][T12361] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 774.871497][T12361] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 774.882871][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.925382][ T5884] usb 1-1: config 0 descriptor?? [ 774.970826][T12361] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 774.985477][T12361] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 775.003534][T12361] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 775.393500][ T5884] wacom 0003:056A:00C4.0011: unknown main item tag 0x0 [ 775.400196][T15443] lo speed is unknown, defaulting to 1000 [ 775.480934][ T5884] wacom 0003:056A:00C4.0011: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.0-1/input0 [ 775.665835][T15460] loop1: detected capacity change from 0 to 1024 [ 775.676275][T15460] EXT4-fs: Ignoring removed orlov option [ 775.709400][T15460] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 775.760063][T15460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 776.073696][ T5884] usb 1-1: USB disconnect, device number 51 [ 776.094360][T15443] chnl_net:caif_netlink_parms(): no params data found [ 776.111038][T15053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 776.707621][T15468] binder: 15467:15468 ioctl 4018620d 0 returned -22 [ 776.838257][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.854146][T15443] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.870831][T15443] bridge_slave_0: entered allmulticast mode [ 777.392076][T15443] bridge_slave_0: entered promiscuous mode [ 777.408918][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.416583][T15443] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.426676][T15443] bridge_slave_1: entered allmulticast mode [ 777.455326][T12361] Bluetooth: hci3: command tx timeout [ 777.475108][T15443] bridge_slave_1: entered promiscuous mode [ 777.588691][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3002'. [ 777.598555][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3002'. [ 777.630633][T14988] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 777.792000][T15443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.852893][T15443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 777.920658][T14988] usb 3-1: Using ep0 maxpacket: 32 [ 777.938582][T14988] usb 3-1: unable to get BOS descriptor or descriptor too short [ 777.977471][T14988] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 778.000956][T14988] usb 3-1: can't read configurations, error -71 [ 778.756904][T15443] team0: Port device team_slave_0 added [ 778.786778][T15443] team0: Port device team_slave_1 added [ 779.112548][T15443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.119761][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.341227][T15443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.481800][T12361] Bluetooth: hci3: command tx timeout [ 780.075953][T15443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.083587][T15443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.109676][T15443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.792372][T15443] hsr_slave_0: entered promiscuous mode [ 780.826089][T15443] hsr_slave_1: entered promiscuous mode [ 781.594431][T12361] Bluetooth: hci3: command tx timeout [ 781.600523][T15443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 781.608349][T15443] Cannot create hsr debugfs directory [ 783.486477][T15535] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 783.642124][T12361] Bluetooth: hci3: command tx timeout [ 783.930184][T15535] PKCS7: Only support pkcs7_signedData type [ 784.075077][T15443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.161521][ T5884] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 784.170520][T15546] loop1: detected capacity change from 0 to 1024 [ 784.180203][T15546] EXT4-fs: Ignoring removed orlov option [ 784.190385][T15546] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 784.822189][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 784.860803][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 784.891973][ T5884] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 784.961180][ T5884] usb 7-1: can't read configurations, error -71 [ 784.982146][T15546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.077843][T15053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.212789][T15443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.169851][T15443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.377347][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3031'. [ 788.558039][T15585] kernel profiling enabled (shift: 17) [ 788.887570][T15587] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 788.901421][T15587] PKCS7: Only support pkcs7_signedData type [ 788.994646][T15443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.722909][T15443] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 790.834658][T15443] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 790.843500][T15443] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 790.887843][T15443] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 791.092474][ T5881] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 791.297558][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 791.350444][T15443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.410899][ T5881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 791.515852][ T5881] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 791.649518][ T5881] usb 1-1: can't read configurations, error -71 [ 791.782750][T15443] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.858038][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.865215][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.928888][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.936046][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.115490][T15443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.292718][ T9] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 793.457279][ T9] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 793.468020][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.532206][T15443] veth0_vlan: entered promiscuous mode [ 793.547698][ T9] usb 7-1: Product: syz [ 793.593794][T15443] veth1_vlan: entered promiscuous mode [ 793.615351][ T9] usb 7-1: Manufacturer: syz [ 793.655711][ T9] usb 7-1: SerialNumber: syz [ 793.776135][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 793.834810][ T9] r8152-cfgselector 7-1: config 0 descriptor?? [ 793.883829][T15443] veth0_macvtap: entered promiscuous mode [ 793.900214][T15443] veth1_macvtap: entered promiscuous mode [ 793.923659][T15443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.934422][T15443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.947357][T15443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.962485][T15443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.999766][T15443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 794.036283][T15443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.050234][T15443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 794.071818][ T9] r8152-cfgselector 7-1: Unknown version 0x0000 [ 794.082639][T15443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.093330][ T9] r8152-cfgselector 7-1: bad CDC descriptors [ 794.128168][T15443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.138944][T15443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.160438][T15443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.175845][T15443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 794.198464][T15443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 794.220394][T15443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.251269][T15443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.269749][T15443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.280815][ T5883] r8152-cfgselector 7-1: USB disconnect, device number 31 [ 794.299589][T15443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.316193][T15443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.405689][ T7050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.422631][ T7050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.489875][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.505392][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.286542][ T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 795.841997][T15654] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3054'. [ 796.274241][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 796.344052][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 796.362064][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 796.384634][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 796.400773][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 796.410743][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 796.806235][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.120926][T15658] lo speed is unknown, defaulting to 1000 [ 797.753468][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.925010][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.943842][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 797.951859][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 797.986698][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 797.994821][ T9] usb 7-1: can't read configurations, error -71 [ 798.062629][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.525814][ T5841] Bluetooth: hci0: command tx timeout [ 798.827885][T15658] chnl_net:caif_netlink_parms(): no params data found [ 800.604355][ T5841] Bluetooth: hci0: command tx timeout [ 800.893450][T15609] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 801.050662][ T35] bond0 (unregistering): Released all slaves [ 801.069042][T15609] usb 2-1: Using ep0 maxpacket: 32 [ 801.105338][T15609] usb 2-1: unable to get BOS descriptor or descriptor too short [ 801.123230][T15609] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 801.130982][T15609] usb 2-1: can't read configurations, error -71 [ 801.240256][ T35] bond1 (unregistering): left promiscuous mode [ 801.258370][ T35] bond1 (unregistering): Released all slaves [ 801.278244][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.285628][T15658] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.292823][T15658] bridge_slave_0: entered allmulticast mode [ 801.300191][T15658] bridge_slave_0: entered promiscuous mode [ 801.310547][T15658] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.318597][T15658] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.360106][T15658] bridge_slave_1: entered allmulticast mode [ 801.379044][T15658] bridge_slave_1: entered promiscuous mode [ 801.418133][ T35] tipc: Left network mode [ 801.594058][T15658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.675175][T15658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.048414][T15658] team0: Port device team_slave_0 added [ 802.142366][T15658] team0: Port device team_slave_1 added [ 802.683858][ T5841] Bluetooth: hci0: command tx timeout [ 802.772688][T15658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.791636][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.863559][T15658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.913435][T13873] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 802.926798][T13873] Bluetooth: hci4: Frame reassembly failed (-84) [ 802.978863][T15658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.000376][T15658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.061393][T15658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.168138][T15658] hsr_slave_0: entered promiscuous mode [ 803.204824][T15658] hsr_slave_1: entered promiscuous mode [ 803.217142][T15658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 803.251970][T15658] Cannot create hsr debugfs directory [ 803.273244][ T35] hsr_slave_0: left promiscuous mode [ 803.282623][ T35] hsr_slave_1: left promiscuous mode [ 803.414474][ T35] veth1_macvtap: left promiscuous mode [ 803.420078][ T35] veth0_macvtap: left promiscuous mode [ 803.427273][ T35] veth1_vlan: left promiscuous mode [ 803.532309][ T35] veth0_vlan: left promiscuous mode [ 804.778957][T12361] Bluetooth: hci0: command tx timeout [ 804.924152][ T5841] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 804.924565][T12361] Bluetooth: hci4: command 0x1003 tx timeout [ 805.897204][T15609] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 806.056120][T15609] usb 5-1: Using ep0 maxpacket: 32 [ 806.065706][T15609] usb 5-1: unable to get BOS descriptor or descriptor too short [ 806.081424][T15609] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 806.107704][T15609] usb 5-1: can't read configurations, error -71 [ 808.183948][ T7050] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 808.283920][ T53] Bluetooth: hci4: Frame reassembly failed (-84) [ 808.802478][T15658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 808.822135][T15658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 808.841970][T15658] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 808.850849][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.850893][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.896744][T15658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 808.995068][T15658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.026819][T15658] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.046130][T15771] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.053255][T15771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.067733][T15771] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.074914][T15771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.148290][T15658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.179358][T15778] loop4: detected capacity change from 0 to 512 [ 809.187496][T15778] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 809.218658][T15778] EXT4-fs (loop4): 1 truncate cleaned up [ 809.225894][T15778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.458952][T15443] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.543118][T15658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.607767][T15658] veth0_vlan: entered promiscuous mode [ 809.630618][T15658] veth1_vlan: entered promiscuous mode [ 810.186620][T15658] veth0_macvtap: entered promiscuous mode [ 810.206653][T15658] veth1_macvtap: entered promiscuous mode [ 810.245672][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.292233][T12361] Bluetooth: hci4: command 0x1003 tx timeout [ 810.299023][ T5841] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 810.367386][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.414850][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.461713][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.476773][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.493106][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.517890][T12361] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 810.536754][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.547386][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.559916][T15658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.570174][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.580831][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.590731][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.601490][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.611794][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.622706][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.632652][T15658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.643313][T15658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.654274][T15658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.665603][T15658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.674564][T15658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.683277][T15658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.702073][T12361] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 810.727386][T15658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.736401][T12361] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 810.812890][T12361] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 810.826258][T12361] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 810.833965][T12361] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 810.962393][ T5883] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 811.176176][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 811.306985][ T5883] usb 5-1: unable to get BOS descriptor or descriptor too short [ 811.438517][ T5883] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 811.464776][ T5883] usb 5-1: can't read configurations, error -71 [ 811.550363][ T7056] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.590422][T15796] lo speed is unknown, defaulting to 1000 [ 811.729720][ T7056] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.798607][T13889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.810836][T13889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.858119][T15809] bridge_slave_0: left allmulticast mode [ 811.870841][T15809] bridge_slave_0: left promiscuous mode [ 811.879986][T15809] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.902019][T15809] bridge_slave_1: left allmulticast mode [ 811.912201][T15809] bridge_slave_1: left promiscuous mode [ 811.919917][T15809] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.939273][T15809] bond0: (slave bond_slave_0): Releasing backup interface [ 811.954227][T15809] bond0: (slave bond_slave_1): Releasing backup interface [ 811.994734][ T52] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 812.020202][T15809] team0: Port device team_slave_0 removed [ 812.041844][T15809] team0: Port device team_slave_1 removed [ 812.053649][T15809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.062403][T15809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.079579][T15809] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.087442][T15809] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.114820][ T5883] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 812.138040][ T52] usb 7-1: device descriptor read/64, error -71 [ 812.197946][ T7056] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.298832][ T5883] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 812.317625][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.333341][ T7056] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.343840][ T5883] usb 5-1: Product: syz [ 812.356178][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.380603][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 812.392526][ T5883] usb 5-1: Manufacturer: syz [ 812.405223][ T52] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 812.431472][ T5883] usb 5-1: SerialNumber: syz [ 812.471882][ T5883] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 812.546508][ T52] usb 7-1: device descriptor read/64, error -71 [ 812.549022][ T5884] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 812.619021][ T7056] bridge_slave_1: left allmulticast mode [ 812.634740][ T7056] bridge_slave_1: left promiscuous mode [ 812.645190][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.658479][ T7056] bridge_slave_0: left allmulticast mode [ 812.675091][ T52] usb usb7-port1: attempt power cycle [ 812.757815][ T7056] bridge_slave_0: left promiscuous mode [ 812.770356][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.927802][T15802] Bluetooth: hci4: command tx timeout [ 813.436831][T15815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.459399][T15815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.872408][T15826] Cannot find set identified by id 0 to match [ 813.885073][ T52] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 813.906873][ T52] usb 7-1: device descriptor read/8, error -71 [ 813.931956][ T5881] usb 5-1: USB disconnect, device number 47 [ 814.145191][ T52] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 814.187935][ T52] usb 7-1: device descriptor read/8, error -71 [ 814.345312][ T52] usb usb7-port1: unable to enumerate USB device [ 814.525089][ T5884] usb 5-1: Service connection timeout for: 256 [ 814.640850][ T5884] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 815.500403][ T5884] ath9k_htc: Failed to initialize the device [ 815.559910][T12361] Bluetooth: hci4: command tx timeout [ 815.725256][ T5881] usb 5-1: ath9k_htc: USB layer deinitialized [ 816.079661][T15842] Cannot find add_set index 0 as target [ 816.281456][ T7056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.292756][ T7056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.305467][ T7056] bond0 (unregistering): Released all slaves [ 816.329106][T15796] chnl_net:caif_netlink_parms(): no params data found [ 816.490766][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.499371][ T5884] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 816.508953][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.516718][T15796] bridge_slave_0: entered allmulticast mode [ 816.523352][T15796] bridge_slave_0: entered promiscuous mode [ 816.525248][ T5881] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 816.557520][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.564729][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.572243][T15796] bridge_slave_1: entered allmulticast mode [ 816.579844][T15796] bridge_slave_1: entered promiscuous mode [ 816.641926][T15796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.654342][T15796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 816.655375][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 816.704958][ T5881] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 816.714309][ T5884] usb 7-1: unable to get BOS descriptor or descriptor too short [ 816.717726][ T5881] usb 2-1: config 0 has no interface number 0 [ 816.728829][ T7056] hsr_slave_0: left promiscuous mode [ 816.731326][ T5884] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 816.736591][ T5881] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 816.742062][ T5884] usb 7-1: can't read configurations, error -71 [ 816.759110][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.767948][ T7056] hsr_slave_1: left promiscuous mode [ 816.773981][ T5881] usb 2-1: Product: syz [ 816.778445][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.786183][ T7056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.793414][ T5881] usb 2-1: Manufacturer: syz [ 816.798450][ T5881] usb 2-1: SerialNumber: syz [ 816.803788][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.825915][ T7056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.844452][ T5881] usb 2-1: config 0 descriptor?? [ 816.869874][T15851] fuse: Bad value for 'user_id' [ 816.874760][T15851] fuse: Bad value for 'user_id' [ 816.879793][ T7056] veth1_macvtap: left promiscuous mode [ 816.879885][ T7056] veth0_macvtap: left promiscuous mode [ 816.892023][ T7056] veth1_vlan: left promiscuous mode [ 816.897872][ T7056] veth0_vlan: left promiscuous mode [ 817.101060][ T5881] dvb_usb_ec168 2-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 817.124677][ T5881] usb 2-1: USB disconnect, device number 36 [ 817.570738][T15802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 817.647015][T15802] Bluetooth: hci4: command tx timeout [ 819.726233][T15802] Bluetooth: hci4: command tx timeout [ 820.142299][T15884] fuse: Bad value for 'user_id' [ 820.157952][T15886] Cannot find add_set index 0 as target [ 820.166339][T15884] fuse: Bad value for 'user_id' [ 820.605918][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 820.627895][ T7056] team0 (unregistering): Port device team_slave_1 removed [ 820.741596][ T7056] team0 (unregistering): Port device team_slave_0 removed [ 820.815725][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 820.829289][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 820.896476][ T9] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 820.937027][ T9] usb 5-1: can't read configurations, error -71 [ 821.426980][ T6144] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 821.479738][ T6144] Bluetooth: hci5: Frame reassembly failed (-84) [ 822.879675][T15796] team0: Port device team_slave_0 added [ 822.899184][T15796] team0: Port device team_slave_1 added [ 823.036839][T15872] bond0: (slave wlan1): Releasing backup interface [ 823.146597][T15796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.154070][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.193072][T15796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.212560][T15796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.219853][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 823.254535][T15796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.408326][T15802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 823.863646][T15915] fuse: Bad value for 'fd' [ 824.421023][T15796] hsr_slave_0: entered promiscuous mode [ 824.585801][T15796] hsr_slave_1: entered promiscuous mode [ 824.646167][T15796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 824.653791][T15796] Cannot create hsr debugfs directory [ 824.770853][ T5884] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 825.218828][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 825.267360][ T5884] usb 5-1: unable to get BOS descriptor or descriptor too short [ 825.291015][ T5884] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 825.299172][T15929] random: crng reseeded on system resumption [ 825.316217][ T5884] usb 5-1: can't read configurations, error -71 [ 826.042834][T15796] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 826.065491][T15796] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 826.085114][T15796] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 826.103841][T15796] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 826.315646][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.360078][T15796] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.399278][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.406468][ T7056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.440634][ T7050] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.447815][ T7050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.594752][T15796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 826.627928][T15796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 828.355318][T15796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 828.360689][T15955] fuse: Bad value for 'fd' [ 829.180280][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 829.623737][T15796] veth0_vlan: entered promiscuous mode [ 829.681493][T15796] veth1_vlan: entered promiscuous mode [ 829.853514][T15796] veth0_macvtap: entered promiscuous mode [ 829.926796][ T5881] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 829.963167][T15979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3148'. [ 830.069775][T15979] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20080 - 0 [ 830.079339][T15979] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20080 - 0 [ 830.088265][T15979] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20080 - 0 [ 830.097153][T15979] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20080 - 0 [ 830.106392][T15979] geneve2: entered promiscuous mode [ 830.111717][T15979] geneve2: entered allmulticast mode [ 830.241722][T15796] veth1_macvtap: entered promiscuous mode [ 830.327170][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 830.381098][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 830.597364][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 830.604979][ T5881] usb 2-1: can't read configurations, error -71 [ 830.634393][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.651127][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.819114][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.830519][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.846916][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 831.587003][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.669434][T15796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.753721][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.764792][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.775222][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.786032][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.796853][T15796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.815564][T15796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.828309][T15796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.854300][T15796] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.865355][T15796] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.877053][T15796] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.886298][T15796] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.968946][T15993] fuse: Bad value for 'fd' [ 832.413124][T13873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.426939][T13873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.527848][T13873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.535749][T13873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.986377][T16029] fuse: Bad value for 'fd' [ 836.187473][T13574] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 836.337400][T13574] usb 2-1: Using ep0 maxpacket: 32 [ 836.345294][T13574] usb 2-1: unable to get BOS descriptor or descriptor too short [ 836.373307][T13574] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 836.403329][T13574] usb 2-1: can't read configurations, error -71 [ 836.417599][T16038] No such timeout policy "syz0" [ 837.206701][T16043] loop6: detected capacity change from 0 to 128 [ 837.483914][T16043] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 839.281260][ T5884] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 839.440846][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 839.452002][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.462412][ T5884] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.475688][ T5884] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 839.512830][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.539819][ T5884] usb 2-1: config 0 descriptor?? [ 840.121293][T16064] fuse: Bad value for 'fd' [ 841.130958][ T7056] Bluetooth: hci5: Frame reassembly failed (-84) [ 841.131003][T13873] Bluetooth: hci6: Frame reassembly failed (-84) [ 842.259973][ T5884] usb 2-1: USB disconnect, device number 41 [ 842.778305][T13574] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 842.798223][T16087] loop7: detected capacity change from 0 to 1024 [ 842.818985][T16087] EXT4-fs: Ignoring removed orlov option [ 842.876158][T16087] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 842.990483][T13574] usb 5-1: Using ep0 maxpacket: 32 [ 843.007153][T13574] usb 5-1: unable to get BOS descriptor or descriptor too short [ 843.008159][T16087] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 843.015915][T13574] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 843.046816][T13574] usb 5-1: can't read configurations, error -71 [ 843.176152][ T5841] Bluetooth: hci6: command 0x1003 tx timeout [ 843.183671][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 843.185624][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 843.198682][T15802] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 843.483118][T15796] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.705151][T16094] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3183'. [ 847.133635][ T5883] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 847.362190][ T5883] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 847.378719][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.418003][ T5883] usb 7-1: Product: syz [ 847.439982][ T5883] usb 7-1: Manufacturer: syz [ 847.465107][ T5883] usb 7-1: SerialNumber: syz [ 847.499527][ T5883] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 847.537494][ T5884] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 847.774041][ T7047] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 847.850679][ T7047] Bluetooth: hci5: Frame reassembly failed (-84) [ 847.902678][T16123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.980964][T14988] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 848.227916][T16123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.478789][T14988] usb 1-1: Using ep0 maxpacket: 32 [ 848.509723][T14988] usb 1-1: unable to get BOS descriptor or descriptor too short [ 848.567029][ T5881] usb 7-1: USB disconnect, device number 40 [ 848.587714][T14988] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 848.613253][ T5884] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 848.620448][ T5884] ath9k_htc: Failed to initialize the device [ 848.680394][T14988] usb 1-1: can't read configurations, error -71 [ 849.329107][ T5881] usb 7-1: ath9k_htc: USB layer deinitialized [ 849.899149][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 851.782104][T16177] loop1: detected capacity change from 0 to 1024 [ 851.791947][T16177] EXT4-fs: Ignoring removed orlov option [ 851.802405][T16177] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 851.861828][T16177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.226288][T15053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.957525][T16193] Cannot find map_set index 0 as target [ 853.169354][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 853.199614][ T5884] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 853.679808][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 853.766490][ T5884] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 853.798041][ T5884] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 854.052240][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 854.060521][ T5884] usb 1-1: Product: syz [ 854.064716][ T5884] usb 1-1: Manufacturer: syz [ 854.069406][ T5884] usb 1-1: SerialNumber: syz [ 854.088580][ T5884] usb 1-1: config 0 descriptor?? [ 854.094899][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 854.103551][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 854.112434][ T5884] ims_pcu 1-1:0.0: Zero length descriptor [ 854.118179][ T5884] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 854.128194][ T9] usb 2-1: can't read configurations, error -71 [ 854.325846][ T5884] usb 1-1: USB disconnect, device number 56 [ 854.572105][T16211] binder: 16209:16211 ioctl 4018620d 0 returned -22 [ 855.347057][ T7050] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 855.623030][T16226] loop1: detected capacity change from 0 to 1024 [ 855.634899][T16226] EXT4-fs: Ignoring removed orlov option [ 855.736479][T16226] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 855.753584][T15896] Bluetooth: hci5: Frame reassembly failed (-84) [ 856.356004][T16226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.589055][T15053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.921510][T16245] No such timeout policy "syz0" [ 857.509215][T15802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 857.885177][T16248] loop7: detected capacity change from 0 to 128 [ 857.966161][T16248] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 858.599959][ T974] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 858.771457][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 859.184196][T16259] Cannot find map_set index 0 as target [ 859.369856][T16264] binder: 16260:16264 ioctl 4018620d 0 returned -22 [ 859.450599][T14988] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 860.010804][T14988] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 860.029530][T14988] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 860.039875][T14988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 860.048477][T14988] usb 5-1: Product: syz [ 860.546425][T14988] usb 5-1: Manufacturer: syz [ 860.565988][T14988] usb 5-1: SerialNumber: syz [ 860.598485][T14988] usb 5-1: config 0 descriptor?? [ 860.615845][T14988] ims_pcu 5-1:0.0: Zero length descriptor [ 860.628877][T14988] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 861.394112][ T9] usb 5-1: USB disconnect, device number 54 [ 861.447229][ T974] usb 1-1: unable to get BOS descriptor or descriptor too short [ 861.455823][ T974] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 861.495140][ T974] usb 1-1: can't read configurations, error -71 [ 862.254752][T16287] No such timeout policy "syz0" [ 862.491265][ T974] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 863.065163][T16291] loop7: detected capacity change from 0 to 128 [ 863.356992][T16291] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 864.503010][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.513440][ T974] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 864.522653][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.540793][ T974] usb 1-1: config 0 descriptor?? [ 864.548660][ T974] pwc: Askey VC010 type 2 USB webcam detected. [ 864.572043][T15802] Bluetooth: hci5: sending frame failed (-49) [ 864.580400][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 864.595205][T15802] Bluetooth: hci6: sending frame failed (-49) [ 864.606004][ T5837] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 864.745932][T16305] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 865.026873][ T974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 865.063214][ T974] pwc: recv_control_msg error -32 req 02 val 2700 [ 865.084443][ T974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 865.097924][ T974] pwc: recv_control_msg error -32 req 04 val 1000 [ 865.126345][ T974] pwc: recv_control_msg error -32 req 04 val 1300 [ 865.189173][ T974] pwc: recv_control_msg error -32 req 04 val 1400 [ 865.221105][ T974] pwc: recv_control_msg error -32 req 02 val 2000 [ 865.431750][ T974] pwc: recv_control_msg error -71 req 04 val 1500 [ 865.469184][ T974] pwc: recv_control_msg error -71 req 02 val 2500 [ 865.484432][ T974] pwc: recv_control_msg error -71 req 02 val 2400 [ 865.511757][ T974] pwc: recv_control_msg error -71 req 02 val 2600 [ 865.532120][ T974] pwc: recv_control_msg error -71 req 02 val 2900 [ 865.557405][ T974] pwc: recv_control_msg error -71 req 02 val 2800 [ 865.571103][ T974] pwc: recv_control_msg error -71 req 04 val 1100 [ 865.588293][ T974] pwc: recv_control_msg error -71 req 04 val 1200 [ 865.610562][ T974] pwc: Registered as video103. [ 865.629546][ T974] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 865.670020][ T974] usb 1-1: USB disconnect, device number 58 [ 866.836782][T16314] binder: 16310:16314 ioctl 4018620d 0 returned -22 [ 867.076211][T16320] loop1: detected capacity change from 0 to 1024 [ 867.090626][T16320] EXT4-fs: Ignoring removed orlov option [ 867.100844][T16320] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 867.335756][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 867.472601][T16320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 867.543028][T15053] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 868.880304][T16339] No such timeout policy "syz0" [ 869.637103][T16342] loop4: detected capacity change from 0 to 128 [ 869.724702][T16342] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 870.295330][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.308218][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.346604][T16365] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 875.990384][T16395] binder: 16388:16395 ioctl 4018620d 0 returned -22 [ 876.476858][T16397] random: crng reseeded on system resumption [ 876.845390][T16407] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 878.922555][ T974] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 879.086372][ T974] usb 1-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=28.ba [ 879.112274][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.176140][ T974] usb 1-1: Product: syz [ 879.180360][ T974] usb 1-1: Manufacturer: syz [ 879.226403][ T974] usb 1-1: SerialNumber: syz [ 879.282648][ T7056] Bluetooth: hci5: Frame reassembly failed (-84) [ 879.303546][ T974] usb 1-1: config 0 descriptor?? [ 879.529959][ T974] usb 1-1: USB disconnect, device number 59 [ 880.148857][T16433] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3284'. [ 881.263469][T15802] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 881.449980][T16439] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 882.820161][T16454] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 883.461479][T16457] random: crng reseeded on system resumption [ 883.542842][ T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 883.810654][ T9] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 884.300428][ T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 884.320205][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 884.328566][ T9] usb 7-1: Product: syz [ 884.332914][ T9] usb 7-1: Manufacturer: syz [ 884.337528][ T9] usb 7-1: SerialNumber: syz [ 884.348979][ T9] usb 7-1: config 0 descriptor?? [ 884.356770][ T9] ims_pcu 7-1:0.0: Zero length descriptor [ 884.362557][ T9] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 885.290364][ T5829] usb 7-1: USB disconnect, device number 41 [ 887.103310][ T974] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 887.464617][ T974] usb 1-1: device descriptor read/all, error -71 [ 887.577847][T16504] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3303'. [ 888.829556][T16511] random: crng reseeded on system resumption [ 889.232869][T16517] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 890.806755][T16527] Cannot find map_set index 0 as target [ 892.003765][ T5883] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 892.484295][ T5883] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 892.501539][ T5883] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 892.510794][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 892.594605][T16546] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3316'. [ 892.641175][ T5883] usb 5-1: Product: syz [ 892.652137][ T5883] usb 5-1: Manufacturer: syz [ 892.813802][ T5883] usb 5-1: SerialNumber: syz [ 893.088521][ T5883] usb 5-1: config 0 descriptor?? [ 893.231342][ T5883] ims_pcu 5-1:0.0: Zero length descriptor [ 893.237372][ T5883] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 893.449917][ T974] usb 5-1: USB disconnect, device number 55 [ 893.724701][T16555] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 896.248743][T16578] random: crng reseeded on system resumption [ 897.879192][T16592] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3331'. [ 897.940094][T16588] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3334'. [ 898.201499][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 898.355519][T16599] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 898.980361][T16604] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 899.434707][T15609] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 899.551985][T16615] hub 6-0:1.0: USB hub found [ 899.601048][T16615] hub 6-0:1.0: 1 port detected [ 899.611029][T15609] usb 7-1: too many configurations: 151, using maximum allowed: 8 [ 899.653599][T15609] usb 7-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 899.680203][T15609] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 899.709327][T15609] usb 7-1: Product: syz [ 899.713576][T15609] usb 7-1: Manufacturer: syz [ 899.736080][T15609] usb 7-1: SerialNumber: syz [ 899.794696][T15609] usb 7-1: config 0 descriptor?? [ 899.850498][T15609] ims_pcu 7-1:0.0: Zero length descriptor [ 900.294816][T15609] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22 [ 900.336611][T15609] usb 7-1: USB disconnect, device number 42 [ 901.603404][T16634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3346'. [ 903.053031][T16628] bridge_slave_0: left allmulticast mode [ 903.079602][T16628] bridge_slave_0: left promiscuous mode [ 903.768315][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.339104][T16628] bridge_slave_1: left allmulticast mode [ 904.344762][T16628] bridge_slave_1: left promiscuous mode [ 904.692567][T16659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3352'. [ 905.015560][ T974] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 905.427620][T16662] random: crng reseeded on system resumption [ 905.433838][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.452717][T16628] bond0: (slave bond_slave_0): Releasing backup interface [ 905.512902][T16628] bond0: (slave bond_slave_1): Releasing backup interface [ 906.090686][ T974] usb 2-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=28.ba [ 906.103525][ T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.131951][ T974] usb 2-1: Product: syz [ 906.163021][ T974] usb 2-1: Manufacturer: syz [ 906.175285][ T974] usb 2-1: SerialNumber: syz [ 906.192715][ T974] usb 2-1: config 0 descriptor?? [ 906.255592][T16628] team0: Port device team_slave_0 removed [ 906.303025][T16628] team0: Port device team_slave_1 removed [ 906.323179][T16628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 906.332931][T16628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.762141][T16628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.791692][T16628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.044032][T16681] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3358'. [ 908.803193][ T974] usb 2-1: USB disconnect, device number 44 [ 909.410492][T16694] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3363'. [ 909.815745][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 909.965854][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 909.984850][ T9] usb 5-1: config index 0 descriptor too short (expected 32410, got 154) [ 910.022791][ T9] usb 5-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 910.047521][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.119021][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 39 [ 910.143474][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.206827][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.255237][ T9] usb 5-1: Product: syz [ 910.269895][ T9] usb 5-1: Manufacturer: syz [ 910.275058][ T9] usb 5-1: SerialNumber: syz [ 910.874051][ T9] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 910.901684][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 910.913164][ T9] usb 5-1: USB disconnect, device number 56 [ 911.509838][T16714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3371'. [ 912.882133][T16725] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3369'. [ 913.356191][T16726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3372'. [ 913.480868][T16728] No control pipe specified [ 914.060908][T16744] bridge_slave_0: left allmulticast mode [ 914.076207][T16744] bridge_slave_0: left promiscuous mode [ 914.111039][T16744] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.145863][T16744] bridge_slave_1: left allmulticast mode [ 914.155911][T16744] bridge_slave_1: left promiscuous mode [ 914.156274][ T974] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 914.371922][ T974] usb 7-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=28.ba [ 914.397061][ T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.585662][ T974] usb 7-1: Product: syz [ 914.676800][T16744] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.684678][ T974] usb 7-1: Manufacturer: syz [ 914.689466][ T974] usb 7-1: SerialNumber: syz [ 914.695733][ T974] usb 7-1: config 0 descriptor?? [ 914.731562][T16744] bond0: (slave bond_slave_0): Releasing backup interface [ 914.812145][ T5884] usb 7-1: USB disconnect, device number 43 [ 914.839287][T16744] bond0: (slave bond_slave_1): Releasing backup interface [ 915.548008][T16760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3382'. [ 917.223181][T16744] team0: Port device team_slave_0 removed [ 917.256874][T16772] No control pipe specified [ 917.263964][T16744] team0: Port device team_slave_1 removed [ 917.277860][T16744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 917.404685][T16744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 917.436342][T16744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 917.520094][T16776] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3386'. [ 918.145547][T16744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.898762][T16818] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3399'. [ 921.920045][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3400'. [ 922.315531][T16826] Cannot find set identified by id 0 to match [ 922.746118][T16834] Cannot find add_set index 0 as target [ 925.671365][T16869] No such timeout policy "syz0" [ 926.810794][T16877] loop6: detected capacity change from 0 to 128 [ 926.886071][T16871] Cannot find set identified by id 0 to match [ 927.038021][T16877] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 927.136400][T16880] Cannot find set identified by id 0 to match [ 927.646807][T16890] autofs: Bad value for 'fd' [ 928.326144][T16901] Cannot find add_set index 0 as target [ 929.021488][T16910] Cannot find set identified by id 0 to match [ 929.856094][T16914] Cannot find set identified by id 0 to match [ 930.082385][T16923] autofs: Bad value for 'fd' [ 930.238393][ T974] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 930.255770][T16925] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3433'. [ 930.418363][ T974] usb 2-1: Using ep0 maxpacket: 32 [ 930.433246][ T974] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 931.468173][ T974] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.528401][ T974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 931.558007][ T974] usb 2-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 931.582196][ T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.642893][ T974] usb 2-1: config 0 descriptor?? [ 931.750330][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.761940][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.113494][ T974] wacom 0003:056A:00C4.0012: unknown main item tag 0x0 [ 932.121449][T16941] Cannot find set identified by id 0 to match [ 932.133016][ T974] wacom 0003:056A:00C4.0012: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.1-1/input0 [ 932.322174][ T974] usb 2-1: USB disconnect, device number 45 [ 932.706451][T16947] Cannot find add_set index 0 as target [ 933.089840][T16956] autofs: Unknown parameter '0x0000000000000000' [ 933.662752][T16967] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 933.669892][T16967] PKCS7: Only support pkcs7_signedData type [ 933.928678][T15802] Bluetooth: hci4: command 0x0406 tx timeout [ 934.144226][T16985] autofs: Unknown parameter '0x0000000000000000' [ 934.762868][ T5884] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 934.833886][T16999] lo speed is unknown, defaulting to 1000 [ 935.748851][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 935.790493][ T5884] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 935.812954][ T5884] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.823321][ T5884] usb 1-1: config 0 interface 0 has no altsetting 0 [ 935.831427][ T5884] usb 1-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 935.840817][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.851509][ T5884] usb 1-1: config 0 descriptor?? [ 936.334117][ T5884] wacom 0003:056A:00C4.0013: unknown main item tag 0x0 [ 936.413260][ T5884] wacom 0003:056A:00C4.0013: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.0-1/input0 [ 936.614715][ T5884] usb 1-1: USB disconnect, device number 62 [ 937.797925][T17038] random: crng reseeded on system resumption [ 937.868944][T17039] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3474'. [ 938.663498][T17045] hub 6-0:1.0: USB hub found [ 939.422497][T17045] hub 6-0:1.0: 1 port detected [ 940.537476][T17065] Cannot find map_set index 0 as target [ 940.629609][T17067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 940.636907][T17067] IPv6: NLM_F_CREATE should be set when creating new route [ 941.394486][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3486'. [ 944.444217][T17106] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 944.451602][T17106] IPv6: NLM_F_CREATE should be set when creating new route [ 944.631811][T17115] fuse: Unknown parameter '0x0000000000000003' [ 946.768686][T17135] Cannot find map_set index 0 as target [ 946.819958][T15609] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 946.960095][T15609] usb 1-1: device descriptor read/64, error -71 [ 947.040223][ T5829] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 947.210722][ T5829] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 947.220008][T15609] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 947.253127][ T5829] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 947.279117][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 947.295918][ T5829] usb 5-1: Product: syz [ 947.300840][ T5829] usb 5-1: Manufacturer: syz [ 947.305862][ T5829] usb 5-1: SerialNumber: syz [ 947.313295][ T5829] usb 5-1: config 0 descriptor?? [ 948.168584][T15609] usb 1-1: device descriptor read/64, error -71 [ 948.704720][T15609] usb usb1-port1: attempt power cycle [ 948.713566][ T5829] ims_pcu 5-1:0.0: Zero length descriptor [ 948.719433][ T5829] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 948.725015][T17149] fuse: Unknown parameter '0x0000000000000003' [ 948.837583][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'. [ 948.877317][T17151] dccp_invalid_packet: P.Data Offset(243) too large [ 949.094455][ T974] usb 5-1: USB disconnect, device number 57 [ 949.160328][T15609] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 949.187958][T15609] usb 1-1: device descriptor read/8, error -71 [ 949.574600][T15609] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 949.630234][T15609] usb 1-1: device descriptor read/8, error -71 [ 949.858709][T15609] usb usb1-port1: unable to enumerate USB device [ 949.883584][T17159] Cannot find set identified by id 0 to match [ 951.227224][T17178] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3521'. [ 952.324475][T17187] fuse: Unknown parameter '0x0000000000000003' [ 952.349066][T17189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3525'. [ 952.410940][T17189] dccp_invalid_packet: P.Data Offset(243) too large [ 953.922359][T17202] Cannot find map_set index 0 as target [ 954.140929][ T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 954.180955][ T5884] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 954.309868][ T9] usb 1-1: device descriptor read/64, error -71 [ 954.332358][ T5884] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 954.354931][ T5884] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 954.370496][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 954.388317][ T5884] usb 5-1: Product: syz [ 954.396901][ T5884] usb 5-1: Manufacturer: syz [ 954.406922][ T5884] usb 5-1: SerialNumber: syz [ 954.420136][ T5884] usb 5-1: config 0 descriptor?? [ 954.441625][ T5884] ims_pcu 5-1:0.0: Zero length descriptor [ 954.455224][ T5884] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 954.560791][ T9] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 954.647768][ T5884] usb 5-1: USB disconnect, device number 58 [ 954.710785][ T9] usb 1-1: device descriptor read/64, error -71 [ 954.837537][ T9] usb usb1-port1: attempt power cycle [ 955.471695][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 955.757396][ T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 956.542116][ T9] usb 1-1: device descriptor read/8, error -71 [ 956.668479][T17228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3538'. [ 956.731904][T17228] dccp_invalid_packet: P.Data Offset(243) too large [ 958.090476][T17248] ax25_connect(): syz.1.3543 uses autobind, please contact jreuter@yaina.de [ 958.968563][ T35] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 959.032118][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 960.331438][T15609] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 960.461568][ T974] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 960.469307][T15609] usb 2-1: device descriptor read/64, error -71 [ 960.649087][ T974] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 960.724926][ T974] usb 1-1: config 0 has no interface number 1 [ 960.731557][T15609] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 960.782496][ T974] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 960.857105][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.902237][T15609] usb 2-1: device descriptor read/64, error -71 [ 961.023481][T15802] Bluetooth: hci5: command 0x1003 tx timeout [ 961.030127][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 961.064424][T15609] usb usb2-port1: attempt power cycle [ 961.096720][ T974] usb 1-1: config 0 descriptor?? [ 961.223185][ T974] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 961.230616][ T974] usb 1-1: MIDIStreaming interface descriptor not found [ 961.319143][ T974] gspca_main: spca561-2.14.0 probing abcd:cdee [ 961.556891][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3551'. [ 961.591581][T15609] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 961.612216][T15609] usb 2-1: device descriptor read/8, error -71 [ 961.638135][T17272] dccp_invalid_packet: P.Data Offset(243) too large [ 961.848980][ T974] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 961.859065][ T974] usb 1-1: USB disconnect, device number 71 [ 961.933543][T15609] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 961.982280][T15609] usb 2-1: device descriptor read/8, error -71 [ 962.886563][T15609] usb usb2-port1: unable to enumerate USB device [ 964.979222][T17308] Cannot find set identified by id 0 to match [ 965.271491][T17318] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 965.280716][T17318] PKCS7: Only support pkcs7_signedData type [ 966.372109][ T5884] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 966.525594][ T5884] usb 1-1: device descriptor read/64, error -71 [ 966.802164][T15609] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 966.973948][T15609] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 967.004026][T15609] usb 7-1: config 0 has no interface number 1 [ 967.010192][T15609] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 967.038396][T15609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.105284][T15609] usb 7-1: config 0 descriptor?? [ 967.154323][T15609] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 967.171711][T15609] usb 7-1: MIDIStreaming interface descriptor not found [ 967.172181][ T5884] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 967.247406][T15609] gspca_main: spca561-2.14.0 probing abcd:cdee [ 967.393099][ T5884] usb 1-1: device descriptor read/64, error -71 [ 967.533028][ T5884] usb usb1-port1: attempt power cycle [ 967.794388][T15609] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 967.992981][ T5884] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 968.226125][ T5884] usb 1-1: device descriptor read/8, error -71 [ 968.602322][ T5884] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 968.630666][T15609] usb 7-1: USB disconnect, device number 44 [ 968.642936][ T5884] usb 1-1: device descriptor read/8, error -71 [ 968.762601][ T5884] usb usb1-port1: unable to enumerate USB device [ 972.782893][T13574] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 972.947806][T13574] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 973.182154][T17385] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 973.191021][T17385] PKCS7: Only support pkcs7_signedData type [ 973.332821][T13574] usb 7-1: config 0 has no interface number 1 [ 973.596727][T13574] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 973.606187][T13574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.650313][T13574] usb 7-1: config 0 descriptor?? [ 973.661054][T13574] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 973.669098][T13574] usb 7-1: MIDIStreaming interface descriptor not found [ 973.695076][T13574] gspca_main: spca561-2.14.0 probing abcd:cdee [ 974.236867][T13574] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 975.423392][T13574] usb 7-1: USB disconnect, device number 45 [ 976.625116][T16265] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 976.783229][T16265] usb 2-1: device descriptor read/64, error -71 [ 976.833302][ T9] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 977.076556][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 977.093280][T16265] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 977.113035][ T9] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 977.153665][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.253470][T16265] usb 2-1: device descriptor read/64, error -71 [ 977.255123][ T9] usb 7-1: config 0 descriptor?? [ 977.400452][T16265] usb usb2-port1: attempt power cycle [ 978.126654][T16265] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 978.155752][T16265] usb 2-1: device descriptor read/8, error -71 [ 978.356533][ T9] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 978.366770][ T9] asix 7-1:0.0: probe with driver asix failed with error -32 [ 978.453998][T16265] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 978.494406][T16265] usb 2-1: device descriptor read/8, error -71 [ 978.609330][T16265] usb usb2-port1: unable to enumerate USB device [ 979.733652][ T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 979.898581][ T9] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 980.108607][ T9] usb 2-1: config 0 has no interface number 1 [ 980.116250][ T9] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 980.125522][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.167553][ T9] usb 2-1: config 0 descriptor?? [ 980.196880][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 980.219212][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 980.224891][T16265] usb 7-1: USB disconnect, device number 46 [ 980.278494][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 980.602314][T17452] hub 6-0:1.0: USB hub found [ 980.608031][T17452] hub 6-0:1.0: 1 port detected [ 981.227530][ T9] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 981.868241][ T5829] usb 2-1: USB disconnect, device number 54 [ 983.254232][ T5829] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 983.316725][T17471] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 983.323339][T17471] PKCS7: Only support pkcs7_signedData type [ 983.434185][ T5829] usb 7-1: Using ep0 maxpacket: 32 [ 983.442904][ T5829] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 983.459356][ T5829] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.494077][ T5829] usb 7-1: config 0 interface 0 has no altsetting 0 [ 983.513974][ T5829] usb 7-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 983.523359][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.554178][ T5829] usb 7-1: config 0 descriptor?? [ 983.794198][ T9] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 984.319612][ T9] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 984.528566][ T5829] wacom 0003:056A:00C4.0014: unknown main item tag 0x0 [ 984.528985][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 984.579940][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 984.621477][ T5829] wacom 0003:056A:00C4.0014: hidraw0: USB HID v0.00 Device [HID 056a:00c4] on usb-dummy_hcd.6-1/input0 [ 984.624180][ T9] usb 2-1: Product: syz [ 984.682768][ T9] usb 2-1: Manufacturer: syz [ 984.731600][T16265] usb 7-1: USB disconnect, device number 47 [ 984.734721][ T9] usb 2-1: SerialNumber: syz [ 985.206379][ T9] usb 2-1: config 0 descriptor?? [ 985.216195][ T9] ims_pcu 2-1:0.0: Zero length descriptor [ 985.222058][ T9] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 985.500887][T16265] usb 2-1: USB disconnect, device number 55 [ 989.884705][ T5883] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 991.394870][ T5883] usb 7-1: device descriptor read/all, error -71 [ 992.324471][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'. [ 993.221469][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.227839][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.466533][ T5837] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 996.069882][T17538] binder: 17535:17538 ioctl 4018620d 0 returned -22 [ 997.215502][T16488] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 997.835278][T16488] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 997.870348][T16488] usb 1-1: config 0 has no interface number 1 [ 997.881385][T16488] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 997.890644][T16488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.903350][T16488] usb 1-1: config 0 descriptor?? [ 997.948533][T16488] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 997.955650][T16488] usb 1-1: MIDIStreaming interface descriptor not found [ 998.375407][T16488] gspca_main: spca561-2.14.0 probing abcd:cdee [ 998.388624][ T7047] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 998.468174][ T6144] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 998.493612][ T6144] Bluetooth: hci5: Frame reassembly failed (-84) [ 999.016322][T16488] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 999.804966][ T5883] usb 1-1: USB disconnect, device number 76 [ 999.908914][T17582] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 999.927628][T17582] PKCS7: Only support pkcs7_signedData type [ 1000.120139][T17586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1000.127436][T17586] IPv6: NLM_F_CREATE should be set when creating new route [ 1000.403133][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1002.256095][ T5880] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1002.407587][ T5880] usb 7-1: Using ep0 maxpacket: 32 [ 1002.414783][ T5880] usb 7-1: config index 0 descriptor too short (expected 32410, got 154) [ 1002.437597][ T5880] usb 7-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 1002.466084][ T5880] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.506030][ T5880] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 39 [ 1002.529159][ T5880] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1002.556669][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.575344][ T5880] usb 7-1: Product: syz [ 1002.596327][ T5880] usb 7-1: Manufacturer: syz [ 1002.616195][ T5880] usb 7-1: SerialNumber: syz [ 1003.212486][ T5880] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1003.673975][ T5880] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1003.696580][ T5880] usb 7-1: USB disconnect, device number 50 [ 1005.180203][ T7050] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1006.136668][T16265] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1006.321904][T16265] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 1006.339349][T16265] usb 7-1: config 0 has no interface number 1 [ 1006.360021][T16265] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1006.391829][T16265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.423630][T16265] usb 7-1: config 0 descriptor?? [ 1006.454880][T16265] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1006.484553][T16265] usb 7-1: MIDIStreaming interface descriptor not found [ 1006.552218][T16265] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1007.097698][T16265] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1007.189135][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1008.531221][T17659] syz.7.3666 uses old SIOCAX25GETINFO [ 1009.431191][T17677] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3672'. [ 1009.455408][T17670] Cannot find map_set index 0 as target [ 1009.497848][T16265] usb 7-1: USB disconnect, device number 51 [ 1009.806973][ T5883] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1009.866179][T17681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3671'. [ 1010.628504][ T5883] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 1010.699747][ T5883] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1010.741868][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1010.872344][ T5883] usb 2-1: Product: syz [ 1010.897094][ T5883] usb 2-1: Manufacturer: syz [ 1010.902031][ T5883] usb 2-1: SerialNumber: syz [ 1010.908957][ T5883] usb 2-1: config 0 descriptor?? [ 1011.105364][ T5883] ims_pcu 2-1:0.0: Zero length descriptor [ 1011.113648][ T5883] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1011.333043][ T5883] usb 2-1: USB disconnect, device number 56 [ 1012.416850][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1012.443607][T17706] dccp_invalid_packet: P.Data Offset(243) too large [ 1015.227740][T15609] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1015.368905][T17734] lo speed is unknown, defaulting to 1000 [ 1015.990140][T17736] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1016.349469][T15609] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1016.382858][T15609] usb 1-1: config 0 has no interface number 1 [ 1016.413857][T15609] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1016.692417][T15609] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.702967][T15609] usb 1-1: config 0 descriptor?? [ 1018.170789][T17746] veth0_to_team: entered promiscuous mode [ 1018.176881][T17746] veth0_to_team: entered allmulticast mode [ 1018.288534][T17753] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3691'. [ 1018.407654][T17753] batman_adv: batadv2: Adding interface: netdevsim0 [ 1018.444622][T17753] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.493561][T17753] batman_adv: batadv2: Interface activated: netdevsim0 [ 1018.512658][T17756] dccp_invalid_packet: P.Data Offset(243) too large [ 1019.086091][T15609] usb 1-1: can't set config #0, error -71 [ 1019.145178][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1019.165187][T15609] usb 1-1: USB disconnect, device number 77 [ 1021.073153][T17781] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3698'. [ 1022.012013][T16488] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1022.168297][T16488] usb 5-1: Using ep0 maxpacket: 32 [ 1022.180920][T16488] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1022.192819][T16488] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.280888][T16488] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1022.317218][ T53] Bluetooth: hci5: Frame reassembly failed (-84) [ 1022.418253][T16488] usb 5-1: New USB device found, idVendor=056a, idProduct=00c4, bcdDevice= 0.00 [ 1022.548928][T16488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.749025][T16488] usb 5-1: config 0 descriptor?? [ 1022.754430][T16488] usb 5-1: can't set config #0, error -71 [ 1022.763785][T16488] usb 5-1: USB disconnect, device number 59 [ 1023.488600][T16488] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1023.664346][T16488] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1023.703242][T16488] usb 5-1: config 0 has no interface number 1 [ 1023.788550][T16488] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1023.853316][T16488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.889259][T16488] usb 5-1: config 0 descriptor?? [ 1023.915837][T16488] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1023.934206][T16488] usb 5-1: MIDIStreaming interface descriptor not found [ 1023.977620][T16488] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1024.243177][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1024.538787][T16488] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 1025.644373][T17800] 9pnet_fd: Insufficient options for proto=fd [ 1026.266877][T16265] usb 5-1: USB disconnect, device number 60 [ 1026.609639][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3710'. [ 1027.668786][ T7043] Bluetooth: hci5: Frame reassembly failed (-84) [ 1028.929889][ T29] audit: type=1326 audit(1732695782.427:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17845 comm="syz.4.3717" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7910f80809 code=0x0 [ 1029.361354][T17852] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1030.310635][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1032.770164][T17870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1034.409559][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1034.865518][T17892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3730'. [ 1037.369614][T17909] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3736'. [ 1039.543714][T17929] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3742'. [ 1040.699805][T17933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1040.707171][T17933] IPv6: NLM_F_CREATE should be set when creating new route [ 1041.650871][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3748'. [ 1044.893064][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1045.129716][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1045.159988][ T9] usb 7-1: config index 0 descriptor too short (expected 32410, got 154) [ 1045.409705][ T9] usb 7-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 1045.429198][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.564893][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 39 [ 1045.576402][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1045.585681][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.596791][ T9] usb 7-1: Product: syz [ 1045.601574][ T9] usb 7-1: Manufacturer: syz [ 1045.606178][ T9] usb 7-1: SerialNumber: syz [ 1045.629524][T17988] Cannot find set identified by id 0 to match [ 1045.639486][T17991] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3764'. [ 1045.989188][ T9] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1046.017568][ T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1046.862862][ T9] usb 7-1: USB disconnect, device number 52 [ 1047.998212][T18012] Cannot find map_set index 0 as target [ 1048.404375][T18006] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1048.410344][T18006] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1048.446696][T18006] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1048.457131][T18006] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1048.489556][T18006] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1048.506209][T18006] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1048.791653][ T974] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1049.283535][T13574] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1049.476327][T13574] usb 7-1: config 0 has an invalid interface number: 156 but max is 1 [ 1049.573204][T13574] usb 7-1: config 0 has no interface number 1 [ 1049.649479][T13574] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1049.659979][ T974] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 1049.668235][T13574] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.670027][T13574] usb 7-1: config 0 descriptor?? [ 1049.722541][T13574] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1049.729617][T13574] usb 7-1: MIDIStreaming interface descriptor not found [ 1049.831860][ T974] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1049.861224][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1049.890136][ T974] usb 1-1: Product: syz [ 1049.907329][ T974] usb 1-1: Manufacturer: syz [ 1049.920881][ T974] usb 1-1: SerialNumber: syz [ 1049.942887][ T974] usb 1-1: config 0 descriptor?? [ 1049.952465][T13574] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1049.962532][ T974] ims_pcu 1-1:0.0: Zero length descriptor [ 1049.971223][ T974] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 1050.194967][T15609] usb 1-1: USB disconnect, device number 78 [ 1050.568309][T13574] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 1050.624650][T18039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3777'. [ 1052.120331][T13574] usb 7-1: USB disconnect, device number 53 [ 1053.293575][T18073] No such timeout policy "syz0" [ 1053.694628][T18073] loop4: detected capacity change from 0 to 128 [ 1053.862453][T18073] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 1054.332267][T18080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1054.650329][T18083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3793'. [ 1054.681280][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.697473][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.816044][T18080] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1056.722222][T16265] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1056.787965][T13574] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1056.932036][ T5880] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1056.990295][T13574] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1057.054139][T18110] veth0_to_team: entered promiscuous mode [ 1057.059977][T18110] veth0_to_team: entered allmulticast mode [ 1057.082070][T13574] usb 5-1: config 0 has no interface number 1 [ 1057.090890][T13574] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1057.132722][ T5880] usb 2-1: device descriptor read/64, error -71 [ 1057.217790][T13574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.325751][T13574] usb 5-1: config 0 descriptor?? [ 1057.542614][ T5880] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1057.570718][T13574] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1057.611352][T13574] usb 5-1: MIDIStreaming interface descriptor not found [ 1057.642049][T16265] usb 7-1: Using ep0 maxpacket: 32 [ 1057.656335][T16265] usb 7-1: config index 0 descriptor too short (expected 32410, got 154) [ 1057.670407][T13574] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1057.677089][T16265] usb 7-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 1057.686977][T16265] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.697253][T16265] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 39 [ 1057.697277][ T5880] usb 2-1: device descriptor read/64, error -71 [ 1057.717787][T16265] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1057.727887][T16265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.736191][T16265] usb 7-1: Product: syz [ 1057.740498][T16265] usb 7-1: Manufacturer: syz [ 1057.745248][T16265] usb 7-1: SerialNumber: syz [ 1057.923092][ T5880] usb usb2-port1: attempt power cycle [ 1058.747357][T13574] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 1058.757124][T13574] usb 5-1: USB disconnect, device number 61 [ 1059.012316][ T5880] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1059.032932][ T5880] usb 2-1: device descriptor read/8, error -71 [ 1059.083952][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3807'. [ 1059.087929][T16265] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1059.101471][T18122] hub 6-0:1.0: USB hub found [ 1059.106923][T18122] hub 6-0:1.0: 1 port detected [ 1059.211962][T18127] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1059.474699][ T5880] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1059.733386][T16265] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1059.776240][ T5880] usb 2-1: device descriptor read/8, error -71 [ 1059.922688][ T5880] usb usb2-port1: unable to enumerate USB device [ 1061.070914][T18145] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3811'. [ 1061.088840][T16265] usb 7-1: USB disconnect, device number 54 [ 1061.976452][T18160] hub 6-0:1.0: USB hub found [ 1061.983039][T18160] hub 6-0:1.0: 1 port detected [ 1063.538293][T18169] hub 6-0:1.0: USB hub found [ 1063.543266][T18169] hub 6-0:1.0: 1 port detected [ 1063.651383][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 1063.715971][T18175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1063.813134][T16265] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1063.820889][ T974] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1064.011990][ T974] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 1064.020972][T16265] usb 7-1: Using ep0 maxpacket: 32 [ 1064.039842][T16265] usb 7-1: config index 0 descriptor too short (expected 32410, got 154) [ 1064.049796][ T974] usb 1-1: config 0 has no interface number 1 [ 1064.056340][T16265] usb 7-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 1064.072201][ T974] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1064.090086][T16265] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.110560][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.902813][T16265] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 39 [ 1066.101203][ T974] usb 1-1: config 0 descriptor?? [ 1066.112463][ T974] usb 1-1: can't set config #0, error -71 [ 1066.119265][T16265] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1066.129982][T18190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3826'. [ 1066.140062][T16265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.156889][T16265] usb 7-1: Product: syz [ 1066.161272][T16265] usb 7-1: Manufacturer: syz [ 1066.166040][T16265] usb 7-1: SerialNumber: syz [ 1066.183775][ T974] usb 1-1: USB disconnect, device number 79 [ 1066.304550][T16265] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1066.470603][T16265] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1066.512590][T16265] usb 7-1: USB disconnect, device number 55 [ 1069.403384][T13574] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1069.523487][T16265] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1069.593834][T13574] usb 2-1: Using ep0 maxpacket: 32 [ 1069.607822][T13574] usb 2-1: config index 0 descriptor too short (expected 32410, got 154) [ 1069.616805][T13574] usb 2-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 1069.626469][T13574] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.637827][T13574] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 39 [ 1069.651864][T13574] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.964195][T16265] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 1069.971240][T13574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.981720][T13574] usb 2-1: Product: syz [ 1069.986615][T16265] usb 5-1: config 0 has no interface number 1 [ 1069.986848][T16265] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1069.992903][T13574] usb 2-1: Manufacturer: syz [ 1070.008949][T13574] usb 2-1: SerialNumber: syz [ 1070.037964][T16265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.112910][T16265] usb 5-1: config 0 descriptor?? [ 1070.382461][T13574] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1070.404794][T13574] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1070.405405][T16265] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1070.420912][T16265] usb 5-1: MIDIStreaming interface descriptor not found [ 1070.428785][T13574] usb 2-1: USB disconnect, device number 62 [ 1070.459727][T16265] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1071.579469][T16265] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 1071.692792][T16265] usb 5-1: USB disconnect, device number 62 [ 1071.937119][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3843'. [ 1076.705657][T18296] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3857'. [ 1078.074311][T13574] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1078.164299][ T5884] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1078.246881][T13574] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1078.256743][T13574] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.285841][T13574] usb 7-1: Product: syz [ 1078.300571][T13574] usb 7-1: Manufacturer: syz [ 1078.314352][ T5884] usb 1-1: Using ep0 maxpacket: 8 [ 1078.319558][T13574] usb 7-1: SerialNumber: syz [ 1078.358958][ T5884] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1078.370200][T13574] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1078.378513][ T5884] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1078.398229][ T5885] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1078.417653][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1078.438119][ T5884] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1078.464312][ T5884] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.498423][ T5884] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1078.524456][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.625090][T18302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.654408][T18302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.765167][ T5884] usb 1-1: GET_CAPABILITIES returned 0 [ 1078.791269][ T5884] usbtmc 1-1:16.0: can't read capabilities [ 1078.996976][ T5884] usb 7-1: USB disconnect, device number 56 [ 1079.118550][T13574] usb 1-1: USB disconnect, device number 80 [ 1079.575770][ T5885] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1079.764537][ T5885] ath9k_htc: Failed to initialize the device [ 1079.773826][ T5884] usb 7-1: ath9k_htc: USB layer deinitialized [ 1080.756213][T18325] Cannot find set identified by id 0 to match [ 1081.004292][T18337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1082.145016][ T5880] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1082.814750][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 1082.833976][ T5880] usb 1-1: config index 0 descriptor too short (expected 32410, got 154) [ 1082.842872][ T5880] usb 1-1: config 1 has too many interfaces: 39, using maximum allowed: 32 [ 1082.890127][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.973931][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 39 [ 1082.997008][ T5880] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1083.006653][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.746162][ T5880] usb 1-1: Product: syz [ 1083.750432][ T5880] usb 1-1: Manufacturer: syz [ 1083.755202][ T5880] usb 1-1: SerialNumber: syz [ 1084.381417][ T5880] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1084.394503][ T5880] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1084.429165][ T5880] usb 1-1: USB disconnect, device number 81 [ 1089.145714][ T5880] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1089.813971][ T5880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1089.822118][ T5880] usb 1-1: config 0 has no interface number 0 [ 1089.839193][ T5880] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1089.848486][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.864610][ T5880] usb 1-1: Product: syz [ 1089.895716][ T5880] usb 1-1: Manufacturer: syz [ 1089.926770][ T5880] usb 1-1: SerialNumber: syz [ 1089.980820][ T5880] usb 1-1: config 0 descriptor?? [ 1090.317778][ T5880] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1090.435213][ T5880] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1090.501545][ T5880] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1090.563652][ T5880] usb 1-1: media controller created [ 1090.848109][ T5880] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1092.583517][ T5885] usb 1-1: USB disconnect, device number 82 [ 1093.371643][T18423] lo speed is unknown, defaulting to 1000 [ 1093.585978][ T5884] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1093.920196][ T5884] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1093.929648][ T5884] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.938209][ T5884] usb 7-1: Product: syz [ 1093.942436][ T5884] usb 7-1: Manufacturer: syz [ 1093.947124][ T5884] usb 7-1: SerialNumber: syz [ 1093.955561][ T5884] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1093.974795][ T5885] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1094.193560][T18427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.242885][T18427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.459456][T15609] usb 7-1: USB disconnect, device number 57 [ 1095.036749][ T5885] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1095.066503][ T5885] ath9k_htc: Failed to initialize the device [ 1095.081829][T15609] usb 7-1: ath9k_htc: USB layer deinitialized [ 1099.057341][T18477] overlayfs: missing 'workdir' [ 1102.927153][ T5885] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1103.822095][T18503] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3918'. [ 1103.831962][T18503] netlink: zone id is out of range [ 1103.837554][T18503] netlink: zone id is out of range [ 1103.842919][T18503] netlink: zone id is out of range [ 1103.848409][T18503] netlink: get zone limit has 8 unknown bytes [ 1104.255079][ T5885] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1104.264212][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.317097][ T5885] usb 7-1: Product: syz [ 1104.321295][ T5885] usb 7-1: Manufacturer: syz [ 1104.325872][ T5885] usb 7-1: SerialNumber: syz [ 1104.373129][ T5885] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1104.409094][ T9] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1105.486341][ T9] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1105.532688][T18492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.546056][T18492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.637411][ T9] ath9k_htc: Failed to initialize the device [ 1105.721929][ T9] usb 7-1: ath9k_htc: USB layer deinitialized [ 1105.812660][ T5884] usb 7-1: USB disconnect, device number 58 [ 1110.114322][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1110.128665][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1110.138170][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1110.149191][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1110.160493][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1110.171391][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1110.901706][T13873] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.951645][T18552] lo speed is unknown, defaulting to 1000 [ 1111.223736][T18569] hub 6-0:1.0: USB hub found [ 1111.228714][T18569] hub 6-0:1.0: 1 port detected [ 1111.337541][T13873] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.297015][T15802] Bluetooth: hci1: command tx timeout [ 1112.425927][T13873] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.502257][T13873] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 1112.654697][T13873] batman_adv: batadv2: Removing interface: netdevsim0 [ 1112.679850][T13873] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.709529][T18552] chnl_net:caif_netlink_parms(): no params data found [ 1112.750618][T15609] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1113.058170][T15609] usb 2-1: Using ep0 maxpacket: 8 [ 1113.681888][T15609] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1113.690505][T15609] usb 2-1: config 179 has no interface number 0 [ 1113.697666][T15609] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1113.711353][T15609] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1113.722796][T15609] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1113.734062][T15609] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1113.745536][T15609] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1113.758946][T15609] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1113.768199][T15609] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.885286][T18585] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1114.234065][ T5880] usb 2-1: USB disconnect, device number 63 [ 1114.234082][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1114.248644][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1114.318235][ T5841] Bluetooth: hci1: command tx timeout [ 1116.056841][T13873] bond0 (unregistering): Released all slaves [ 1116.084372][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.091205][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.120927][T18552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.131527][T18552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.148662][T18552] bridge_slave_0: entered allmulticast mode [ 1116.166865][T18552] bridge_slave_0: entered promiscuous mode [ 1116.180654][T18552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.208655][T18552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.247338][T18552] bridge_slave_1: entered allmulticast mode [ 1116.308666][T18552] bridge_slave_1: entered promiscuous mode [ 1116.398585][ T5841] Bluetooth: hci1: command tx timeout [ 1116.409427][T18552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.436280][T18552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.507685][T18552] team0: Port device team_slave_0 added [ 1116.613282][T18552] team0: Port device team_slave_1 added [ 1116.804909][T18552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.817164][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.548938][T18552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.603284][T18552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.627737][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1117.673641][T18552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.922802][T13873] hsr_slave_0: left promiscuous mode [ 1117.942024][T13873] hsr_slave_1: left promiscuous mode [ 1117.992706][T13873] veth1_macvtap: left promiscuous mode [ 1118.005079][T13873] veth0_macvtap: left promiscuous mode [ 1118.012643][T13873] veth1_vlan: left promiscuous mode [ 1118.018332][T18630] ecryptfs: Unknown parameter '/' [ 1118.026572][T13873] veth0_vlan: left promiscuous mode [ 1118.497119][ T5841] Bluetooth: hci1: command tx timeout [ 1120.997200][T18646] netlink: 'syz.1.3956': attribute type 4 has an invalid length. [ 1121.150390][T18648] ------------[ cut here ]------------ [ 1121.156268][T18648] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait+0x186/0x210 [ 1121.222536][T18648] WARNING: CPU: 1 PID: 18648 at kernel/sched/core.c:8685 __might_sleep+0xb9/0xe0 [ 1121.231796][T18648] Modules linked in: [ 1121.235742][T18648] CPU: 1 UID: 0 PID: 18648 Comm: syz.1.3956 Not tainted 6.12.0-next-20241127-syzkaller #0 [ 1121.245772][T18648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1121.255961][T18648] RIP: 0010:__might_sleep+0xb9/0xe0 [ 1121.261243][T18648] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ae 30 9b 00 48 8b 4d 00 48 c7 c7 80 2d 0a 8c 44 89 ee 48 89 ca e8 08 e6 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 1121.282348][T18648] RSP: 0018:ffffc9000d2665a8 EFLAGS: 00010246 [ 1121.288470][T18648] RAX: 5af3b1b2cdf99e00 RBX: 1ffff11003a632ed RCX: 0000000000080000 [ 1121.297555][T18648] RDX: ffffc9001e9dd000 RSI: 00000000000086c8 RDI: 00000000000086c9 [ 1121.306084][T18648] RBP: ffff88801d319768 R08: ffffffff81601b12 R09: fffffbfff1cfa218 [ 1121.314196][T18648] R10: dffffc0000000000 R11: fffffbfff1cfa218 R12: dffffc0000000000 [ 1121.322330][T18648] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ca120 [ 1121.330542][T18648] FS: 00007fb7a242c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1121.339555][T18648] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1121.346169][T18648] CR2: 0000000020000000 CR3: 0000000070064000 CR4: 00000000003526f0 [ 1121.354296][T18648] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1121.362636][T18648] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1121.370728][T18648] Call Trace: [ 1121.374029][T18648] [ 1121.377630][T18648] ? __warn+0x165/0x4d0 [ 1121.382444][T18648] ? __might_sleep+0xb9/0xe0 [ 1121.387081][T18648] ? report_bug+0x2b3/0x500 [ 1121.391696][T18648] ? __might_sleep+0xb9/0xe0 [ 1121.396317][T18648] ? handle_bug+0x60/0x90 [ 1121.400711][T18648] ? exc_invalid_op+0x1a/0x50 [ 1121.405421][T18648] ? asm_exc_invalid_op+0x1a/0x20 [ 1121.410541][T18648] ? __warn_printk+0x292/0x360 [ 1121.415340][T18648] ? __might_sleep+0xb9/0xe0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1121.420017][T18648] ? __might_sleep+0xb8/0xe0 [ 1121.424634][T18648] netfs_retry_reads+0xde/0x1e10 [ 1121.429678][T18648] ? mark_lock+0x9a/0x360 [ 1121.434044][T18648] ? __lock_acquire+0x1397/0x2100 [ 1121.439171][T18648] ? __pfx_netfs_retry_reads+0x10/0x10 [ 1121.444685][T18648] netfs_read_collection+0x334e/0x4020 [ 1121.450228][T18648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1121.456989][T18648] ? lockdep_hardirqs_on+0x99/0x150 [ 1121.462298][T18648] netfs_wait_for_read+0x2ba/0x4e0 [ 1121.467456][T18648] ? trace_netfs_sreq_ref+0x94/0x230 [ 1121.471574][T18651] netlink: 'syz.1.3956': attribute type 8 has an invalid length. [ 1121.472850][T18648] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 1121.486760][T18648] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1121.493492][T18648] ? __pfx_v9fs_issue_read+0x10/0x10 [ 1121.498873][T18648] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 1121.504475][T18648] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 1121.511149][T18648] netfs_unbuffered_read_iter+0xbf/0xe0 [ 1121.516735][T18648] __kernel_read+0x513/0x9d0 [ 1121.521398][T18648] ? do_sys_openat2+0x13e/0x1d0 [ 1121.526288][T18648] ? __pfx___kernel_read+0x10/0x10 [ 1121.531498][T18648] integrity_kernel_read+0xb0/0x100 [ 1121.536730][T18648] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1121.542640][T18648] ? __kmalloc_cache_noprof+0x243/0x390 [ 1121.548678][T18648] ? ima_calc_file_hash+0xaae/0x1b30 [ 1121.554070][T18648] ima_calc_file_hash+0xae6/0x1b30 [ 1121.559301][T18648] ? p9_client_stat+0x1be/0x280 [ 1121.564186][T18648] ? v9fs_vfs_getattr+0x1c0/0x370 [ 1121.569315][T18648] ? ima_collect_measurement+0x2b1/0xb10 [ 1121.572570][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 1121.574967][T18648] ? process_measurement+0x1351/0x1fb0 [ 1121.590542][T18648] ? ima_file_check+0xd9/0x120 [ 1121.595355][T18648] ? security_file_post_open+0xb9/0x280 [ 1121.600988][T18648] ? path_openat+0x2ccd/0x3590 [ 1121.605783][T18648] ? do_filp_open+0x27f/0x4e0 [ 1121.610582][T18648] ? __x64_sys_open+0x225/0x270 [ 1121.615458][T18648] ? do_syscall_64+0xf3/0x230 [ 1121.620192][T18648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.626291][T18648] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 1121.631941][T18648] ? p9_client_stat+0x1be/0x280 [ 1121.636832][T18648] ? kfree+0x196/0x430 [ 1121.641005][T18648] ? p9_client_stat+0x1be/0x280 [ 1121.645898][T18648] ? p9_client_stat+0x1be/0x280 [ 1121.650820][T18648] ? __pfx_p9_client_stat+0x10/0x10 [ 1121.656051][T18648] ? v9fs_fid_lookup+0x1b2/0xf30 [ 1121.661097][T18648] ? v9fs_vfs_getattr+0x2eb/0x370 [ 1121.666158][T18648] ima_collect_measurement+0x520/0xb10 [ 1121.671726][T18648] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1121.677754][T18648] ? rcu_is_watching+0x15/0xb0 [ 1121.682802][T18648] ? trace_contention_end+0x3c/0x120 [ 1121.688728][T18648] ? __asan_memset+0x23/0x50 [ 1121.694008][T18648] ? ima_get_hash_algo+0x156/0x4d0 [ 1121.699197][T18648] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1121.704707][T18648] process_measurement+0x1351/0x1fb0 [ 1121.710101][T18648] ? __pfx_process_measurement+0x10/0x10 [ 1121.715763][T18648] ? do_raw_spin_lock+0x14f/0x370 [ 1121.720914][T18648] ? __pfx_v9fs_file_open+0x10/0x10 [ 1121.726147][T18648] ? mnt_get_write_access+0x68/0x2b0 [ 1121.731518][T18648] ? mnt_get_write_access+0x226/0x2b0 [ 1121.736915][T18648] ? inode_to_bdi+0x69/0xf0 [ 1121.741485][T18648] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 1121.747850][T18648] ima_file_check+0xd9/0x120 [ 1121.752492][T18648] ? __pfx_ima_file_check+0x10/0x10 [ 1121.757733][T18648] security_file_post_open+0xb9/0x280 [ 1121.763179][T18648] path_openat+0x2ccd/0x3590 [ 1121.767809][T18648] ? __pfx_path_openat+0x10/0x10 [ 1121.772852][T18648] do_filp_open+0x27f/0x4e0 [ 1121.777386][T18648] ? __pfx_do_filp_open+0x10/0x10 [ 1121.782488][T18648] ? do_raw_spin_lock+0x14f/0x370 [ 1121.787914][T18648] do_sys_openat2+0x13e/0x1d0 [ 1121.793258][T18648] ? __pfx_do_sys_openat2+0x10/0x10 [ 1121.798526][T18648] __x64_sys_open+0x225/0x270 [ 1121.803286][T18648] ? __pfx___x64_sys_open+0x10/0x10 [ 1121.808524][T18648] ? do_syscall_64+0x100/0x230 [ 1121.813386][T18648] ? do_syscall_64+0xb6/0x230 [ 1121.818079][T18648] do_syscall_64+0xf3/0x230 [ 1121.822626][T18648] ? clear_bhb_loop+0x35/0x90 [ 1121.827330][T18648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.833335][T18648] RIP: 0033:0x7fb7a1580809 [ 1121.837775][T18648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.857599][T18648] RSP: 002b:00007fb7a242c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1121.866070][T18648] RAX: ffffffffffffffda RBX: 00007fb7a1746160 RCX: 00007fb7a1580809 [ 1121.874140][T18648] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 1121.882219][T18648] RBP: 00007fb7a15f393e R08: 0000000000000000 R09: 0000000000000000 [ 1121.890853][T18648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.899569][T18648] R13: 0000000000000000 R14: 00007fb7a1746160 R15: 00007ffe0330ef78 [ 1121.907590][T18648] [ 1121.910789][T18648] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1121.918087][T18648] CPU: 1 UID: 0 PID: 18648 Comm: syz.1.3956 Not tainted 6.12.0-next-20241127-syzkaller #0 [ 1121.927988][T18648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1121.938049][T18648] Call Trace: [ 1121.941342][T18648] [ 1121.944288][T18648] dump_stack_lvl+0x241/0x360 [ 1121.948996][T18648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1121.954230][T18648] ? __pfx__printk+0x10/0x10 [ 1121.958850][T18648] ? _printk+0xd5/0x120 [ 1121.963203][T18648] ? __init_begin+0x41000/0x41000 [ 1121.968261][T18648] ? vscnprintf+0x5d/0x90 [ 1121.972605][T18648] panic+0x349/0x880 [ 1121.976534][T18648] ? __warn+0x174/0x4d0 [ 1121.980719][T18648] ? __pfx_panic+0x10/0x10 [ 1121.985181][T18648] __warn+0x344/0x4d0 [ 1121.989195][T18648] ? __might_sleep+0xb9/0xe0 [ 1121.993842][T18648] report_bug+0x2b3/0x500 [ 1121.998204][T18648] ? __might_sleep+0xb9/0xe0 [ 1122.002832][T18648] handle_bug+0x60/0x90 [ 1122.007015][T18648] exc_invalid_op+0x1a/0x50 [ 1122.011577][T18648] asm_exc_invalid_op+0x1a/0x20 [ 1122.016434][T18648] RIP: 0010:__might_sleep+0xb9/0xe0 [ 1122.021632][T18648] Code: 94 0e 01 90 42 80 3c 23 00 74 08 48 89 ef e8 ae 30 9b 00 48 8b 4d 00 48 c7 c7 80 2d 0a 8c 44 89 ee 48 89 ca e8 08 e6 f0 ff 90 <0f> 0b 90 90 eb b5 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 70 ff ff ff [ 1122.041242][T18648] RSP: 0018:ffffc9000d2665a8 EFLAGS: 00010246 [ 1122.047314][T18648] RAX: 5af3b1b2cdf99e00 RBX: 1ffff11003a632ed RCX: 0000000000080000 [ 1122.055283][T18648] RDX: ffffc9001e9dd000 RSI: 00000000000086c8 RDI: 00000000000086c9 [ 1122.063250][T18648] RBP: ffff88801d319768 R08: ffffffff81601b12 R09: fffffbfff1cfa218 [ 1122.071227][T18648] R10: dffffc0000000000 R11: fffffbfff1cfa218 R12: dffffc0000000000 [ 1122.079196][T18648] R13: 0000000000000002 R14: 000000000000004a R15: ffffffff8c1ca120 [ 1122.087225][T18648] ? __warn_printk+0x292/0x360 [ 1122.092021][T18648] ? __might_sleep+0xb8/0xe0 [ 1122.096623][T18648] netfs_retry_reads+0xde/0x1e10 [ 1122.101572][T18648] ? mark_lock+0x9a/0x360 [ 1122.105934][T18648] ? __lock_acquire+0x1397/0x2100 [ 1122.110966][T18648] ? __pfx_netfs_retry_reads+0x10/0x10 [ 1122.116441][T18648] netfs_read_collection+0x334e/0x4020 [ 1122.121906][T18648] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1122.127894][T18648] ? lockdep_hardirqs_on+0x99/0x150 [ 1122.133108][T18648] netfs_wait_for_read+0x2ba/0x4e0 [ 1122.138219][T18648] ? trace_netfs_sreq_ref+0x94/0x230 [ 1122.143506][T18648] ? __pfx_netfs_wait_for_read+0x10/0x10 [ 1122.149154][T18648] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1122.155257][T18648] ? __pfx_v9fs_issue_read+0x10/0x10 [ 1122.160558][T18648] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 1122.166116][T18648] netfs_unbuffered_read_iter_locked+0x11fc/0x1540 [ 1122.172632][T18648] netfs_unbuffered_read_iter+0xbf/0xe0 [ 1122.178216][T18648] __kernel_read+0x513/0x9d0 [ 1122.182802][T18648] ? do_sys_openat2+0x13e/0x1d0 [ 1122.187655][T18648] ? __pfx___kernel_read+0x10/0x10 [ 1122.192785][T18648] integrity_kernel_read+0xb0/0x100 [ 1122.197986][T18648] ? __pfx_integrity_kernel_read+0x10/0x10 [ 1122.203795][T18648] ? __kmalloc_cache_noprof+0x243/0x390 [ 1122.209353][T18648] ? ima_calc_file_hash+0xaae/0x1b30 [ 1122.214644][T18648] ima_calc_file_hash+0xae6/0x1b30 [ 1122.219763][T18648] ? p9_client_stat+0x1be/0x280 [ 1122.224612][T18648] ? v9fs_vfs_getattr+0x1c0/0x370 [ 1122.229631][T18648] ? ima_collect_measurement+0x2b1/0xb10 [ 1122.235266][T18648] ? process_measurement+0x1351/0x1fb0 [ 1122.240724][T18648] ? ima_file_check+0xd9/0x120 [ 1122.245486][T18648] ? security_file_post_open+0xb9/0x280 [ 1122.251032][T18648] ? path_openat+0x2ccd/0x3590 [ 1122.255793][T18648] ? do_filp_open+0x27f/0x4e0 [ 1122.260471][T18648] ? __x64_sys_open+0x225/0x270 [ 1122.265342][T18648] ? do_syscall_64+0xf3/0x230 [ 1122.270016][T18648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.276081][T18648] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 1122.281675][T18648] ? p9_client_stat+0x1be/0x280 [ 1122.286550][T18648] ? kfree+0x196/0x430 [ 1122.290642][T18648] ? p9_client_stat+0x1be/0x280 [ 1122.295506][T18648] ? p9_client_stat+0x1be/0x280 [ 1122.300369][T18648] ? __pfx_p9_client_stat+0x10/0x10 [ 1122.305660][T18648] ? v9fs_fid_lookup+0x1b2/0xf30 [ 1122.310611][T18648] ? v9fs_vfs_getattr+0x2eb/0x370 [ 1122.315637][T18648] ima_collect_measurement+0x520/0xb10 [ 1122.321118][T18648] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1122.327111][T18648] ? rcu_is_watching+0x15/0xb0 [ 1122.331881][T18648] ? trace_contention_end+0x3c/0x120 [ 1122.337172][T18648] ? __asan_memset+0x23/0x50 [ 1122.341772][T18648] ? ima_get_hash_algo+0x156/0x4d0 [ 1122.346907][T18648] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1122.352371][T18648] process_measurement+0x1351/0x1fb0 [ 1122.357671][T18648] ? __pfx_process_measurement+0x10/0x10 [ 1122.363302][T18648] ? do_raw_spin_lock+0x14f/0x370 [ 1122.368350][T18648] ? __pfx_v9fs_file_open+0x10/0x10 [ 1122.373552][T18648] ? mnt_get_write_access+0x68/0x2b0 [ 1122.378840][T18648] ? mnt_get_write_access+0x226/0x2b0 [ 1122.384213][T18648] ? inode_to_bdi+0x69/0xf0 [ 1122.388719][T18648] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 1122.395050][T18648] ima_file_check+0xd9/0x120 [ 1122.399646][T18648] ? __pfx_ima_file_check+0x10/0x10 [ 1122.404854][T18648] security_file_post_open+0xb9/0x280 [ 1122.410233][T18648] path_openat+0x2ccd/0x3590 [ 1122.414847][T18648] ? __pfx_path_openat+0x10/0x10 [ 1122.419797][T18648] do_filp_open+0x27f/0x4e0 [ 1122.424303][T18648] ? __pfx_do_filp_open+0x10/0x10 [ 1122.429328][T18648] ? do_raw_spin_lock+0x14f/0x370 [ 1122.434376][T18648] do_sys_openat2+0x13e/0x1d0 [ 1122.439053][T18648] ? __pfx_do_sys_openat2+0x10/0x10 [ 1122.444255][T18648] __x64_sys_open+0x225/0x270 [ 1122.448935][T18648] ? __pfx___x64_sys_open+0x10/0x10 [ 1122.454144][T18648] ? do_syscall_64+0x100/0x230 [ 1122.458993][T18648] ? do_syscall_64+0xb6/0x230 [ 1122.463667][T18648] do_syscall_64+0xf3/0x230 [ 1122.468167][T18648] ? clear_bhb_loop+0x35/0x90 [ 1122.472845][T18648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1122.478739][T18648] RIP: 0033:0x7fb7a1580809 [ 1122.483154][T18648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1122.502759][T18648] RSP: 002b:00007fb7a242c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1122.511197][T18648] RAX: ffffffffffffffda RBX: 00007fb7a1746160 RCX: 00007fb7a1580809 [ 1122.519170][T18648] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 1122.527143][T18648] RBP: 00007fb7a15f393e R08: 0000000000000000 R09: 0000000000000000 [ 1122.535112][T18648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1122.543083][T18648] R13: 0000000000000000 R14: 00007fb7a1746160 R15: 00007ffe0330ef78 [ 1122.551063][T18648] [ 1122.554333][T18648] Kernel Offset: disabled [ 1122.558741][T18648] Rebooting in 86400 seconds..