last executing test programs: 2m53.889711537s ago: executing program 4 (id=537): r0 = socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsmount(r5, 0x0, 0x5) openat(r1, 0x0, 0x2c8800, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) syz_emit_ethernet(0x76, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r6, &(0x7f00000000c0)={0x2020}, 0x2067) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f5", 0x1}], 0x1, 0x0, 0x0, 0x2c000881}, 0x0) 2m52.231670437s ago: executing program 4 (id=541): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m50.732002863s ago: executing program 4 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc4}}, 0x0) 2m48.73448171s ago: executing program 4 (id=550): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m47.473341104s ago: executing program 4 (id=554): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1, 0x0, 0x20007fffffff}, 0x18) exit(0x401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x3f, &(0x7f00000000c0)=0xa) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000000)={{0xe07, 0x4}, 0x6b}, 0x10) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000002400), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280), &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000340)=[{}], 0x8, 0x0, 0x0, &(0x7f00000003c0), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="010100000000000000000000000000000000000098190aee3db19297a00c00d22e2c2e2e96f5ef3bf591028650d7b8cfd8fb60e5f1b7870c2f7dc0c299addf3f8365c4", @ANYRES32=r4, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0xe080, 0x0) fcntl$setstatus(r3, 0x4, 0x2000) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x0, 'batadv_slave_0\x00', {0x3}}) socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000006c0)={&(0x7f0000002800)="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", &(0x7f0000000600)=""/88, &(0x7f0000000680)="6e5b769c7baead5252bab2eaa1d10e6af22742f7df97538bc2", &(0x7f0000003800)="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", 0x5, r5, 0x4}, 0x38) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x7fff, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) 2m46.107972525s ago: executing program 4 (id=559): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x5) r3 = syz_io_uring_setup(0x23d, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x4000000, 0x4023d}, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m45.162024962s ago: executing program 2 (id=562): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYBLOB="1e"], 0x1c}}, 0x0) 2m43.939922657s ago: executing program 2 (id=565): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x45}, 0xfffffffd, 0x2}, 0x7f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fcntl$getown(r3, 0x9) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) memfd_create(0x0, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x200c800c, &(0x7f0000000280)={0xa, 0xe25, 0x0, @mcast1}, 0x1c) sendto$inet6(r7, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) 2m42.991978692s ago: executing program 2 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc894}, 0x200408c0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, 0x0, 0x0) 2m42.757563396s ago: executing program 2 (id=568): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m41.245404461s ago: executing program 2 (id=571): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc) 2m39.293295841s ago: executing program 2 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x17, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m30.952889381s ago: executing program 32 (id=559): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x68040200) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x5) r3 = syz_io_uring_setup(0x23d, &(0x7f0000000080)={0x0, 0xfffffffd, 0x10100, 0x4000000, 0x4023d}, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70200001400f400b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008ffd000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2m23.247660688s ago: executing program 33 (id=576): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) r2 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x17, 0x0, &(0x7f0000000280)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync() r4 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e2b, @local}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x40d, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x84}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 29.935999214s ago: executing program 6 (id=872): r0 = syz_open_dev$video4linux(0x0, 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x3016, 0xf17, 0x0, 0x0, 0x0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$key(0xf, 0x3, 0x2) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0xe0002013}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x11, 0x3, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x10040810) syz_open_dev$usbfs(0x0, 0x74, 0x101201) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) 20.993107561s ago: executing program 6 (id=884): socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), r4, 0x0, 0x81, 0x10000000000000) 19.788057768s ago: executing program 6 (id=886): r0 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x10000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000540)='afs_get_tree\x00', r2}, 0x10) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x0, &(0x7f0000000000)={[{@dyn}]}) lsm_list_modules(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) acct(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x7, [0x25, 0x5, 0x8000000000000000, 0x8, 0x7b, 0x1, 0x5]}}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001e00104525bd7000ffdbdf250000f300"], 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x20000814) sendmsg$nl_route(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getnexthop={0x48, 0x6a, 0x400, 0x70bd28, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0xc000) writev(r5, &(0x7f00000000c0), 0x60) 19.681280112s ago: executing program 5 (id=888): socket$inet_udp(0x2, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) msgget$private(0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0x1000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000e40)) 15.971474621s ago: executing program 5 (id=893): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_INFO(r4, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, 0x0) getrlimit(0x4, &(0x7f0000000040)) mknod$loop(0x0, 0x2480, 0x1) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='rpc_pipefs\x00', 0x8000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32, @ANYBLOB="b79f0626191022318c0957aea4a9ad309e39fc7728b0da87ccfc729f7b36768e55bc1d941747d7bbf878f6830430416e4b2dbc26013fcfe75a3c7d602a6130bffb8c69017705b68652346edb50b684e2092b10a833be466d1a7511c4d94b5c99c32e543b683c01463d1bec0a8f5d3cc898b719fb7409ee1e472b466c5d61d6f586b0d18221f239a46e46f5b53985fe117d838062a95e334a7cdf5cd7a8b1f4aba3dd56d62ad037d736adcc4d4bbc9800f27d5a5e1695a5847f78b24d0c2af704ef826b25493a6b1c3f5843951b5f5966e75cea71"], 0x48}}, 0x2400c080) r5 = socket(0x11, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000001440)={0x24, @short={0x2, 0x2, 0xffff}}, 0x8) socket$netlink(0x10, 0x3, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) read(r7, &(0x7f0000000040)=""/148, 0xffffff96) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) 15.9226044s ago: executing program 6 (id=895): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80811501, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) clock_gettime(0x9, &(0x7f0000000280)) 15.471953206s ago: executing program 3 (id=896): socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0xfea7) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), r4, 0x0, 0x81, 0x10000000000000) 14.839813626s ago: executing program 6 (id=897): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cc8000/0x3000)=nil, 0x3000, 0x17) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7fffffff, 0x0, 0x0, 0x202, 0x29, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xfffffffa, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x7, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x6, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x5, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="7d717c1f8428280ab55a04c6325d699064905ef93ebd77e2efec9f53dda482c9ee2e65a7f14fb8c8ba86e1a48d2b6b6afa2f0b4ec3e4f1113ef51e3ee2e89096948f4605cb79bde9e3c35e2e8c5656e7f4e2839f750dbc54845ec35a6540a0ac354fc844277715dc45a624629d82528a3e868dc2152570c88ba2157e21a3fd45974bfeb026194d440b5318f8bc08da0d365fd550f1ddb920ad905618a7289482f74bc2e81ec9c0abf25663403ca2ad939860eef39a36235f55b27706f0bbf4a7596f3c713b3b5e96c8186e508bac854c98bcae2a79234c8f125fd1199bcc52695fe06ba43c32a91f2cabaec6", 0xec}, {&(0x7f0000002c40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)}], 0x1}}], 0x2, 0x0) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) 13.248464609s ago: executing program 3 (id=898): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@my=0x0, 0x645}, 0x1, 0x1, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x28, 0x1, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r6, 0x0) ioctl$sock_SIOCOUTQ(r6, 0x5411, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 12.486670218s ago: executing program 3 (id=899): munmap(&(0x7f0000893000/0x4000)=nil, 0x4000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) mkdir(0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e300202000000000000d190c937dc6914243b0402d6dcb70ad80851956fe6", 0x20, 0xfffffffffffffffc) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 12.331035915s ago: executing program 5 (id=900): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0xfd3649826d894f55, 0x70bd2b, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x36}, @in6=@private1, 0x0, 0x0, 0x4e23, 0xfffa, 0xa, 0x20, 0x26b9ffe36856e205, 0x2e}, {0xffff, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}, [@tmpl={0x44, 0x5, [{{@in=@loopback, 0x4d3, 0x32}, 0x2, @in=@multicast2, 0x34ff, 0x3, 0x0, 0xfe, 0x3, 0x9, 0x2}]}]}, 0xfc}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$loop(0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) epoll_create1(0x0) r5 = syz_open_dev$sg(&(0x7f00000004c0), 0xa9e6, 0x200) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) sched_setscheduler(0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000040)={&(0x7f0000000780)=[0x101, 0x8000, 0x2, 0xfffffffa, 0x1, 0x7, 0x1, 0x6, 0x3, 0xf04, 0x1, 0x3, 0x6, 0x400, 0xafa, 0x8, 0x7, 0x10000, 0x9, 0x5, 0x3, 0x42, 0xfffffffb, 0xe, 0x680, 0x100, 0x21180, 0xfffffff8, 0x6, 0x8, 0xffffff80, 0x9, 0x2, 0x6, 0xfffffffd, 0x7fffffff, 0x81, 0x2, 0x6, 0x4, 0xfff, 0x7, 0x9, 0xf, 0x401, 0x2f0c, 0x7, 0x70, 0x8, 0x7fff, 0x5f, 0x2a1, 0x200, 0x3, 0x200, 0x24eb, 0xffffff81, 0xb8f, 0x7, 0x7, 0x7ff, 0x100, 0x3, 0x7, 0x80, 0x7, 0x8, 0xe, 0x10000, 0x0, 0x7ff, 0xf, 0x0, 0x7, 0x4, 0x0, 0x9, 0x2, 0x2, 0x0, 0x2, 0x400, 0x0, 0x3ff, 0x1, 0x5, 0x5, 0x7, 0x0, 0x200, 0x8, 0x40, 0xd, 0x3, 0x7, 0x1, 0xe, 0x16, 0xffffffff, 0x0, 0x20000000, 0x7, 0x5, 0x732e, 0x8, 0xb6, 0x6, 0x0, 0x2, 0x1ff, 0x400000, 0x3, 0x80000001, 0x1302, 0xad, 0x9, 0x7, 0x10000, 0x2, 0x400, 0x231, 0x7, 0x5, 0x8, 0x7fff, 0x2, 0x7, 0x0, 0x6, 0x80, 0x5, 0xa, 0x282, 0x5a, 0x2, 0x9, 0xe, 0x4, 0x7fff, 0xcee6, 0x1, 0x80, 0x3ff, 0x80000000, 0x7, 0xfffff000, 0x40, 0x4, 0x400, 0x2, 0x8, 0xe2fe, 0x7, 0x0, 0xd5, 0x200, 0x7, 0xfffffff6, 0xa569, 0x18249d81, 0x7, 0x9, 0x401, 0xfaaf, 0x2, 0x7, 0x6, 0x6, 0x2, 0x2, 0x1, 0x1, 0x4, 0xffffff4e, 0x8, 0x7, 0x8, 0x9, 0x4, 0x0, 0xffffff34, 0x1, 0x1360, 0xb, 0x2, 0x3, 0x0, 0x7fffffff, 0x3, 0xa, 0xfffffff7, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1000, 0x101, 0x3ff, 0x7, 0x3, 0x2, 0x8, 0x9, 0x25, 0xffff, 0x8, 0x3, 0xa5, 0x4, 0x1, 0x5, 0xe, 0x401, 0x2, 0x7, 0x5, 0x5, 0xfffffff7, 0x4, 0x8, 0xffff, 0x1, 0x8, 0x9, 0x9, 0x2, 0x8, 0x6970, 0x4, 0x5, 0x9, 0x7fff, 0xad5, 0x80, 0x1793341b, 0x159, 0x8000, 0x6, 0xfffffff9, 0xae5, 0x9, 0x200, 0x7ff, 0x10000, 0x3, 0x400, 0x2, 0x8, 0x7, 0x8, 0x9, 0x8, 0x3, 0x7c9a1b92, 0x3, 0x6, 0x8, 0x8, 0x6890, 0x400, 0x7, 0x1, 0x7, 0x7, 0x9, 0x8000, 0xee, 0x7, 0x9, 0x6, 0x80000000, 0x4, 0x7, 0x400, 0xa, 0x1, 0xff, 0x7, 0x7, 0x7701, 0x6, 0x8, 0x1, 0x4, 0x584, 0x1, 0x2, 0x4, 0x7ff, 0x2, 0x3, 0x5, 0xfffffff7, 0x10001, 0x1, 0x2, 0x10000, 0x1000, 0xd, 0x47, 0x0, 0xad1, 0x7, 0x3, 0x6, 0x200, 0x10000000, 0x401, 0x401, 0x8, 0x100, 0x2, 0x8000, 0x48, 0x5, 0xb52e, 0x6, 0x4, 0x1, 0x6, 0x4, 0x0, 0xffffffcd, 0xfff, 0x4, 0x8, 0x6, 0x4, 0xfffffffb, 0x8001, 0x8, 0xe, 0x0, 0x7e2, 0x5, 0xae, 0x1, 0x0, 0xfffffffd, 0x6, 0x3ff, 0x8, 0x60, 0x3, 0x7ff, 0x8, 0xdce, 0x1, 0x8, 0xfffffffd, 0x8783, 0x1, 0x0, 0x3e0000, 0x5, 0x8, 0xe, 0x8, 0x800, 0xfffff7aa, 0x7, 0x7, 0x4, 0xc85, 0x1, 0xffffffff, 0x9, 0x3, 0x7, 0x4bd5, 0x0, 0xc, 0x0, 0xf, 0xabe, 0x3, 0x1000, 0x0, 0x1, 0x4, 0x5, 0x7, 0x3b, 0x3, 0xc, 0xf, 0x0, 0x6, 0x9, 0x3, 0x8, 0x9, 0xe, 0xd5e5, 0x0, 0x7, 0x3, 0x4, 0x8, 0x1, 0x4c0, 0x0, 0x200, 0xf385, 0xbc, 0x200, 0x4, 0x2, 0xd, 0x5, 0x0, 0xf, 0x0, 0x3, 0x8, 0x5, 0xff, 0x31, 0x4a5, 0x2, 0x7f, 0x10001, 0xa, 0x8, 0xb, 0xffffffff, 0x7fff, 0x1000, 0x0, 0x4b, 0x800, 0x7, 0xf, 0x8, 0xaf49, 0xcfae, 0x7, 0x400, 0x17, 0x2, 0x6, 0x2, 0x1000, 0x7, 0x2, 0xff, 0xecf, 0x3db, 0x3, 0x2, 0x2ed, 0x2, 0x400, 0x6, 0x1, 0x7fffffff, 0xfffffffa, 0xa, 0x3, 0x5e, 0x9, 0x1, 0x6, 0x8, 0x100, 0x2, 0x6c2, 0x5, 0x0, 0x7, 0x6, 0x29, 0x2, 0x8, 0xff, 0x1000, 0x1, 0xc, 0x5, 0x4, 0x6, 0x2, 0x81, 0x8000, 0x6, 0x7, 0x4a, 0xfffffffa, 0x4, 0x2400, 0x7f, 0x69d, 0x6016, 0x1000, 0x6, 0x4c158be7, 0x1, 0x9, 0xfffffffd, 0x7, 0x200, 0xffff, 0x4, 0x3, 0x9, 0x6afa, 0x6, 0xf39, 0x1, 0x6, 0x2, 0x2, 0x8, 0xffff0000, 0x8, 0x5, 0x7, 0x9, 0xffff, 0x4, 0x1, 0x6, 0x8, 0x80000001, 0xfffffffc, 0x7, 0x9, 0x23a1bc5d, 0x2, 0x0, 0x5, 0x8000, 0x2, 0x4, 0x80000000, 0x3, 0xf, 0x9, 0x2, 0xc2f, 0x8, 0x4, 0x3, 0x9, 0x85, 0x82, 0x7f, 0x6, 0x0, 0x9, 0x6, 0x4, 0x7fffffff, 0x9, 0x5, 0x0, 0x1, 0x3, 0x4, 0x1ff, 0xfffffffb, 0x9, 0x2, 0x5, 0x1, 0xfffffffc, 0x4, 0xffff, 0x7, 0x3, 0xfffffff9, 0xffff5eab, 0x0, 0x8, 0xb4, 0x3, 0x7, 0x6, 0x9, 0xfffffff7, 0x5, 0xffff, 0x3ff, 0x2c, 0x9, 0x10000, 0xdcd, 0x0, 0x3, 0x4, 0x8000, 0x7fffffff, 0xfff, 0x81, 0x40, 0x1ff, 0xff, 0x8, 0x9, 0x8, 0x6, 0x5, 0x4, 0x1, 0x3, 0x0, 0x7, 0x200, 0x9, 0x2a, 0x7, 0x4, 0x2, 0x1, 0x9300, 0xe, 0x5, 0x9, 0x3, 0x7, 0x7, 0x36d, 0x2, 0x2, 0x5, 0x9, 0x9, 0x8e, 0x0, 0x6, 0x9587, 0x7, 0x1, 0x70, 0x400, 0x80000000, 0x6, 0x933a, 0x0, 0xac, 0xa2, 0x0, 0x6, 0x1000, 0x4, 0x48849842, 0x9, 0x1, 0x1, 0x8000, 0x4, 0xc, 0x8000, 0x0, 0x1, 0x81, 0x8, 0x3, 0x5, 0xaf, 0x80, 0x4, 0x4, 0x9, 0x2, 0x1, 0x852, 0xb, 0x8001, 0x400, 0x6, 0x8, 0x17f7277b, 0x1, 0x6, 0x6, 0x7, 0x9, 0x1000, 0x7, 0x40, 0x2, 0x3, 0x8, 0x7, 0x7, 0x3, 0x2, 0xffffffff, 0x7, 0xc, 0x0, 0x8, 0x9000000, 0xff, 0x8, 0x1, 0x7, 0x9, 0x0, 0x3, 0xe9c6, 0x4, 0x0, 0x6, 0x7, 0x6, 0x7, 0xfff, 0xffffff38, 0x1, 0xddaa, 0x1, 0x6, 0x3, 0x7, 0x200, 0xa44, 0x80000001, 0x3f, 0x5, 0x8, 0x10000, 0xccdc, 0x1ff, 0x7, 0x4, 0x8, 0x5, 0x3, 0x2, 0x7, 0x47, 0x8, 0x6, 0x27, 0xe89, 0xf295, 0x80000000, 0x7, 0x6, 0x7ff, 0x50fe3d99, 0x8, 0x6, 0xffff, 0x4, 0xffff4538, 0x101, 0xc, 0x8, 0xf1, 0x6, 0x80, 0x900, 0x7f, 0x8, 0x6d, 0x6, 0x0, 0x0, 0x7fffffff, 0xffff, 0x0, 0x218, 0x3ff, 0x7f, 0x5, 0x851, 0x8, 0xfec1, 0x607, 0x80, 0x8, 0xfffffffe, 0xfffffff7, 0xb, 0x922, 0x5, 0x3, 0x19d, 0x2, 0x101, 0x1ff, 0x3, 0x2, 0x6, 0xa5, 0x1000, 0x1, 0x3, 0x0, 0x0, 0xa8af, 0x6, 0x3ff, 0x80000000, 0x5, 0x6, 0x5f, 0x0, 0x752e, 0x8000, 0x8, 0x32e68baa, 0xffff, 0x9, 0x3, 0x1000, 0x4, 0x1, 0x2, 0x261, 0x3, 0x3, 0x0, 0x401, 0x2, 0x6, 0x7, 0x9, 0x4, 0x7f, 0x8, 0x3, 0x4, 0x6, 0x0, 0xd58, 0x3fff800, 0x6, 0x7fff, 0x7, 0x215, 0x1, 0xf, 0x8, 0x470, 0x4798, 0x13, 0x7ff, 0x9, 0x3, 0x2, 0x2, 0x3, 0x4, 0x6, 0x6, 0x8, 0x4, 0xfffffff8, 0x5, 0x80000000, 0xf, 0x9, 0x8, 0x7, 0x6, 0x5, 0x5, 0x5, 0x7907, 0xffff, 0x2, 0x9, 0xec5, 0x5, 0x0, 0x7fffffff, 0x5, 0x69, 0x4, 0x0, 0xf6, 0x400, 0x9, 0x4, 0xa50, 0xb4, 0x5, 0x6, 0x3, 0x24, 0x3, 0x76b4, 0x8, 0x3, 0x7ff, 0x9, 0x4, 0x2cb7, 0x7ab4, 0x3, 0xa933, 0x3, 0x13f39020, 0x5, 0x748, 0xc, 0x81, 0x7, 0x4, 0x4, 0x1, 0x8, 0x401, 0x4, 0x4, 0xc3ec00, 0x0, 0x2, 0x6, 0x3, 0x8, 0xffffffff, 0x40, 0x387, 0xe25, 0x6, 0x40, 0x3, 0xfa, 0x4, 0x1, 0x9, 0x3, 0xd, 0x4ea, 0x6, 0x2, 0x8001, 0xb, 0x2, 0xebe4, 0x4, 0x1, 0x1ff, 0x4a3, 0x49, 0xc4, 0x9, 0xc9, 0x7, 0xf, 0xa, 0x7, 0x7fff, 0x200, 0xffff, 0xd41, 0x3ff, 0xfffffffc, 0x6, 0x0, 0x5, 0x4, 0x8001, 0xd, 0xc, 0x4, 0x1, 0x6, 0xdec, 0x686, 0x80000000, 0x8, 0x98, 0x8, 0xfffffff9, 0x6, 0xe49609, 0x5, 0x6, 0x6000000, 0x1, 0x9, 0x81, 0x0, 0x7, 0x7ff, 0x0, 0x6, 0xfff, 0xffffffff, 0xfffffffd, 0xdd, 0x80000000, 0x3, 0x8, 0xb0d8, 0x1770, 0x0, 0x7, 0x7b0b, 0x80, 0x8e7, 0x200, 0x7, 0x7, 0x6, 0x6, 0x7, 0x6, 0x6, 0x0, 0x1, 0x1, 0x3, 0x6, 0xfffff54a, 0x800, 0x8, 0x4, 0xffff, 0x2, 0x4, 0x0, 0x5, 0x80000000, 0xb, 0x7, 0xbf], 0x1, 0x400, 0xd20}) 11.03609346s ago: executing program 3 (id=901): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$peekuser(0x3, r4, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r5, &(0x7f0000007100)={0x2020}, 0x941f) 10.575991559s ago: executing program 5 (id=903): socket$inet_udp(0x2, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:0:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) msgget$private(0x0, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000019180)={0x1a0003, 0x0, [0x7, 0x2, 0x8, 0x1000000100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffff]}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[], 0x1c}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000240)='./file2\x00', 0x1000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000e40)) 8.547943724s ago: executing program 3 (id=905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}}) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000070a01020000000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) 8.356653729s ago: executing program 5 (id=907): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x80811501, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) clock_gettime(0x9, 0x0) 6.242948839s ago: executing program 5 (id=908): r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000001a40)=ANY=[@ANYBLOB], 0x68) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x20842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) writev(r3, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r3, 0x0) r4 = memfd_secret(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r4, 0x2e, 0x4608, @void}, 0x10) 6.053469477s ago: executing program 1 (id=909): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@my=0x0, 0x645}, 0x1, 0x1, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x28, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 4.816023627s ago: executing program 0 (id=910): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 4.762246364s ago: executing program 1 (id=911): socket$vsock_stream(0x28, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000500)=0x6, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a310000000060000000160a03000000000000000000020000000900010073797a31000000000900020073797a31000000002c000380080002400000000008000140000000001800038014000100776c616e3100"/139], 0xa8}}, 0x0) 4.725351854s ago: executing program 3 (id=912): creat(0x0, 0x172) r0 = syz_open_dev$vcsn(&(0x7f0000000100), 0xf7, 0x424040) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0xc044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x7, 0x0, 0x7}}}]}]}]}}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 4.622054422s ago: executing program 0 (id=913): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20008850) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x170bd28, 0x0, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xb5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x85}, 0x20000800) 4.044853411s ago: executing program 0 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x8, &(0x7f0000000000)={0x5, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/182, 0xb6) 3.97897006s ago: executing program 1 (id=915): socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0), 0xfea7) copy_file_range(r4, &(0x7f00000001c0), 0xffffffffffffffff, 0x0, 0x81, 0x10000000000000) 2.093130206s ago: executing program 0 (id=916): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$peekuser(0x3, r4, 0x9) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') read$FUSE(r5, &(0x7f0000007100)={0x2020}, 0x941f) 1.916448823s ago: executing program 1 (id=917): mmap$IORING_OFF_SQ_RING(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB], 0x44}}, 0x0) 1.775616252s ago: executing program 6 (id=918): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) io_submit(r3, 0x2, &(0x7f0000000740)=[0x0, 0x0]) dup3(r2, r0, 0x0) 596.471764ms ago: executing program 1 (id=919): r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x29, 0x4, 0x4, 0xf, 0x50, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8, 0x8001, 0x4}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000206050000000000fffff0000000000005000100060000000500040001"], 0x4c}}, 0x4008) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) umount2(&(0x7f0000000280)='./file0\x00', 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000400)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf122dc16a5658a3b58626b458ae4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc0, r0) add_key$user(&(0x7f0000000180), 0x0, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) 168.534316ms ago: executing program 0 (id=920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.self_freezing\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, 0x0) 67.262236ms ago: executing program 1 (id=921): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@my=0x0, 0x645}, 0x1, 0x1, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x28, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4b, 0x2, {{0x0, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 0s ago: executing program 0 (id=922): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000070a01020000000000000400"], 0x20}, 0x1, 0x0, 0x0, 0x20000100}, 0x400c000) kernel console output (not intermixed with test programs): .671707][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.727853][ T5889] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.773422][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 111.794240][ T46] usb 1-1: no configurations [ 111.818139][ T46] usb 1-1: can't read configurations, error -22 [ 111.915478][ T5889] usb 2-1: device descriptor read/64, error -71 [ 111.986179][ T46] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 112.004218][ T2090] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.059106][ T2090] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.119801][ T46] usb 1-1: device descriptor read/8, error -71 [ 112.152543][ T2090] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.188346][ T2090] usb 3-1: config 0 descriptor?? [ 112.214572][ T2090] pwc: Askey VC010 type 2 USB webcam detected. [ 112.263360][ T46] usb usb1-port1: unable to enumerate USB device [ 112.540978][ T5889] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.862820][ T2090] pwc: recv_control_msg error -32 req 02 val 2b00 [ 113.907878][ T2090] pwc: recv_control_msg error -32 req 02 val 2700 [ 113.908385][ T5889] usb 2-1: device descriptor read/64, error -71 [ 113.917580][ T2090] pwc: recv_control_msg error -32 req 02 val 2c00 [ 114.002192][ T6096] netlink: 'syz.0.55': attribute type 4 has an invalid length. [ 114.023455][ T5887] usb 5-1: USB disconnect, device number 6 [ 114.047835][ T5889] usb usb2-port1: attempt power cycle [ 114.265181][ T6098] fuse: Bad value for 'fd' [ 114.425552][ T5889] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 114.460953][ T5889] usb 2-1: device descriptor read/8, error -71 [ 114.606982][ T2090] pwc: recv_control_msg error -32 req 04 val 1000 [ 114.630612][ T2090] pwc: recv_control_msg error -32 req 04 val 1300 [ 114.652004][ T2090] pwc: recv_control_msg error -32 req 04 val 1400 [ 114.671240][ T2090] pwc: recv_control_msg error -32 req 02 val 2000 [ 114.699705][ T2090] pwc: recv_control_msg error -32 req 02 val 2100 [ 114.718423][ T2090] pwc: recv_control_msg error -71 req 04 val 1500 [ 114.739670][ T2090] pwc: recv_control_msg error -71 req 02 val 2500 [ 114.749068][ T2090] pwc: recv_control_msg error -71 req 02 val 2400 [ 114.757389][ T2090] pwc: recv_control_msg error -71 req 02 val 2600 [ 114.764498][ T2090] pwc: recv_control_msg error -71 req 02 val 2900 [ 114.772929][ T2090] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.785831][ T2090] pwc: recv_control_msg error -71 req 04 val 1100 [ 114.802539][ T2090] pwc: recv_control_msg error -71 req 04 val 1200 [ 114.820726][ T2090] pwc: Registered as video103. [ 114.838853][ T2090] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 114.876500][ T2090] usb 3-1: USB disconnect, device number 3 [ 115.900686][ T6119] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.009044][ T6121] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 116.035903][ T6121] CIFS: Unable to determine destination address [ 116.639447][ T6130] tipc: Started in network mode [ 116.644586][ T6130] tipc: Node identity ac14140f, cluster identity 4711 [ 116.654343][ T6130] tipc: New replicast peer: 255.255.255.255 [ 116.662967][ T6130] tipc: Enabled bearer , priority 10 [ 117.677383][ T2090] tipc: Node number set to 2886997007 [ 118.114085][ T5889] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.305768][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 118.314707][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.373463][ T5889] usb 2-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 118.385509][ T6140] fuse: Invalid rootmode [ 118.419465][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.488649][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 118.511782][ T5889] usb 2-1: config 0 descriptor?? [ 118.616580][ T6143] serio: Serial port ttyS3 [ 119.345447][ T5887] usb 3-1: device descriptor read/64, error -71 [ 119.572628][ T5889] usbhid 2-1:0.0: can't add hid device: -71 [ 119.619810][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.674024][ T5889] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.968301][ T5887] usb 3-1: device descriptor read/64, error -71 [ 119.996487][ T5889] usb 2-1: USB disconnect, device number 7 [ 120.245888][ T5887] usb usb3-port1: attempt power cycle [ 120.735692][ T6166] CIFS: Unable to determine destination address [ 120.775469][ T5887] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.808863][ T5887] usb 3-1: device descriptor read/8, error -71 [ 120.897883][ T5889] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 121.055996][ T5887] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.076549][ T5889] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.088540][ T5889] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.097823][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.109237][ T5887] usb 3-1: device descriptor read/8, error -71 [ 121.119653][ T5889] usb 2-1: config 0 descriptor?? [ 121.132273][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 121.576202][ T5887] usb usb3-port1: unable to enumerate USB device [ 121.628233][ T6175] netlink: 'syz.3.79': attribute type 4 has an invalid length. [ 121.638906][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.656938][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.656995][ T6175] netlink: 'syz.3.79': attribute type 4 has an invalid length. [ 121.675812][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.693078][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.704588][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.751763][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 121.768858][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 121.799030][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 121.824375][ T5889] pwc: recv_control_msg error -71 req 04 val 1500 [ 121.854229][ T5889] pwc: recv_control_msg error -71 req 02 val 2500 [ 121.874471][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 121.925431][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 121.943052][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 121.985975][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 122.444511][ T6182] fuse: Invalid rootmode [ 122.776991][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 122.791955][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.834629][ T5889] pwc: Registered as video103. [ 122.861298][ T6186] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 122.905905][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 122.955361][ T5889] usb 2-1: USB disconnect, device number 8 [ 124.453373][ T6202] fuse: Bad value for 'fd' [ 124.512033][ T6205] CIFS: Unable to determine destination address [ 125.079408][ T6216] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 125.202346][ T6214] loop9: detected capacity change from 0 to 8 [ 125.336188][ T5903] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.485134][ T6214] Dev loop9: unable to read RDB block 8 [ 125.519599][ T6221] netlink: 'syz.4.91': attribute type 4 has an invalid length. [ 125.809395][ T6214] loop9: unable to read partition table [ 125.837612][ T6214] loop9: partition table beyond EOD, truncated [ 125.843834][ T6214] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5) [ 125.907881][ T5903] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.002865][ T5903] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.075443][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.172479][ T5903] usb 3-1: config 0 descriptor?? [ 127.051807][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 127.124752][ T6230] fuse: Invalid rootmode [ 127.148704][ T6227] tty tty22: ldisc open failed (-12), clearing slot 21 [ 127.545059][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 127.553347][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 127.565508][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 127.579215][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 127.597572][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 127.609783][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 127.619984][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 127.645650][ T5887] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 127.699511][ T6238] fuse: Bad value for 'fd' [ 127.805411][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 127.816261][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.838950][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.859107][ T5887] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 127.914430][ T5887] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 127.945549][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.975002][ T5887] usb 1-1: config 0 descriptor?? [ 128.514247][ T5903] pwc: recv_control_msg error -71 req 04 val 1500 [ 128.521288][ T5903] pwc: recv_control_msg error -71 req 02 val 2500 [ 128.537528][ T5903] pwc: recv_control_msg error -71 req 02 val 2400 [ 128.562037][ T5887] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 128.589803][ T5903] pwc: recv_control_msg error -71 req 02 val 2600 [ 128.606490][ T5903] pwc: recv_control_msg error -71 req 02 val 2900 [ 128.618107][ T5887] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 128.626534][ T5903] pwc: recv_control_msg error -71 req 02 val 2800 [ 128.636659][ T5903] pwc: recv_control_msg error -71 req 04 val 1100 [ 128.643387][ T5887] kovaplus 0003:1E7D:2D50.0002: unknown main item tag 0x0 [ 128.671123][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 128.682875][ T5887] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 128.717609][ T5903] pwc: Registered as video103. [ 128.723243][ T6244] CIFS: Unable to determine destination address [ 128.758232][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 128.825754][ T5903] usb 3-1: USB disconnect, device number 8 [ 129.001756][ T5887] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 129.094945][ T5887] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 129.528262][ T5887] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -32 [ 129.601557][ T5887] usb 1-1: USB disconnect, device number 6 [ 130.186583][ T6264] fuse: Bad value for 'rootmode' [ 132.769958][ T6273] fuse: Unknown parameter '0x0000000000000004' [ 132.815408][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 133.094473][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'. [ 133.105207][ T5889] usb 1-1: device descriptor read/64, error -71 [ 133.257198][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.269501][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.436351][ T5889] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.685440][ T5889] usb 1-1: device descriptor read/64, error -71 [ 133.905620][ T5889] usb usb1-port1: attempt power cycle [ 134.307722][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.318918][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.329606][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.340927][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.351817][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.362478][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.372718][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.389648][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.399792][ T6284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.410464][ T6284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.499311][ T6289] CIFS: Unable to determine destination address [ 134.678020][ T6291] netlink: 'syz.0.116': attribute type 8 has an invalid length. [ 134.725695][ T46] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.917917][ T46] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.935007][ T46] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.950954][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.004634][ T46] usb 2-1: config 0 descriptor?? [ 135.009795][ T2090] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.052444][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 135.182000][ T2090] usb 5-1: Using ep0 maxpacket: 16 [ 135.206749][ T2090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.226011][ T2090] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.379359][ T2090] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 135.392972][ T2090] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 135.403100][ T2090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.451580][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.465601][ T2090] usb 5-1: config 0 descriptor?? [ 135.491673][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.536196][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 135.565151][ T46] pwc: recv_control_msg error -32 req 04 val 1000 [ 135.594350][ T46] pwc: recv_control_msg error -32 req 04 val 1300 [ 135.613336][ T46] pwc: recv_control_msg error -32 req 04 val 1400 [ 135.622322][ T46] pwc: recv_control_msg error -32 req 02 val 2000 [ 135.644399][ T6306] fuse: Bad value for 'rootmode' [ 135.826848][ T6308] fuse: Unknown parameter '0x0000000000000004' [ 135.845091][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 135.864045][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 135.870980][ T5903] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 135.890862][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 135.908876][ T2090] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 135.918783][ T2090] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 135.926713][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 135.934082][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 135.940645][ T2090] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0 [ 135.949640][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 135.964543][ T2090] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 135.982685][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.991921][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 136.011518][ T46] pwc: Registered as video103. [ 136.026352][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 136.042219][ T46] usb 2-1: USB disconnect, device number 9 [ 136.065434][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 136.181976][ T5903] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 136.191213][ T5903] usb 4-1: config 0 has no interface number 0 [ 136.199434][ T5903] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 136.209652][ T5903] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.222694][ T5903] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 136.234939][ T5903] usb 4-1: config 0 interface 41 has no altsetting 0 [ 136.266610][ T5903] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 136.275878][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.283950][ T5903] usb 4-1: Product: syz [ 136.290096][ T5903] usb 4-1: Manufacturer: syz [ 136.295398][ T5903] usb 4-1: SerialNumber: syz [ 136.353120][ T5903] usb 4-1: config 0 descriptor?? [ 136.364284][ T6304] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 136.389386][ T5903] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 136.398406][ T2090] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 136.407627][ T6317] CIFS: Unable to determine destination address [ 136.416730][ T2090] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 136.479253][ T2090] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -32 [ 136.831152][ T2090] usb 5-1: USB disconnect, device number 7 [ 137.490147][ T6335] fuse: Bad value for 'rootmode' [ 137.498732][ T6333] netlink: 'syz.1.132': attribute type 8 has an invalid length. [ 137.844525][ T6341] fuse: Unknown parameter '0x0000000000000004' [ 138.967097][ T5836] usb 4-1: USB disconnect, device number 2 [ 139.971813][ T6361] tipc: Started in network mode [ 139.976900][ T6361] tipc: Node identity ac14140f, cluster identity 4711 [ 139.985681][ T6361] tipc: New replicast peer: 255.255.255.255 [ 139.993743][ T6361] tipc: Enabled bearer , priority 10 [ 140.803883][ T6364] CIFS: Unable to determine destination address [ 140.995685][ T23] tipc: Node number set to 2886997007 [ 141.469737][ T6366] atomic_op ffff88807decd198 conn xmit_atomic 0000000000000000 [ 141.606094][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.866286][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 141.895781][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.943808][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.967353][ T6373] fuse: Unknown parameter 'use00000000000000000000' [ 142.006303][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 142.046190][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 142.064006][ T6377] fuse: Unknown parameter '0x0000000000000004' [ 142.072703][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.301650][ T8] usb 2-1: config 0 descriptor?? [ 142.347375][ T6378] netlink: 'syz.0.146': attribute type 8 has an invalid length. [ 143.343227][ T8] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 143.350897][ T8] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 143.367176][ T8] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0 [ 143.386092][ T8] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 143.749622][ T8] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 144.677138][ T8] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 144.813619][ T8] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -5 [ 144.885175][ T8] usb 2-1: USB disconnect, device number 10 [ 144.948132][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.958913][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.968960][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.980179][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.990645][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.001499][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.011647][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.022396][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.039635][ T6404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.050392][ T6404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.067902][ T6400] tipc: Started in network mode [ 145.073067][ T6400] tipc: Node identity ac14140f, cluster identity 4711 [ 145.080244][ T6400] tipc: New replicast peer: 255.255.255.255 [ 145.087115][ T6400] tipc: Enabled bearer , priority 10 [ 145.996256][ T6421] fuse: Unknown parameter '0x0000000000000004' [ 146.215488][ T2090] tipc: Node number set to 2886997007 [ 146.407440][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 149.665421][ T5836] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 149.826638][ T5836] usb 1-1: Using ep0 maxpacket: 16 [ 149.867122][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.934061][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.020223][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 150.121524][ T5836] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 150.183990][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.250468][ T5836] usb 1-1: config 0 descriptor?? [ 150.704825][ T5836] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 150.745747][ T5836] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 150.787386][ T5836] kovaplus 0003:1E7D:2D50.0005: unknown main item tag 0x0 [ 150.827966][ T5836] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 150.993629][ T6463] tipc: Started in network mode [ 151.006017][ T6463] tipc: Node identity ac14140f, cluster identity 4711 [ 151.023940][ T6463] tipc: New replicast peer: 255.255.255.255 [ 151.041467][ T6463] tipc: Enabled bearer , priority 10 [ 151.171391][ T5836] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 151.209160][ T5836] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 151.259262][ T5836] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -5 [ 151.338135][ T6466] fuse: Unknown parameter '0x0000000000000004' [ 151.424348][ T5836] usb 1-1: USB disconnect, device number 10 [ 152.155470][ T5836] tipc: Node number set to 2886997007 [ 152.586875][ T5840] Bluetooth: hci4: command tx timeout [ 153.271368][ T6483] atomic_op ffff88802f8f0998 conn xmit_atomic 0000000000000000 [ 154.768662][ T6496] dccp_invalid_packet: P.Data Offset(100) too large [ 155.488630][ T6506] snd_dummy snd_dummy.0: control 3:184:1024:syz1:2107285500 is already present [ 155.575601][ T6508] fuse: Unknown parameter 'fd0x0000000000000004' [ 155.862361][ T6516] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 155.905619][ T6516] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 156.056522][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.857288][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.873662][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 156.913441][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.957017][ T8] usb 5-1: config 0 descriptor?? [ 157.006538][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 158.090039][ T8] pwc: recv_control_msg error -71 req 02 val 2700 [ 158.098304][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 158.114034][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 158.121221][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 158.347258][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 158.358613][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 158.394799][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 158.414922][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 158.430066][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 158.449692][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.458514][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.470690][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.487557][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.501898][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.514610][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.645804][ T8] pwc: Registered as video103. [ 158.671198][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14 [ 158.692915][ T8] usb 5-1: USB disconnect, device number 8 [ 160.033807][ T6560] fuse: Unknown parameter 'fd0x0000000000000004' [ 162.675401][ T29] audit: type=1326 audit(1740214084.307:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 164.246741][ T29] audit: type=1326 audit(1740214084.307:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 164.773801][ T29] audit: type=1326 audit(1740214084.307:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 164.845724][ T29] audit: type=1326 audit(1740214084.307:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 164.867726][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.929120][ T29] audit: type=1326 audit(1740214084.307:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 164.951129][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.046868][ T29] audit: type=1326 audit(1740214084.307:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 165.069046][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.158096][ T29] audit: type=1326 audit(1740214084.307:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 165.336541][ T29] audit: type=1326 audit(1740214084.307:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 165.538118][ T29] audit: type=1326 audit(1740214084.307:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 166.080309][ T29] audit: type=1326 audit(1740214084.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 166.303782][ T6606] fuse: Unknown parameter 'fd0x0000000000000004' [ 168.528604][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.925611][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.951451][ T5889] usb 3-1: config 0 has no interfaces? [ 168.995246][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.159092][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.662373][ T5889] usb 3-1: config 0 descriptor?? [ 169.666118][ T6624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.609413][ T6322] usb 3-1: USB disconnect, device number 9 [ 171.713779][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 171.739892][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 171.792668][ T6654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.227'. [ 172.295830][ T6654] nbd0: detected capacity change from 0 to 256 [ 172.438408][ T5840] block nbd0: Receive control failed (result -104) [ 173.041346][ T6665] input: syz1 as /devices/virtual/input/input15 [ 174.058726][ T5889] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.205406][ T5889] usb 5-1: device descriptor read/64, error -71 [ 174.285494][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 174.585836][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 174.597175][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 174.620835][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 174.636744][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 174.647443][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.657863][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.675593][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 174.699190][ T5889] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 174.717940][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.865513][ T5889] usb 5-1: device descriptor read/64, error -71 [ 174.989500][ T5889] usb usb5-port1: attempt power cycle [ 175.465763][ T5889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.558936][ T5889] usb 5-1: device descriptor read/8, error -71 [ 175.817771][ T5889] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.028959][ T5889] usb 5-1: device descriptor read/8, error -71 [ 176.220255][ T5889] usb usb5-port1: unable to enumerate USB device [ 176.425871][ T8] usb 1-1: usb_control_msg returned -71 [ 176.461732][ T8] usbtmc 1-1:16.0: can't read capabilities [ 176.531532][ T8] usb 1-1: USB disconnect, device number 11 [ 178.849026][ T6718] tipc: Enabling of bearer rejected, already enabled [ 179.340379][ T6717] input: syz1 as /devices/virtual/input/input16 [ 182.571392][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 182.990236][ T5903] usb 1-1: device descriptor read/64, error -71 [ 183.124206][ T6744] dccp_invalid_packet: P.Data Offset(100) too large [ 183.877186][ T6744] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 184.145586][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 185.418949][ T6762] tipc: Enabling of bearer rejected, already enabled [ 186.000949][ T6765] lo speed is unknown, defaulting to 1000 [ 186.022772][ T6765] lo speed is unknown, defaulting to 1000 [ 186.032485][ T6765] lo speed is unknown, defaulting to 1000 [ 186.088903][ T6767] lo speed is unknown, defaulting to 1000 [ 186.096489][ T6767] lo speed is unknown, defaulting to 1000 [ 186.110772][ T6322] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.180155][ T6768] »»»»»»: renamed from lo (while UP) [ 186.967748][ T6765] infiniband sz1: set active [ 186.972609][ T6765] infiniband sz1: added »»»»»» [ 186.982410][ T6765] sz1: rxe_create_cq: returned err = -12 [ 186.988658][ T6765] infiniband sz1: Couldn't create ib_mad CQ [ 186.995050][ T6765] infiniband sz1: Couldn't open port 1 [ 187.037775][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.260'. [ 187.047324][ T6767] »»»»»» speed is unknown, defaulting to 1000 [ 187.050450][ T6765] RDS/IB: sz1: added [ 187.058099][ T6765] smc: adding ib device sz1 with port count 1 [ 187.064547][ T6765] smc: ib device sz1 port 1 has pnetid [ 187.076998][ T46] »»»»»» speed is unknown, defaulting to 1000 [ 187.084559][ T6765] »»»»»» speed is unknown, defaulting to 1000 [ 187.093852][ T5903] »»»»»» speed is unknown, defaulting to 1000 [ 187.100181][ T6322] usb 2-1: Using ep0 maxpacket: 16 [ 187.109842][ T6322] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 187.213992][ T6322] usb 2-1: config 0 has no interface number 0 [ 187.223142][ T6322] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 187.233336][ T6322] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.243561][ T6322] usb 2-1: config 0 interface 41 has no altsetting 0 [ 187.253349][ T6322] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 187.264214][ T6322] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.313486][ T6322] usb 2-1: Product: syz [ 187.323601][ T6322] usb 2-1: Manufacturer: syz [ 187.340984][ T6322] usb 2-1: SerialNumber: syz [ 187.519985][ T6765] »»»»»» speed is unknown, defaulting to 1000 [ 187.695793][ T6765] »»»»»» speed is unknown, defaulting to 1000 [ 187.879302][ T6765] »»»»»» speed is unknown, defaulting to 1000 [ 188.053389][ T6765] »»»»»» speed is unknown, defaulting to 1000 [ 188.228559][ T6767] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 188.245396][ T6767] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 188.344419][ T6767] »»»»»» speed is unknown, defaulting to 1000 [ 188.358794][ T6767] »»»»»» speed is unknown, defaulting to 1000 [ 188.366690][ T6767] »»»»»» speed is unknown, defaulting to 1000 [ 188.374227][ T6767] »»»»»» speed is unknown, defaulting to 1000 [ 188.381883][ T6767] »»»»»» speed is unknown, defaulting to 1000 [ 188.902360][ T6322] usb 2-1: config 0 descriptor?? [ 189.004002][ T6322] usb 2-1: can't set config #0, error -71 [ 189.030977][ T6322] usb 2-1: USB disconnect, device number 11 [ 189.531672][ T6788] dccp_invalid_packet: P.Data Offset(100) too large [ 191.282851][ T6809] tipc: Enabling of bearer rejected, already enabled [ 192.537867][ T6819] ALSA: mixer_oss: invalid OSS volume '' [ 193.195886][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 193.526369][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 194.029810][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.046022][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.275342][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 194.330931][ T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 194.371057][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.429690][ T8] usb 2-1: config 0 descriptor?? [ 194.679669][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.686379][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.240186][ T8] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 195.285561][ T8] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 195.298351][ T8] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 195.362674][ T8] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 195.770088][ T8] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 195.832150][ T8] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 196.029940][ T6849] tipc: Enabling of bearer rejected, already enabled [ 196.589936][ T8] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 196.643883][ T8] usb 2-1: USB disconnect, device number 12 [ 201.879426][ T6924] tipc: Started in network mode [ 201.884470][ T6924] tipc: Node identity ac14140f, cluster identity 4711 [ 201.893253][ T6924] tipc: New replicast peer: 255.255.255.255 [ 201.901577][ T6924] tipc: Enabled bearer , priority 10 [ 202.484151][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 30 seconds [ 202.934751][ T46] tipc: Node number set to 2886997007 [ 207.869864][ T6996] tipc: Enabling of bearer rejected, already enabled [ 208.697639][ T7001] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 208.870105][ T7003] netlink: 'syz.0.321': attribute type 4 has an invalid length. [ 212.458218][ T5144] Bluetooth: hci4: command 0x0406 tx timeout [ 212.466663][ T5144] Bluetooth: hci3: command 0x0406 tx timeout [ 212.472767][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 212.515449][ T5144] Bluetooth: hci0: command 0x0406 tx timeout [ 212.521546][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 214.829965][ T7064] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 220.007560][ T7096] atomic_op ffff8880279b2198 conn xmit_atomic 0000000000000000 [ 221.618144][ T7114] netlink: 'syz.4.348': attribute type 4 has an invalid length. [ 225.003632][ T7149] netlink: 'syz.2.355': attribute type 24 has an invalid length. [ 227.145659][ T1203] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 228.126073][ T1203] usb 2-1: Using ep0 maxpacket: 8 [ 228.144630][ T1203] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 228.163168][ T1203] usb 2-1: config 0 has no interface number 0 [ 228.195933][ T1203] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 228.266649][ T1203] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 228.318978][ T1203] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.422747][ T1203] usb 2-1: config 0 descriptor?? [ 228.454162][ T1203] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 228.662102][ T7186] dccp_invalid_packet: P.Data Offset(100) too large [ 229.521863][ T1203] usb 2-1: USB disconnect, device number 13 [ 230.698678][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 230.729638][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.365'. [ 231.244634][ T7196] netlink: 'syz.0.365': attribute type 8 has an invalid length. [ 232.555642][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 233.449870][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 60 seconds [ 234.239727][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.616484][ T8] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.781602][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.833696][ T8] usb 4-1: config 0 descriptor?? [ 234.851302][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 235.312023][ T7228] dccp_invalid_packet: P.Data Offset(100) too large [ 235.329099][ T46] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 236.008714][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 236.040829][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 236.058587][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 236.076922][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 236.092170][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 236.338349][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 236.358234][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 236.366482][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 236.379459][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 236.379526][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 236.389451][ T46] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 236.418862][ T46] usb 1-1: config 0 has no interface number 0 [ 236.423422][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 236.453202][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 236.461343][ T8] pwc: recv_control_msg error -32 req 02 val 2600 [ 236.461890][ T46] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 236.469367][ T8] pwc: recv_control_msg error -32 req 02 val 2900 [ 236.488790][ T8] pwc: recv_control_msg error -32 req 02 val 2800 [ 236.497100][ T8] pwc: recv_control_msg error -32 req 04 val 1100 [ 236.504187][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 236.513624][ T8] pwc: Registered as video103. [ 236.520723][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 236.587379][ T8] usb 4-1: USB disconnect, device number 3 [ 236.590722][ T46] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 236.627305][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.748568][ T46] usb 1-1: config 0 descriptor?? [ 236.774104][ T46] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 236.982222][ T8] usb 1-1: USB disconnect, device number 14 [ 242.311377][ T1203] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 242.497430][ T1203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.508504][ T1203] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.758783][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.011106][ T1203] usb 3-1: config 0 descriptor?? [ 243.030033][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 243.587839][ T8] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.611392][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 243.625803][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 243.647750][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 243.661703][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 243.677787][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 243.711423][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 243.735128][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 243.765421][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 243.790932][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 243.808383][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 243.826074][ T8] usb 5-1: config 0 has no interface number 0 [ 243.835741][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 243.855973][ T1203] pwc: recv_control_msg error -32 req 04 val 1500 [ 243.894169][ T1203] pwc: recv_control_msg error -32 req 02 val 2500 [ 243.911246][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 243.940592][ T1203] pwc: recv_control_msg error -32 req 02 val 2400 [ 243.952838][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.970605][ T1203] pwc: recv_control_msg error -32 req 02 val 2600 [ 243.996107][ T8] usb 5-1: config 0 descriptor?? [ 244.003376][ T1203] pwc: recv_control_msg error -32 req 02 val 2900 [ 244.028479][ T8] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 244.042572][ T1203] pwc: recv_control_msg error -32 req 02 val 2800 [ 244.063363][ T1203] pwc: recv_control_msg error -32 req 04 val 1100 [ 244.082951][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 244.111548][ T1203] pwc: Registered as video103. [ 244.137226][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 244.215418][ T1203] usb 3-1: USB disconnect, device number 10 [ 245.292138][ T7302] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 245.495154][ T7303] netlink: 'syz.2.398': attribute type 8 has an invalid length. [ 247.470213][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.481469][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.492634][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.504013][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.514440][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.525402][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.542389][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.553587][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.564026][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.575079][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.365777][ T5836] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 248.528388][ T5836] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.542352][ T5836] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.570530][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.604395][ T5836] usb 4-1: config 0 descriptor?? [ 249.263772][ T5836] pwc: Askey VC010 type 2 USB webcam detected. [ 249.388816][ T5903] usb 5-1: USB disconnect, device number 13 [ 249.686952][ T5836] pwc: recv_control_msg error -32 req 02 val 2b00 [ 250.379641][ T5836] pwc: recv_control_msg error -32 req 02 val 2700 [ 250.396743][ T5836] pwc: recv_control_msg error -32 req 02 val 2c00 [ 250.426486][ T5836] pwc: recv_control_msg error -32 req 04 val 1000 [ 250.458931][ T5836] pwc: recv_control_msg error -32 req 04 val 1300 [ 250.638390][ T5836] pwc: recv_control_msg error -32 req 04 val 1400 [ 250.645943][ T5836] pwc: recv_control_msg error -32 req 02 val 2000 [ 250.653019][ T5836] pwc: recv_control_msg error -32 req 02 val 2100 [ 250.668697][ T5836] pwc: recv_control_msg error -32 req 04 val 1500 [ 250.682515][ T5836] pwc: recv_control_msg error -32 req 02 val 2500 [ 250.693464][ T5836] pwc: recv_control_msg error -32 req 02 val 2400 [ 250.708177][ T5836] pwc: recv_control_msg error -32 req 02 val 2600 [ 250.717315][ T5836] pwc: recv_control_msg error -32 req 02 val 2900 [ 250.738430][ T5836] pwc: recv_control_msg error -32 req 02 val 2800 [ 250.762078][ T5836] pwc: recv_control_msg error -32 req 04 val 1100 [ 250.982939][ T5836] pwc: recv_control_msg error -71 req 04 val 1200 [ 251.233054][ T5836] pwc: Registered as video103. [ 251.461361][ T5836] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 251.482398][ T5836] usb 4-1: USB disconnect, device number 4 [ 251.874935][ T7359] warning: `syz.3.415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 252.101256][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 252.288765][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 252.797661][ T8] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.808815][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 252.858950][ T8] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 252.909768][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.941073][ T8] usb 3-1: config 0 descriptor?? [ 253.367977][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 253.387197][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 253.458294][ T8] usb 3-1: USB disconnect, device number 11 [ 253.755833][ T1203] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 253.925000][ T1203] usb 5-1: Using ep0 maxpacket: 8 [ 254.645671][ T1203] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 254.654036][ T1203] usb 5-1: config 0 has no interface number 0 [ 254.660436][ T1203] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.671665][ T1203] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 254.680984][ T1203] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.727020][ T1203] usb 5-1: config 0 descriptor?? [ 254.754355][ T1203] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 256.159597][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.167147][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.225712][ T2090] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 256.605164][ T2090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.617325][ T2090] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 256.627598][ T2090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.786622][ T2090] usb 4-1: config 0 descriptor?? [ 256.834213][ T2090] pwc: Askey VC010 type 2 USB webcam detected. [ 257.283763][ T2090] pwc: recv_control_msg error -32 req 02 val 2b00 [ 257.347292][ T2090] pwc: recv_control_msg error -32 req 02 val 2700 [ 257.406059][ T2090] pwc: recv_control_msg error -32 req 02 val 2c00 [ 257.457037][ T2090] pwc: recv_control_msg error -32 req 04 val 1000 [ 257.490928][ T2090] pwc: recv_control_msg error -32 req 04 val 1300 [ 257.529043][ T2090] pwc: recv_control_msg error -32 req 04 val 1400 [ 257.604339][ T2090] pwc: recv_control_msg error -32 req 02 val 2000 [ 257.765487][ T2090] pwc: recv_control_msg error -32 req 02 val 2100 [ 257.784961][ T2090] pwc: recv_control_msg error -32 req 04 val 1500 [ 257.812028][ T2090] pwc: recv_control_msg error -32 req 02 val 2500 [ 257.855515][ T2090] pwc: recv_control_msg error -32 req 02 val 2400 [ 257.862866][ T2090] pwc: recv_control_msg error -32 req 02 val 2600 [ 257.888366][ T2090] pwc: recv_control_msg error -32 req 02 val 2900 [ 257.925127][ T2090] pwc: recv_control_msg error -32 req 02 val 2800 [ 257.939967][ T2090] pwc: recv_control_msg error -32 req 04 val 1100 [ 257.955438][ T2090] pwc: recv_control_msg error -71 req 04 val 1200 [ 258.265903][ T2090] pwc: Registered as video103. [ 258.273277][ T2090] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 258.365301][ T7419] dccp_invalid_packet: P.Data Offset(100) too large [ 258.875215][ T2090] usb 4-1: USB disconnect, device number 5 [ 261.403447][ T8] usb 5-1: USB disconnect, device number 14 [ 263.795462][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 90 seconds [ 264.285914][ T5889] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 264.451701][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.483691][ T5889] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 264.566019][ T7463] dccp_invalid_packet: P.Data Offset(100) too large [ 264.676073][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.323659][ T5889] usb 1-1: config 0 descriptor?? [ 265.399646][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 266.940777][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 267.004356][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 267.086780][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 267.164869][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 267.172436][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 267.179885][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 267.198868][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 267.209540][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 267.222190][ T5889] pwc: recv_control_msg error -32 req 04 val 1500 [ 267.237083][ T5889] pwc: recv_control_msg error -32 req 02 val 2500 [ 267.255588][ T5889] pwc: recv_control_msg error -32 req 02 val 2400 [ 267.406458][ T5889] pwc: recv_control_msg error -32 req 02 val 2600 [ 267.418316][ T5889] pwc: recv_control_msg error -32 req 02 val 2900 [ 267.439064][ T5889] pwc: recv_control_msg error -32 req 02 val 2800 [ 268.210586][ T46] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 268.220691][ T5889] pwc: recv_control_msg error -32 req 04 val 1100 [ 268.276139][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.326434][ T5889] pwc: Registered as video103. [ 268.334333][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 268.402636][ T5889] usb 1-1: USB disconnect, device number 15 [ 268.417669][ T7484] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 268.453102][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 269.095963][ T7490] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 269.131019][ T46] usb 2-1: device descriptor read/all, error -71 [ 269.276157][ T5836] »»»»»» speed is unknown, defaulting to 1000 [ 269.288810][ T2090] »»»»»» speed is unknown, defaulting to 1000 [ 269.806129][ T5883] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.388628][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 270.425164][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 270.453626][ T5883] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 270.741221][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 270.780220][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.804332][ T5883] usb 3-1: Product: syz [ 270.813003][ T5883] usb 3-1: Manufacturer: syz [ 270.842736][ T5883] usb 3-1: SerialNumber: syz [ 270.869968][ T5883] usb 3-1: config 0 descriptor?? [ 271.810468][ T7518] dccp_invalid_packet: P.Data Offset(100) too large [ 272.265232][ T5883] usb 3-1: USB disconnect, device number 12 [ 273.011668][ T7530] atomic_op ffff888025940198 conn xmit_atomic 0000000000000000 [ 273.405583][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 273.711206][ T7537] netlink: 'syz.1.470': attribute type 4 has an invalid length. [ 273.861369][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.028275][ T7541] netlink: 'syz.1.470': attribute type 4 has an invalid length. [ 274.235455][ T46] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.292886][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.555752][ T46] usb 1-1: config 0 descriptor?? [ 274.580408][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 274.988909][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 275.144549][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.362536][ T7557] netlink: 'syz.3.473': attribute type 24 has an invalid length. [ 275.906039][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 276.512808][ T46] pwc: recv_control_msg error -71 req 04 val 1000 [ 276.525447][ T46] pwc: recv_control_msg error -71 req 04 val 1300 [ 276.532890][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 276.545465][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 276.600771][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 276.641153][ T7565] dccp_invalid_packet: P.Data Offset(100) too large [ 276.758722][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 276.902894][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 277.118568][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 277.199761][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 277.332089][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 277.444499][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 277.486044][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 277.506970][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 277.524871][ T46] pwc: Registered as video103. [ 277.770416][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 277.866211][ T46] usb 1-1: USB disconnect, device number 16 [ 280.055729][ T6322] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 280.153934][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 280.564171][ T6322] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.726085][ T6322] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.976417][ T6322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.020598][ T6322] usb 5-1: config 0 descriptor?? [ 281.061771][ T6322] pwc: Askey VC010 type 2 USB webcam detected. [ 282.194530][ T6322] pwc: recv_control_msg error -32 req 02 val 2b00 [ 282.215838][ T6322] pwc: recv_control_msg error -32 req 02 val 2700 [ 282.277181][ T6322] pwc: recv_control_msg error -32 req 02 val 2c00 [ 282.284532][ T6322] pwc: recv_control_msg error -32 req 04 val 1000 [ 282.292108][ T6322] pwc: recv_control_msg error -32 req 04 val 1300 [ 282.306734][ T6322] pwc: recv_control_msg error -32 req 04 val 1400 [ 282.329654][ T6322] pwc: recv_control_msg error -32 req 02 val 2000 [ 282.346998][ T6322] pwc: recv_control_msg error -32 req 02 val 2100 [ 282.359573][ T6322] pwc: recv_control_msg error -32 req 04 val 1500 [ 282.371844][ T6322] pwc: recv_control_msg error -32 req 02 val 2500 [ 282.418610][ T6322] pwc: recv_control_msg error -32 req 02 val 2400 [ 282.428800][ T6322] pwc: recv_control_msg error -32 req 02 val 2600 [ 282.446472][ T6322] pwc: recv_control_msg error -32 req 02 val 2900 [ 282.456848][ T6322] pwc: recv_control_msg error -32 req 02 val 2800 [ 282.672712][ T6322] pwc: recv_control_msg error -71 req 04 val 1200 [ 282.791836][ T6322] pwc: Registered as video103. [ 283.025789][ T6322] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 283.454258][ T6322] usb 5-1: USB disconnect, device number 15 [ 287.148074][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 288.493155][ T1203] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 289.168150][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.178835][ T1203] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 289.188046][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.205024][ T1203] usb 4-1: config 0 descriptor?? [ 289.658036][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 290.172589][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 290.179883][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 290.190760][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 290.197939][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 290.218605][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 290.226521][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 290.238463][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 290.251338][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 290.507343][ T1203] pwc: recv_control_msg error -32 req 04 val 1500 [ 290.518556][ T1203] pwc: recv_control_msg error -32 req 02 val 2500 [ 290.526186][ T1203] pwc: recv_control_msg error -32 req 02 val 2400 [ 290.533674][ T1203] pwc: recv_control_msg error -32 req 02 val 2600 [ 290.544268][ T1203] pwc: recv_control_msg error -32 req 02 val 2900 [ 290.551664][ T1203] pwc: recv_control_msg error -32 req 02 val 2800 [ 290.808032][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 291.288154][ T1203] pwc: Registered as video103. [ 291.327280][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 291.384622][ T1203] usb 4-1: USB disconnect, device number 6 [ 291.421516][ T7706] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 291.441961][ T7706] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 293.869081][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 120 seconds [ 296.105386][ T1203] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 296.962504][ T1203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.062057][ T1203] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 297.073305][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.238042][ T1203] usb 3-1: config 0 descriptor?? [ 298.313738][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 299.587682][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.609539][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.629061][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 299.651367][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 299.729344][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 299.843713][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.007258][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.076442][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.084611][ T1203] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.215978][ T1203] pwc: recv_control_msg error -32 req 02 val 2500 [ 301.133898][ T1203] pwc: recv_control_msg error -32 req 02 val 2400 [ 301.567452][ T1203] pwc: recv_control_msg error -71 req 02 val 2600 [ 301.584305][ T1203] pwc: recv_control_msg error -71 req 02 val 2900 [ 301.637607][ T1203] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.705745][ T1203] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.754425][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.801499][ T1203] pwc: Registered as video103. [ 301.919536][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input25 [ 301.932227][ T7808] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 302.243308][ T7819] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 302.742647][ T1203] usb 3-1: USB disconnect, device number 13 [ 303.783240][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.799830][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.821080][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.832136][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.853860][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.872915][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.885539][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.923425][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.934132][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.944836][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.215709][ T5836] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 304.381066][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 304.412043][ T5836] usb 2-1: config 0 has an invalid interface number: 183 but max is 0 [ 304.427682][ T5836] usb 2-1: config 0 has no interface number 0 [ 304.448711][ T5836] usb 2-1: config 0 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 304.499765][ T5836] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad4, bcdDevice=d0.a3 [ 304.509491][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.529429][ T5836] usb 2-1: Product: syz [ 304.539379][ T5836] usb 2-1: Manufacturer: syz [ 304.544456][ T5836] usb 2-1: SerialNumber: syz [ 304.577413][ T5836] usb 2-1: config 0 descriptor?? [ 304.651446][ T7853] »»»»»» speed is unknown, defaulting to 1000 [ 304.765625][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 304.814342][ T5836] usb 2-1: Found UVC 0.00 device syz (8086:0ad4) [ 304.831769][ T5836] usb 2-1: No valid video chain found. [ 304.855215][ T5836] usb 2-1: USB disconnect, device number 16 [ 305.018347][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.028848][ T5903] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.057288][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.108101][ T5903] usb 4-1: config 0 descriptor?? [ 305.144734][ T5903] pwc: Askey VC010 type 2 USB webcam detected. [ 305.769106][ T5903] pwc: recv_control_msg error -32 req 02 val 2b00 [ 305.783322][ T5903] pwc: recv_control_msg error -32 req 02 val 2700 [ 306.194629][ T5903] pwc: recv_control_msg error -32 req 02 val 2c00 [ 306.221040][ T5903] pwc: recv_control_msg error -32 req 04 val 1000 [ 306.231488][ T5903] pwc: recv_control_msg error -32 req 04 val 1300 [ 306.450615][ T5903] pwc: recv_control_msg error -32 req 04 val 1400 [ 306.488915][ T5903] pwc: recv_control_msg error -32 req 02 val 2000 [ 306.528278][ T5903] pwc: recv_control_msg error -32 req 02 val 2100 [ 306.614684][ T5903] pwc: recv_control_msg error -32 req 04 val 1500 [ 306.635445][ T5903] pwc: recv_control_msg error -32 req 02 val 2500 [ 306.650112][ T5903] pwc: recv_control_msg error -32 req 02 val 2400 [ 306.676972][ T5903] pwc: recv_control_msg error -32 req 02 val 2600 [ 307.369222][ T5903] pwc: recv_control_msg error -32 req 02 val 2900 [ 307.404375][ T5903] pwc: recv_control_msg error -32 req 02 val 2800 [ 307.565010][ T7881] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 307.580875][ T7881] netlink: 'syz.2.566': attribute type 4 has an invalid length. [ 307.647416][ T5903] pwc: recv_control_msg error -71 req 04 val 1200 [ 307.732643][ T5903] pwc: Registered as video103. [ 307.819724][ T5903] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 307.860726][ T5903] usb 4-1: USB disconnect, device number 7 [ 307.884780][ T7853] »»»»»» speed is unknown, defaulting to 1000 [ 308.294740][ T7892] libceph: resolve '4' (ret=-3): failed [ 309.922213][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 309.922230][ T29] audit: type=1326 audit(1740214231.567:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 310.111720][ T29] audit: type=1326 audit(1740214231.617:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 310.134747][ T29] audit: type=1326 audit(1740214231.617:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 310.157236][ T7907] netlink: 'syz.1.574': attribute type 8 has an invalid length. [ 310.972764][ T29] audit: type=1326 audit(1740214231.617:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 311.014508][ T29] audit: type=1326 audit(1740214231.617:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 311.053448][ T29] audit: type=1326 audit(1740214231.617:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 311.084915][ T29] audit: type=1326 audit(1740214231.617:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 311.113677][ T29] audit: type=1326 audit(1740214231.617:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 311.194988][ T29] audit: type=1326 audit(1740214231.617:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 311.227552][ T29] audit: type=1326 audit(1740214231.617:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7903 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 312.528229][ T7917] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 312.544089][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.553020][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.071209][ T5836] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 313.247571][ T5836] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 313.263242][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.309287][ T5836] usb 2-1: config 0 has no interface number 0 [ 313.329323][ T5836] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.352504][ T5836] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 313.371993][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.403754][ T5836] usb 2-1: Product: syz [ 313.412296][ T5836] usb 2-1: Manufacturer: syz [ 313.417809][ T5836] usb 2-1: SerialNumber: syz [ 313.504335][ T5836] usb 2-1: config 0 descriptor?? [ 316.424436][ T5903] usb 2-1: USB disconnect, device number 17 [ 317.013264][ T7949] sctp: failed to load transform for md5: -2 [ 317.579003][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.586672][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.030564][ T7970] netlink: 'syz.3.590': attribute type 8 has an invalid length. [ 319.799048][ T7987] capability: warning: `syz.1.595' uses deprecated v2 capabilities in a way that may be insecure [ 320.165431][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 320.165451][ T29] audit: type=1326 audit(1740214241.797:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7986 comm="syz.1.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f70b898d169 code=0x0 [ 321.789077][ T7995] sctp: failed to load transform for md5: -2 [ 322.265476][ T5204] udevd[5204]: worker [6108] /devices/virtual/block/nbd0 is taking a long time [ 322.481453][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.494416][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.504156][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.522102][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.533353][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.541088][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.050386][ T8019] loop6: detected capacity change from 0 to 524287999 [ 323.689807][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 324.148358][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 150 seconds [ 324.917442][ T5832] Bluetooth: hci5: command tx timeout [ 325.189502][ T8009] »»»»»» speed is unknown, defaulting to 1000 [ 326.288477][ T8009] »»»»»» speed is unknown, defaulting to 1000 [ 326.985478][ T5832] Bluetooth: hci5: command tx timeout [ 328.367854][ T8051] sctp: failed to load transform for md5: -2 [ 328.575150][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 329.065737][ T5832] Bluetooth: hci5: command tx timeout [ 329.604442][ T7857] Set syz1 is full, maxelem 65536 reached [ 330.987018][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 330.999120][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 331.019111][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 331.035077][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 331.044269][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 331.051649][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 331.155451][ T54] Bluetooth: hci5: command tx timeout [ 331.243376][ T2090] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 331.806183][ T2090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.867091][ T2090] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.884807][ T2090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.914204][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.932270][ T2090] usb 4-1: config 0 descriptor?? [ 331.942455][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.946432][ T2090] pwc: Askey VC010 type 2 USB webcam detected. [ 331.968249][ T8009] bridge_slave_0: entered allmulticast mode [ 331.991544][ T8009] bridge_slave_0: entered promiscuous mode [ 332.205461][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.227336][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.234693][ T8009] bridge_slave_1: entered allmulticast mode [ 332.279316][ T8009] bridge_slave_1: entered promiscuous mode [ 332.370934][ T2090] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.401656][ T2090] pwc: recv_control_msg error -32 req 02 val 2700 [ 332.473143][ T2090] pwc: recv_control_msg error -32 req 02 val 2c00 [ 332.579673][ T2090] pwc: recv_control_msg error -32 req 04 val 1000 [ 332.700159][ T2090] pwc: recv_control_msg error -32 req 04 val 1300 [ 332.900096][ T2090] pwc: recv_control_msg error -32 req 04 val 1400 [ 333.015937][ T2090] pwc: recv_control_msg error -32 req 02 val 2000 [ 333.055943][ T2090] pwc: recv_control_msg error -32 req 02 val 2100 [ 333.095555][ T2090] pwc: recv_control_msg error -32 req 04 val 1500 [ 333.128348][ T2090] pwc: recv_control_msg error -32 req 02 val 2500 [ 333.147384][ T2090] pwc: recv_control_msg error -32 req 02 val 2400 [ 333.160425][ T54] Bluetooth: hci6: command tx timeout [ 333.162768][ T8091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.621'. [ 333.181804][ T8091] unsupported nlmsg_type 40 [ 333.191442][ T2090] pwc: recv_control_msg error -32 req 02 val 2600 [ 333.214273][ T2090] pwc: recv_control_msg error -32 req 02 val 2900 [ 333.252483][ T2090] pwc: recv_control_msg error -32 req 02 val 2800 [ 333.399700][ T8074] »»»»»» speed is unknown, defaulting to 1000 [ 333.506703][ T2090] pwc: recv_control_msg error -71 req 04 val 1200 [ 333.723063][ T2090] pwc: Registered as video103. [ 333.806349][ T2090] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 333.919472][ T2090] usb 4-1: USB disconnect, device number 8 [ 334.187769][ T8100] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 334.567656][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.609680][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.245463][ T54] Bluetooth: hci6: command tx timeout [ 336.470117][ T8009] team0: Port device team_slave_0 added [ 336.756207][ T8009] team0: Port device team_slave_1 added [ 337.058624][ T8112] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 337.305896][ T54] Bluetooth: hci6: command tx timeout [ 337.370725][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.387112][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.450738][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.500800][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.522295][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.551272][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.563288][ T8074] »»»»»» speed is unknown, defaulting to 1000 [ 338.353198][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 338.488779][ T8127] netlink: 60 bytes leftover after parsing attributes in process `syz.1.632'. [ 338.810296][ T5889] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 338.962790][ T8009] hsr_slave_0: entered promiscuous mode [ 338.996907][ T8009] hsr_slave_1: entered promiscuous mode [ 339.023616][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.036400][ T8009] Cannot create hsr debugfs directory [ 339.099304][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.119839][ T5889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 339.283347][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.375889][ T1203] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 339.386457][ T54] Bluetooth: hci6: command tx timeout [ 339.426456][ T5889] usb 4-1: config 0 descriptor?? [ 339.646565][ T1203] usb 1-1: Using ep0 maxpacket: 16 [ 339.665039][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 339.674450][ T1203] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 339.694277][ T1203] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.719371][ T1203] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 339.734677][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.767139][ T1203] usb 1-1: Product: syz [ 339.771442][ T1203] usb 1-1: Manufacturer: syz [ 339.782959][ T1203] usb 1-1: SerialNumber: syz [ 339.875048][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 339.913516][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 339.932941][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 339.945217][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 339.963415][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 339.974996][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 339.993405][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 340.034733][ T1203] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 340.046227][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 340.065705][ T5889] pwc: recv_control_msg error -32 req 04 val 1500 [ 340.114711][ T5889] pwc: recv_control_msg error -32 req 02 val 2500 [ 340.152679][ T5889] pwc: recv_control_msg error -32 req 02 val 2400 [ 340.175225][ T5889] pwc: recv_control_msg error -32 req 02 val 2600 [ 340.182980][ T5889] pwc: recv_control_msg error -32 req 02 val 2900 [ 340.201090][ T5889] pwc: recv_control_msg error -32 req 02 val 2800 [ 340.223192][ T1203] usb 1-1: USB disconnect, device number 17 [ 340.418307][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 340.449168][ T5889] pwc: Registered as video103. [ 340.465848][ T8139] x_tables: duplicate underflow at hook 3 [ 340.468397][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 340.478217][ T8074] chnl_net:caif_netlink_parms(): no params data found [ 340.495712][ T5889] usb 4-1: USB disconnect, device number 9 [ 340.749475][ T6222] udevd[6222]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.806621][ T8009] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 341.412477][ T8009] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 341.507141][ T8009] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.243675][ T8009] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.278962][ T8074] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.322024][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.341605][ T8074] bridge_slave_0: entered allmulticast mode [ 342.371870][ T8074] bridge_slave_0: entered promiscuous mode [ 342.409269][ T8074] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.427329][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.434671][ T8074] bridge_slave_1: entered allmulticast mode [ 342.466789][ T8074] bridge_slave_1: entered promiscuous mode [ 343.063951][ T8074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.138332][ T8074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.409584][ T8167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.643'. [ 343.634545][ T8074] team0: Port device team_slave_0 added [ 343.644859][ T8074] team0: Port device team_slave_1 added [ 343.983520][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.031826][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.139355][ T8074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.597225][ T8074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.604235][ T8074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.683356][ T8074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.731639][ T54] Bluetooth: hci2: unexpected event 0x05 length: 9 > 4 [ 344.959815][ T8074] hsr_slave_0: entered promiscuous mode [ 344.984664][ T8074] hsr_slave_1: entered promiscuous mode [ 344.995399][ T8074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.004111][ T8074] Cannot create hsr debugfs directory [ 345.202317][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.482006][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.553642][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.560931][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.566763][ T8184] x_tables: duplicate underflow at hook 3 [ 345.601380][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.608712][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.625847][ T1203] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 345.810523][ T1203] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.846570][ T1203] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 345.873963][ T1203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.901524][ T1203] usb 4-1: config 0 descriptor?? [ 345.929188][ T8074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 345.929898][ T1203] pwc: Askey VC010 type 2 USB webcam detected. [ 345.984907][ T8074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 346.000780][ T8074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 346.029457][ T8074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 346.341360][ T1203] pwc: recv_control_msg error -32 req 02 val 2b00 [ 346.386587][ T1203] pwc: recv_control_msg error -32 req 02 val 2700 [ 346.404407][ T1203] pwc: recv_control_msg error -32 req 02 val 2c00 [ 346.412213][ T1203] pwc: recv_control_msg error -32 req 04 val 1000 [ 346.419935][ T1203] pwc: recv_control_msg error -32 req 04 val 1300 [ 346.427738][ T1203] pwc: recv_control_msg error -32 req 04 val 1400 [ 346.435349][ T1203] pwc: recv_control_msg error -32 req 02 val 2000 [ 346.442851][ T1203] pwc: recv_control_msg error -32 req 02 val 2100 [ 346.458954][ T1203] pwc: recv_control_msg error -32 req 04 val 1500 [ 346.473026][ T1203] pwc: recv_control_msg error -32 req 02 val 2500 [ 346.485152][ T1203] pwc: recv_control_msg error -32 req 02 val 2400 [ 346.497260][ T1203] pwc: recv_control_msg error -32 req 02 val 2600 [ 346.513517][ T1203] pwc: recv_control_msg error -32 req 02 val 2900 [ 346.524279][ T1203] pwc: recv_control_msg error -32 req 02 val 2800 [ 346.878514][ T1203] pwc: recv_control_msg error -71 req 04 val 1200 [ 346.936186][ T1203] pwc: Registered as video103. [ 346.954928][ T1203] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 347.360373][ T1203] usb 4-1: USB disconnect, device number 10 [ 347.457479][ T8074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.090815][ T8207] Zero length message leads to an empty skb [ 349.590729][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.613631][ T8074] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.661804][ T5953] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.670064][ T5953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.875031][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.882290][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.005482][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 350.215522][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 350.223349][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 350.252863][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 350.284335][ T23] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 350.307671][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.323424][ T23] usb 1-1: Product: syz [ 350.330030][ T23] usb 1-1: Manufacturer: syz [ 350.355141][ T23] usb 1-1: SerialNumber: syz [ 350.393232][ T23] usb 1-1: config 0 descriptor?? [ 350.426812][ T23] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 350.436263][ T23] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 350.660259][ T8074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.699415][ T8009] veth0_vlan: entered promiscuous mode [ 350.757037][ T8009] veth1_vlan: entered promiscuous mode [ 350.869655][ T8009] veth0_macvtap: entered promiscuous mode [ 350.907735][ T8009] veth1_macvtap: entered promiscuous mode [ 350.997855][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.024977][ T23] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 351.025410][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.036287][ T23] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 351.062156][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.093550][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.095936][ T23] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 351.106528][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.134602][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.144731][ T23] em28xx 1-1:0.0: No AC97 audio processor [ 351.146437][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.174650][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.192797][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.204162][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.234254][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.310848][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.334669][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.358248][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.388962][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.422202][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.458036][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.495437][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.513770][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.524746][ T8235] x_tables: duplicate underflow at hook 3 [ 351.535981][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.557053][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.579834][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.610304][ T8009] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.636632][ T8009] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.655968][ T8009] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.664706][ T8009] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.911797][ T8074] veth0_vlan: entered promiscuous mode [ 352.225133][ T8074] veth1_vlan: entered promiscuous mode [ 352.443500][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.524823][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.962177][ T8] usb 1-1: USB disconnect, device number 18 [ 352.977055][ T8] em28xx 1-1:0.0: Disconnecting em28xx [ 353.046109][ T8] em28xx 1-1:0.0: Freeing device [ 353.130015][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.151327][ T8074] veth0_macvtap: entered promiscuous mode [ 353.159435][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.501517][ T8074] veth1_macvtap: entered promiscuous mode [ 353.807145][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.850177][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.883947][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.933299][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.961684][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.972833][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.984691][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.001484][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.055776][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.267428][ T8264] netlink: 'syz.0.665': attribute type 8 has an invalid length. [ 354.354283][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.393531][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.404285][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.558707][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.680051][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 180 seconds [ 354.710911][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.778652][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.790248][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.802255][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.812368][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.824846][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.841662][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.857376][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.870752][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.881509][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.892131][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.902819][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.930890][ T8074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.977489][ T8074] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.008663][ T8074] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.060491][ T8074] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.095393][ T8074] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.703353][ T8267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.952597][ T7780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.990145][ T7780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.074000][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.239755][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.662111][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 358.835403][ T5883] usb 7-1: Using ep0 maxpacket: 16 [ 359.147317][ T5883] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 359.200203][ T5883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 359.227806][ T5883] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.267716][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.290983][ T5883] usb 7-1: Product: syz [ 359.295194][ T5883] usb 7-1: Manufacturer: syz [ 359.319311][ T5883] usb 7-1: SerialNumber: syz [ 359.338547][ T5883] usb 7-1: config 0 descriptor?? [ 359.416166][ T5883] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 359.435361][ T5883] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 359.599153][ T8303] x_tables: duplicate underflow at hook 3 [ 360.439313][ T5883] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 360.460696][ T5883] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 360.469374][ T5883] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 360.495384][ T5883] em28xx 7-1:0.0: No AC97 audio processor [ 361.545460][ T8315] netlink: 'syz.5.676': attribute type 8 has an invalid length. [ 363.258353][ T1203] usb 7-1: USB disconnect, device number 2 [ 363.286420][ T1203] em28xx 7-1:0.0: Disconnecting em28xx [ 363.303990][ T1203] em28xx 7-1:0.0: Freeing device [ 365.915394][ T1203] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 366.042459][ T8355] x_tables: duplicate underflow at hook 3 [ 366.115415][ T1203] usb 4-1: Using ep0 maxpacket: 32 [ 366.141221][ T1203] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 366.177944][ T1203] usb 4-1: config 0 has no interface number 0 [ 366.202978][ T1203] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 366.219744][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.228528][ T1203] usb 4-1: Product: syz [ 366.232913][ T1203] usb 4-1: Manufacturer: syz [ 366.247091][ T1203] usb 4-1: SerialNumber: syz [ 366.452247][ T1203] usb 4-1: config 0 descriptor?? [ 367.085928][ T1203] smsc95xx v2.0.0 [ 367.103346][ T8359] tty tty30: ldisc open failed (-12), clearing slot 29 [ 367.827653][ T29] audit: type=1326 audit(1740214289.477:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 367.946701][ T29] audit: type=1326 audit(1740214289.507:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 368.085433][ T29] audit: type=1326 audit(1740214289.507:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 368.125109][ T29] audit: type=1326 audit(1740214289.507:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 368.969542][ T29] audit: type=1326 audit(1740214289.507:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 369.445472][ T1203] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 369.475470][ T29] audit: type=1326 audit(1740214289.507:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 369.476823][ T1203] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 369.501516][ T29] audit: type=1326 audit(1740214289.507:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 369.537839][ T29] audit: type=1326 audit(1740214289.507:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 370.180832][ T29] audit: type=1326 audit(1740214289.507:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 370.244473][ T1203] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 370.288111][ T1203] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 370.392719][ T29] audit: type=1326 audit(1740214289.507:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.0.692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbecf18d169 code=0x7ffc0000 [ 370.827698][ T8388] atomic_op ffff88806cd55198 conn xmit_atomic 0000000000000000 [ 370.865921][ T1203] usb 4-1: USB disconnect, device number 11 [ 370.899198][ T8392] tipc: Enabling of bearer rejected, already enabled [ 371.275405][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.703'. [ 372.053319][ T8405] x_tables: duplicate underflow at hook 3 [ 376.646511][ T8435] atomic_op ffff88802a08c998 conn xmit_atomic 0000000000000000 [ 377.399110][ T8441] 9pnet_fd: Insufficient options for proto=fd [ 377.502469][ T8447] tipc: Enabling of bearer rejected, already enabled [ 379.038565][ T8453] mmap: syz.1.716 (8453) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 379.206280][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.212667][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.008917][ T8470] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:17953 [ 380.562177][ T8466] x_tables: duplicate underflow at hook 3 [ 380.765400][ T46] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 381.036876][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 381.198611][ T46] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.244709][ T46] usb 4-1: config 0 interface 0 has no altsetting 0 [ 381.285634][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 381.321995][ T46] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 381.352513][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.376484][ T46] usb 4-1: config 0 descriptor?? [ 381.516331][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 381.560251][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.588682][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 381.643041][ T23] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 381.742483][ T23] usb 2-1: Manufacturer: syz [ 381.776181][ T23] usb 2-1: config 0 descriptor?? [ 382.283573][ T46] cougar 0003:060B:500A.0007: unexpected long global item [ 382.294711][ T1203] usb 2-1: USB disconnect, device number 18 [ 382.325621][ T46] cougar 0003:060B:500A.0007: parse failed [ 382.331608][ T46] cougar 0003:060B:500A.0007: probe with driver cougar failed with error -22 [ 382.425001][ T46] usb 4-1: USB disconnect, device number 12 [ 382.434254][ T8487] atomic_op ffff888030b8a198 conn xmit_atomic 0000000000000000 [ 383.210579][ T8497] tipc: Enabling of bearer rejected, already enabled [ 384.762081][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 210 seconds [ 385.037806][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 385.037831][ T29] audit: type=1326 audit(1740214306.687:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 385.140714][ T29] audit: type=1326 audit(1740214306.787:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 385.165419][ T29] audit: type=1326 audit(1740214306.787:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 385.187601][ T29] audit: type=1326 audit(1740214306.787:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 385.240598][ T29] audit: type=1326 audit(1740214306.787:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 385.275724][ T29] audit: type=1326 audit(1740214306.787:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 386.172334][ T29] audit: type=1326 audit(1740214306.787:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 386.277272][ T8525] 9pnet_fd: Insufficient options for proto=fd [ 386.283615][ T29] audit: type=1326 audit(1740214306.787:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 386.906348][ T8529] atomic_op ffff88804d639998 conn xmit_atomic 0000000000000000 [ 386.925468][ T29] audit: type=1326 audit(1740214306.787:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 386.995735][ T29] audit: type=1326 audit(1740214306.787:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8512 comm="syz.3.734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 387.044139][ T8537] CIFS: Unable to determine destination address [ 389.566729][ T8559] tipc: Started in network mode [ 389.571673][ T8559] tipc: Node identity ac14140f, cluster identity 4711 [ 389.609203][ T8559] tipc: New replicast peer: 255.255.255.255 [ 390.569538][ T8559] tipc: Enabled bearer , priority 10 [ 390.746612][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 390.746631][ T29] audit: type=1326 audit(1740214312.327:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 390.787768][ T5885] tipc: Node number set to 2886997007 [ 390.826501][ T29] audit: type=1326 audit(1740214312.327:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 390.978468][ T8571] atomic_op ffff88807b97a998 conn xmit_atomic 0000000000000000 [ 391.667778][ T29] audit: type=1326 audit(1740214312.337:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 391.690123][ T29] audit: type=1326 audit(1740214312.337:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 391.776007][ T29] audit: type=1326 audit(1740214312.337:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 391.839347][ T29] audit: type=1326 audit(1740214312.337:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 392.430413][ T29] audit: type=1326 audit(1740214312.337:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 392.498753][ T29] audit: type=1326 audit(1740214312.337:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 392.594351][ T29] audit: type=1326 audit(1740214312.337:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 392.629138][ T29] audit: type=1326 audit(1740214312.337:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8565 comm="syz.6.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb098d169 code=0x7ffc0000 [ 393.076360][ T5889] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 394.098778][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 394.107162][ T8598] CIFS: Unable to determine destination address [ 394.129318][ T5889] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 394.166580][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 394.180643][ T5889] usb 2-1: Product: syz [ 394.184846][ T5889] usb 2-1: Manufacturer: syz [ 394.190287][ T5889] usb 2-1: SerialNumber: syz [ 394.205383][ T23] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 394.214235][ T5889] usb 2-1: config 0 descriptor?? [ 394.281214][ T8599] 9pnet_fd: Insufficient options for proto=fd [ 394.376318][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 394.398096][ T23] usb 4-1: config 0 has an invalid interface number: 130 but max is 0 [ 394.426098][ T23] usb 4-1: config 0 has no interface number 0 [ 394.432387][ T23] usb 4-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.1b [ 394.473060][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.533774][ T23] usb 4-1: config 0 descriptor?? [ 394.569426][ T23] ftdi_sio 4-1:0.130: FTDI USB Serial Device converter detected [ 394.609067][ T23] ftdi_sio ttyUSB0: unknown device type: 0x711b [ 394.796473][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.758'. [ 394.805854][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.813339][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.841009][ T8593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.849752][ T8593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.797738][ T8601] netlink: 'syz.5.761': attribute type 8 has an invalid length. [ 395.944180][ T5889] usb 2-1: USB disconnect, device number 19 [ 396.085758][ T8604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.760'. [ 396.167696][ T5885] usb 4-1: USB disconnect, device number 13 [ 396.198471][ T5885] ftdi_sio 4-1:0.130: device disconnected [ 396.940141][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 396.940160][ T29] audit: type=1326 audit(1740214318.577:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 397.875456][ T29] audit: type=1326 audit(1740214318.577:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 397.899098][ T29] audit: type=1326 audit(1740214318.617:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 397.922028][ T29] audit: type=1326 audit(1740214318.617:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.016372][ T29] audit: type=1326 audit(1740214318.617:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.108370][ T29] audit: type=1326 audit(1740214318.617:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.169821][ T29] audit: type=1326 audit(1740214318.617:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.301430][ T29] audit: type=1326 audit(1740214318.617:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.399230][ T29] audit: type=1326 audit(1740214318.617:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.426493][ T29] audit: type=1326 audit(1740214318.627:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f909618d169 code=0x7ffc0000 [ 398.996571][ T8635] tipc: Enabling of bearer rejected, already enabled [ 399.225479][ T5889] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 399.292805][ T8641] netlink: 'syz.6.775': attribute type 4 has an invalid length. [ 399.364595][ T8641] netlink: 'syz.6.775': attribute type 4 has an invalid length. [ 399.395399][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 399.420292][ T5889] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 399.467403][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 399.526840][ T5889] usb 2-1: Product: syz [ 399.531036][ T5889] usb 2-1: Manufacturer: syz [ 399.547894][ T5889] usb 2-1: SerialNumber: syz [ 399.570148][ T5889] usb 2-1: config 0 descriptor?? [ 399.906265][ T8645] netlink: 'syz.0.776': attribute type 8 has an invalid length. [ 401.321910][ T8653] 9pnet_fd: Insufficient options for proto=fd [ 403.101070][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.778'. [ 403.335188][ T5889] usb 2-1: USB disconnect, device number 20 [ 404.422718][ T8673] CIFS: Unable to determine destination address [ 405.675910][ T8690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.789'. [ 405.715450][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 406.235439][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 406.260519][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 406.292039][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 406.331256][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 406.519039][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 406.553726][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 406.599110][ T8] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 406.628091][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.666641][ T8] usb 6-1: Product: syz [ 406.692603][ T8] usb 6-1: Manufacturer: syz [ 406.716181][ T8] usb 6-1: SerialNumber: syz [ 406.739354][ T8] usb 6-1: config 0 descriptor?? [ 407.154341][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.171509][ T8] input input30: Device does not respond to id packet M [ 407.254539][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.280786][ T8] input input30: Device does not respond to id packet P [ 407.329415][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.364101][ T8] input input30: Device does not respond to id packet B [ 407.390977][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.416533][ T8] input input30: Device does not respond to id packet N [ 407.444763][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.454947][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.494650][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.516347][ T8] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 407.532507][ T8] iforce 6-1:0.0: usb_submit_urb failed -90 [ 407.541300][ T8] iforce 6-1:0.0: usb_submit_urb failed -90 [ 407.609705][ T8722] tipc: Started in network mode [ 407.625091][ T8] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input30 [ 407.665722][ T8] usb 6-1: USB disconnect, device number 2 [ 407.945931][ T8722] tipc: Node identity ac14140f, cluster identity 4711 [ 408.325694][ T8722] tipc: New replicast peer: 255.255.255.255 [ 408.347441][ T8722] tipc: Enabled bearer , priority 10 [ 409.727105][ T23] tipc: Node number set to 2886997007 [ 409.810733][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 410.731382][ T8753] 9pnet_fd: Insufficient options for proto=fd [ 410.777825][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 410.865151][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.802'. [ 413.053211][ T8777] No control pipe specified [ 413.792881][ T8781] process 'syz.0.809' launched '/dev/fd/5' with NULL argv: empty string added [ 414.110021][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 414.123727][ T8793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 415.234884][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 240 seconds [ 415.270310][ T8798] CIFS: Unable to determine destination address [ 415.589223][ T8806] netlink: 'syz.0.819': attribute type 24 has an invalid length. [ 415.715608][ T5885] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 416.015842][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 416.070673][ T5885] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.107856][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0 [ 416.272486][ T5885] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 416.285486][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.301260][ T5885] usb 7-1: config 0 descriptor?? [ 416.394661][ T8813] No control pipe specified [ 417.204494][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 417.245438][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.826'. [ 417.670667][ T8829] libceph: resolve '4' (ret=-3): failed [ 418.188450][ T8830] tipc: Enabling of bearer rejected, already enabled [ 418.269171][ T5885] cougar 0003:060B:500A.0008: unexpected long global item [ 418.287933][ T5885] cougar 0003:060B:500A.0008: parse failed [ 418.293919][ T5885] cougar 0003:060B:500A.0008: probe with driver cougar failed with error -22 [ 419.195914][ T5885] usb 7-1: USB disconnect, device number 3 [ 419.394602][ T8837] CIFS: Unable to determine destination address [ 422.356554][ T8865] No control pipe specified [ 423.127250][ T8862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.834'. [ 423.140476][ T8862] netlink: 24 bytes leftover after parsing attributes in process `syz.0.834'. [ 424.047942][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 424.058655][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 425.271584][ T8879] CIFS: Unable to determine destination address [ 426.127798][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.141931][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.152730][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.907014][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.918881][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.931291][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.949087][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.960030][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.971495][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.982408][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.993299][ T8886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.004130][ T8886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.224458][ T8912] tipc: Enabling of bearer rejected, already enabled [ 430.318433][ T8927] autofs: Bad value for 'fd' [ 431.856360][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.853'. [ 431.866452][ T8934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.853'. [ 432.389553][ T8936] CIFS: Unable to determine destination address [ 432.725442][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 434.506792][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 435.227607][ T8] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.345972][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 435.352706][ T8] usb 7-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 435.392461][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.598710][ T8] usb 7-1: config 0 descriptor?? [ 436.434031][ T2090] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 436.487104][ T8] usb 7-1: can't set config #0, error -71 [ 436.702645][ T8] usb 7-1: USB disconnect, device number 4 [ 436.788625][ T8965] libceph: resolve '4' (ret=-3): failed [ 437.545987][ T2090] usb 4-1: Using ep0 maxpacket: 16 [ 437.563395][ T2090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.825685][ T2090] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.836387][ T2090] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 438.091855][ T8976] autofs: Bad value for 'fd' [ 438.975405][ T2090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.997302][ T2090] usb 4-1: config 0 descriptor?? [ 439.002757][ T2090] usb 4-1: can't set config #0, error -71 [ 439.016994][ T2090] usb 4-1: USB disconnect, device number 14 [ 439.192414][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 439.238007][ T8986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 439.392506][ T8987] CIFS: Unable to determine destination address [ 440.429966][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.440465][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.733389][ T8999] netlink: 'syz.3.870': attribute type 4 has an invalid length. [ 445.223596][ T9024] libceph: resolve '4' (ret=-3): failed [ 445.727667][ T24] block nbd0: Possible stuck request ffff8880261fe000: control (read@0,4096B). Runtime 270 seconds [ 445.868740][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 446.215365][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 446.972071][ T23] usb 6-1: device descriptor read/all, error -71 [ 447.232626][ T9041] syz.3.879: attempt to access beyond end of device [ 447.232626][ T9041] nbd3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 447.246384][ T9041] qnx4: unable to read the superblock [ 447.455378][ T5889] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 447.710500][ T54] Bluetooth: hci5: command 0x0406 tx timeout [ 447.737760][ T9047] CIFS: Unable to determine destination address [ 447.795917][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 447.862643][ T5889] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.991487][ T5889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.039033][ T5889] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 448.078303][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.108103][ T5889] usb 1-1: config 0 descriptor?? [ 449.278431][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 449.369306][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'. [ 450.711410][ T5887] usb 1-1: USB disconnect, device number 19 [ 452.036521][ T9083] autofs: Unknown parameter '0x0000000000000000' [ 453.298617][ T9093] libceph: resolve '4' (ret=-3): failed [ 454.319873][ T9099] CIFS: Unable to determine destination address [ 457.868174][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 460.504403][ T9151] libceph: resolve '4' (ret=-3): failed [ 461.312876][ T9156] autofs: Unknown parameter '0x0000000000000000' [ 462.018289][ T9158] 9pnet_fd: Insufficient options for proto=fd [ 464.099613][ T9163] CIFS: Unable to determine destination address [ 464.332070][ T9168] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.341239][ T9168] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.836547][ T5204] udevd[5204]: worker [6108] /devices/virtual/block/nbd0 timeout; kill it [ 464.859559][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.877653][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.131847][ T5204] udevd[5204]: seq 11334 '/devices/virtual/block/nbd0' killed [ 465.310384][ T9168] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.319398][ T9168] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.328738][ T9168] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.340926][ T9168] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.816833][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 469.869574][ T9208] autofs: Unknown parameter '0x0000000000000000' [ 470.209592][ T9209] CIFS: Unable to determine destination address [ 470.519453][ T30] INFO: task syz.2.576:7924 blocked for more than 143 seconds. [ 470.555391][ T30] Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 470.569109][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 470.589310][ T30] task:syz.2.576 state:D stack:24816 pid:7924 tgid:7915 ppid:5833 task_flags:0x400140 flags:0x00004004 [ 470.659215][ T30] Call Trace: [ 470.687095][ T30] [ 470.690085][ T30] __schedule+0x190e/0x4c90 [ 470.694665][ T30] ? __pfx___schedule+0x10/0x10 [ 470.718408][ T30] ? __pfx_lock_release+0x10/0x10 [ 470.736362][ T9217] 9pnet_fd: Insufficient options for proto=fd [ 470.747812][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 470.775426][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 470.781387][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 470.804825][ T30] ? schedule+0x90/0x320 [ 470.809222][ T30] schedule+0x14b/0x320 [ 470.813440][ T30] schedule_preempt_disabled+0x13/0x30 [ 470.819196][ T30] __mutex_lock+0x817/0x1010 [ 470.823797][ T30] ? __mutex_lock+0x602/0x1010 [ 470.834702][ T30] ? sync_bdevs+0x1ae/0x340 [ 470.839391][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 470.844443][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 470.855784][ T30] ? __pfx_lock_release+0x10/0x10 [ 470.860834][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 470.885311][ T30] ? iput+0x3be/0xa50 [ 470.895690][ T30] sync_bdevs+0x1ae/0x340 [ 470.900106][ T30] ksys_sync+0xe2/0x1c0 [ 470.911429][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 470.916345][ T30] ? do_syscall_64+0x100/0x230 [ 470.921107][ T30] ? do_syscall_64+0xb6/0x230 [ 470.929227][ T30] __do_sys_sync+0xe/0x20 [ 470.933567][ T30] do_syscall_64+0xf3/0x230 [ 470.938256][ T30] ? clear_bhb_loop+0x45/0xa0 [ 470.942980][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.950704][ T30] RIP: 0033:0x7ffacfb8d169 [ 470.958777][ T30] RSP: 002b:00007ffad0942038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 470.967814][ T30] RAX: ffffffffffffffda RBX: 00007ffacfda6080 RCX: 00007ffacfb8d169 [ 470.978336][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.988111][ T30] RBP: 00007ffacfda6080 R08: 0000000000000000 R09: 0000000000000000 [ 470.996646][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.004706][ T30] R13: 0000000000000000 R14: 00007ffacfda6080 R15: 00007ffd5ca01058 [ 471.013947][ T30] [ 471.017493][ T30] INFO: task syz.2.576:7928 blocked for more than 143 seconds. [ 471.025098][ T30] Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 471.033178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.045534][ T30] task:syz.2.576 state:D stack:26840 pid:7928 tgid:7915 ppid:5833 task_flags:0x400140 flags:0x00004004 [ 471.058966][ T30] Call Trace: [ 471.062281][ T30] [ 471.065814][ T30] __schedule+0x190e/0x4c90 [ 471.070391][ T30] ? __pfx___schedule+0x10/0x10 [ 471.076968][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.082050][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 471.088517][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 471.094509][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 471.101562][ T30] ? schedule+0x90/0x320 [ 471.106192][ T30] schedule+0x14b/0x320 [ 471.110449][ T30] schedule_preempt_disabled+0x13/0x30 [ 471.116795][ T30] __mutex_lock+0x817/0x1010 [ 471.121439][ T30] ? __mutex_lock+0x602/0x1010 [ 471.132539][ T30] ? sync_bdevs+0x1ae/0x340 [ 471.137591][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 471.142673][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 471.152289][ T30] ? __pfx_lock_release+0x10/0x10 [ 471.157785][ T30] ? _atomic_dec_and_lock+0x9a/0x130 [ 471.163226][ T30] ? iput+0x3be/0xa50 [ 471.167856][ T30] sync_bdevs+0x1ae/0x340 [ 471.172963][ T30] ksys_sync+0xe2/0x1c0 [ 471.179646][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 471.184469][ T30] ? do_syscall_64+0x100/0x230 [ 471.189982][ T30] ? do_syscall_64+0xb6/0x230 [ 471.194840][ T30] __do_sys_sync+0xe/0x20 [ 471.199701][ T30] do_syscall_64+0xf3/0x230 [ 471.204210][ T30] ? clear_bhb_loop+0x45/0xa0 [ 471.209361][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.215811][ T30] RIP: 0033:0x7ffacfb8d169 [ 471.220248][ T30] RSP: 002b:00007ffacd1f2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 471.229212][ T30] RAX: ffffffffffffffda RBX: 00007ffacfda6320 RCX: 00007ffacfb8d169 [ 471.237655][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.255348][ T30] RBP: 00007ffacfda6320 R08: 0000000000000000 R09: 0000000000000000 [ 471.263386][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.272112][ T30] R13: 0000000000000000 R14: 00007ffacfda6320 R15: 00007ffd5ca01058 [ 471.281716][ T30] [ 471.284872][ T30] [ 471.284872][ T30] Showing all locks held in the system: [ 471.318702][ T30] 1 lock held by khungtaskd/30: [ 471.323598][ T30] #0: ffffffff8eb3b3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 471.415544][ T30] 2 locks held by getty/5586: [ 471.420301][ T30] #0: ffff888035be20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 471.480283][ T30] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 471.525311][ T30] 2 locks held by syz-executor/5834: [ 471.530651][ T30] 3 locks held by kworker/1:3/5885: [ 471.555355][ T30] #0: ffff88801b080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 471.589618][ T30] #1: ffffc9000441fc60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 471.645319][ T30] #2: ffffffff8eb408b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820 [ 471.687632][ T30] 1 lock held by udevd/6108: [ 471.698781][ T30] #0: ffff888143ff34c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xf0/0xc50 [ 471.715900][ T30] 5 locks held by kworker/u8:13/6504: [ 471.742086][ T30] #0: ffff8880b863e958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 471.775347][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 471.825409][ T30] #2: ffffffff9a884d48 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x17f/0x580 [ 471.845938][ T30] #3: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 471.885351][ T30] #4: ffffffff8e9e8b68 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 471.905343][ T30] 1 lock held by syz.2.576/7924: [ 471.910328][ T30] #0: ffff888143ff34c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 471.935333][ T30] 1 lock held by syz.2.576/7928: [ 471.940325][ T30] #0: ffff888143ff34c8 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ae/0x340 [ 471.973334][ T30] 1 lock held by syz.1.921/9214: [ 471.979949][ T30] #0: ffffffff8eb408b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 471.995849][ T30] 3 locks held by syz.0.922/9217: [ 472.000910][ T30] #0: ffff88807e72cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 472.011222][ T30] #1: ffff88807e72c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x60d/0x1260 [ 472.021020][ T30] #2: ffff8880325a5b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x71/0x690 [ 472.030566][ T30] [ 472.032910][ T30] ============================================= [ 472.032910][ T30] [ 472.087109][ T30] NMI backtrace for cpu 0 [ 472.087135][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 472.087156][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.087165][ T30] Call Trace: [ 472.087173][ T30] [ 472.087181][ T30] dump_stack_lvl+0x241/0x360 [ 472.087208][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.087227][ T30] ? __pfx__printk+0x10/0x10 [ 472.087263][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 472.087299][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.087315][ T30] ? _printk+0xd5/0x120 [ 472.087330][ T30] ? __pfx__printk+0x10/0x10 [ 472.087346][ T30] ? __wake_up_klogd+0xcc/0x110 [ 472.087368][ T30] ? __pfx__printk+0x10/0x10 [ 472.087386][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 472.087411][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.087433][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 472.087457][ T30] watchdog+0x1058/0x10a0 [ 472.087483][ T30] ? watchdog+0x1ea/0x10a0 [ 472.087513][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.087536][ T30] kthread+0x7a9/0x920 [ 472.087550][ T30] ? __pfx_kthread+0x10/0x10 [ 472.087570][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.087592][ T30] ? __pfx_kthread+0x10/0x10 [ 472.087606][ T30] ? __pfx_kthread+0x10/0x10 [ 472.087627][ T30] ? __pfx_kthread+0x10/0x10 [ 472.087640][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.087658][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 472.087677][ T30] ? __pfx_kthread+0x10/0x10 [ 472.087695][ T30] ret_from_fork+0x4b/0x80 [ 472.087714][ T30] ? __pfx_kthread+0x10/0x10 [ 472.087731][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.087772][ T30] [ 472.087778][ T30] Sending NMI from CPU 0 to CPUs 1: [ 472.260913][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 472.598334][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 472.605255][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 472.615252][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 472.625320][ T30] Call Trace: [ 472.628591][ T30] [ 472.631509][ T30] dump_stack_lvl+0x241/0x360 [ 472.636174][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.641437][ T30] ? __pfx__printk+0x10/0x10 [ 472.646024][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 472.652011][ T30] ? vscnprintf+0x5d/0x90 [ 472.656343][ T30] panic+0x349/0x880 [ 472.660242][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 472.666381][ T30] ? __pfx_panic+0x10/0x10 [ 472.670776][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 472.676219][ T30] ? __irq_work_queue_local+0x137/0x410 [ 472.681752][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 472.687118][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 472.693281][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 472.699450][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 472.705626][ T30] watchdog+0x1097/0x10a0 [ 472.709990][ T30] ? watchdog+0x1ea/0x10a0 [ 472.714424][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.719091][ T30] kthread+0x7a9/0x920 [ 472.723145][ T30] ? __pfx_kthread+0x10/0x10 [ 472.727719][ T30] ? __pfx_watchdog+0x10/0x10 [ 472.732388][ T30] ? __pfx_kthread+0x10/0x10 [ 472.736959][ T30] ? __pfx_kthread+0x10/0x10 [ 472.741532][ T30] ? __pfx_kthread+0x10/0x10 [ 472.746100][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.751280][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 472.756474][ T30] ? __pfx_kthread+0x10/0x10 [ 472.761053][ T30] ret_from_fork+0x4b/0x80 [ 472.765457][ T30] ? __pfx_kthread+0x10/0x10 [ 472.770029][ T30] ret_from_fork_asm+0x1a/0x30 [ 472.774810][ T30] [ 472.777961][ T30] Kernel Offset: disabled [ 472.782270][ T30] Rebooting in 86400 seconds..