last executing test programs: 11m35.114314228s ago: executing program 4 (id=287): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7fffffff, 0x80001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 11m34.076128608s ago: executing program 4 (id=289): syz_open_procfs(0xffffffffffffffff, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 11m32.141535811s ago: executing program 4 (id=293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 11m24.645231422s ago: executing program 4 (id=305): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000480), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x5, 0x3ff, 0xa30}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1000, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x6, 0x8, 0x7fff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 11m23.949845751s ago: executing program 4 (id=307): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xe}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000084000001"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 11m22.444830633s ago: executing program 4 (id=312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f00000015c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f6402ff07000028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 11m6.818053764s ago: executing program 32 (id=312): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0xfff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) writev(r6, &(0x7f00000001c0)=[{&(0x7f00000015c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f6402ff07000028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 4m16.130793239s ago: executing program 0 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0xc, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x3, 0x5, 0x100, @void}}}}}}}}}, 0x46) 4m15.810346241s ago: executing program 0 (id=1384): r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) mount$fuse(0x0, 0x0, 0x0, 0xa02002, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643dc6953bd340e3272b71d8f75d2e259bf1b1641dbb07e599bb12e499abcbe83cb20c3beb0dfa38c10e940b6828039ec26a486cc445322e0a22037201a9aafdefaad479199cd361137641824dfeb422ab103c6a236f4c9ae516aaf718425b7cbf0a21a98a672989ebb66211460e26e8d8f0a8338d62ea54b8dbc1492deefab8989d8802bb1b8c5d61349a79922cad342e87ed63595e043a81fa36feb0f49bca508854", @ANYRESDEC, @ANYBLOB="40ef35a971d35097635122028eb919802534a9e95b3ca94bf84415370e72798ba993e10be6a82eee4caa011b2c213a3a032f32435692c0ba1dc1f06b1de6bc83e6d684a1f35cf6", @ANYRESOCT]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x8001) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 4m15.391349519s ago: executing program 0 (id=1389): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008080}, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 4m14.976574379s ago: executing program 0 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x385010, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) 4m14.741467125s ago: executing program 0 (id=1394): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/242, 0xf2}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 4m14.501148007s ago: executing program 0 (id=1398): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 4m14.09385954s ago: executing program 33 (id=1398): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 16.973698086s ago: executing program 1 (id=1996): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @remote, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00'}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 14.489965534s ago: executing program 3 (id=2002): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ff21ff00ffffffff00000100a60e4349ddb95d534bb6878c793d00080006040001ffffffff00000000868fb85597ed0260855fc74cdf44e4f300000000aa367cd5fa38f07bb8dd767992eef6e01c60f9ddf321fc32fbf443ab217ee8c6751117"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='ubifs\x00', 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000000)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000340)={'filter\x00', 0x4}, 0x68) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r3, 0x3, {0x0, 0xf1, 0x4}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000001200)={0x1d, r3, 0x0, {0x0, 0x1, 0x2}}, 0x18) sendmsg$can_j1939(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x1d, r3, 0x3, {0xdbc3898a7c48bff3, 0xff, 0x2}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{0x0}], 0x10000000000000d3) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 12.226079601s ago: executing program 3 (id=2005): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="4001000010003306000000000400000000000000000000000000000000000001fe8000"/53, @ANYRES32=0x0, @ANYRES32=0x0], 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x20}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000040), 0x4) sendmmsg(r6, &(0x7f0000002980), 0x0, 0x4000855) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080002010900680000800900456f009100660000401190780a010102ac1414aa4f204e22007d9078c10200169c79cb22459ff50866ff829694a603d3c443eead4100af7b350c12fa15932138ee8f6a6d2afdde33d5a4298b32860f7d3d68030697e95d9cff97f976b3ac6d8c10e10601a959b4bf18b7d52cd3b5a4c19759c5e155c033fbf5a6b311de39eb228702b8bf55388a273db8f23105e37c"], 0x9f) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000002000094a20000"]) symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') 10.339995358s ago: executing program 3 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000400)=""/132, 0x84) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) 10.281802026s ago: executing program 2 (id=2009): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x201, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x105, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x3], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x100, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000001b000)="6206a8291fa498e30ac05a024a7b15d1b673f2cb884339b5a6d6bf0a75533d84c80540f34b65f8cc891342aa9a614acb3fd4c05e4cb149ba22ca9954c782b02e517cb5149c1a62aac40012e49c0c950c64825ef721dbe1e5d0a24bc348e39056170d7b80c6d45b2b0fd5a862a2dadf1e45b11cd4a56d9078596467be58eaff5c770ca8b8fb63d4e66ef82fd063b88b310c1afbb54950b95b06be1c9733f64925b51c0687cadb16e51d4698ef4f6d30fc0a1049c6f16f62c3abc53b60fe1b5e1a4c18be91", 0xc4, r1}, 0x68) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) setrlimit(0x8, &(0x7f0000000000)={0x78, 0x7}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) ioperm(0x284, 0x7f, 0xe3) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x4}, 0xe) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) 9.991715289s ago: executing program 3 (id=2010): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x7f, @empty}, 0x1c) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpgid(0x0) sched_setscheduler(r4, 0x6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) fchdir(0xffffffffffffffff) sendmsg$netlink(r3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x50, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}}, 0x0) shutdown(r0, 0x1) r7 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000003c0)={'wlan0\x00', 0x800}) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="ae4a7a4db63e2083a903895caba4167107df0fb1aa764b419315046a62", 0x1d}, {0x0}, {&(0x7f0000000440)="eaa4416e5dabe8a3f6809cde97502d2535b4e1201bcd27522cc5221404a7323649fee18128ad786eea4cd9c9ce2d9abe3cdd8f1c4b122bfafd6a8d84666578a18e", 0x41}, {&(0x7f00000004c0)="52642a4a4f47f5edcfe392c21839bdacb8c758b10e6efebd89b77eb8eaf485a67e90e21e46fff8d24e46bc3c5c71b875f2426e800a2cb927b50d2548138cb650cc627c5e76178a39e9b85bded91bd2b31a4bcece98eb4fbf53f27cf6a0b4a9bacce78b0ec51f7888c30da88eb41f30200b52d58bf46a0c4bafe9bd61d2a1674e5376ba57194f493d", 0x88}, {&(0x7f0000000580)="4b87868713f3b0c4370e03d18f4142a8c49ab5d0974fef29d4dbf1ebc2d9ba334c2e6228def29d8bb63fc0e79f704a0bd47ecc76baab6f56f67a5d465ec2e2ac1896767a1ff4f269663b671ac44b7ffe1e7da70735362d3e0f03d4748f3aca0109d0041a53d495e3962079d742f44d2e431ac04f640873959283d4ffcab4c92f955cace58d02a01b696ad2f1f8772c8f37d889409dbb6a72cefd500113c2f31953c7d506433b35e04349fb01e1bf7549f57988e453dbc57a0d176858282ccd164f519905520f6ea4d567bf0d925b561fe0e0b8ee28c011391016bee708066cb12a79", 0xe2}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000680)="2a0a71a6c6cf3ef5a8d0dd2b5a6389aa83c0dcc431c75866f01f05afc05e711e42394fd23ba8c088df42dee6dbd1f2930813a14fac6d9305a04704e199ffcb17d9dc5651c49a", 0x46}, {&(0x7f00000017c0)="3c6c12172e7923ceff904c3422120918265aae1815e3e9ea0845cfdd636b014a63eacad5e6afc49e78c0c9eb8cf1c2c2986b7fe8b8a4954f00802a81b76e4c36de357b06db50344573a508adafe54ddabf685e4ccf7f84c3d214c2415fce46802b89156500f1ecf269045d5a751dbdb4d4237e016ff3f7b7b568c3010541b9601531dde9732aec8ff4364bf72406647278ca1acb4848e97fe44c925942dab318124b2c7732647eb01a966e947dccb336df512dee62e274456f79da7c0c56f4735878d8ccd636824063d703a4658e2ec93765f8a3609e27adce01baf218053f2771403dc6f891b1be9bad55bf9f90179ce6e93a6ade4e", 0xf6}, {&(0x7f00000018c0)="dd8ae8da2efa1314aeb9a6d17318f1936bd24dff39caa65533df9672427190f4b6e2e7f0f5bf285bb8ff55dedf612842becc2568ee5a003ee6d52db73c59c4feb5913512278f35c43aca0654e8c8bc19878c06d0d2d3c4a1a392f26493e45672797b92b6a6882fce300a935b727bf86836036c96000d32fa87ae77aa24b02e61d77dc53c25f308d3f6680ccbebfd22778095a57683c1438b57a0cf5ef4340ebc0f1be7f8e05dc07129db69", 0xab}], 0x9, &(0x7f0000001a40)=[{0x30, 0x111, 0xd, "960eeb339a0e216afbcc3aff95fbb389873dbcf2d4183923d419184202"}, {0x60, 0x115, 0xff, "8708364b4e474e9fcbbc5d6e39b05fc20656f91323d7d2ff61c00086f16c8bba1cd92b8f9868a3d53a44cf198b3ffb3d94d549e71302ac2c00179e23623a32a18bf5e29a83818d421f1cc5326cb9"}, {0xa8, 0x1, 0xc, "266fc229ef2ac30ab7fee88b7353df21b0603afea3a2024d13c3b9a078065d7c1f9239a8b3c5bdcbcd45ba1d29cf75abe8a1628d87e595e75316fec34d34b81e87fbde9d9e6b7ce0188aeed4b879b5f87a3473a73ddc3a2915d378583387792ce96d51cb79147e2ca2ec7bae16681397e7b53c42bacc0aa19db96e0c5f504e0464e0711b1d60010886cf100ae1c65705b8ae893f"}, {0x98, 0x10f, 0x40, "63825801fb65de972fbabf19007b24eee146c9933326ac01b07f7e57206bd171f079bbbd49cdd59905fd8cb487188f9ff5635af049f1363c2dc42bdb85f24da43cea5c5511e5b84b5ffef61e44104a2d03dd17569ac9a69e9364e8196789d227ffd96d9e420a5d7c5632988a57f2f214d18033c1df8060d6314733adc63d59330979"}, {0x20, 0x107, 0x9, "f8c10f04e9ab212f577371"}], 0x1f0}, 0x400c0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d0003010000000000000074"], 0x5c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) 9.02806804s ago: executing program 6 (id=2011): add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_io_uring_setup(0x22f, 0x0, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) msgget(0x3, 0xa2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 9.026910648s ago: executing program 5 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r8, &(0x7f0000000400)=""/132, 0x84) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r9) 8.863381473s ago: executing program 2 (id=2013): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r3, 0x0, 0x0, 0x105, &(0x7f0000001c00)={{0x3, @default}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x5, 0x2, 0x71, 0x1, 0x3f, 0x2, 0x1, 0x5, 0x9, 0x0, 0xb, 0x9, 0xe, 0x2}, 0xe) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x2008800) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001030000009000000000000800000086dd080088be86ddffff100000000100000000000000080022eb00000000200000000200000000000000000400000800655800000000"], 0x0) sendmmsg(r2, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)}}], 0x1, 0x2c000011) sendto(r2, 0x0, 0x0, 0x8000, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) syz_open_dev$loop(&(0x7f00000003c0), 0xffffffffffffffff, 0x145602) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r6, 0x113, 0x4, &(0x7f0000000000), 0x4) 7.933953103s ago: executing program 5 (id=2014): timer_create(0x2, &(0x7f0000000140)={0x0, 0x3a, 0x1, @thr={&(0x7f0000000000)="fbba69d4", &(0x7f0000000040)="3c5b1406dbbee7a9f90aea2058264a93b90a910b1c907b99199e760e13530d5528db32ecf5c9e98f36e2cef25f333f50b412f46a2c9cba3baa5154d747c0c01fff3d33f5d5fd63f037fd649ca7423687362116ae8818e8add04d56fc8732efe580d1e375a6393315534f31b5bb6b87a6819c2402619dea0310233003fd8b40dfd3b0805fa67e2b45c639f7da9f6d97d512c3f669431ff725a4d126ff1d0bcbbf0510dfb92812a5f6d1514eb70c1987372c7367f3757b62acbd6a5a2daaffd457cce31649170f8a036c"}}, 0x0) timer_gettime(0x0, &(0x7f00000001c0)) timer_getoverrun(0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0xa, 0x1b, 0x7, 0xc, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d6, 0x10, 0x4, 0xe4, 0x1, 0xe0000001}, @sadb_x_policy={0x8, 0x12, 0x4, 0x1, 0x0, 0x6e6bbb, 0x800, {0x6, 0x2b, 0xc9, 0x2b, 0x0, 0x80, 0x0, @in=@multicast2, @in=@remote}}]}, 0x60}}, 0x40088c0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@bridge_dellink={0x34, 0x11, 0x200, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r2, 0x20100, 0x1b600}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_EVENT={0x8, 0x2c, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040d0}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x4, 0xfffffff9, 0x9, 0x1008, r1, 0x63cd, '\x00', 0x0, r1, 0x4, 0x5, 0x3, 0xc}, 0x50) r4 = socket(0xf, 0x4, 0x80000001) r5 = dup3(r3, r4, 0x80000) bind$inet(r5, &(0x7f0000000500)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000540)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000580)={'\x00', 0x8, 0xe, 0x4, 0x8, 0x5, r6}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x10000, 0x99, 0xd, 0x28, 0x1, 0x8000, '\x00', r8, r1, 0x1, 0x3, 0x4, 0xc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x1ff) read$ptp(r5, &(0x7f0000000700)=""/108, 0x6c) setsockopt$ax25_int(r4, 0x101, 0xe041a1457e0229d7, &(0x7f0000000780)=0x2, 0x4) write$vhost_msg_v2(r0, &(0x7f0000000900)={0x2, 0x0, {&(0x7f00000007c0)=""/137, 0x89, &(0x7f0000000880)=""/80, 0x3, 0x2}}, 0x48) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000980)={0x442, r4}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x80, r10, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'vcan0\x00'}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}]}, 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x1) timer_delete(0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000b80)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x4, 0x4, {0xa, 0x4e20, 0xb66, @rand_addr=' \x01\x00', 0xf928}}}, 0x32) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000bc0)=[r0, r4, r4, r3, r1, r5, r1, r0, r5], 0x9) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000c00)={0x6, 0x5}) 7.726001014s ago: executing program 5 (id=2015): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000380)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20008080}, 0x20000000) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r4, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r4, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) sendmmsg$inet6(r4, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)='c6V', 0x3}], 0x1}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="18018371e7cf6c2500000000002020207b1af8ff00000008b1b702000008000000b70300000000000085000000960000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x10}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0xa) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) 7.452452855s ago: executing program 1 (id=2016): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x4}, 0x8) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000900), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6.64010482s ago: executing program 5 (id=2017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f00002e2000/0x4000)=nil, 0x4000, 0xd, 0x80010, 0xffffffffffffffff, 0x8000000) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_submit(r4, 0x0, &(0x7f00000000c0)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0x800, &(0x7f0000000080), 0x0, 0x0, 0x710a89d0c9b734a9}) r5 = fsmount(r3, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000140)='./file0\x00') openat2(r5, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r6, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) readv(r7, &(0x7f00000002c0), 0x0) 6.510534886s ago: executing program 2 (id=2018): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 6.37133098s ago: executing program 6 (id=2019): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x8d0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000ec001fb6330d70000008000100", @ANYRES16=r8], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 6.282909616s ago: executing program 2 (id=2020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000400)=""/132, 0x84) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r7) 5.809651358s ago: executing program 2 (id=2021): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x9c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) 5.108835986s ago: executing program 1 (id=2022): syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @remote}, "aa0088beb6737a8a"}}}}}, 0x0) 4.634312005s ago: executing program 2 (id=2023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) r3 = io_uring_setup(0x7534, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) readv(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r2, &(0x7f00000001c0), 0xffffffffffffff13, 0x0, 0x0, 0x3000137) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 4.538815145s ago: executing program 6 (id=2024): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$alg(0x26, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r6, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) r8 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r8, &(0x7f0000000040)="a3", 0x2f) ioctl$SNDRV_PCM_IOCTL_REWIND(r8, 0x40084146, &(0x7f0000000140)=0xfff) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 4.467744237s ago: executing program 1 (id=2025): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) r6 = openat$audio(0xffffffffffffff9c, 0x0, 0x82, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x3) landlock_restrict_self(r1, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x121101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) truncate(&(0x7f0000000240)='./file0\x00', 0x1) ftruncate(r7, 0x1) 4.239256704s ago: executing program 3 (id=2026): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x80045104, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x7, 0x5, "b6aa27859e177cccbe04e9845ff3ce58598e15", 0x1, 0x7}) r1 = dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="160000000000000004000000ffff000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e5ffffff0000000000000000020000000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2}, 0x38) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x7) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) capset(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) syz_clone3(&(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.168723057s ago: executing program 1 (id=2027): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8) cachestat(r2, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000001000000e8e187f63af5cbc371c494e9d809ff070000", @ANYRES32=r6, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000097030000040000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x34, 0xe, 0xc08}}, 0x120) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000000)={@empty, @empty, 0x0, "daf86eed51d59c3b227a93fc7264db425e9d015e14f17c0900497e00b3bb00", 0x7, 0x6, 0xffffff9d, 0xffffe6df}, 0x3c) syz_emit_ethernet(0x13b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.16742576s ago: executing program 6 (id=2028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000"], 0x0, 0x58}, 0x28) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0x12, 0x600, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) close(r4) fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd2(0x0, 0x80801) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000040)={0x3, 0xf000, 0x0, r9, 0x8}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x4, r9, 0x9}) 893.907459ms ago: executing program 5 (id=2029): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000006118b8000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 509.180604ms ago: executing program 6 (id=2030): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x65}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 211.53898ms ago: executing program 5 (id=2031): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, 0x0, 0x75}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x80800, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) fsmount(r2, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000000100)={0x1f, @none}, 0x8) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{0x0, 0x4c}, {&(0x7f00000002c0)={0x10, 0x3a, 0x100, 0x70bd25, 0x25dfdbfb}, 0x10}], 0x2}, 0x20004840) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x5, 0x23000000}) semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) 209.811755ms ago: executing program 3 (id=2032): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x101000) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x7da2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070e000000ffffffb7020000ffffff1fb703000000000028850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x98, &(0x7f0000004480)=""/152}, 0x94) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) r3 = userfaultfd(0x80001) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x30000000}) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x4010, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7820fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r5, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) r7 = creat(&(0x7f0000000340)='./file0\x00', 0x14) read$FUSE(r7, &(0x7f00000003c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4000, &(0x7f0000000100)={[{@stats}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^+'}}, {@obj_type}, {@fowner_lt={'fowner<', r8}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wfdno'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.]}'}}, {@dont_appraise}, {@obj_user}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}]}) getpid() mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001f8, 0x0) write$FUSE_GETXATTR(r1, &(0x7f0000000140)={0x18, 0x0, r2, {0x1004}}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 38.323056ms ago: executing program 6 (id=2033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r7, &(0x7f0000000400)=""/132, 0x84) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) dup(r8) 0s ago: executing program 1 (id=2034): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffffffe}, 0x48) kernel console output (not intermixed with test programs): gs: Mfr=1, Product=2, SerialNumber=3 [ 577.017578][ T6367] usb 2-1: Product: syz [ 577.021927][ T6367] usb 2-1: Manufacturer: syz [ 577.040358][ T6367] usb 2-1: SerialNumber: syz [ 577.118355][T10289] overlayfs: failed to clone lowerpath [ 577.545226][ T6367] usb 2-1: config 0 descriptor?? [ 577.575278][ T6367] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 577.636879][ T5853] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 577.731443][ T9429] usb 1-1: USB disconnect, device number 13 [ 578.502959][T10303] new mount options do not match the existing superblock, will be ignored [ 578.539109][T10303] option changes via remount are deprecated (pid=10297 comm=syz.3.1002) [ 579.013433][T10305] Device name cannot be null; rc = [-22] [ 579.122555][ T6367] usb 2-1: USB disconnect, device number 8 [ 579.423130][ T5853] Bluetooth: hci0: unexpected subevent 0x0a length: 90 > 30 [ 579.431379][ T5853] Bluetooth: hci0: Invalid handle: 0x3130 > 0x0eff [ 579.737284][T10316] netlink: 'syz.0.1007': attribute type 25 has an invalid length. [ 579.764527][T10316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1007'. [ 580.036690][ T6385] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 580.214331][T10331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1014'. [ 580.228034][ T6385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.293549][ T6385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.316212][T10331] tipc: Started in network mode [ 580.332350][ T6385] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 580.350427][T10331] tipc: Node identity 7, cluster identity 5 [ 580.374600][ T6385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.394674][T10331] tipc: Node number set to 7 [ 580.422233][ T6385] usb 2-1: config 0 descriptor?? [ 580.437673][ T5842] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 580.636784][T10342] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1014'. [ 580.708056][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 580.749997][T10341] tipc: Resetting bearer [ 580.756039][T10341] tipc: Resetting bearer [ 580.777162][ T5842] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 580.793099][T10341] net_ratelimit: 10 callbacks suppressed [ 580.793111][T10341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 580.818795][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.840931][T10344] bridge0: port 3(netdevsim0) entered blocking state [ 580.860939][ T6385] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 580.895436][T10344] bridge0: port 3(netdevsim0) entered disabled state [ 580.927191][ T5842] usb 6-1: config 0 has no interface number 0 [ 580.930099][ T6385] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 580.980543][T10344] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 581.031609][ T5842] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 581.075888][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.118216][ T5842] usb 6-1: Product: syz [ 581.132656][ T6385] cp2112 0003:10C4:EA90.0009: error requesting version [ 581.133006][ T5842] usb 6-1: Manufacturer: syz [ 581.141509][T10344] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 581.181507][ T5842] usb 6-1: SerialNumber: syz [ 581.223856][ T6385] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -32 [ 581.229364][ T5842] usb 6-1: config 0 descriptor?? [ 581.276509][ T5842] redrat3 6-1:0.83: Couldn't find all endpoints [ 581.335310][T10344] bridge0: port 3(netdevsim0) entered blocking state [ 581.342541][T10344] bridge0: port 3(netdevsim0) entered forwarding state [ 581.580748][ T6385] usb 6-1: USB disconnect, device number 4 [ 581.680337][ T5839] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 581.690973][ T5839] Bluetooth: hci3: Injecting HCI hardware error event [ 581.702543][ T5839] Bluetooth: hci3: hardware error 0x00 [ 582.801117][T10370] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 582.820523][T10370] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1022'. [ 583.107000][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 583.107020][ T30] audit: type=1326 audit(1753535152.291:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7981b8e9a9 code=0x7ffc0000 [ 583.160619][T10383] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 583.184400][ T5842] usb 2-1: USB disconnect, device number 9 [ 583.203914][ T30] audit: type=1326 audit(1753535152.291:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7981b8e9a9 code=0x7ffc0000 [ 583.300576][ T30] audit: type=1326 audit(1753535152.311:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f7981b8e9a9 code=0x7ffc0000 [ 583.469964][ T30] audit: type=1326 audit(1753535152.311:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7981b8e9a9 code=0x7ffc0000 [ 583.508004][ T30] audit: type=1326 audit(1753535152.311:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10378 comm="syz.2.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7981b8e9a9 code=0x7ffc0000 [ 584.071547][T10397] netlink: 'syz.0.1033': attribute type 39 has an invalid length. [ 584.198944][ T5839] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 584.242458][T10396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.256771][ T6367] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 584.592939][T10403] netlink: 'syz.3.1032': attribute type 9 has an invalid length. [ 584.610829][ T6385] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 584.847338][T10396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1034'. [ 584.879730][ T6367] usb 6-1: Using ep0 maxpacket: 32 [ 584.888759][ T6367] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 584.913186][ T6367] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 584.933253][ T6367] usb 6-1: New USB device strings: Mfr=0, Product=96, SerialNumber=0 [ 584.942359][ T6367] usb 6-1: Product: syz [ 584.958095][ T6367] usb 6-1: config 0 descriptor?? [ 585.303530][T10405] ubi31: attaching mtd0 [ 585.372957][T10405] ubi31: scanning is finished [ 585.379278][T10405] ubi31: empty MTD device detected [ 585.675143][ T6385] usb 1-1: config 1 has an invalid descriptor of length 246, skipping remainder of the config [ 585.697897][ T6385] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 585.722192][T10409] gre0: entered allmulticast mode [ 585.733249][ T6385] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.757368][T10405] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 585.765298][T10405] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 585.772946][T10405] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 585.780685][ T6385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.780714][ T6385] usb 1-1: Product: syz [ 585.780730][ T6385] usb 1-1: Manufacturer: syz [ 585.780745][ T6385] usb 1-1: SerialNumber: syz [ 585.801746][ T6385] cdc_ether 1-1:1.0: skipping garbage [ 585.803311][T10405] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 585.816529][T10405] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 585.824030][T10405] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 585.832266][T10405] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3315773568 [ 585.842591][T10405] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 585.854291][T10410] ubi31: background thread "ubi_bgt31d" started, PID 10410 [ 585.903072][ T6385] usb 1-1: bad CDC descriptors [ 585.906284][ T5842] usb 6-1: USB disconnect, device number 5 [ 586.099203][T10414] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 586.107419][T10414] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1038'. [ 587.168785][ T5842] usb 1-1: USB disconnect, device number 14 [ 588.288114][T10450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.671264][T10461] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1057'. [ 589.533201][T10484] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 589.602864][T10484] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 591.111473][T10514] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 591.121471][T10514] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 591.127687][T10515] netlink: 'syz.0.1080': attribute type 2 has an invalid length. [ 591.132276][T10514] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 591.366175][T10515] netlink: 'syz.0.1080': attribute type 1 has an invalid length. [ 591.930520][T10524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1085'. [ 593.428347][ T6367] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 593.656708][ T6367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.670631][ T6367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.892321][ T6367] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 593.903516][ T6367] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.927698][ T6367] usb 2-1: config 0 descriptor?? [ 594.379796][ T6367] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 594.827485][ T6367] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 594.896507][ T6367] cp2112 0003:10C4:EA90.000A: error requesting version [ 594.952619][ T6367] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -32 [ 595.266115][T10568] overlayfs: failed to clone lowerpath [ 596.426748][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 596.682019][ T6385] usb 2-1: USB disconnect, device number 10 [ 597.366843][T10609] overlayfs: failed to clone lowerpath [ 597.796026][T10611] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 597.837532][ T6385] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 598.011959][ T6385] usb 1-1: too many endpoints for config 0 interface 0 altsetting 185: 33, using maximum allowed: 30 [ 598.046846][ T6385] usb 1-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.070887][ T6385] usb 1-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 598.166200][ T6385] usb 1-1: config 0 interface 0 has no altsetting 0 [ 598.172882][ T6385] usb 1-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 598.191061][ T6385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.219087][ T6385] usb 1-1: config 0 descriptor?? [ 598.671122][T10630] overlayfs: failed to clone lowerpath [ 599.017455][T10636] siw: device registration error -23 [ 599.412373][ T6385] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 599.423253][ T6385] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 599.432253][ T6385] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 599.441277][ T6385] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 599.457599][ T6385] nzxt-kraken2 0003:1E71:170E.000B: unknown main item tag 0x0 [ 599.473483][ T6385] nzxt-kraken2 0003:1E71:170E.000B: hidraw0: USB HID v8.00 Device [HID 1e71:170e] on usb-dummy_hcd.0-1/input0 [ 599.632360][ T6385] usb 1-1: USB disconnect, device number 15 [ 599.704098][T10643] fido_id[10643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 599.846383][ T5837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 600.019409][ T5837] usb 6-1: Using ep0 maxpacket: 8 [ 600.032622][ T5837] usb 6-1: too many configurations: 120, using maximum allowed: 8 [ 600.142968][ T5837] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 600.178684][ T5837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=24 [ 600.341792][ T5837] usb 6-1: Product: syz [ 600.451741][ T5837] usb 6-1: Manufacturer: syz [ 600.551199][ T5837] usb 6-1: SerialNumber: syz [ 600.662522][ T5837] usb 6-1: config 0 descriptor?? [ 600.781373][ T5837] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 600.811711][ T5837] usb 6-1: setting power ON [ 600.867659][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 600.894002][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 600.918270][ T5837] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 600.938163][ T5837] usb 6-1: media controller created [ 600.983596][T10645] dvb-usb: bulk message failed: -22 (3/0) [ 601.025504][T10645] cxusb: i2c wr: len=79 is too big! [ 601.025504][T10645] [ 601.027703][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.161128][ T5837] usb 6-1: selecting invalid altsetting 6 [ 601.182971][ T5837] usb 6-1: digital interface selection failed (-22) [ 601.215965][ T5837] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 601.251626][ T5837] usb 6-1: setting power OFF [ 601.276992][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 601.283208][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 601.321957][ T5837] (NULL device *): no alternate interface [ 601.504137][ T5837] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 601.568844][T10698] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 601.583308][ T5837] usb 6-1: USB disconnect, device number 6 [ 602.358564][T10698] veth0_vlan: left promiscuous mode [ 602.411168][T10698] veth0_vlan: entered promiscuous mode [ 602.481932][T10698] team0: Device veth0_vlan failed to register rx_handler [ 602.586530][T10707] bridge0: entered promiscuous mode [ 602.616988][T10707] bridge0: port 3(macvlan2) entered blocking state [ 602.618284][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1159'. [ 602.623842][T10707] bridge0: port 3(macvlan2) entered disabled state [ 602.677248][T10707] macvlan2: entered allmulticast mode [ 602.703798][T10707] bridge0: entered allmulticast mode [ 602.728381][T10707] macvlan2: left allmulticast mode [ 602.733562][T10707] bridge0: left allmulticast mode [ 602.777043][T10707] bridge0: left promiscuous mode [ 603.077239][ T5837] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 603.445527][ T5837] usb 1-1: Using ep0 maxpacket: 8 [ 603.456569][ T5837] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 603.477558][ T5837] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.508822][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.941777][ T5837] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 604.069599][ T5837] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 604.817693][ T5837] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 604.902378][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.131005][ T5837] usb 1-1: GET_CAPABILITIES returned 0 [ 605.144173][ T5837] usbtmc 1-1:16.0: can't read capabilities [ 605.391140][T10723] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 605.415552][ T6367] usb 1-1: USB disconnect, device number 16 [ 605.864411][ T6368] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 606.024251][ T6368] usb 2-1: Using ep0 maxpacket: 8 [ 606.043620][ T6368] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 233, changing to 11 [ 606.094910][ T6368] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 606.109317][T10795] input: syz1 as /devices/virtual/input/input15 [ 606.114286][ T6368] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 606.173344][ T6368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.203463][ T6368] usb 2-1: Product: syz [ 606.228276][ T6368] usb 2-1: Manufacturer: syz [ 606.241481][ T6368] usb 2-1: SerialNumber: syz [ 606.393349][ T30] audit: type=1326 audit(1753535431.575:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10803 comm="syz.2.1200" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7981b8e9a9 code=0x0 [ 606.490165][ T6368] usbhid 2-1:1.0: can't add hid device: -71 [ 606.496388][ T6368] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 606.509609][ T6368] usb 2-1: USB disconnect, device number 11 [ 607.802592][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 608.358186][ T30] audit: type=1326 audit(1753535433.446:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 608.382854][ T30] audit: type=1326 audit(1753535433.446:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 608.506370][T10853] pim6reg: entered allmulticast mode [ 608.684323][ T30] audit: type=1326 audit(1753535433.446:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 608.747468][ T30] audit: type=1326 audit(1753535433.446:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 608.801482][ T30] audit: type=1326 audit(1753535433.446:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 608.829730][ T30] audit: type=1326 audit(1753535433.446:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 609.014017][ T30] audit: type=1326 audit(1753535433.446:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 609.405491][T10867] overlayfs: overlapping lowerdir path [ 609.495699][ T30] audit: type=1326 audit(1753535433.446:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 609.570447][T10848] pim6reg: left allmulticast mode [ 609.597384][ T30] audit: type=1326 audit(1753535433.446:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10848 comm="syz.0.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e018e9a9 code=0x7ffc0000 [ 610.054211][ T5837] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 610.363378][ T5837] usb 2-1: Using ep0 maxpacket: 32 [ 610.393407][ T5837] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 610.414427][ T5837] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 610.428543][ T5837] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 610.441343][ T5837] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 610.460540][ T5837] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 610.478453][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.490608][ T5837] usb 2-1: Product: syz [ 610.498184][ T5837] usb 2-1: Manufacturer: syz [ 610.507045][ T5837] usb 2-1: SerialNumber: syz [ 610.579636][ T5837] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input17 [ 610.767139][ T5837] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 610.798806][ T5837] (id 0x00) [ 611.846217][ T5837] rc_core: IR keymap rc-imon-pad not found [ 611.852423][ T5837] Registered IR keymap rc-empty [ 611.860714][ T5837] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 611.871725][ T5837] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 612.230037][ T5837] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 612.295101][ T5837] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input18 [ 612.688727][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.697907][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.707011][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.716310][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.725852][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.735562][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.744683][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.754576][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.763257][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.772262][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.780985][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.789643][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.799127][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.808697][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.819141][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.829539][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.839625][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.849034][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.858337][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.867477][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.876846][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.886081][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.895346][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.904942][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.913250][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.922447][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.932150][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.941980][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.951321][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.960662][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.969986][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.980027][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.988935][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 612.998125][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.007260][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.017193][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.026449][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.036786][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.046547][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.057249][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.065907][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.074724][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.085360][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.095153][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.104753][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.112935][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.122163][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.131985][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.144646][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.153139][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.162452][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.171941][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.181232][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.190562][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.200333][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.209967][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.219412][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.228743][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.240095][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.251132][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.260467][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.269783][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.278991][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.287859][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.296711][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.306266][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.316038][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.325875][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.335110][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.354787][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.363217][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.372015][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.380798][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.389783][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.398948][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.409124][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.418933][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.428636][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.438214][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.454694][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.463144][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.472357][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.481518][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.490743][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.499980][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.509247][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.521586][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.534442][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.542709][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.554581][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.563004][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.572177][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.582128][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.591507][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.604353][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.612699][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.621574][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.631079][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.644673][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.655955][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.665636][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.675160][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.684664][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.693038][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.702906][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.711728][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.720567][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.729350][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.738512][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.747647][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.758111][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.767779][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.777438][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.787156][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.796472][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.805637][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.814865][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.824268][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.832542][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.841949][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.851239][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.860014][ T5837] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:12> initialized [ 613.870182][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.879223][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.888290][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.897328][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.906463][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.915567][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.924287][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.932507][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.941183][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.954205][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.963015][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.972154][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.981390][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.990540][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 613.999939][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.009278][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.018097][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.028254][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.037054][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.046250][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.059361][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.070682][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.079945][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.089452][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.100395][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.109962][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.119627][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.129129][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.138411][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.147621][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.156814][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.166640][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.176696][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.186499][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.195906][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.205091][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.214000][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.222306][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.230913][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.239607][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.248767][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.257998][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.274420][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.284909][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.304208][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.312395][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.333999][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.342646][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.353638][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.361836][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.374563][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.394341][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.402530][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.411989][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.421298][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.430509][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.439759][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.449001][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.458259][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.474601][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.494237][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.502449][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.511662][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.520883][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.530096][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.539300][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.548502][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.560660][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.574501][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.583224][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.592889][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.602410][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.613668][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.621862][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.631258][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.641164][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.650471][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.659712][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.668952][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.684602][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.693223][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.702124][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.710807][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.719611][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.728841][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.738308][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.747579][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.756882][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.766403][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.776061][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.785848][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.795933][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.805142][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.820260][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.829793][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.839178][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.848510][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.857742][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.866956][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.877225][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.886950][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.896064][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.906953][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.915955][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.925075][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.934355][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.942518][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.951629][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.960800][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.971047][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.981526][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.990830][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 614.999819][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.008536][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.017690][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.027056][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.036255][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.045462][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.054639][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.062806][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.072088][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.084464][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.092876][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.102090][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.111435][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.120729][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.129888][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.139020][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.148238][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.157450][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.166622][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.175880][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.187988][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.197129][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.205914][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.214706][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.222949][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.232084][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.242702][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.252214][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.261884][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.271343][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.280549][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.289806][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.298903][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.307614][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.316830][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.326142][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.335221][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.344455][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.352864][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.361951][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.371170][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.380988][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.390582][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.400095][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.409529][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.419137][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.428416][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.430375][T10943] input: syz0 as /devices/virtual/input/input19 [ 615.437735][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.452436][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.461656][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.470935][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.480133][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.488857][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.499239][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.509245][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.519022][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.528759][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.538257][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.547123][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.556284][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.565617][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.574410][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.583583][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.592721][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.604862][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.614230][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.624104][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.634127][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.642805][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.652049][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.661204][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.670425][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.679821][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.689146][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.698635][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.708700][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.717888][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.727646][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.737181][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.746714][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.756070][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.765321][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.774668][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.783961][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.792124][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.803716][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.812125][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.821241][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.830609][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.839834][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.849053][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.858408][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.867484][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.876277][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.884950][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.894067][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.902850][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.912482][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.921860][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.931329][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.940604][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.949985][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.959174][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.968354][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.977531][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.986804][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 615.996636][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.006237][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.016017][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.025563][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.034899][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.044297][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.052634][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.062318][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.071820][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.080848][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.089595][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.098460][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.114397][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.125850][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.135050][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.144314][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.152572][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.161857][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.171128][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.179870][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.188692][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 616.196893][ T5837] usb 2-1: USB disconnect, device number 12 [ 616.204006][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 618.123336][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 618.123355][ T30] audit: type=1326 audit(1753535443.237:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.167317][ T30] audit: type=1326 audit(1753535443.237:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.237923][ T30] audit: type=1326 audit(1753535443.237:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.278192][ T30] audit: type=1326 audit(1753535443.237:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.369208][T10985] pim6reg: entered allmulticast mode [ 618.395944][ T30] audit: type=1326 audit(1753535443.237:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.500367][ T30] audit: type=1326 audit(1753535443.237:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.582123][ T30] audit: type=1326 audit(1753535443.237:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.690136][ T30] audit: type=1326 audit(1753535443.237:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.817446][T10972] pim6reg: left allmulticast mode [ 618.880514][ T30] audit: type=1326 audit(1753535443.237:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 618.916893][ T30] audit: type=1326 audit(1753535443.237:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10972 comm="syz.3.1264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2fded8e9a9 code=0x7ffc0000 [ 619.703065][ T5837] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 619.877450][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.890761][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.908189][ T5837] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.918889][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.939365][ T5837] usb 4-1: SerialNumber: syz [ 619.998984][ T3490] nci: nci_ntf_packet: unknown ntf opcode 0x101 [ 620.172303][ T5837] usb 4-1: 0:2 : does not exist [ 620.232122][ T5837] usb 4-1: USB disconnect, device number 16 [ 620.335221][T10201] udevd[10201]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.788265][T11040] input: syz1 as /devices/virtual/input/input20 [ 622.324701][T11069] input: syz0 as /devices/virtual/input/input22 [ 622.412286][ T6368] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 622.592294][ T6368] usb 2-1: Using ep0 maxpacket: 8 [ 622.608761][ T6368] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 622.623368][ T6368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.631518][ T6368] usb 2-1: Product: syz [ 622.653430][ T9429] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 622.661328][ T6368] usb 2-1: Manufacturer: syz [ 622.661352][ T6368] usb 2-1: SerialNumber: syz [ 622.678105][ T6368] usb 2-1: config 0 descriptor?? [ 622.698476][T11079] pim6reg1: entered promiscuous mode [ 622.705319][T11079] pim6reg1: entered allmulticast mode [ 622.865517][ T9429] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 622.903505][ T9429] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.912991][ T6368] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 622.938728][ T9429] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 622.956564][ T9429] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.001637][T11087] syz_tun: entered promiscuous mode [ 623.017562][T11087] syz_tun: entered allmulticast mode [ 623.090729][T11087] team0: Port device syz_tun added [ 623.221522][ T9429] usb 6-1: string descriptor 0 read error: -71 [ 623.244449][ T9429] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 623.291275][ T9429] usb 6-1: USB disconnect, device number 7 [ 623.642284][ T6367] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 623.659009][T11107] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 623.718392][ T6368] usb write operation failed. (-71) [ 623.731867][ T6368] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 623.743332][ T6368] dvbdev: DVB: registering new adapter (Terratec H7) [ 623.750153][ T6368] usb 2-1: media controller created [ 623.758938][ T6368] usb read operation failed. (-71) [ 623.765268][ T6368] usb write operation failed. (-71) [ 623.775960][ T6368] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 623.793321][ T6368] usb 2-1: USB disconnect, device number 13 [ 623.812128][ T6367] usb 4-1: Using ep0 maxpacket: 16 [ 623.839619][ T6367] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 623.873393][ T6367] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 623.894016][ T6367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.913606][ T6367] usb 4-1: config 0 descriptor?? [ 623.965456][ T6367] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input24 [ 624.613721][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.637757][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.690125][T10361] Bluetooth: hci0: command 0x0c1a tx timeout [ 625.736142][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 626.529683][ T6368] usb 4-1: USB disconnect, device number 17 [ 626.534496][ T5192] bcm5974 4-1:0.0: could not read from device [ 626.606830][ T9950] bcm5974 4-1:0.0: could not read from device [ 626.745894][T11150] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 626.759935][T11153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1328'. [ 627.512282][ T6367] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 627.512706][ T9429] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 627.692388][ T9429] usb 1-1: Using ep0 maxpacket: 16 [ 627.752435][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 627.827924][ T9429] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.036108][ T9429] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 628.227473][ T9429] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.316386][ T6367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.338872][ T9429] usb 1-1: config 0 descriptor?? [ 628.341503][ T6367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.358980][ T6367] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 628.378219][ T6367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.424043][ T6367] usb 6-1: config 0 descriptor?? [ 628.847807][ T6367] usbhid 6-1:0.0: can't add hid device: -32 [ 628.870423][ T6367] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 629.001007][ T6367] usb 1-1: USB disconnect, device number 17 [ 629.055109][ T9429] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 629.213445][ T9429] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 629.224187][ T9429] usb 4-1: config 0 interface 0 has no altsetting 0 [ 629.234046][ T9429] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 629.243987][ T9429] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 629.253619][ T9429] usb 4-1: Product: syz [ 629.257872][ T9429] usb 4-1: Manufacturer: syz [ 629.263785][ T9429] usb 4-1: SerialNumber: syz [ 629.271204][ T9429] usb 4-1: config 0 descriptor?? [ 629.284911][ T9429] usb 4-1: selecting invalid altsetting 0 [ 629.835286][T11222] bridge0: entered promiscuous mode [ 629.843792][T11222] bridge0: entered allmulticast mode [ 630.041045][ T1207] usb 6-1: USB disconnect, device number 8 [ 630.447614][T11243] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1359'. [ 630.537263][T11243] batadv1: entered promiscuous mode [ 630.553206][T11243] batadv1: entered allmulticast mode [ 631.541894][ T9429] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 631.877596][ T9429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.907932][ T9429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.920427][ T9429] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 631.924432][ T6368] usb 4-1: USB disconnect, device number 18 [ 631.948922][ T9429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.993404][ T9429] usb 2-1: config 0 descriptor?? [ 632.208452][T11288] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1373'. [ 632.241135][T11288] netlink: 'syz.5.1373': attribute type 7 has an invalid length. [ 632.248939][T11288] netlink: 'syz.5.1373': attribute type 8 has an invalid length. [ 632.278085][T11285] wg1 speed is unknown, defaulting to 1000 [ 632.288780][T11288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1373'. [ 632.449972][ T9429] usbhid 2-1:0.0: can't add hid device: -32 [ 632.464521][ T9429] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 633.103927][T11317] loop6: detected capacity change from 0 to 7 [ 633.150211][T11317] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 633.168833][T11317] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 633.194085][T11317] loop6: p2 start 2602905181 is beyond EOD, truncated [ 633.207904][T11317] loop6: p3 start 1745589262 is beyond EOD, truncated [ 633.216772][T11317] loop6: p4 start 325178268 is beyond EOD, truncated [ 633.225011][T11317] loop6: p5 start 2326339850 is beyond EOD, truncated [ 633.235047][ T9429] kernel write not supported for file /540/attr/exec (pid: 9429 comm: kworker/1:1) [ 633.247969][T11317] loop6: p6 start 2562259694 is beyond EOD, truncated [ 633.596281][T10201] udevd[10201]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 633.598741][T11331] loop2: detected capacity change from 0 to 7 [ 633.623615][ T9949] loop2: p1 [ 633.637150][ T9949] loop2: partition table partially beyond EOD, truncated [ 633.660204][ T9949] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 633.685055][T11331] loop2: p1 [ 633.688776][T11331] loop2: partition table partially beyond EOD, truncated [ 633.701536][T11331] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 633.848392][T10201] udevd[10201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 633.903808][T10201] udevd[10201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 634.047025][ T1207] usb 2-1: USB disconnect, device number 14 [ 634.395938][ T1037] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.437721][ T1037] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.543013][ T1037] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.584883][ T1037] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.669785][ T1037] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.692098][ T1037] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 634.794377][ T1037] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.827066][ T1037] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.236076][ T1037] bridge_slave_1: left allmulticast mode [ 635.255847][ T1037] bridge_slave_1: left promiscuous mode [ 635.278432][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.348416][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 635.348926][ T1037] bridge_slave_0: left allmulticast mode [ 635.389934][ T1037] bridge_slave_0: left promiscuous mode [ 635.409415][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.773732][T10361] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 635.786975][T10361] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 635.797434][T10361] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 635.833606][T10361] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 635.879859][T10361] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.378164][ T1037] team0: Port device geneve0 removed [ 636.418464][ T1037] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 636.578970][T11384] netlink: 'syz.5.1410': attribute type 10 has an invalid length. [ 636.664638][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.675049][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.685661][ T1037] bond0 (unregistering): Released all slaves [ 636.838085][T11384] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 636.866082][T11372] wg1 speed is unknown, defaulting to 1000 [ 637.356295][T11372] chnl_net:caif_netlink_parms(): no params data found [ 637.541084][T11372] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.548564][T11372] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.556690][T11372] bridge_slave_0: entered allmulticast mode [ 637.565151][T11372] bridge_slave_0: entered promiscuous mode [ 637.575842][T11372] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.584493][ T6368] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 637.595990][T11372] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.603808][T11372] bridge_slave_1: entered allmulticast mode [ 637.612752][T11372] bridge_slave_1: entered promiscuous mode [ 637.662121][T11372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.676646][T11372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.737952][T11372] team0: Port device team_slave_0 added [ 637.748201][T11372] team0: Port device team_slave_1 added [ 637.754848][ T6368] usb 2-1: Using ep0 maxpacket: 32 [ 637.763145][T11415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 637.763694][ T6368] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 637.769766][T11415] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 637.786659][ T6368] usb 2-1: config 0 has no interface number 0 [ 637.796809][T11415] vhci_hcd vhci_hcd.0: Device attached [ 637.800346][ T6368] usb 2-1: config 0 interface 184 has no altsetting 0 [ 637.812492][ T6368] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 637.831103][ T6368] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.839404][T11418] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 637.845949][T11418] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 637.859485][ T6368] usb 2-1: Product: syz [ 637.866318][ T6368] usb 2-1: Manufacturer: syz [ 637.876471][ T6368] usb 2-1: SerialNumber: syz [ 637.877420][T11372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.893883][ T6368] usb 2-1: config 0 descriptor?? [ 637.896501][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.923073][ T6368] smsc75xx v1.0.0 [ 637.944794][T11415] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 637.952252][T11415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 637.955247][T11418] vhci_hcd vhci_hcd.0: Device attached [ 637.965908][T11372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.987840][T11415] vhci_hcd vhci_hcd.0: Device attached [ 637.994977][ T5839] Bluetooth: hci2: command tx timeout [ 638.001616][T11423] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 638.001647][T11423] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 638.001760][T11423] vhci_hcd vhci_hcd.0: Device attached [ 638.020254][T11415] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(7) [ 638.029199][T11415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 638.037053][ T9429] vhci_hcd: vhci_device speed not set [ 638.111011][ T9429] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 638.176117][T11372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.197740][T11415] vhci_hcd vhci_hcd.0: Device attached [ 638.493114][T11418] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 638.494498][T11372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.653273][T11415] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 638.660998][T11416] vhci_hcd: connection reset by peer [ 638.666985][T11419] vhci_hcd: connection closed [ 638.667230][T11421] vhci_hcd: connection closed [ 638.667952][T11372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.687769][ T3490] vhci_hcd: stop threads [ 638.692620][ T3490] vhci_hcd: release socket [ 638.697261][T11423] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(17) [ 638.703477][T11424] vhci_hcd: connection closed [ 638.703956][T11423] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 638.719052][ T3490] vhci_hcd: disconnect device [ 638.727577][ T3490] vhci_hcd: stop threads [ 638.732852][ T3490] vhci_hcd: release socket [ 638.737556][ T3490] vhci_hcd: disconnect device [ 638.742993][T11423] vhci_hcd vhci_hcd.0: Device attached [ 638.743861][T11431] vhci_hcd: connection closed [ 638.749012][ T6368] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 638.766309][ T3490] vhci_hcd: stop threads [ 638.786823][ T3490] vhci_hcd: release socket [ 638.792677][T11427] vhci_hcd: connection closed [ 638.805058][ T6368] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 638.820037][ T3490] vhci_hcd: disconnect device [ 638.841785][ T3490] vhci_hcd: stop threads [ 638.857540][ T3490] vhci_hcd: release socket [ 638.871027][ T3490] vhci_hcd: disconnect device [ 638.895373][ T3490] vhci_hcd: stop threads [ 638.905305][ T3490] vhci_hcd: release socket [ 638.917572][ T3490] vhci_hcd: disconnect device [ 638.932907][T11372] hsr_slave_0: entered promiscuous mode [ 638.941278][T11372] hsr_slave_1: entered promiscuous mode [ 638.949130][T11372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 638.953731][ T3490] vhci_hcd: stop threads [ 638.957651][T11372] Cannot create hsr debugfs directory [ 638.979652][ T3490] vhci_hcd: release socket [ 639.002728][ T3490] vhci_hcd: disconnect device [ 639.121268][ T1037] tipc: Left network mode [ 639.144151][T11430] kexec: Could not allocate control_code_buffer [ 639.538162][ T1037] hsr_slave_0: left promiscuous mode [ 639.545737][ T1037] hsr_slave_1: left promiscuous mode [ 639.553077][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.568133][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.610564][ T1207] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 639.670658][ T6368] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 639.707128][ T6368] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 639.716990][ T6368] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 639.739394][ T6368] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 639.760829][ T1207] usb 6-1: Using ep0 maxpacket: 8 [ 639.772042][ T1207] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 639.777236][ T6368] usb 2-1: USB disconnect, device number 15 [ 639.786309][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.826132][ T1207] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.855087][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.897494][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 639.919416][ T1207] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 639.927939][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 639.950564][ T1207] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 639.965038][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 639.986926][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 640.016462][ T1207] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 640.032712][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 640.063803][ T1207] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 640.084015][ T5839] Bluetooth: hci2: command tx timeout [ 640.102357][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 640.129015][ T1207] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 640.153881][ T1207] usb 6-1: string descriptor 0 read error: -22 [ 640.170714][ T1207] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 640.181531][ T1207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.324641][ T1207] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 640.395347][T11442] overlayfs: failed to clone upperpath [ 640.660166][ T6368] usb 6-1: USB disconnect, device number 9 [ 640.816911][T11457] overlayfs: failed to clone lowerpath [ 641.692407][T11467] overlayfs: failed to clone upperpath [ 641.858650][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 641.869810][ T6368] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 642.024296][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 642.053705][ T6368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 642.065804][ T6368] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 642.078069][ T6368] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 642.090885][ T6368] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.113425][ T6368] usb 2-1: config 0 descriptor?? [ 642.159582][ T5839] Bluetooth: hci2: command tx timeout [ 642.536023][ T6368] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 642.556045][ T6368] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 642.731103][ T6368] cp2112 0003:10C4:EA90.000D: error requesting version [ 642.785306][ T6368] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -32 [ 643.266534][T11372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 643.271087][ T9429] vhci_hcd: vhci_device speed not set [ 643.347352][T11372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.381558][T11372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 643.414002][T11372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 643.831114][ T1037] IPVS: stop unused estimator thread 0... [ 643.911626][T11372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.357284][ T5839] Bluetooth: hci2: command tx timeout [ 644.600151][ T9370] usb 2-1: USB disconnect, device number 16 [ 644.638634][T11372] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.912107][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.919431][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.971619][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.978828][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.153844][T11529] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 645.606698][T11546] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 645.637144][T11546] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 645.683933][T11372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.124714][T11372] veth0_vlan: entered promiscuous mode [ 647.172040][ T6367] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 647.181818][T11372] veth1_vlan: entered promiscuous mode [ 647.281603][T11372] veth0_macvtap: entered promiscuous mode [ 647.293604][T11372] veth1_macvtap: entered promiscuous mode [ 647.328635][T11372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.341388][ T6367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.363302][T11372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.369110][ T6367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.391635][T11372] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.398081][ T6367] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 647.403224][T11372] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.419823][ T6367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.436454][T11372] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.441572][ T6367] usb 6-1: config 0 descriptor?? [ 647.454175][T11372] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.662243][ T7594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.695964][ T7594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.791209][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 647.791230][ T30] audit: type=1800 audit(1753535472.980:264): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1466" name="bus" dev="overlay" ino=1431 res=0 errno=0 [ 647.792315][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 647.846276][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.929278][ T6367] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 648.149241][ T6367] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 648.515330][ T6367] cp2112 0003:10C4:EA90.000E: error requesting version [ 648.726481][ T6367] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32 [ 649.016998][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 650.565562][ T5837] usb 6-1: USB disconnect, device number 10 [ 650.771071][T11640] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 650.863840][T11643] tipc: Enabled bearer , priority 0 [ 650.966263][T11643] syzkaller0: entered promiscuous mode [ 650.972233][T11643] syzkaller0: entered allmulticast mode [ 650.981913][T11643] tipc: Resetting bearer [ 650.999405][T11642] tipc: Resetting bearer [ 651.157317][T11654] binder: 11652:11654 ioctl c0306201 0 returned -14 [ 651.464602][ T30] audit: type=1326 audit(1753535476.621:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 651.514881][ T30] audit: type=1326 audit(1753535476.621:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 651.539248][ T30] audit: type=1326 audit(1753535476.621:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe8bbb8e9e3 code=0x7ffc0000 [ 651.561985][ T30] audit: type=1326 audit(1753535476.631:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 651.584298][ T30] audit: type=1326 audit(1753535476.631:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 651.607916][ T30] audit: type=1326 audit(1753535476.631:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 651.863430][ T5988] tipc: Node number set to 1594973493 [ 652.277767][ T30] audit: type=1326 audit(1753535476.631:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 652.305786][ T30] audit: type=1326 audit(1753535476.631:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 652.337417][ T30] audit: type=1326 audit(1753535476.631:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11658 comm="syz.5.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8bbb8e9a9 code=0x7ffc0000 [ 655.442046][ T5988] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 655.601349][ T5988] usb 4-1: Using ep0 maxpacket: 32 [ 655.641267][ T5988] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 655.661888][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.685188][ T5988] usb 4-1: Product: syz [ 655.690270][ T5988] usb 4-1: Manufacturer: syz [ 655.695017][ T5988] usb 4-1: SerialNumber: syz [ 655.715151][ T5988] usb 4-1: config 0 descriptor?? [ 655.773455][ T5988] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 656.777690][T11721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'. [ 656.895899][T11723] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'. [ 657.435540][ T5988] gspca_ov534_9: reg_r err -71 [ 657.740473][ T5988] gspca_ov534_9: Unknown sensor 0000 [ 657.740589][ T5988] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 657.766653][ T5988] usb 4-1: USB disconnect, device number 19 [ 658.513776][T11642] tipc: Disabling bearer [ 658.913523][T11742] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1515'. [ 658.923910][T11742] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1515'. [ 658.971607][T11745] 9pnet_fd: Insufficient options for proto=fd [ 658.999649][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 658.999667][ T30] audit: type=1326 audit(1753535484.202:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.107068][ T5837] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 659.144121][ T30] audit: type=1326 audit(1753535484.202:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.166785][ T30] audit: type=1326 audit(1753535484.232:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.190082][ T30] audit: type=1326 audit(1753535484.232:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.215775][ T30] audit: type=1326 audit(1753535484.232:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.242143][T11747] binder: 11746:11747 ioctl c0306201 200000000640 returned -22 [ 659.328839][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 659.384170][T11743] pim6reg: entered allmulticast mode [ 659.510412][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 659.554903][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 659.590422][ T30] audit: type=1326 audit(1753535484.232:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.706608][T11733] pim6reg: left allmulticast mode [ 659.786391][ T30] audit: type=1326 audit(1753535484.232:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 659.809184][ T5837] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 659.843448][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.205816][ T5837] usb 2-1: Product: syz [ 660.677632][ T30] audit: type=1326 audit(1753535484.232:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 660.699427][ T5837] usb 2-1: Manufacturer: syz [ 660.701056][ C0] vkms_vblank_simulate: vblank timer overrun [ 660.705714][ T5837] usb 2-1: SerialNumber: syz [ 660.750448][ T5837] usb 2-1: config 0 descriptor?? [ 660.759649][ T5837] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 660.794948][ T5837] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 660.819475][ T30] audit: type=1326 audit(1753535484.232:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 660.862597][T11764] ref_ctr increment failed for inode: 0x83e offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807d23a800 [ 660.922903][ T30] audit: type=1326 audit(1753535484.232:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11733 comm="syz.6.1511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 661.852111][ T5837] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 661.920464][ T5837] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 663.223704][ T5837] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 663.407159][ T5988] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 663.457834][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 663.489137][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 663.627867][ T5988] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 663.643269][ T5988] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 663.663496][ T5988] usb 4-1: config 135 has no interface number 0 [ 663.736524][ T5988] usb 4-1: config 135 interface 230 has no altsetting 0 [ 663.766760][ T5988] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 663.781236][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 663.789186][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 663.796848][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 663.821733][ T5837] usb 2-1: USB disconnect, device number 17 [ 663.887274][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.895471][ T5988] usb 4-1: Product: syz [ 663.911808][ T5988] usb 4-1: Manufacturer: syz [ 663.916475][ T5988] usb 4-1: SerialNumber: syz [ 664.332780][ T5988] usb 4-1: USB disconnect, device number 20 [ 664.545946][T11803] trusted_key: encrypted_key: insufficient parameters specified [ 664.598360][ T5837] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 664.697225][T11808] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1535'. [ 664.706653][T11808] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 664.953837][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 665.049789][ T5837] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 665.092974][ T5837] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 665.183105][ T5837] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 665.215669][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.233520][ T5837] usb 2-1: Product: syz [ 665.248161][ T5837] usb 2-1: Manufacturer: syz [ 665.258229][ T5837] usb 2-1: SerialNumber: syz [ 665.269412][ T5837] usb 2-1: config 0 descriptor?? [ 665.293877][ T5837] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 665.317211][ T5837] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 666.135908][ T5837] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 666.172803][ T5837] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 666.817939][ T5837] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 667.042090][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 667.361455][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 668.185325][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 668.194757][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 668.209371][ T5837] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 668.241247][ T5837] usb 2-1: USB disconnect, device number 18 [ 668.394365][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 668.394383][ T30] audit: type=1326 audit(1753535493.593:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11849 comm="syz.3.1549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fded8e9a9 code=0x0 [ 668.672434][T11865] overlayfs: failed to clone upperpath [ 669.638926][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1559'. [ 671.250759][T11912] bridge0: port 4(vxlan0) entered blocking state [ 671.266680][T11912] bridge0: port 4(vxlan0) entered disabled state [ 671.282750][T11912] vxlan0: entered allmulticast mode [ 671.308220][T11912] vxlan0: entered promiscuous mode [ 671.716382][ T6367] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 673.128616][ T6367] usb 4-1: Using ep0 maxpacket: 32 [ 673.164039][ T6367] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 673.189938][ T6367] usb 4-1: config 0 has no interface number 0 [ 673.231226][ T6367] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 673.260200][ T6367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.426868][ T6367] usb 4-1: Product: syz [ 673.436562][ T6367] usb 4-1: Manufacturer: syz [ 673.442636][ T6367] usb 4-1: SerialNumber: syz [ 673.454937][ T6367] usb 4-1: config 0 descriptor?? [ 673.479563][ T6367] smsc95xx v2.0.0 [ 673.589198][ T9370] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 674.227974][ T9370] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.246372][ T9370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.270808][ T6367] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 674.284445][ T6367] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 674.285067][ T9370] usb 2-1: Product: syz [ 674.496486][ T9370] usb 2-1: Manufacturer: syz [ 674.524896][ T9370] usb 2-1: SerialNumber: syz [ 675.833640][ T9370] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 675.850883][ T9370] cdc_ncm 2-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048 [ 675.986327][ T1207] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 675.996157][ T9370] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 676.038767][ T9370] cdc_ncm 2-1:1.0: setting tx_max = 28 [ 676.166140][ T1207] usb 7-1: Using ep0 maxpacket: 8 [ 676.177698][ T1207] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 676.196111][ T1207] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.212503][ T6367] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 676.225321][ T1207] usb 7-1: config 0 descriptor?? [ 676.242736][ T6367] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 676.281386][ T6367] usb 4-1: USB disconnect, device number 21 [ 676.340525][ T9370] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 676.378722][ T9370] usb 2-1: USB disconnect, device number 19 [ 676.387709][ T9370] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 676.449348][ T1207] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 677.239198][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1593'. [ 678.589593][ T1207] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 678.628027][ T1207] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 678.713151][ T1207] asix 7-1:0.0: probe with driver asix failed with error -71 [ 678.836707][ T1207] usb 7-1: USB disconnect, device number 2 [ 679.725387][ T6368] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 680.578296][ T6368] usb 6-1: unable to get BOS descriptor or descriptor too short [ 681.130698][ T6368] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x82 has invalid wMaxPacketSize 0 [ 681.173329][ T6368] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 0 [ 681.203527][ T6368] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 681.214979][ T6368] usb 6-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 681.284941][ T6368] usb 6-1: config 1 interface 0 has no altsetting 0 [ 681.326849][ T6368] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 681.340011][ T6368] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.349166][ T6368] usb 6-1: Product: syz [ 681.353699][ T6368] usb 6-1: Manufacturer: syz [ 681.361945][ T6368] usb 6-1: SerialNumber: syz [ 681.653780][ T6368] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 681.675485][ T6368] usb 6-1: USB disconnect, device number 11 [ 683.066210][T12051] kvm: pic: level sensitive irq not supported [ 683.067251][T12051] kvm: pic: level sensitive irq not supported [ 683.090263][ T30] audit: type=1326 audit(1753535508.295:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 683.195850][ T30] audit: type=1326 audit(1753535508.295:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 683.232731][ T30] audit: type=1326 audit(1753535508.295:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 683.329335][ T30] audit: type=1326 audit(1753535508.295:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 683.506502][ T5839] Bluetooth: hci5: command 0x1003 tx timeout [ 683.519752][T10361] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 683.925423][ T30] audit: type=1326 audit(1753535508.295:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 683.987560][ T30] audit: type=1326 audit(1753535508.295:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 684.058819][ T30] audit: type=1326 audit(1753535508.295:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 684.256389][ T30] audit: type=1326 audit(1753535508.295:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 684.305670][ T30] audit: type=1326 audit(1753535508.295:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 684.376738][ T30] audit: type=1326 audit(1753535508.405:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12060 comm="syz.6.1619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2e618e9a9 code=0x7ffc0000 [ 685.125743][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cf71c00: rx timeout, send abort [ 685.635780][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cf71c00: abort rx timeout. Force session deactivation [ 685.998499][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.047064][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.189583][T12140] uprobe: syz.3.1646:12140 failed to unregister, leaking uprobe [ 695.608621][ T9429] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 695.941467][ T9429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.968394][T12160] binder: 12155:12160 unknown command 0 [ 695.996064][ T9429] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.016027][T12160] binder: 12155:12160 ioctl c0306201 200000000c40 returned -22 [ 696.120087][ T9429] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 696.309566][ T9429] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.324824][T12162] tipc: Enabling of bearer rejected, failed to enable media [ 696.605484][ T9429] usb 2-1: config 0 descriptor?? [ 696.641323][ T9429] usb 2-1: can't set config #0, error -71 [ 696.651557][ T9429] usb 2-1: USB disconnect, device number 20 [ 697.179839][T12180] overlayfs: failed to clone lowerpath [ 699.053456][T12184] !: renamed from dummy0 (while UP) [ 702.238711][T12205] tipc: Started in network mode [ 702.277724][T12205] tipc: Node identity 6682a4ca6a26, cluster identity 4711 [ 702.302065][T12205] tipc: Enabled bearer , priority 0 [ 702.432124][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1667'. [ 702.449219][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 702.463443][T12209] syzkaller0: entered promiscuous mode [ 702.469051][T12209] syzkaller0: entered allmulticast mode [ 703.330726][ T5988] tipc: Node number set to 212116682 [ 703.542159][T12221] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 703.551092][T12221] overlayfs: missing 'lowerdir' [ 705.091766][T12205] tipc: Resetting bearer [ 705.224745][T12205] tipc: Disabling bearer [ 708.334256][T12258] wg1 speed is unknown, defaulting to 1000 [ 708.341715][T12258] wg1 speed is unknown, defaulting to 1000 [ 708.354087][T12258] wg1 speed is unknown, defaulting to 1000 [ 708.524650][T12258] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 709.648348][T12258] wg1 speed is unknown, defaulting to 1000 [ 709.828441][T12258] wg1 speed is unknown, defaulting to 1000 [ 709.959646][T12258] wg1 speed is unknown, defaulting to 1000 [ 710.118673][T12258] wg1 speed is unknown, defaulting to 1000 [ 710.723218][T12258] wg1 speed is unknown, defaulting to 1000 [ 712.621027][ T5988] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 712.796469][ T5988] usb 6-1: Using ep0 maxpacket: 32 [ 713.012908][ T5988] usb 6-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 713.093271][ T5988] usb 6-1: config 0 interface 0 has no altsetting 0 [ 713.102897][ T5988] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 713.112338][ T5988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.142026][ T5988] usb 6-1: config 0 descriptor?? [ 714.285801][ T5988] uclogic 0003:5543:0781.000F: unbalanced delimiter at end of report description [ 714.355669][ T5988] uclogic 0003:5543:0781.000F: parse failed [ 714.372551][ T5988] uclogic 0003:5543:0781.000F: probe with driver uclogic failed with error -22 [ 714.479540][ T5988] usb 6-1: USB disconnect, device number 12 [ 714.770960][T12301] ptrace attach of "./syz-executor exec"[11372] was attempted by "./syz-executor exec"[12301] [ 716.561294][ T9370] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 716.993055][ T9370] usb 6-1: config 1 interface 0 has no altsetting 0 [ 717.089386][ T9370] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 717.136453][ T9370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.160799][ T9370] usb 6-1: Product: syz [ 717.165124][ T9370] usb 6-1: Manufacturer: syz [ 717.179422][ T9370] usb 6-1: SerialNumber: syz [ 717.749321][ T9370] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 719.138541][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.152223][T12330] 8021q: adding VLAN 0 to HW filter on device team0 [ 719.168167][T12330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 719.287170][ T5842] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 719.603559][ T5842] usb 4-1: config 0 has no interfaces? [ 720.197761][ T5842] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 720.217851][ T6368] usb 6-1: USB disconnect, device number 13 [ 720.226217][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.438358][ T6368] usblp0: removed [ 720.521253][ T5842] usb 4-1: config 0 descriptor?? [ 720.753599][T12328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 720.907904][T12328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.083907][ T5842] usb 4-1: USB disconnect, device number 22 [ 722.580147][T10361] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 722.772313][T12363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.931339][T12384] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1718'. [ 725.165858][T12389] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.175756][T12389] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.184851][T12389] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.194404][T12389] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.212444][T12389] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 729.226918][ T5842] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 729.786385][ T5842] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 729.821151][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.881023][ T5842] usb 6-1: Product: syz [ 729.943315][ T5842] usb 6-1: Manufacturer: syz [ 730.001761][ T5842] usb 6-1: SerialNumber: syz [ 730.072969][ T5842] usb 6-1: config 0 descriptor?? [ 730.135094][ T5842] usb 6-1: selecting invalid altsetting 3 [ 730.157844][ T5842] comedi comedi5: could not set alternate setting 3 in high speed [ 730.209185][ T5842] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 730.252295][ T5842] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 730.308921][T12418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.351648][T12418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.431616][ T9429] usb 6-1: USB disconnect, device number 14 [ 731.231755][T12434] tipc: Enabled bearer , priority 0 [ 731.246489][T12436] syzkaller0: entered promiscuous mode [ 731.252630][T12436] syzkaller0: entered allmulticast mode [ 731.472461][T12440] overlayfs: failed to clone lowerpath [ 731.910810][T12442] tipc: Resetting bearer [ 732.099974][T12431] tipc: Resetting bearer [ 732.966561][T12431] tipc: Disabling bearer [ 738.778369][ T5837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 739.821337][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.847825][ T5837] usb 7-1: config 0 has no interfaces? [ 740.513237][ T5837] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.524303][ T5837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.613613][ T5837] usb 7-1: config 0 descriptor?? [ 741.521166][T12513] fuse: Unknown parameter '0x0000000000000003' [ 742.547446][ T5837] usb 7-1: USB disconnect, device number 3 [ 743.359239][T12539] bridge0: port 3(syz_tun) entered blocking state [ 743.449949][T12539] bridge0: port 3(syz_tun) entered disabled state [ 743.576493][T12539] syz_tun: entered allmulticast mode [ 743.584661][T12539] syz_tun: entered promiscuous mode [ 743.595269][T12539] bridge0: port 3(syz_tun) entered blocking state [ 743.602048][T12539] bridge0: port 3(syz_tun) entered forwarding state [ 743.626760][T12537] xt_CT: You must specify a L4 protocol and not use inversions on it [ 744.015485][T12543] tipc: Enabled bearer , priority 0 [ 744.047879][T12543] syzkaller0: entered promiscuous mode [ 744.262816][T12543] syzkaller0: entered allmulticast mode [ 744.840876][T12543] tipc: Resetting bearer [ 744.895047][T12548] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1765'. [ 745.056607][T12548] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 745.106347][T12542] tipc: Resetting bearer [ 745.195907][T12542] tipc: Disabling bearer [ 747.467306][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.474309][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.087705][T12580] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 750.010939][T12589] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 12589 comm: syz.5.1774) [ 750.473825][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 750.473843][ T30] audit: type=1800 audit(1753538153.239:369): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1774" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=37279 res=0 errno=0 [ 752.044723][T12602] netlink: 'syz.2.1779': attribute type 7 has an invalid length. [ 752.064584][T12602] : entered promiscuous mode [ 752.695820][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1781'. [ 752.896205][T12614] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1781'. [ 752.974230][T12614] dummy0: entered promiscuous mode [ 753.043428][T12614] team0: entered promiscuous mode [ 753.052174][T12618] netlink: 'syz.2.1784': attribute type 1 has an invalid length. [ 753.085583][T12614] team_slave_0: entered promiscuous mode [ 753.104071][T12614] team_slave_1: entered promiscuous mode [ 753.450368][T12618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.471355][ T30] audit: type=1326 audit(1753538156.670:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12621 comm="syz.3.1785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2fded8e9a9 code=0x0 [ 753.555229][T12619] vlan0: entered allmulticast mode [ 753.560428][T12619] geneve1: entered allmulticast mode [ 754.265574][T12619] bond0: (slave vlan0): making interface the new active one [ 754.503516][T12619] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 755.438719][T12645] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 755.449452][T12645] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 759.933341][T12680] overlayfs: failed to clone lowerpath [ 760.387686][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 763.543896][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 773.572913][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1826'. [ 773.584209][T12788] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1826'. [ 774.991882][ T9370] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 775.174719][ T9370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.369173][ T9370] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.738321][ T9370] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 775.749961][ T9370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.078806][ T9370] usb 4-1: config 0 descriptor?? [ 776.613646][ T9370] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 776.662354][ T9370] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 776.809737][ T9370] cp2112 0003:10C4:EA90.0010: error requesting version [ 776.852783][ T9370] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -32 [ 777.637490][T12752] syz.5.1818 (12752): drop_caches: 2 [ 778.749813][ T5837] usb 4-1: USB disconnect, device number 23 [ 780.058305][T12836] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 781.907556][T10361] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 785.214925][ T5842] IPVS: starting estimator thread 0... [ 785.330251][T12889] IPVS: using max 49 ests per chain, 117600 per kthread [ 785.825239][T12899] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 786.499916][ T5842] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 786.696003][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.723278][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.726859][T12904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 786.754960][ T5842] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 786.781327][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.823103][ T5842] usb 6-1: config 0 descriptor?? [ 787.861738][ T5842] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 787.891408][ T5842] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 788.034272][ T5842] cp2112 0003:10C4:EA90.0011: error requesting version [ 788.100813][ T5842] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32 [ 788.135117][T12915] 9pnet_fd: Insufficient options for proto=fd [ 790.229236][T12941] can0: slcan on ptm0. [ 790.756192][ T6385] usb 6-1: USB disconnect, device number 15 [ 790.815626][T12936] can0 (unregistered): slcan off ptm0. [ 800.371141][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1884'. [ 805.365026][T13034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1889'. [ 805.375727][T13034] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 805.405743][T13034] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 805.418125][T13034] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 805.434019][T13034] netlink: 'syz.1.1889': attribute type 1 has an invalid length. [ 805.444387][T13034] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 808.858845][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.865218][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.265707][T13071] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1896'. [ 811.513532][T13051] syz.6.1892 (13051): drop_caches: 2 [ 815.105234][T13094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1903'. [ 815.212075][T13112] syz.6.1906: attempt to access beyond end of device [ 815.212075][T13112] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 816.054705][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 816.758726][T13123] hsr_slave_0: left promiscuous mode [ 817.185826][T13123] hsr_slave_1: left promiscuous mode [ 819.219109][T13139] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 823.388791][T13164] bridge0: port 3(team0) entered blocking state [ 823.406874][T13164] bridge0: port 3(team0) entered disabled state [ 823.414673][T13164] team0: entered allmulticast mode [ 823.419811][T13164] team_slave_0: entered allmulticast mode [ 823.426832][T13164] team_slave_1: entered allmulticast mode [ 823.435081][T13164] team0: left allmulticast mode [ 823.440062][T13164] team_slave_0: left allmulticast mode [ 823.446809][T13164] team_slave_1: left allmulticast mode [ 823.619196][T13167] overlayfs: missing 'lowerdir' [ 829.043484][ T6368] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 831.321161][ T6368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.405565][ T6368] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.416429][ T6368] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 832.431482][ T6368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.482760][ T6368] usb 4-1: config 0 descriptor?? [ 832.490699][ T6368] usb 4-1: can't set config #0, error -71 [ 832.642563][ T6368] usb 4-1: USB disconnect, device number 24 [ 832.704144][T13229] x_tables: duplicate underflow at hook 3 [ 838.174981][T13293] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 838.851850][T13301] block device autoloading is deprecated and will be removed. [ 838.866386][T13301] syz.6.1942: attempt to access beyond end of device [ 838.866386][T13301] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 839.731252][ T5837] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 839.863536][ T6368] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 840.310697][ T5988] IPVS: starting estimator thread 0... [ 840.411566][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.423533][T13313] IPVS: using max 31 ests per chain, 74400 per kthread [ 840.488791][ T5837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.508972][T13311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 840.557369][T13311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 840.569287][T13311] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 840.587684][T13311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 840.611449][ T5837] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 840.631565][T13311] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 840.636270][ T5837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.677487][ T5837] usb 6-1: config 0 descriptor?? [ 841.216073][ T5837] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 841.246976][ T5837] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 842.172134][ T5837] cp2112 0003:10C4:EA90.0012: error requesting version [ 842.242393][ T5837] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -32 [ 842.323809][T13323] 8021q: VLANs not supported on sit0 [ 842.535210][T10361] Bluetooth: hci0: command 0x0c1a tx timeout [ 842.562622][ T5837] usb 6-1: USB disconnect, device number 16 [ 842.696858][T10361] Bluetooth: hci2: command 0x0406 tx timeout [ 842.697207][ T5853] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.706781][T10361] Bluetooth: hci1: command 0x0c1a tx timeout [ 843.028027][T13322] fido_id[13322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 843.273996][T13329] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1948'. [ 843.929191][T13338] random: crng reseeded on system resumption [ 844.064638][T13338] Restarting kernel threads ... [ 844.082007][T13338] Done restarting kernel threads. [ 844.417325][T13332] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1950'. [ 844.448984][T13332] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1950'. [ 845.276601][T13327] Bluetooth: hci2: command 0x0406 tx timeout [ 848.789738][T13368] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 849.448260][T13327] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 850.089187][ T6367] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 850.155272][T13380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1962'. [ 850.483153][ T6367] usb 2-1: Using ep0 maxpacket: 16 [ 850.506920][ T6367] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.541179][ T6367] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 850.576297][ T6367] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 850.613531][ T6367] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.638261][ T6367] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 850.647637][ T6367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.696222][ T6367] usb 2-1: Product: syz [ 850.708446][ T6367] usb 2-1: Manufacturer: syz [ 850.713365][ T6367] usb 2-1: SerialNumber: syz [ 850.727387][ T6367] usb 2-1: config 0 descriptor?? [ 850.965458][T13388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1964'. [ 851.799231][ T5842] IPVS: starting estimator thread 0... [ 852.112842][ T6367] rc_core: IR keymap rc-xbox-dvd not found [ 852.140805][ T6367] Registered IR keymap rc-empty [ 852.378773][T13396] IPVS: using max 28 ests per chain, 67200 per kthread [ 852.610317][ T6367] rc rc0: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 852.622930][ T6367] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 853.490074][T13410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1968'. [ 855.518334][ T9429] usb 2-1: USB disconnect, device number 21 [ 855.518350][ C0] xbox_remote 2-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 856.479910][T13430] 9pnet_virtio: no channels available for device syz [ 857.441016][T13435] netlink: 'syz.6.1973': attribute type 10 has an invalid length. [ 857.500636][T13435] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1973'. [ 857.521651][T13435] bridge0: port 3(dummy0) entered blocking state [ 857.542161][T13435] bridge0: port 3(dummy0) entered disabled state [ 857.553635][T13435] dummy0: entered allmulticast mode [ 857.574187][T13435] dummy0: left allmulticast mode [ 857.583481][T13435] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 858.395445][T13444] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1977'. [ 858.405504][T13444] netlink: 'syz.3.1977': attribute type 9 has an invalid length. [ 858.413889][T13444] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1977'. [ 858.424396][T13444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1977'. [ 858.481779][T13444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1977'. [ 858.491488][T13444] netlink: 'syz.3.1977': attribute type 5 has an invalid length. [ 858.499996][T13444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1977'. [ 858.583437][T13444] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 858.593809][T13444] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 858.603996][T13444] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 858.613879][T13444] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 858.625791][T13444] geneve2: entered promiscuous mode [ 858.632281][T13444] geneve2: entered allmulticast mode [ 860.929091][T13464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 861.547819][T13464] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1980'. [ 861.581289][T13459] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1980'. [ 862.663620][ T5988] libceph: connect (1)[c::]:6789 error -101 [ 862.670755][ T5988] libceph: mon0 (1)[c::]:6789 connect error [ 862.697501][T13473] ceph: No mds server is up or the cluster is laggy [ 862.938061][ T6367] libceph: connect (1)[c::]:6789 error -101 [ 863.054587][ T6367] libceph: mon0 (1)[c::]:6789 connect error [ 864.162853][T13495] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 870.714579][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.115271][T13518] fuse: Unknown parameter '`fd' [ 873.333892][T13540] overlayfs: failed to clone upperpath [ 875.024867][ T5837] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 876.227815][T13560] input: syz1 as /devices/virtual/input/input35 [ 876.289480][T13560] batadv_slave_1: entered promiscuous mode [ 876.307018][T13560] batadv_slave_1: left promiscuous mode [ 876.962120][T13569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2000'. [ 877.934619][T13574] program syz.3.2005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 881.077098][ T5837] usb 2-1: device descriptor read/all, error -110 [ 881.317580][ T5837] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 882.383415][T13617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2016'. [ 882.961795][T13625] overlayfs: failed to clone lowerpath [ 883.019790][T13592] netlink: 'syz.3.2010': attribute type 2 has an invalid length. [ 883.030522][T13592] netlink: 'syz.3.2010': attribute type 1 has an invalid length. [ 884.190328][ T6367] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 884.386282][ T6367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.541691][ T6367] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.586609][ T6367] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 885.672524][ T6367] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.944131][T13650] sp0: Synchronizing with TNC [ 886.153721][ T6367] usb 6-1: config 0 descriptor?? [ 886.989368][ T6367] usb 6-1: can't set config #0, error -71 [ 887.263464][T13660] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 887.872168][ T6367] usb 6-1: USB disconnect, device number 17 [ 888.261282][ T6368] hid-generic 0000:0004:0034.0013: unknown main item tag 0x0 [ 888.291784][ T6368] hid-generic 0000:0004:0034.0013: unknown main item tag 0x0 [ 888.310954][ T6368] hid-generic 0000:0004:0034.0013: unknown main item tag 0x0 [ 888.420131][ T6368] hid-generic 0000:0004:0034.0013: hidraw0: HID v0.0e Device [syz0] on syz1 [ 888.959316][T13677] Smack: duplicate mount options [ 889.604446][T10361] non-paged memory [ 889.609974][T10361] list_del corruption, ffff8880293cac80->next is LIST_POISON1 (dead000000000100) [ 889.619841][T10361] ------------[ cut here ]------------ [ 889.625654][T10361] kernel BUG at lib/list_debug.c:58! [ 889.631506][T10361] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 889.637802][T10361] CPU: 1 UID: 0 PID: 10361 Comm: kworker/u9:0 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 889.650577][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 889.661020][T10361] Workqueue: hci2 hci_conn_timeout [ 889.666445][T10361] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 889.673754][T10361] Code: 00 be e1 8b 48 89 de e8 b0 1d 68 fc 90 0f 0b 4c 89 e7 e8 55 01 40 fd 48 c7 c7 60 be e1 8b 48 89 de 4c 89 e2 e8 93 1d 68 fc 90 <0f> 0b 4c 89 e7 e8 38 01 40 fd 48 c7 c7 c0 be e1 8b 48 89 de 4c 89 [ 889.693547][T10361] RSP: 0018:ffffc9000502f980 EFLAGS: 00010246 [ 889.699702][T10361] RAX: 000000000000004e RBX: ffff8880293cac80 RCX: c3c9cc04c0273700 [ 889.707689][T10361] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 889.715664][T10361] RBP: ffffffff8a759c60 R08: ffffc9000502f6a7 R09: 1ffff92000a05ed4 [ 889.723724][T10361] R10: dffffc0000000000 R11: fffff52000a05ed5 R12: dead000000000100 [ 889.731698][T10361] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 889.739683][T10361] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 889.748960][T10361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 889.755681][T10361] CR2: 0000200000003000 CR3: 000000007b226000 CR4: 00000000003526f0 [ 889.763669][T10361] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 889.771991][T10361] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 889.779977][T10361] Call Trace: [ 889.783262][T10361] [ 889.786218][T10361] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 889.791942][T10361] hci_cancel_connect_sync+0xc8/0x120 [ 889.797315][T10361] hci_abort_conn+0x191/0x330 [ 889.802099][T10361] ? process_scheduled_works+0x9ef/0x17b0 [ 889.807819][T10361] process_scheduled_works+0xade/0x17b0 [ 889.813369][T10361] ? __pfx_process_scheduled_works+0x10/0x10 [ 889.819356][T10361] worker_thread+0x8a0/0xda0 [ 889.823949][T10361] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 889.830313][T10361] ? __kthread_parkme+0x7b/0x200 [ 889.835259][T10361] kthread+0x70e/0x8a0 [ 889.839333][T10361] ? __pfx_worker_thread+0x10/0x10 [ 889.844442][T10361] ? __pfx_kthread+0x10/0x10 [ 889.849126][T10361] ? _raw_spin_unlock_irq+0x23/0x50 [ 889.854343][T10361] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.859627][T10361] ? __pfx_kthread+0x10/0x10 [ 889.864221][T10361] ret_from_fork+0x3fc/0x770 [ 889.869069][T10361] ? __pfx_ret_from_fork+0x10/0x10 [ 889.874266][T10361] ? __switch_to_asm+0x39/0x70 [ 889.879381][T10361] ? __switch_to_asm+0x33/0x70 [ 889.884517][T10361] ? __pfx_kthread+0x10/0x10 [ 889.889214][T10361] ret_from_fork_asm+0x1a/0x30 [ 889.894073][T10361] [ 889.897097][T10361] Modules linked in: [ 889.902003][T10361] ---[ end trace 0000000000000000 ]--- [ 889.909274][T10361] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 889.917243][T10361] Code: 00 be e1 8b 48 89 de e8 b0 1d 68 fc 90 0f 0b 4c 89 e7 e8 55 01 40 fd 48 c7 c7 60 be e1 8b 48 89 de 4c 89 e2 e8 93 1d 68 fc 90 <0f> 0b 4c 89 e7 e8 38 01 40 fd 48 c7 c7 c0 be e1 8b 48 89 de 4c 89 [ 889.938838][T10361] RSP: 0018:ffffc9000502f980 EFLAGS: 00010246 [ 889.945303][T10361] RAX: 000000000000004e RBX: ffff8880293cac80 RCX: c3c9cc04c0273700 [ 889.954667][T10361] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 889.964693][T10361] RBP: ffffffff8a759c60 R08: ffffc9000502f6a7 R09: 1ffff92000a05ed4 [ 889.974914][T10361] R10: dffffc0000000000 R11: fffff52000a05ed5 R12: dead000000000100 [ 889.985003][T10361] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 889.997396][T10361] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 890.006975][T10361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 890.013932][T10361] CR2: 0000200000004000 CR3: 000000007b226000 CR4: 00000000003526f0 [ 890.022452][T10361] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000 [ 890.030499][T10361] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 890.039238][T10361] Kernel panic - not syncing: Fatal exception [ 890.045934][T10361] Kernel Offset: disabled [ 890.050268][T10361] Rebooting in 86400 seconds..