last executing test programs: 2m44.613027369s ago: executing program 32 (id=969): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='1', 0x1) 2m24.067774374s ago: executing program 33 (id=1087): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x0, r2}) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) 2m3.192358648s ago: executing program 0 (id=1204): bind$llc(0xffffffffffffffff, &(0x7f0000000300)={0x1a, 0x1, 0x0, 0x0, 0x2, 0x0, @remote}, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000000004044104d7a00000000000109022400010000e8"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m2.176609553s ago: executing program 34 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0xee) mount(0x0, &(0x7f0000000040)='./config\x00', 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) openat(0xffffffffffffff9c, 0x0, 0x42, 0x8) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000080)=ANY=[@ANYRES32=r1]) 2m0.140127693s ago: executing program 0 (id=1206): sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000540)={{0x0, 0x892b, 0x6, 0x7ff, 0x6, 0x7, 0x7, 0x2, 0x332, 0x8, 0x3, 0x7, 0x4, 0x1, 0xd8}, 0x8, [0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c840) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x62, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2m0.048686371s ago: executing program 0 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m59.424689605s ago: executing program 0 (id=1209): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x6, 0xbb30abfa5dd3bc38, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x9c, 0x88, 0x8, 0x8, 0x525, 0xa4a3, 0x53b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xfa, 0x80, 0x9, "", [{{0x9, 0x4, 0x50, 0x8, 0x0, 0x93, 0x5, 0x72, 0xdf}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m58.304156434s ago: executing program 35 (id=1176): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e22, @loopback=0xac141437}}) syz_usb_connect$uac2(0x2, 0x7b, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 1m56.779573193s ago: executing program 36 (id=1186): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, &(0x7f0000000180)) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) 1m55.476529838s ago: executing program 8 (id=1217): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001000000000000000000000000ff010000000000000000000000000001000000000000000000000000640000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000feffff"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m55.237401813s ago: executing program 8 (id=1218): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000ed03010000000000000000000200000a"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback}, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x840) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000000)={@multicast1, @remote, @empty}, 0xc) 1m54.315950976s ago: executing program 8 (id=1219): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m54.235522542s ago: executing program 8 (id=1220): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) 1m52.26185197s ago: executing program 37 (id=1197): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 1m44.28572815s ago: executing program 38 (id=1209): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x6, 0xbb30abfa5dd3bc38, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x458, 0x501a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x9c, 0x88, 0x8, 0x8, 0x525, 0xa4a3, 0x53b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0xfa, 0x80, 0x9, "", [{{0x9, 0x4, 0x50, 0x8, 0x0, 0x93, 0x5, 0x72, 0xdf}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r2], 0x4) 1m39.396935382s ago: executing program 4 (id=1245): socket(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000b80)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821d", 0x19}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) 1m39.300696459s ago: executing program 4 (id=1246): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x1058, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m39.278968486s ago: executing program 4 (id=1247): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x10) r0 = openat$kvm(0xffffff9c, 0x0, 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000100)={0x284, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m39.234307241s ago: executing program 4 (id=1248): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) 1m39.206913865s ago: executing program 39 (id=1220): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xe) 1m39.106346575s ago: executing program 4 (id=1250): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m39.004924369s ago: executing program 4 (id=1251): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000ed03010000000000000000000200000a14010000ed0301000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback}, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x840) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000000)={@multicast1, @remote, @empty}, 0xc) 1m36.213736411s ago: executing program 1 (id=1254): mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$kvm(0xffffff9c, 0x0, 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m36.132016885s ago: executing program 1 (id=1255): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x0, 0x7f, 0x200, 0x93db, 0x0, 0x0, 0x0, 0x4, 0x400000}}, 0x50) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 1m35.226215614s ago: executing program 1 (id=1258): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x10) r0 = openat$kvm(0xffffff9c, 0x0, 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000100)={0x284, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.136606051s ago: executing program 1 (id=1259): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x8, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0xb, 0xa6b8, 0x0, 0xfffffff8]}) 1m35.118380107s ago: executing program 1 (id=1260): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000400)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1m35.069275603s ago: executing program 1 (id=1261): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000340)) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1) 1m34.256580826s ago: executing program 40 (id=1231): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000d50000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x61, &(0x7f00000001c0)=[@cr4={0x1, 0x9e2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m25.028333593s ago: executing program 41 (id=1241): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff000705810240000007058202"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x8c000, 0x0) 1m23.949380862s ago: executing program 42 (id=1251): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="00000000ed03010000000000000000000200000a14010000ed0301000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000140)={@loopback}, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r6, 0xf505, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x840) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x40) getdents64(r8, 0x0, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000f3ff00000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x3}, 0x28) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r9, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xffffffffffffff0e, 0x0}}, 0x10) setsockopt$inet_mreqsrc(r8, 0x0, 0x28, &(0x7f0000000000)={@multicast1, @remote, @empty}, 0xc) 1m19.549177338s ago: executing program 43 (id=1261): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f0000000340)) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000380)=""/116, 0x74}], 0x1) 59.238087731s ago: executing program 0 (id=1304): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) 59.119974747s ago: executing program 0 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x5, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) shutdown(0xffffffffffffffff, 0x0) 56.398116968s ago: executing program 9 (id=1371): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) 55.183628855s ago: executing program 9 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 54.202134539s ago: executing program 9 (id=1377): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 53.960789294s ago: executing program 9 (id=1378): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002140)=@random={'user.', '\x00'}, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x0, 0x7f, 0x200, 0x93db, 0x0, 0x0, 0x0, 0x4, 0x400000}}, 0x50) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 53.819247926s ago: executing program 9 (id=1379): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x454040, 0x4) write(r0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007665746800000000040002800800030000bf1c000a0001"], 0x48}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) r4 = syz_open_pts(r3, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) close(r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) 52.82846911s ago: executing program 9 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000040)='syz0\x00', 0x3000, &(0x7f0000000180)={@_ha_fsid={[0x3c, 0xfffffffe]}, {0xe, 0x1, 0x5cb9, 0x5}}, 0x6b, &(0x7f00000001c0), &(0x7f0000000240)=0x7f}) syz_genetlink_get_family_id$tipc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) 43.984437455s ago: executing program 44 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) writev(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x5, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) shutdown(0xffffffffffffffff, 0x0) 38.475788083s ago: executing program 8 (id=1399): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}}, 0x0) 38.350943658s ago: executing program 8 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000040)='syz0\x00', 0x3000, &(0x7f0000000180)={@_ha_fsid={[0x3c, 0xfffffffe]}, {0xe, 0x1, 0x5cb9, 0x5}}, 0x6b, &(0x7f00000001c0), &(0x7f0000000240)=0x7f}) syz_genetlink_get_family_id$tipc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x5, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) shutdown(0xffffffffffffffff, 0x0) 35.26924344s ago: executing program 45 (id=1381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000040)='syz0\x00', 0x3000, &(0x7f0000000180)={@_ha_fsid={[0x3c, 0xfffffffe]}, {0xe, 0x1, 0x5cb9, 0x5}}, 0x6b, &(0x7f00000001c0), &(0x7f0000000240)=0x7f}) syz_genetlink_get_family_id$tipc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) 30.195897215s ago: executing program 3 (id=1429): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10c0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000200)=[{0x1d, 0x0, 0x1, 0x4}, {0x7c, 0x0, 0x0, 0x7981}, {0x6}]}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 28.495972143s ago: executing program 3 (id=1433): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = fanotify_init(0x200, 0x2) fanotify_mark(r1, 0x1, 0x1010, r0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 28.315363121s ago: executing program 3 (id=1434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 27.17070273s ago: executing program 3 (id=1435): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000017c0)={0x34, &(0x7f00000005c0)={0x40, 0x15, 0x6, "04c7d7c442e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 23.63668613s ago: executing program 3 (id=1438): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x4f) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 23.549133398s ago: executing program 3 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000040)='syz0\x00', 0x3000, &(0x7f0000000180)={@_ha_fsid={[0x3c, 0xfffffffe]}, {0xe, 0x1, 0x5cb9, 0x5}}, 0x6b, &(0x7f00000001c0), &(0x7f0000000240)=0x7f}) syz_genetlink_get_family_id$tipc(0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x5, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) shutdown(0xffffffffffffffff, 0x0) 23.219469416s ago: executing program 46 (id=1413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000040)='syz0\x00', 0x3000, &(0x7f0000000180)={@_ha_fsid={[0x3c, 0xfffffffe]}, {0xe, 0x1, 0x5cb9, 0x5}}, 0x6b, &(0x7f00000001c0), &(0x7f0000000240)=0x7f}) syz_genetlink_get_family_id$tipc(0x0, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x80000, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x1, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x5, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) shutdown(0xffffffffffffffff, 0x0) 12.45193416s ago: executing program 5 (id=1462): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='task\x00') syz_usb_connect(0x5, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb350102030109022b0001080540040904ce01026fda0d000705f71f22810b09050c02", @ANYRES8], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="260000000000000093"], 0x20) getdents(r0, &(0x7f00000001c0)=""/35, 0x23) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1800000040000703fcffffff00000100037c000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x129983, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 10.491819845s ago: executing program 6 (id=1465): munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000009) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0x86, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0xa, 0x2}, 0x0, 0x0, 0xb, 0x106f7a, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3}) msgsnd(0x0, &(0x7f0000000140), 0x8, 0x800) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) 9.103408449s ago: executing program 5 (id=1467): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002040)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 9.049992765s ago: executing program 6 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002140)=@random={'user.', '\x00'}, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x0, 0x7f, 0x200, 0x93db, 0x0, 0x0, 0x0, 0x4, 0x400000}}, 0x50) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 8.479973668s ago: executing program 47 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0xfffffffffffffff9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000280)={r0, &(0x7f0000000040)='syz0\x00', 0x3000, &(0x7f0000000180)={@_ha_fsid={[0x3c, 0xfffffffe]}, {0xe, 0x1, 0x5cb9, 0x5}}, 0x6b, &(0x7f00000001c0), &(0x7f0000000240)=0x7f}) syz_genetlink_get_family_id$tipc(0x0, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x92, 0x0, 0x0, 0x2}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x8, 0x7ffffe39}]}) rt_sigprocmask(0x2, &(0x7f00000004c0)={[0xfffffbff]}, 0x0, 0x8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95e, 0x1, 0x8, 0x7ffffffc, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x800400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0x9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3ea, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x796a, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xe89, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x5, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) shutdown(0xffffffffffffffff, 0x0) 7.415309477s ago: executing program 6 (id=1471): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001500)={0x44, &(0x7f0000000340)={0x0, 0x5, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7.033024227s ago: executing program 2 (id=1441): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 6.069362136s ago: executing program 2 (id=1472): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "9c"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 5.881311423s ago: executing program 2 (id=1473): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r4, &(0x7f0000000300)="01", 0x1) write(r2, &(0x7f0000000100)="2800000014000100000000000000000001000000ffffffff0000000000000000ffffffffffffffff", 0x28) r5 = socket$unix(0x1, 0x1, 0x0) fstat(r5, &(0x7f0000000110)) read(r3, &(0x7f0000000110), 0x1) write(r2, &(0x7f0000000100), 0x28) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x30, 0x3) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x2, 0x2003) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 5.001765739s ago: executing program 7 (id=1476): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, &(0x7f0000000180)) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 4.860815699s ago: executing program 2 (id=1477): munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1000009) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000"], 0x86, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0xa, 0x2}, 0x0, 0x0, 0xb, 0x106f7a, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3}) msgsnd(0x0, &(0x7f0000000140), 0x8, 0x800) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) 4.129995666s ago: executing program 7 (id=1478): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) landlock_create_ruleset(&(0x7f00000000c0)={0x8152}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) landlock_create_ruleset(0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) 4.066291931s ago: executing program 6 (id=1479): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3.992467581s ago: executing program 5 (id=1480): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002780)={0x2020}, 0x2020) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, 0xffffffffffffffff, 0x0) 3.747940792s ago: executing program 6 (id=1481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x90}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.665239385s ago: executing program 2 (id=1482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.563320768s ago: executing program 5 (id=1483): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000380)={0x20, 0xe}, 0x0, 0x0}) 2.747763091s ago: executing program 6 (id=1484): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000080)=[{0x3, 0x200, 0x0, 0x0}], 0x1}) 2.527413078s ago: executing program 7 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0}, 0x2082) lgetxattr(&(0x7f0000002040)='./file0\x00', &(0x7f0000002140)=@random={'user.', '\x00'}, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x0, 0x0, 0x7f, 0x200, 0x93db, 0x0, 0x0, 0x0, 0x4, 0x400000}}, 0x50) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0xffffffffffffffda, r2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00', 0x0, 0x0) 2.41737663s ago: executing program 7 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x8}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xe}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x7}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.488489389s ago: executing program 7 (id=1487): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$phonet_pipe(0x23, 0x5, 0x2) setgroups(0x0, &(0x7f0000000180)) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing/instances/inst1/events/irq_vectors/local_timer_exit/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$pptp(0x18, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 1.200207166s ago: executing program 2 (id=1488): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001500)={0x44, &(0x7f0000000340)={0x0, 0x5, 0x1, ';'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 897.078817ms ago: executing program 7 (id=1489): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x10c0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0], 0x4c}}, 0x4008080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) socket(0x1, 0x5, 0xf06b) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = socket$key(0xf, 0x3, 0x2) recvmmsg(r6, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x14) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00') read$FUSE(r7, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 194.435493ms ago: executing program 5 (id=1490): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 0s ago: executing program 5 (id=1491): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1:0.0: Error: mce write submit urb error = -90 [ 350.141916][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 350.181251][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 350.222110][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 350.271600][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 350.302068][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 350.333000][ T5683] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 350.362033][ T5683] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 350.388802][ T5683] usb 10-1: USB disconnect, device number 2 [ 350.559600][ T9334] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.568701][ T9334] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.576356][ T9334] bridge_slave_0: entered allmulticast mode [ 350.583884][ T9334] bridge_slave_0: entered promiscuous mode [ 350.595959][ T9334] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.603281][ T9334] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.612850][ T9334] bridge_slave_1: entered allmulticast mode [ 350.620221][ T9334] bridge_slave_1: entered promiscuous mode [ 350.650508][ T9334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.664761][ T9334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.692376][ T9334] team0: Port device team_slave_0 added [ 350.700087][ T9334] team0: Port device team_slave_1 added [ 350.765762][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.790000][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.871745][ T9334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.898331][ T9334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.928712][ T9334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.965501][ T9334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.134027][ T9334] hsr_slave_0: entered promiscuous mode [ 351.140758][ T9334] hsr_slave_1: entered promiscuous mode [ 351.146991][ T9334] debugfs: 'hsr0' already exists in 'hsr' [ 351.154087][ T9334] Cannot create hsr debugfs directory [ 351.293738][ T5605] Bluetooth: hci9: command tx timeout [ 351.633256][ T5605] Bluetooth: hci8: command tx timeout [ 351.678968][ T9334] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 351.689181][ T9334] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 351.699766][ T9334] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 351.709888][ T9334] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 351.722547][ T5605] Bluetooth: hci10: command tx timeout [ 351.733529][ T9334] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 351.744202][ T9334] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 351.754853][ T9334] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 351.766210][ T9334] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.022917][ T9334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.040157][ T9334] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.053010][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.060222][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.083401][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.090574][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.212116][ T5683] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 352.366747][ T9334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.374845][ T5683] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 352.391370][ T5683] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.416193][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.448191][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.462380][ T9334] veth0_vlan: entered promiscuous mode [ 352.476474][ T5683] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 352.493711][ T9334] veth1_vlan: entered promiscuous mode [ 352.506620][ T5683] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.532949][ T9334] veth0_macvtap: entered promiscuous mode [ 352.539812][ T5683] usb 10-1: config 0 descriptor?? [ 352.565682][ T9334] veth1_macvtap: entered promiscuous mode [ 352.586482][ T9334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.603319][ T9334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.734667][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.757803][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.786959][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.795789][ T1331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.809297][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.821557][ T1331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.842427][ T1331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.864464][ T1331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.012833][ T5683] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 353.239679][ T5683] usb 10-1: USB disconnect, device number 3 [ 353.253375][ T1209] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 353.311060][ T5605] Bluetooth: hci9: command tx timeout [ 353.431193][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 353.439436][ T1209] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 353.451310][ T1209] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 353.459590][ T1209] usb 3-1: config 0 has no interface number 0 [ 353.466278][ T1209] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 353.486787][ T1209] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 353.499095][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.509043][ T1209] usb 3-1: Product: syz [ 353.513690][ T1209] usb 3-1: Manufacturer: syz [ 353.518433][ T1209] usb 3-1: SerialNumber: syz [ 353.527789][ T1209] usb 3-1: config 0 descriptor?? [ 353.534771][ T9387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.544602][ T9387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.769568][ T9387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.789201][ T9387] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 353.797030][ T5605] Bluetooth: hci10: command tx timeout [ 354.034177][ T1209] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 354.971125][ T5694] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 355.122659][ T5694] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 355.134142][ T5694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.146402][ T5694] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.159337][ T5694] usb 10-1: config 0 descriptor?? [ 355.387186][ T5694] usbhid 10-1:0.0: can't add hid device: -71 [ 355.396308][ T5694] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 355.412248][ T5694] usb 10-1: USB disconnect, device number 4 [ 355.640144][ T1209] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 355.656175][ T1209] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 355.667672][ T1209] asix 3-1:0.34: probe with driver asix failed with error -71 [ 355.687704][ T1209] usb 3-1: USB disconnect, device number 32 [ 355.840499][ T5694] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 355.870735][ T5605] Bluetooth: hci10: command tx timeout [ 355.991167][ T5694] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 356.005674][ T5694] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.018416][ T5694] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.034496][ T5694] usb 10-1: config 0 descriptor?? [ 356.441825][ T5683] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 356.601139][ T5683] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.613834][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.625260][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.637414][ T5683] usb 3-1: config 0 descriptor?? [ 356.852596][ T5683] usbhid 3-1:0.0: can't add hid device: -71 [ 356.862542][ T5694] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 356.869719][ T5683] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 356.879421][ T5694] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input42 [ 356.897121][ T5683] usb 3-1: USB disconnect, device number 33 [ 357.212190][ T5694] usb 10-1: USB disconnect, device number 5 [ 357.212242][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 357.376245][ T5597] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 357.388210][ T5597] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 357.408803][ T5683] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 357.424156][ T5597] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 357.439748][ T5597] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 357.448348][ T5597] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 357.636285][ T5683] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 357.657003][ T5683] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.683158][ T5683] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.707516][ T5683] usb 3-1: config 0 descriptor?? [ 357.808863][ T29] audit: type=1400 audit(1786457747.232:869): avc: denied { connect } for pid=9408 comm="syz.9.1237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.886665][ T29] audit: type=1400 audit(1786457747.272:870): avc: denied { ioctl } for pid=9408 comm="syz.9.1237" path="socket:[29897]" dev="sockfs" ino=29897 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 357.952729][ T5605] Bluetooth: hci10: command tx timeout [ 358.097672][ T9398] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.105027][ T9398] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.117184][ T9398] bridge_slave_0: entered allmulticast mode [ 358.126286][ T9398] bridge_slave_0: entered promiscuous mode [ 358.136941][ T9398] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.152287][ T9398] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.159833][ T9398] bridge_slave_1: entered allmulticast mode [ 358.168011][ T9398] bridge_slave_1: entered promiscuous mode [ 358.180430][ T5695] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 358.208920][ T9398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.220922][ T9398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.254731][ T9398] team0: Port device team_slave_0 added [ 358.264349][ T9398] team0: Port device team_slave_1 added [ 358.286034][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.293242][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.319745][ T9398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.332414][ T9398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.339391][ T9398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.373080][ T5695] usb 10-1: Using ep0 maxpacket: 16 [ 358.378799][ T9398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.389928][ T5695] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 358.406994][ T5695] usb 10-1: config 0 interface 0 altsetting 88 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.424407][ T5695] usb 10-1: config 0 interface 0 altsetting 88 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.446828][ T5695] usb 10-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 358.463459][ T9398] hsr_slave_0: entered promiscuous mode [ 358.473699][ T9398] hsr_slave_1: entered promiscuous mode [ 358.479627][ T5695] usb 10-1: config 0 interface 0 has no altsetting 0 [ 358.487533][ T9398] debugfs: 'hsr0' already exists in 'hsr' [ 358.495601][ T5695] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.503934][ T9398] Cannot create hsr debugfs directory [ 358.519059][ T5695] usb 10-1: config 0 descriptor?? [ 358.570935][ T5683] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 358.579415][ T5683] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input43 [ 358.957302][ T5695] hid_parser_main: 34 callbacks suppressed [ 358.957364][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.002105][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.020033][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.042171][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.061072][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.081308][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.096209][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.111846][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.131159][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.148267][ T5695] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0 [ 359.169684][ T9398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.179151][ T5695] kovaplus 0003:1E7D:2D50.0011: hidraw0: USB HID v0.81 Device [HID 1e7d:2d50] on usb-dummy_hcd.9-1/input0 [ 359.201980][ T9398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 359.220676][ T9398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.243546][ T9398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 359.266013][ T9398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.287478][ T9398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 359.297121][ T9398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.307029][ T9398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 359.388281][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.412142][ T9398] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.424196][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.431447][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.459824][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.467016][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.477715][ T5605] Bluetooth: hci11: command tx timeout [ 359.498405][ T5695] kovaplus 0003:1E7D:2D50.0011: couldn't init struct kovaplus_device [ 359.518357][ T5695] kovaplus 0003:1E7D:2D50.0011: couldn't install mouse [ 359.567210][ T5695] kovaplus 0003:1E7D:2D50.0011: probe with driver kovaplus failed with error -71 [ 359.614670][ T5695] usb 10-1: USB disconnect, device number 6 [ 359.908386][ T9398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.407043][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 360.415373][ T1209] usb 3-1: USB disconnect, device number 34 [ 360.537959][ T9398] veth0_vlan: entered promiscuous mode [ 360.566244][ T9398] veth1_vlan: entered promiscuous mode [ 360.607332][ T9398] veth0_macvtap: entered promiscuous mode [ 360.622681][ T9398] veth1_macvtap: entered promiscuous mode [ 360.638469][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.653407][ T9398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.680519][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.751777][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.840120][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.854313][ T6265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.869978][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.883509][ T6265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.010233][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.038091][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.411110][ T1209] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 361.550740][ T5605] Bluetooth: hci11: command tx timeout [ 361.571184][ T1209] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.583561][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.592421][ T1209] usb 10-1: Product: syz [ 361.596776][ T1209] usb 10-1: Manufacturer: syz [ 361.601938][ T1209] usb 10-1: SerialNumber: syz [ 361.610251][ T1209] usb 10-1: config 0 descriptor?? [ 361.823861][ T1209] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.174238][ T9463] binder: 9462:9463 ioctl c0306201 200000000180 returned -22 [ 362.312118][ T29] audit: type=1400 audit(1786457751.742:871): avc: denied { map_create } for pid=9467 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.385398][ T29] audit: type=1400 audit(1786457751.762:872): avc: denied { map_read map_write } for pid=9467 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 362.571398][ T5597] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 362.583283][ T5597] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 362.595990][ T5597] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 362.604377][ T5597] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 362.612486][ T5597] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 362.852151][ T1209] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 363.098226][ T9471] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.105994][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.113763][ T9471] bridge_slave_0: entered allmulticast mode [ 363.121204][ T9471] bridge_slave_0: entered promiscuous mode [ 363.129088][ T9471] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.136427][ T9471] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.144338][ T9471] bridge_slave_1: entered allmulticast mode [ 363.166115][ T9471] bridge_slave_1: entered promiscuous mode [ 363.197313][ T9471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.210826][ T9471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.237378][ T9471] team0: Port device team_slave_0 added [ 363.245416][ T9471] team0: Port device team_slave_1 added [ 363.269405][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.276662][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.307087][ T9471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.323443][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.330810][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.357117][ T9471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.402422][ T9471] hsr_slave_0: entered promiscuous mode [ 363.409135][ T9471] hsr_slave_1: entered promiscuous mode [ 363.419673][ T9471] debugfs: 'hsr0' already exists in 'hsr' [ 363.425920][ T9471] Cannot create hsr debugfs directory [ 363.555726][ T9471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.616390][ T9471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.631673][ T5597] Bluetooth: hci11: command tx timeout [ 363.695345][ T9471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.758213][ T9471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.909824][ T9471] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.919369][ T9471] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.928340][ T9471] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.938453][ T9471] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.946904][ T9471] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.958514][ T9471] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.968331][ T9471] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 363.985220][ T9471] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.007835][ T9471] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.015029][ T9471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.022498][ T9471] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.029738][ T9471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.044559][ T133] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.052952][ T133] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.105816][ T9471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.125360][ T9471] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.139126][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.146375][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.183537][ T5683] usb 10-1: USB disconnect, device number 7 [ 364.228064][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.235234][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.535062][ T9471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.542938][ T5683] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 364.577015][ T9471] veth0_vlan: entered promiscuous mode [ 364.588048][ T9471] veth1_vlan: entered promiscuous mode [ 364.628589][ T9471] veth0_macvtap: entered promiscuous mode [ 364.638963][ T9471] veth1_macvtap: entered promiscuous mode [ 364.657253][ T9471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.673865][ T5597] Bluetooth: hci12: command tx timeout [ 364.685372][ T9471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.701149][ T5683] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 364.719463][ T5683] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.748064][ T5683] usb 10-1: config 0 has no interface number 0 [ 364.772601][ T5982] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.805341][ T5683] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.848410][ T5683] usb 10-1: Product: syz [ 364.856140][ T1331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.875608][ T5683] usb 10-1: Manufacturer: syz [ 364.884720][ T5683] usb 10-1: SerialNumber: syz [ 364.889548][ T1331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.904695][ T5683] usb 10-1: config 0 descriptor?? [ 364.935639][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.950775][ T1331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.961437][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.007506][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.017518][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.126349][ T5683] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 365.162932][ T5683] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.189317][ T5683] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 365.198500][ T29] audit: type=1400 audit(1786457754.612:873): avc: denied { relabelfrom } for pid=9509 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 365.227954][ T5683] usb 10-1: media controller created [ 365.249932][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.272343][ T29] audit: type=1400 audit(1786457754.652:874): avc: denied { relabelto } for pid=9509 comm="syz.1.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 365.354808][ T5683] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 365.428503][ T5683] usb 10-1: USB disconnect, device number 8 [ 365.712840][ T5597] Bluetooth: hci11: command tx timeout [ 366.240558][ T5683] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 366.402946][ T5683] usb 10-1: Using ep0 maxpacket: 16 [ 366.415861][ T5683] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 366.426648][ T5683] usb 10-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 366.448870][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.461493][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.471695][ T5683] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.482179][ T5683] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.497023][ T5683] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 366.505515][ T5683] usb 10-1: Manufacturer: syz [ 366.517272][ T5683] usb 10-1: config 0 descriptor?? [ 366.750870][ T5597] Bluetooth: hci12: command tx timeout [ 366.770622][ T5683] rc_core: IR keymap rc-hauppauge not found [ 366.780761][ T5683] Registered IR keymap rc-empty [ 366.785750][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.810577][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.831477][ T5683] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 366.851350][ T5683] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input44 [ 366.866582][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.890828][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.911290][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.931049][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.955126][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 366.980608][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 367.001773][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 367.020550][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 367.041344][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 367.062238][ T5683] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 367.082222][ T5683] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 367.091655][ T5683] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 367.180226][ T5683] usb 10-1: USB disconnect, device number 9 [ 367.350063][ T5605] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 367.366609][ T5605] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 367.378792][ T5605] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 367.388282][ T5605] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 367.399473][ T5605] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 368.060428][ T9529] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.067638][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.075419][ T9529] bridge_slave_0: entered allmulticast mode [ 368.086243][ T9529] bridge_slave_0: entered promiscuous mode [ 368.094734][ T9529] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.102058][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.109705][ T9529] bridge_slave_1: entered allmulticast mode [ 368.121782][ T9529] bridge_slave_1: entered promiscuous mode [ 368.149537][ T9529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.166070][ T9529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.197651][ T9529] team0: Port device team_slave_0 added [ 368.206469][ T9529] team0: Port device team_slave_1 added [ 368.228220][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.235588][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.263248][ T9529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.293249][ T9529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.300441][ T9529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.326896][ T9529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.362380][ T9529] hsr_slave_0: entered promiscuous mode [ 368.369277][ T9529] hsr_slave_1: entered promiscuous mode [ 368.377143][ T9529] debugfs: 'hsr0' already exists in 'hsr' [ 368.385883][ T9529] Cannot create hsr debugfs directory [ 368.836336][ T5597] Bluetooth: hci12: command tx timeout [ 368.995792][ T9529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 369.009129][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.022968][ T9529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 369.033942][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.042716][ T9529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 369.056383][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.064691][ T9529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 369.079789][ T9529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.101804][ T5683] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 369.164562][ T9529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.181089][ T9529] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.196803][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.203981][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.233416][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.240580][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.273130][ T5683] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 369.294065][ T5683] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.309143][ T5683] usb 10-1: config 0 has no interface number 0 [ 369.328933][ T5683] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.339613][ T5683] usb 10-1: Product: syz [ 369.349823][ T5683] usb 10-1: Manufacturer: syz [ 369.362806][ T5683] usb 10-1: SerialNumber: syz [ 369.377865][ T5683] usb 10-1: config 0 descriptor?? [ 369.471983][ T5597] Bluetooth: hci13: command tx timeout [ 369.599245][ T5683] usb 10-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 369.636223][ T9529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.647492][ T5683] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 369.670124][ T5683] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 369.694988][ T5683] usb 10-1: media controller created [ 369.708020][ T9529] veth0_vlan: entered promiscuous mode [ 369.735398][ T5683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 369.746877][ T9529] veth1_vlan: entered promiscuous mode [ 369.794366][ T9529] veth0_macvtap: entered promiscuous mode [ 369.814750][ T9529] veth1_macvtap: entered promiscuous mode [ 369.824876][ T5683] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 369.849260][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.876662][ T9529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.908547][ T5683] usb 10-1: USB disconnect, device number 10 [ 370.025551][ T5982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.057911][ T5982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.079377][ T5982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.092291][ T5982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.126752][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.150006][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.177906][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.186598][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.998230][ T5597] Bluetooth: hci12: command tx timeout [ 371.550763][ T5597] Bluetooth: hci13: command tx timeout [ 371.620959][ T5683] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 371.801180][ T5683] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 371.813265][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.822261][ T5683] usb 4-1: Product: syz [ 371.826463][ T5683] usb 4-1: Manufacturer: syz [ 371.834408][ T5683] usb 4-1: SerialNumber: syz [ 371.844291][ T5683] usb 4-1: config 0 descriptor?? [ 372.059526][ T5683] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 372.226216][ T9599] binder: 9598:9599 ioctl 4018620d 0 returned -22 [ 372.234985][ T9599] binder: 9598:9599 ioctl c0306201 200000000180 returned -22 [ 372.640452][ T1209] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 372.791145][ T1209] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 372.802152][ T1209] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.810894][ T1209] usb 10-1: config 0 has no interface number 0 [ 372.819365][ T1209] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.834471][ T1209] usb 10-1: Product: syz [ 372.838872][ T1209] usb 10-1: Manufacturer: syz [ 372.844615][ T1209] usb 10-1: SerialNumber: syz [ 372.853806][ T1209] usb 10-1: config 0 descriptor?? [ 373.066078][ T1209] dvb_usb_ec168 10-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 373.091350][ T1209] usb 10-1: USB disconnect, device number 11 [ 373.630616][ T5597] Bluetooth: hci13: command tx timeout [ 373.900657][ T5683] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 373.929017][ T5683] usb 4-1: USB disconnect, device number 40 [ 373.970392][ T1209] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 374.131237][ T1209] usb 10-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 374.142030][ T1209] usb 10-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.156054][ T1209] usb 10-1: config 0 interface 0 has no altsetting 0 [ 374.166479][ T1209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.178754][ T1209] usb 10-1: config 0 descriptor?? [ 374.194745][ T1209] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 376.742263][ T5605] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 376.758749][ T5605] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 376.769070][ T5605] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 376.778660][ T5605] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 376.791237][ T5605] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 376.843053][ T1209] usb 10-1: USB disconnect, device number 12 [ 377.501085][ T5694] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 377.583763][ T9655] fuse: Bad value for 'group_id' [ 377.603492][ T9655] fuse: Bad value for 'group_id' [ 377.697727][ T5694] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 377.752090][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.809968][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.864893][ T5694] usb 4-1: config 0 descriptor?? [ 378.069511][ T5605] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 378.081579][ T5605] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 378.091149][ T5605] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 378.101694][ T5605] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 378.122239][ T5605] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 378.175133][ T5694] usbhid 4-1:0.0: can't add hid device: -71 [ 378.202676][ T5694] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 378.251341][ T5694] usb 4-1: USB disconnect, device number 41 [ 378.401876][ T9628] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.421797][ T9628] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.439911][ T9628] bridge_slave_0: entered allmulticast mode [ 378.459787][ T9628] bridge_slave_0: entered promiscuous mode [ 378.479077][ T9628] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.488092][ T9628] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.498599][ T9628] bridge_slave_1: entered allmulticast mode [ 378.506429][ T9628] bridge_slave_1: entered promiscuous mode [ 378.581876][ T1209] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 378.596017][ T9628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.643160][ T9628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.681213][ T5694] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 378.717383][ T9628] team0: Port device team_slave_0 added [ 378.737412][ T9628] team0: Port device team_slave_1 added [ 378.771562][ T1209] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 378.785262][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.793388][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.822699][ T1209] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.838369][ T5597] Bluetooth: hci14: command tx timeout [ 378.849969][ T9628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.861229][ T1209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.869967][ T5694] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 378.884694][ T9628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.894394][ T1209] usb 10-1: config 0 descriptor?? [ 378.903525][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.920096][ T9628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.962335][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.977072][ T5694] usb 4-1: config 0 descriptor?? [ 378.986712][ T9628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.075269][ T9628] hsr_slave_0: entered promiscuous mode [ 379.082755][ T9628] hsr_slave_1: entered promiscuous mode [ 379.089206][ T9628] debugfs: 'hsr0' already exists in 'hsr' [ 379.096157][ T9628] Cannot create hsr debugfs directory [ 379.175362][ T1209] usbhid 10-1:0.0: can't add hid device: -71 [ 379.193682][ T1209] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 379.227009][ T1209] usb 10-1: USB disconnect, device number 13 [ 379.478892][ T9628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.555761][ T9628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.624552][ T9628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.657645][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.672500][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.680159][ T9666] bridge_slave_0: entered allmulticast mode [ 379.687737][ T9666] bridge_slave_0: entered promiscuous mode [ 379.700853][ T1209] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 379.726637][ T9628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.747843][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.758285][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.771039][ T9666] bridge_slave_1: entered allmulticast mode [ 379.778381][ T9666] bridge_slave_1: entered promiscuous mode [ 379.796722][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.806761][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.813964][ T5694] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 379.837547][ T5694] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input45 [ 379.872144][ T1209] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 379.920913][ T1209] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.961873][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.007846][ T1209] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.048505][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.066217][ T1209] usb 10-1: config 0 descriptor?? [ 380.149332][ T9666] team0: Port device team_slave_0 added [ 380.170259][ T9666] team0: Port device team_slave_1 added [ 380.190768][ T5597] Bluetooth: hci15: command tx timeout [ 380.225203][ T5799] usb 4-1: USB disconnect, device number 42 [ 380.231298][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 380.304639][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.328042][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.356776][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.375612][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.382778][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.409566][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.493644][ T9666] hsr_slave_0: entered promiscuous mode [ 380.501728][ T9666] hsr_slave_1: entered promiscuous mode [ 380.508620][ T9666] debugfs: 'hsr0' already exists in 'hsr' [ 380.518346][ T9666] Cannot create hsr debugfs directory [ 380.574165][ T9628] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 380.584241][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 380.600958][ T9628] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 380.613751][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 380.631226][ T9628] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 380.646741][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 380.674397][ T9628] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 380.685486][ T9628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.910649][ T5597] Bluetooth: hci14: command tx timeout [ 380.917629][ T1209] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 380.940837][ T1209] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input46 [ 381.104914][ T9666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.198869][ T9666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.210104][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 381.235930][ T9628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.273867][ T9666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.307663][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 381.316005][ T1209] usb 10-1: USB disconnect, device number 14 [ 381.338654][ T9628] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.370971][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 381.408254][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.424045][ T9666] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.435401][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 381.451262][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 381.476904][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 381.503466][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.510637][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.520000][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.533460][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.540675][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.584112][ T9628] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 381.604593][ T9628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.270724][ T5597] Bluetooth: hci15: command tx timeout [ 382.445700][ T9666] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 382.492901][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.532538][ T9666] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 382.575487][ T5605] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 382.594274][ T10] gud 4-1:1.0: DP-1: Failed to add properties (ret=-71) [ 382.604893][ T5605] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 382.614114][ T5605] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 382.639391][ T5605] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 382.664398][ T5605] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 382.715168][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 382.729325][ T10] gud 4-1:1.0: Failed to get connectors (error=-71) [ 382.775966][ T10] gud 4-1:1.0: probe with driver gud failed with error -71 [ 382.793550][ T9666] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 382.848248][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 382.907786][ T9666] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 382.920591][ T10] usb 4-1: USB disconnect, device number 43 [ 382.976654][ T9666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 382.996996][ T5605] Bluetooth: hci14: command tx timeout [ 383.046255][ T9628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.510063][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.523128][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 383.608386][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.686115][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.693293][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.702573][ T9] usb 4-1: device descriptor read/64, error -71 [ 383.844058][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.851243][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.961027][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 384.081443][ T29] audit: type=1400 audit(1786457773.512:875): avc: denied { getopt } for pid=9747 comm="syz.9.1311" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 384.113621][ T9] usb 4-1: device descriptor read/64, error -71 [ 384.178017][ T29] audit: type=1400 audit(1786457773.602:876): avc: denied { read } for pid=9747 comm="syz.9.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 384.238499][ T9752] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1311'. [ 384.252758][ T9] usb usb4-port1: attempt power cycle [ 384.264276][ T9628] veth0_vlan: entered promiscuous mode [ 384.285718][ T29] audit: type=1400 audit(1786457773.602:877): avc: denied { write } for pid=9747 comm="syz.9.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 384.350858][ T5605] Bluetooth: hci15: command tx timeout [ 384.381714][ T9628] veth1_vlan: entered promiscuous mode [ 384.408096][ T29] audit: type=1400 audit(1786457773.752:878): avc: denied { create } for pid=9747 comm="syz.9.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.498125][ T29] audit: type=1400 audit(1786457773.792:879): avc: denied { write } for pid=9747 comm="syz.9.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 384.585976][ T9628] veth0_macvtap: entered promiscuous mode [ 384.630555][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 384.681651][ T9] usb 4-1: device descriptor read/8, error -71 [ 384.753502][ T5605] Bluetooth: hci16: command tx timeout [ 384.943316][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 384.971076][ T9628] veth1_macvtap: entered promiscuous mode [ 385.042259][ T9] usb 4-1: device descriptor read/8, error -71 [ 385.071233][ T5605] Bluetooth: hci14: command tx timeout [ 385.131378][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.201124][ T9] usb usb4-port1: unable to enumerate USB device [ 385.241941][ T9628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.331817][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.380537][ T5695] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 385.512616][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.543339][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.563023][ T9716] bridge_slave_0: entered allmulticast mode [ 385.575041][ T5695] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.597636][ T9716] bridge_slave_0: entered promiscuous mode [ 385.610399][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.646522][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.673271][ T5695] usb 10-1: Product: syz [ 385.694596][ T5695] usb 10-1: Manufacturer: syz [ 385.699537][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.713819][ T5695] usb 10-1: SerialNumber: syz [ 385.719000][ T9716] bridge_slave_1: entered allmulticast mode [ 385.727970][ T5695] usb 10-1: config 0 descriptor?? [ 385.739093][ T9716] bridge_slave_1: entered promiscuous mode [ 385.753851][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.868197][ T9716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.909107][ T9716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.927468][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.940995][ T944] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.965035][ T5695] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 385.977039][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.992077][ T944] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.086012][ T9716] team0: Port device team_slave_0 added [ 386.126440][ T9716] team0: Port device team_slave_1 added [ 386.217948][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.237898][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.298852][ T9716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.358816][ T9716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.385995][ T9716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.433550][ T5605] Bluetooth: hci15: command tx timeout [ 386.463626][ T9716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.504865][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.539172][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.749385][ T9716] hsr_slave_0: entered promiscuous mode [ 386.794664][ T9716] hsr_slave_1: entered promiscuous mode [ 386.832341][ T5605] Bluetooth: hci16: command tx timeout [ 386.844187][ T9716] debugfs: 'hsr0' already exists in 'hsr' [ 386.862551][ T9716] Cannot create hsr debugfs directory [ 387.075908][ T9666] veth0_vlan: entered promiscuous mode [ 387.164813][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.338836][ T9666] veth1_vlan: entered promiscuous mode [ 387.417985][ C0] raw-gadget.1 gadget.9: ignoring, device is not running [ 387.425483][ C0] raw-gadget.1 gadget.9: ignoring, device is not running [ 387.434176][ C0] raw-gadget.1 gadget.9: ignoring, device is not running [ 387.441421][ T5695] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 387.524566][ T5694] usb 10-1: USB disconnect, device number 15 [ 387.999233][ T9666] veth0_macvtap: entered promiscuous mode [ 388.269941][ T29] audit: type=1400 audit(1786457777.492:880): avc: denied { create } for pid=9807 comm="syz.3.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 388.407372][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1319'. [ 388.428069][ T9666] veth1_macvtap: entered promiscuous mode [ 388.910538][ T5605] Bluetooth: hci16: command tx timeout [ 389.235772][ T9716] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.592684][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.770733][ T5695] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 389.838241][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.882868][ T5683] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 389.968579][ T5695] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 389.994592][ T5695] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.006229][ T9716] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.045724][ T5695] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 390.074043][ T5683] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 390.103050][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.127293][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.162517][ T5695] usb 6-1: Product: syz [ 390.200465][ T133] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.221294][ T5695] usb 6-1: Manufacturer: syz [ 390.233338][ T5683] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.252455][ T5695] usb 6-1: SerialNumber: syz [ 390.292802][ T5695] usb 6-1: config 0 descriptor?? [ 390.315462][ T5683] usb 10-1: config 0 descriptor?? [ 390.453072][ T9716] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.615862][ T5683] usbhid 10-1:0.0: can't add hid device: -71 [ 390.783348][ T5683] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 390.850200][ T5683] usb 10-1: USB disconnect, device number 16 [ 390.881611][ T5982] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.965957][ T5982] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.990529][ T5605] Bluetooth: hci16: command tx timeout [ 391.032184][ T5982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.242033][ T5683] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 391.263522][ T9716] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.433341][ T5683] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 391.481839][ T5683] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.533437][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.543558][ T5683] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.613416][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.645366][ T5683] usb 10-1: config 0 descriptor?? [ 391.759514][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.795955][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.941159][ T10] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 392.120998][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 392.159800][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.196042][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.242009][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.285318][ T10] usb 4-1: config 0 descriptor?? [ 392.308771][ T9716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.322014][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 392.342695][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.379668][ T9716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.406159][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.414899][ T9716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.427088][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.439486][ T9716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.454143][ T9716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.491154][ T5683] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 392.508757][ T5695] usb 6-1: USB disconnect, device number 10 [ 392.574333][ T9] usb 4-1: USB disconnect, device number 48 [ 392.594805][ T5683] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input47 [ 392.982511][ T5716] usb 10-1: USB disconnect, device number 17 [ 392.988585][ C0] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 393.074465][ T9716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.090707][ T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 393.109585][ T9852] overlayfs: missing 'lowerdir' [ 393.183414][ T9716] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.229495][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.236702][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.292350][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 393.321785][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.328980][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.345473][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.379136][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.449652][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1333'. [ 393.479668][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.557891][ T9] usb 4-1: config 0 descriptor?? [ 393.602763][ T9] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 393.658630][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 393.802793][ T5716] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 393.982884][ T5716] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 394.133611][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.303451][ T5716] usb 7-1: Product: syz [ 394.313487][ T5716] usb 7-1: Manufacturer: syz [ 394.324831][ T5716] usb 7-1: SerialNumber: syz [ 394.371818][ T5716] usb 7-1: config 0 descriptor?? [ 394.626629][ T5716] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 394.939706][ T5683] usb 4-1: USB disconnect, device number 49 [ 395.609831][ T9884] syzkaller0: entered promiscuous mode [ 395.670755][ T9884] syzkaller0: entered allmulticast mode [ 395.682983][ T9896] overlayfs: missing 'lowerdir' [ 395.701523][ T9716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.087212][ T10] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 396.261395][ T5716] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 396.272703][ T10] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 396.301062][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.314844][ T5716] usb 7-1: USB disconnect, device number 4 [ 396.360685][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 396.406929][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.463461][ T10] usb 4-1: config 0 descriptor?? [ 396.508101][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 397.494568][ T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 397.677611][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 397.693628][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 397.732860][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.744618][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.768757][ T10] usb 6-1: config 0 has no interface number 0 [ 397.790565][ T10] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 397.814318][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.835181][ T10] usb 6-1: config 0 descriptor?? [ 397.882656][ T10] usbhid 6-1:0.1: couldn't find an input interrupt endpoint [ 398.840953][ T5716] usb 4-1: USB disconnect, device number 50 [ 399.374649][ T5683] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 399.611196][ T5683] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.642080][ T5683] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 399.669452][ T5683] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.683122][ T5683] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.734712][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.743891][ T5683] usb 4-1: Product: syz [ 399.759967][ T5683] usb 4-1: Manufacturer: syz [ 399.766568][ T5683] usb 4-1: SerialNumber: syz [ 399.794183][ T5683] usb 4-1: selecting invalid altsetting 1 [ 399.811880][ T5683] usb 4-1: unit 6 not found! [ 399.989596][ T5683] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 400.239109][ T9716] veth0_vlan: entered promiscuous mode [ 400.417117][ T5694] usb 6-1: USB disconnect, device number 11 [ 400.473438][ T9716] veth1_vlan: entered promiscuous mode [ 400.535795][ T5683] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 400.740082][ T9716] veth0_macvtap: entered promiscuous mode [ 400.809626][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 400.827123][ T9716] veth1_macvtap: entered promiscuous mode [ 400.927657][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.073218][ T9716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.224776][ T29] audit: type=1400 audit(1786457790.652:881): avc: denied { ioctl } for pid=9912 comm="syz.3.1351" path="/dev/video7" dev="devtmpfs" ino=950 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 401.267690][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.650709][ T1331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.721108][ T1331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.801422][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.840645][ T1209] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 401.852590][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.902963][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.020545][ T1209] usb 6-1: device descriptor read/64, error -71 [ 402.049954][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.086215][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.290770][ T1209] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 402.305024][ T9942] netlink: 'syz.6.1359': attribute type 29 has an invalid length. [ 402.404411][ T9942] process 'syz.6.1359' launched './file0' with NULL argv: empty string added [ 402.415343][ T29] audit: type=1400 audit(1786457791.802:882): avc: denied { execute } for pid=9939 comm="syz.6.1359" name="file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 402.458148][ T1209] usb 6-1: device descriptor read/64, error -71 [ 402.670195][ T29] audit: type=1400 audit(1786457791.912:883): avc: denied { execute_no_trans } for pid=9939 comm="syz.6.1359" path="/8/file0" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 402.701283][ T9950] comedi comedi3: pcl818: I/O base address not correctly aligned [ 402.715468][ T1209] usb usb6-port1: attempt power cycle [ 402.748196][ T9947] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 402.846978][ T5716] usb 4-1: USB disconnect, device number 51 [ 403.036873][ T29] audit: type=1400 audit(1786457792.462:884): avc: denied { mount } for pid=9953 comm="syz.9.1362" name="/" dev="ramfs" ino=39870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 403.121129][ T1209] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 403.158324][ T1209] usb 6-1: device descriptor read/8, error -71 [ 403.312155][ T5716] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 403.410610][ T1209] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 403.462575][ T1209] usb 6-1: device descriptor read/8, error -71 [ 403.502398][ T5716] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 403.536024][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.559417][ T5716] usb 4-1: Product: syz [ 403.572613][ T5716] usb 4-1: Manufacturer: syz [ 403.587282][ T5716] usb 4-1: SerialNumber: syz [ 403.592653][ T1209] usb usb6-port1: unable to enumerate USB device [ 403.624376][ T5716] usb 4-1: config 0 descriptor?? [ 403.795014][ T29] audit: type=1400 audit(1786457793.222:885): avc: denied { create } for pid=9959 comm="syz.6.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 403.839317][ T29] audit: type=1400 audit(1786457793.252:886): avc: denied { bind } for pid=9959 comm="syz.6.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 403.876165][ T5716] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 404.720609][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 404.925616][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 404.990170][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.023685][ T9978] fuse: Unknown parameter 'user_id00000000000000000000' [ 405.040515][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.117787][ T9] usb 7-1: config 0 descriptor?? [ 405.195359][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 405.408407][ T9] pwc: send_video_command error -71 [ 405.447011][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 405.496081][ T5716] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 405.513089][ T9] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 405.582274][ T9] usb 7-1: USB disconnect, device number 5 [ 405.599895][ T5716] usb 4-1: USB disconnect, device number 52 [ 406.000480][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 406.203705][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 406.240149][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.276384][ T9989] netlink: 'syz.3.1373': attribute type 29 has an invalid length. [ 406.308072][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.399389][ T9] usb 7-1: config 0 descriptor?? [ 406.544086][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 406.845265][ T9989] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 406.983867][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 407.037167][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 407.076419][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 407.117405][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 407.137330][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 407.154194][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 407.167068][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 407.182690][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 407.204517][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 407.222847][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 407.330759][ T5683] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 407.371548][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 407.444709][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 407.497335][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 407.570647][ T5683] usb 6-1: Using ep0 maxpacket: 8 [ 407.591124][ T5683] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 407.629385][ T5683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.669826][ T5683] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 407.713649][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 407.738180][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 407.758377][ T5683] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 407.772346][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 407.786218][ T9] pwc: Registered as video103. [ 407.792132][ T5683] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.824369][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input49 [ 407.862711][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 407.899038][ T9] usb 7-1: USB disconnect, device number 6 [ 407.916133][ T5683] usb 6-1: Product: syz [ 407.939210][ T5683] usb 6-1: Manufacturer: syz [ 407.982229][ T5683] usb 6-1: SerialNumber: syz [ 408.018705][ T5683] usb 6-1: config 0 descriptor?? [ 408.262200][ T5683] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 408.276744][ T5683] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 408.472240][ T5683] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 408.494449][ T5683] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 408.513597][ T5683] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 408.548194][ T5683] usb 6-1: USB disconnect, device number 16 [ 408.621452][ T5694] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 408.842209][ T5694] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 408.860505][ T5694] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.872978][T10015] comedi comedi3: pcl818: I/O base address not correctly aligned [ 408.897856][ T5694] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 408.926242][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.186423][T10017] fuse: Unknown parameter 'user_id00000000000000000000' [ 409.700542][ T5716] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 409.864963][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 409.883455][ T5716] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.893760][ T5716] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 409.902545][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 409.914092][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 409.924710][ T5716] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 409.936669][ T5716] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 409.947245][ T5716] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.965377][ T5716] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.188009][ T5716] usb 4-1: usb_control_msg returned -71 [ 410.272624][ T5716] usbtmc 4-1:16.0: can't read capabilities [ 410.316145][ T5716] usb 4-1: USB disconnect, device number 53 [ 410.540481][ T5694] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 410.696069][ T5694] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 410.707422][ T5694] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.719135][ T5694] usb 6-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.729442][ T5694] usb 6-1: config 2 interface 0 has no altsetting 0 [ 410.736455][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.060600][ T5683] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 411.220369][ T5683] usb 4-1: Using ep0 maxpacket: 32 [ 411.226500][ T5683] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 411.238048][ T5683] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 411.250130][ T5683] usb 4-1: config 0 has no interface number 0 [ 411.259877][ T5683] usb 4-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.270359][ T5683] usb 4-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 411.280964][ T5683] usb 4-1: config 0 interface 184 has no altsetting 0 [ 411.294541][ T5683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.302818][ T5683] usb 4-1: Product: syz [ 411.307020][ T5683] usb 4-1: Manufacturer: syz [ 411.315793][ T5683] usb 4-1: SerialNumber: syz [ 411.322685][ T5683] usb 4-1: config 0 descriptor?? [ 411.337376][ T5683] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 411.348734][ T5683] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 411.367406][ T5694] usbhid 6-1:2.0: can't add hid device: -71 [ 411.382112][ T5694] usbhid 6-1:2.0: probe with driver usbhid failed with error -71 [ 411.417954][ T5694] usb 6-1: USB disconnect, device number 17 [ 411.445993][ T5683] usb 7-1: USB disconnect, device number 7 [ 411.830710][ T5683] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 411.991105][ T5683] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.001768][ T5683] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.018051][ T5683] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.035313][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.045787][ T5683] usb 7-1: config 0 descriptor?? [ 412.061401][ T5683] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 412.160738][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 412.267342][ T5683] usb 7-1: USB disconnect, device number 8 [ 412.311125][ T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 412.326337][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.337835][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.355010][ T9] usb 6-1: config 0 descriptor?? [ 412.574009][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 412.588646][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 412.608976][ T9] usb 6-1: USB disconnect, device number 18 [ 412.711224][ T5683] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 412.861207][ T5683] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 412.871762][ T5683] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.882391][ T5683] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 412.897188][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.909783][ T5683] usb 7-1: config 0 descriptor?? [ 412.932953][ T5683] aiptek 7-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 412.943331][ T5683] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 413.080481][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 413.238657][ T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 413.254328][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.266651][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.279202][ T9] usb 6-1: config 0 descriptor?? [ 413.837963][ T5695] usb 4-1: USB disconnect, device number 54 [ 414.103553][ T9] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 414.114341][ T9] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input51 [ 414.280420][ T5695] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 414.434689][ T5695] usb 4-1: Using ep0 maxpacket: 8 [ 414.440503][ T9] usb 6-1: USB disconnect, device number 19 [ 414.446458][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 414.469928][ T5695] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 414.496741][ T5695] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.518981][ T5694] usb 7-1: USB disconnect, device number 9 [ 414.547309][ T5695] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 414.602807][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.715655][ T5695] usb 4-1: Product: syz [ 414.719901][ T5695] usb 4-1: Manufacturer: syz [ 414.725368][ T5695] usb 4-1: SerialNumber: syz [ 414.732076][ T5695] usb 4-1: config 0 descriptor?? [ 416.021262][T10059] fuse: Unknown parameter 'user_id00000000000000000000' [ 416.075444][ T29] audit: type=1400 audit(1786457805.502:887): avc: denied { create } for pid=10060 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 416.535646][ T29] audit: type=1326 audit(1786457805.962:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10060 comm="syz.5.1395" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f242bd9e0d9 code=0x0 [ 416.644314][ T29] audit: type=1400 audit(1786457806.072:889): avc: denied { read } for pid=10060 comm="syz.5.1395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 416.997476][ T1209] usb 4-1: USB disconnect, device number 55 [ 417.620540][ T1209] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 418.052469][ T1209] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 418.095774][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.122037][ T1209] usb 4-1: Product: syz [ 418.135992][ T1209] usb 4-1: Manufacturer: syz [ 418.164326][ T1209] usb 4-1: SerialNumber: syz [ 418.197877][ T1209] usb 4-1: config 0 descriptor?? [ 418.297325][ T5597] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 418.314154][ T5597] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 418.323633][ T5597] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 418.332400][ T5597] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 418.344184][ T5597] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 418.424048][ T1209] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 418.494595][T10090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 418.687482][ T29] audit: type=1400 audit(1786457808.112:890): avc: denied { getopt } for pid=10083 comm="syz.6.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 418.990505][ T5695] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 419.046537][ T1209] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 419.161932][ T5695] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 419.200356][ T5695] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.231036][ T5695] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.267917][ T5695] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.327945][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.465253][T10107] fuse: Bad value for 'fd' [ 419.690907][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.698355][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.706815][T10087] bridge_slave_0: entered allmulticast mode [ 419.715988][T10087] bridge_slave_0: entered promiscuous mode [ 419.724716][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.736017][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.745026][T10087] bridge_slave_1: entered allmulticast mode [ 419.752810][T10087] bridge_slave_1: entered promiscuous mode [ 419.783922][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.803865][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.832223][T10087] team0: Port device team_slave_0 added [ 419.844862][T10087] team0: Port device team_slave_1 added [ 419.867607][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.879234][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.910436][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.923338][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.931877][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.963785][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.011683][T10087] hsr_slave_0: entered promiscuous mode [ 420.018673][T10087] hsr_slave_1: entered promiscuous mode [ 420.025464][T10087] debugfs: 'hsr0' already exists in 'hsr' [ 420.031951][T10087] Cannot create hsr debugfs directory [ 420.185910][T10087] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.247793][T10087] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.323353][T10087] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.372879][T10087] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.413114][ T5716] usb 4-1: USB disconnect, device number 56 [ 420.431377][ T5597] Bluetooth: hci17: command tx timeout [ 420.862009][T10087] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 420.873072][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 420.881839][T10087] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 420.895126][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 420.903894][T10087] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 420.922116][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 420.931045][ T5716] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 420.939313][T10087] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 420.955702][T10087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 420.963231][ T5694] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 421.040205][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.060191][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.077059][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.084269][ T6507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.092102][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 421.100122][ T5716] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 421.125325][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.132508][ T6507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.141425][ T5694] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 421.154722][ T5716] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 421.165108][ T5716] usb 4-1: config 0 has no interface number 0 [ 421.173354][ T5694] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.193153][ T5694] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 421.205411][ T5716] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 421.233104][ T5694] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 421.248771][ T5716] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 421.278711][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.295841][ T5694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.307091][ T5716] usb 4-1: Product: syz [ 421.316509][ T5694] usb 7-1: Product: syz [ 421.323214][ T5716] usb 4-1: Manufacturer: syz [ 421.338194][ T5694] usb 7-1: Manufacturer: syz [ 421.346786][ T5716] usb 4-1: SerialNumber: syz [ 421.355118][ T5694] usb 7-1: SerialNumber: syz [ 421.372540][ T5716] usb 4-1: config 0 descriptor?? [ 421.378516][ T5694] usb 7-1: config 0 descriptor?? [ 421.404454][ T5716] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 421.422153][T10126] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 421.447148][ T5694] dm9601 7-1:0.0: probe with driver dm9601 failed with error -22 [ 421.606849][ T5716] usb 4-1: qt2_attach - failed to power on unit: -71 [ 421.636971][ T5716] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 421.677253][ T5716] usb 4-1: USB disconnect, device number 57 [ 421.765784][ T5694] usb 6-1: USB disconnect, device number 20 [ 421.885396][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.072270][T10087] veth0_vlan: entered promiscuous mode [ 422.085348][T10087] veth1_vlan: entered promiscuous mode [ 422.114385][T10087] veth0_macvtap: entered promiscuous mode [ 422.125360][T10087] veth1_macvtap: entered promiscuous mode [ 422.170689][ T5694] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 422.181554][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.231845][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.334072][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.362563][T10155] netlink: 'syz.3.1412': attribute type 29 has an invalid length. [ 422.372854][ T5694] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 422.406030][ T48] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.421441][ T5694] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.456896][ T5694] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 422.512652][ T5597] Bluetooth: hci17: command tx timeout [ 422.523007][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.559026][ T5694] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.576219][ T35] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.602740][T10155] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 422.615568][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 422.654589][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 422.687281][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.716025][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.737954][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.775655][ T5694] usb 6-1: Product: syz [ 422.791599][ T5694] usb 6-1: Manufacturer: syz [ 422.830072][ T5694] cdc_wdm 6-1:1.0: skipping garbage [ 422.842567][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.865223][ T5694] cdc_wdm 6-1:1.0: skipping garbage [ 422.875774][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.896394][ T5694] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 423.053328][ T5694] usb 6-1: USB disconnect, device number 21 [ 424.811651][T10166] comedi comedi3: pcl818: I/O base address not correctly aligned [ 425.277133][ T5597] Bluetooth: hci17: command tx timeout [ 426.350041][ T5799] usb 7-1: USB disconnect, device number 10 [ 426.545523][T10173] fuse: Bad value for 'fd' [ 426.761151][ T5694] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 426.962804][ T5694] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 427.019537][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.066203][ T5606] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 427.088141][ T5606] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 427.097326][ T5606] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 427.106423][ T5606] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 427.117030][ T5606] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 427.149848][ T5694] usb 6-1: Product: syz [ 427.173176][ T29] audit: type=1400 audit(1786457816.592:891): avc: denied { mount } for pid=10184 comm="syz.6.1420" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 427.200026][ T5694] usb 6-1: Manufacturer: syz [ 427.222894][ T5694] usb 6-1: SerialNumber: syz [ 427.248061][ T5694] usb 6-1: config 0 descriptor?? [ 427.317303][ T5606] Bluetooth: hci17: command tx timeout [ 427.471630][ T5799] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 427.511667][ T5694] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 427.671502][ T5799] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 427.698911][ T5799] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 427.726302][ T5799] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 427.788403][ T5799] usb 7-1: config 220 has no interface number 2 [ 427.825337][ T5799] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 427.863045][T10197] binder: 10196:10197 ioctl c0306201 0 returned -14 [ 427.885439][ T5799] usb 7-1: config 220 interface 0 has no altsetting 0 [ 427.896737][T10197] binder: 10196:10197 ioctl c0306201 200000000180 returned -22 [ 427.910620][ T5799] usb 7-1: config 220 interface 76 has no altsetting 0 [ 427.927913][ T5799] usb 7-1: config 220 interface 1 has no altsetting 0 [ 427.959184][ T5799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.001950][ T5799] usb 7-1: Product: syz [ 428.021840][ T5799] usb 7-1: Manufacturer: syz [ 428.039606][ T5799] usb 7-1: SerialNumber: syz [ 428.120378][ T5694] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 428.192710][ T5606] Bluetooth: hci5: command 0x0406 tx timeout [ 428.294102][ T5799] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 428.349937][ T5799] uvcvideo 7-1:220.0: No valid video chain found. [ 428.479898][ T5799] usb 7-1: selecting invalid altsetting 0 [ 428.546583][ T5799] usb 7-1: selecting invalid altsetting 0 [ 428.558654][ T5799] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 428.603535][ T5799] usb 7-1: USB disconnect, device number 11 [ 428.710081][T10185] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.718162][T10185] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.726065][T10185] bridge_slave_0: entered allmulticast mode [ 428.733704][T10185] bridge_slave_0: entered promiscuous mode [ 428.742349][T10185] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.749754][T10185] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.758073][T10185] bridge_slave_1: entered allmulticast mode [ 428.765894][T10185] bridge_slave_1: entered promiscuous mode [ 428.810162][T10185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.825564][T10185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.855273][T10185] team0: Port device team_slave_0 added [ 428.863795][T10185] team0: Port device team_slave_1 added [ 428.947480][T10185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.960189][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.998376][T10185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.018252][T10185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.031542][T10185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.073629][T10185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.150798][ T5605] Bluetooth: hci18: command tx timeout [ 429.443715][T10185] hsr_slave_0: entered promiscuous mode [ 429.459459][T10185] hsr_slave_1: entered promiscuous mode [ 429.524769][ T29] audit: type=1400 audit(1786457818.902:892): avc: denied { cmd } for pid=10215 comm="syz.3.1425" path="socket:[41927]" dev="sockfs" ino=41927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 429.571752][T10185] debugfs: 'hsr0' already exists in 'hsr' [ 429.581273][ T5694] usb 6-1: USB disconnect, device number 22 [ 429.609127][T10185] Cannot create hsr debugfs directory [ 430.030948][ T5694] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 430.223365][ T5694] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 430.276910][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.215237][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.230681][ T5605] Bluetooth: hci18: command tx timeout [ 431.293534][ T5694] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.369465][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.397483][T10185] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.421219][ T5694] usb 6-1: config 0 descriptor?? [ 431.608486][T10235] syzkaller0: entered promiscuous mode [ 431.622092][T10235] syzkaller0: entered allmulticast mode [ 431.724255][T10185] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.970056][ T5694] usbhid 6-1:0.0: can't add hid device: -71 [ 432.013544][ T5694] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 432.086173][ T5694] usb 6-1: USB disconnect, device number 23 [ 432.117389][ T29] audit: type=1326 audit(1786457821.542:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10232 comm="syz.3.1429" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c3ff9e0d9 code=0x0 [ 432.642773][T10243] fuse: Bad value for 'fd' [ 433.054401][ T29] audit: type=1400 audit(1786457822.472:894): avc: denied { watch watch_reads } for pid=10248 comm="syz.3.1433" path="pipe:[42105]" dev="pipefs" ino=42105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 433.329842][ T5605] Bluetooth: hci18: command tx timeout [ 434.704068][ T5694] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 434.875589][ T5694] usb 4-1: device descriptor read/64, error -71 [ 435.147154][ T5694] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 435.317255][ T5694] usb 4-1: device descriptor read/64, error -71 [ 435.391900][ T5605] Bluetooth: hci18: command tx timeout [ 435.440118][ T5694] usb usb4-port1: attempt power cycle [ 435.815033][ T5694] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 435.873288][ T5694] usb 4-1: device descriptor read/8, error -71 [ 436.130429][ T5694] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 436.171832][ T5694] usb 4-1: device descriptor read/8, error -71 [ 436.309325][ T5694] usb usb4-port1: unable to enumerate USB device [ 437.224839][T10185] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.435380][ T29] audit: type=1400 audit(1786457826.862:895): avc: denied { wake_alarm } for pid=10266 comm="syz.5.1437" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 437.943947][T10185] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.570543][ T5694] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 438.766307][ T5694] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 438.846085][ T5694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.919882][ T5694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.986005][ T5694] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.033173][ T5606] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 439.053527][ T5606] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 439.073545][ T5606] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 439.082670][ T5606] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 439.093914][ T5606] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 439.201639][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.263387][ T5694] usb 7-1: config 0 descriptor?? [ 439.417565][T10185] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 439.475171][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.515275][T10185] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 439.584567][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.619733][T10185] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 439.670061][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.702565][T10185] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 439.735384][ T5694] hid_parser_main: 34 callbacks suppressed [ 439.735405][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 439.811962][T10185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.832284][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 439.899790][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 439.974046][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.058182][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.112700][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.157656][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.208017][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.255660][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.305956][ T5694] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 440.350066][ T5694] plantronics 0003:047F:FFFF.0012: unbalanced collection at end of report description [ 440.406595][ T5694] plantronics 0003:047F:FFFF.0012: parse failed [ 440.414706][T10185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.438494][ T5694] plantronics 0003:047F:FFFF.0012: probe with driver plantronics failed with error -22 [ 440.513401][ T5694] usb 7-1: USB disconnect, device number 12 [ 440.626361][T10185] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.725968][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.733191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.834453][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.841685][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.916545][T10310] syzkaller0: entered promiscuous mode [ 440.940194][T10310] syzkaller0: entered allmulticast mode [ 441.150586][ T5605] Bluetooth: hci19: command tx timeout [ 441.243729][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.250131][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.766821][T10332] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 442.243891][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.277057][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.302052][T10287] bridge_slave_0: entered allmulticast mode [ 442.329356][T10287] bridge_slave_0: entered promiscuous mode [ 442.359594][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.386726][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.412117][T10287] bridge_slave_1: entered allmulticast mode [ 442.448538][T10287] bridge_slave_1: entered promiscuous mode [ 442.612025][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.796071][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.196879][T10287] team0: Port device team_slave_0 added [ 443.232789][ T5606] Bluetooth: hci19: command tx timeout [ 443.248245][T10287] team0: Port device team_slave_1 added [ 443.311210][ T5606] Bluetooth: hci6: command 0x0406 tx timeout [ 443.382594][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.417158][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.842738][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.870655][ T5694] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 443.935686][T10185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.958032][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.982068][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.069114][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.101262][ T5694] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.134787][ T5694] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.169823][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.225199][ T5694] usb 7-1: config 0 descriptor?? [ 444.254420][ T5694] pwc: Askey VC010 type 2 USB webcam detected. [ 444.276778][T10287] hsr_slave_0: entered promiscuous mode [ 444.312786][T10287] hsr_slave_1: entered promiscuous mode [ 444.333477][T10287] debugfs: 'hsr0' already exists in 'hsr' [ 444.342539][T10287] Cannot create hsr debugfs directory [ 444.455658][ T5694] pwc: send_video_command error -71 [ 444.494765][ T5694] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 444.544936][ T5694] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 444.602703][ T5694] usb 7-1: USB disconnect, device number 13 [ 444.794656][T10185] veth0_vlan: entered promiscuous mode [ 444.838685][T10185] veth1_vlan: entered promiscuous mode [ 444.990820][ T5694] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 445.026719][T10287] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.158806][T10185] veth0_macvtap: entered promiscuous mode [ 445.168505][ T5694] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 445.206737][T10185] veth1_macvtap: entered promiscuous mode [ 445.220524][ T5694] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.267098][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.298687][ T5694] usb 7-1: config 0 descriptor?? [ 445.311605][ T5605] Bluetooth: hci19: command tx timeout [ 445.329814][ T5694] pwc: Askey VC010 type 2 USB webcam detected. [ 445.364995][T10287] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.565086][T10287] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.682117][T10185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.735251][ T5694] pwc: recv_control_msg error -32 req 02 val 2b00 [ 445.745717][T10185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.766899][ T5694] pwc: recv_control_msg error -32 req 02 val 2700 [ 445.791949][ T5694] pwc: recv_control_msg error -32 req 02 val 2c00 [ 445.847795][ T5694] pwc: recv_control_msg error -32 req 04 val 1000 [ 445.873239][ T5694] pwc: recv_control_msg error -32 req 04 val 1300 [ 445.898980][ T5694] pwc: recv_control_msg error -32 req 04 val 1400 [ 445.923295][T10287] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.941151][ T5694] pwc: recv_control_msg error -32 req 02 val 2000 [ 445.959877][ T5694] pwc: recv_control_msg error -32 req 02 val 2100 [ 446.014148][ T5694] pwc: recv_control_msg error -32 req 04 val 1500 [ 446.042429][ T5694] pwc: recv_control_msg error -32 req 02 val 2500 [ 446.169529][ T5694] pwc: recv_control_msg error -32 req 02 val 2400 [ 446.198453][ T5694] pwc: recv_control_msg error -32 req 02 val 2600 [ 446.540612][ T3345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.601912][ T3345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.698041][ T5694] pwc: recv_control_msg error -71 req 02 val 2800 [ 446.717784][ T944] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.766431][ T5694] pwc: recv_control_msg error -71 req 04 val 1100 [ 446.809086][ T5694] pwc: recv_control_msg error -71 req 04 val 1200 [ 446.840976][ T63] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.869818][ T5694] pwc: Registered as video103. [ 446.997469][ T5694] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input52 [ 447.139448][ T5694] usb 7-1: USB disconnect, device number 14 [ 447.390417][ T5605] Bluetooth: hci19: command tx timeout [ 447.402392][T10387] fuse: Bad value for 'fd' [ 447.445231][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.499235][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.729578][T10393] netlink: 'syz.6.1460': attribute type 29 has an invalid length. [ 447.763948][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.811848][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.015989][T10393] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 448.131880][T10287] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.216485][T10287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.287243][T10287] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.348068][T10287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.395219][T10287] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.453967][T10287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.516764][T10287] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.579415][T10287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.162616][T10408] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1414'. [ 449.239925][T10287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.309260][T10287] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.370460][ T5694] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 449.632015][ T5694] usb 6-1: Using ep0 maxpacket: 16 [ 449.661669][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.668855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.688277][ T5694] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 449.825142][ T5694] usb 6-1: config 8 has an invalid interface number: 206 but max is 0 [ 449.852227][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.859381][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.883882][ T5694] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 449.922065][ T5694] usb 6-1: config 8 has no interface number 0 [ 449.969654][ T5694] usb 6-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 450.018744][ T5694] usb 6-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 450.068898][ T5694] usb 6-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 255 [ 450.109041][ T5694] usb 6-1: config 8 interface 206 has no altsetting 0 [ 450.145139][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.175024][ T5694] usb 6-1: Product: syz [ 450.189426][ T5694] usb 6-1: Manufacturer: syz [ 450.216403][ T5694] usb 6-1: SerialNumber: syz [ 450.247581][T10411] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 450.939243][T10422] binder: 10420:10422 ioctl c0306201 2000000003c0 returned -14 [ 452.235119][ T5694] garmin_gps 6-1:8.206: Garmin GPS usb/tty converter detected [ 452.361360][ T5694] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 452.469206][ T5694] usb 6-1: USB disconnect, device number 24 [ 452.542616][ T5694] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 452.615019][ T5694] garmin_gps 6-1:8.206: device disconnected [ 452.796036][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.991255][ T5694] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 453.026784][T10287] veth0_vlan: entered promiscuous mode [ 453.079152][T10287] veth1_vlan: entered promiscuous mode [ 453.184950][T10287] veth0_macvtap: entered promiscuous mode [ 453.202596][ T5694] usb 6-1: unable to get BOS descriptor or descriptor too short [ 453.228985][ T5694] usb 6-1: not running at top speed; connect to a high speed hub [ 453.241573][T10287] veth1_macvtap: entered promiscuous mode [ 453.269516][ T5694] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 453.321972][ T5694] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 453.333584][T10287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.356023][ T5694] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 453.388540][T10287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.410427][ T5694] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 453.453350][ T5694] usb 6-1: config 14 has no interface number 0 [ 453.482325][ T5982] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.497410][ T5694] usb 6-1: config 14 has no interface number 1 [ 453.518533][ T5982] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.534391][ T5694] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 453.559688][ T5606] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 453.577121][ T5606] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 453.595588][ T5606] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 453.606824][ T5606] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 453.619183][ T5606] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 453.705604][ T5694] usb 6-1: config 14 interface 228 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 453.735698][ T944] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.801827][ T944] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.818996][ T5694] usb 6-1: config 14 interface 57 has no altsetting 0 [ 453.894095][ T5694] usb 6-1: config 14 interface 228 has no altsetting 0 [ 453.951382][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.986618][T10445] fuse: Bad value for 'fd' [ 453.997858][ T5694] usb 6-1: Product: syz [ 454.015853][ T5694] usb 6-1: Manufacturer: syz [ 454.036467][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.051995][ T5694] usb 6-1: SerialNumber: syz [ 454.099511][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.279278][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.314650][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.390572][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 454.620973][ T10] usb 7-1: device descriptor read/64, error -71 [ 454.636951][ T5694] legousbtower 6-1:14.57: interrupt endpoints not found [ 454.939540][ T5694] legousbtower 6-1:14.228: interrupt endpoints not found [ 455.060863][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 455.210434][ T10] usb 7-1: device descriptor read/64, error -71 [ 455.224339][T10440] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.238222][T10440] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.247305][T10440] bridge_slave_0: entered allmulticast mode [ 455.255373][T10440] bridge_slave_0: entered promiscuous mode [ 455.264721][T10440] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.272373][T10440] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.279878][T10440] bridge_slave_1: entered allmulticast mode [ 455.289203][T10440] bridge_slave_1: entered promiscuous mode [ 455.341529][ T10] usb usb7-port1: attempt power cycle [ 455.450219][T10440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.573335][T10440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.665621][T10440] team0: Port device team_slave_0 added [ 455.674380][T10440] team0: Port device team_slave_1 added [ 455.695608][T10440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.702956][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.729921][ T5606] Bluetooth: hci20: command tx timeout [ 455.747418][T10440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.782020][T10440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.796919][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.838032][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 455.858240][T10440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.888070][ T10] usb 7-1: device descriptor read/8, error -71 [ 455.988249][T10440] hsr_slave_0: entered promiscuous mode [ 456.031851][T10440] hsr_slave_1: entered promiscuous mode [ 456.075064][T10440] debugfs: 'hsr0' already exists in 'hsr' [ 456.090216][T10440] Cannot create hsr debugfs directory [ 456.127987][T10476] syzkaller0: entered promiscuous mode [ 456.133743][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 456.154731][T10476] syzkaller0: entered allmulticast mode [ 456.181079][ T10] usb 7-1: device descriptor read/8, error -71 [ 456.308046][ T10] usb usb7-port1: unable to enumerate USB device [ 456.429195][T10478] binder: 10477:10478 ioctl c0306201 2000000003c0 returned -14 [ 457.424401][ T5695] usb 6-1: USB disconnect, device number 25 [ 457.605692][T10488] autofs: Bad value for 'fd' [ 457.790671][ T5606] Bluetooth: hci20: command tx timeout [ 458.260659][ T5695] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 458.328505][T10440] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.453221][ T5695] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 458.509093][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.550370][ T5695] usb 6-1: Product: syz [ 458.572641][ T5695] usb 6-1: Manufacturer: syz [ 458.596427][ T5695] usb 6-1: SerialNumber: syz [ 458.643114][ T5695] usb 6-1: config 0 descriptor?? [ 458.889867][ T5695] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 458.926557][T10440] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.091569][ T5683] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 459.305136][T10440] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.337725][T10507] tipc: Started in network mode [ 459.511366][ T5683] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 459.532151][T10507] tipc: Node identity 96860331ad17, cluster identity 4711 [ 459.662241][ T5683] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.678676][T10507] tipc: Enabled bearer , priority 0 [ 459.685882][ T5683] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.696373][T10504] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 459.710159][ T5683] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.754613][ T5683] usb 7-1: Product: syz [ 459.759152][ T5683] usb 7-1: Manufacturer: syz [ 459.768363][ T5683] usb 7-1: SerialNumber: syz [ 459.778695][T10440] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.802327][ T5683] usb 7-1: config 0 descriptor?? [ 459.866175][T10503] tipc: Disabling bearer [ 459.875177][ T5606] Bluetooth: hci20: command tx timeout [ 460.706633][ T5695] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 460.773502][ T5695] usb 6-1: USB disconnect, device number 26 [ 460.801618][ T5799] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 460.951464][T10440] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.985815][T10440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.995156][ T5799] usb 3-1: Using ep0 maxpacket: 16 [ 461.001626][ T5799] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 461.012085][T10440] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.019764][ T5799] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.040054][T10440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.049018][ T5799] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 461.079229][T10440] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.094669][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.120098][ T5799] usb 3-1: Product: syz [ 461.137693][ T5799] usb 3-1: Manufacturer: syz [ 461.144553][T10440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.169386][ T5799] usb 3-1: SerialNumber: syz [ 461.211486][ T5799] usb 3-1: config 0 descriptor?? [ 461.223436][T10440] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.306831][T10440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.388474][T10523] autofs: Bad value for 'fd' [ 461.725039][ T30] INFO: task syz-executor:5592 blocked for more than 143 seconds. [ 461.757018][ T30] Not tainted syzkaller #0 [ 461.769577][T10440] 8021q: adding VLAN 0 to HW filter on device bond0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.804806][ T29] audit: type=1400 audit(1786457851.212:896): avc: denied { write } for pid=5580 comm="syz-executor" path="pipe:[4465]" dev="pipefs" ino=4465 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 461.830846][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.862437][ T5799] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 461.906972][ T30] task:syz-executor state:D stack:22536 pid:5592 tgid:5592 ppid:1 task_flags:0x400140 flags:0x00080002 [ 461.952117][ T5605] Bluetooth: hci20: command tx timeout [ 461.988571][ T5694] usb 7-1: USB disconnect, device number 19 [ 462.031273][T10440] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.085286][ T30] Call Trace: [ 462.116278][ T30] [ 462.136036][ T30] __schedule+0x125c/0x6730 [ 462.160503][ T30] ? do_raw_spin_lock+0x128/0x260 [ 462.168967][ T30] ? __pfx___schedule+0x10/0x10 [ 462.189078][ T30] ? find_held_lock+0x2b/0x80 [ 462.201450][ T30] ? schedule+0x225/0x2c0 [ 462.205878][ T30] schedule+0xdd/0x2c0 [ 462.209985][ T30] schedule_preempt_disabled+0x13/0x30 [ 462.216623][ T30] __mutex_lock+0xccc/0x1bd0 [ 462.224558][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 462.229917][ T30] ? __lock_acquire+0x49f/0x1a40 [ 462.235571][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 462.241639][ T30] ? net_generic+0xea/0x2a0 [ 462.246194][ T30] ? net_generic+0xea/0x2a0 [ 462.251052][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 462.256374][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 462.262381][ T30] nfsd_umount+0x3b/0x60 [ 462.266669][ T30] deactivate_locked_super+0xc1/0x1b0 [ 462.272943][ T30] deactivate_super+0xe7/0x110 [ 462.277779][ T30] cleanup_mnt+0x21f/0x450 [ 462.282631][ T30] task_work_run+0x150/0x240 [ 462.295020][ T30] ? __pfx_task_work_run+0x10/0x10 [ 462.300199][ T30] exit_to_user_mode_loop+0x1d8/0x6f0 [ 462.306068][ T30] ? rcu_is_watching+0x12/0xc0 [ 462.311713][ T30] do_syscall_64+0x666/0x870 [ 462.316356][ T30] ? clear_bhb_loop+0x70/0xc0 [ 462.321471][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.327382][ T30] RIP: 0033:0x7fc54959f317 [ 462.334336][ T30] RSP: 002b:00007ffe082fea28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 462.343374][ T30] RAX: 0000000000000000 RBX: 00007fc549634474 RCX: 00007fc54959f317 [ 462.366390][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe082feae0 [ 462.375367][ T30] RBP: 00007ffe082feae0 R08: 00007ffe082ffae0 R09: 00000000ffffffff [ 462.383725][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe082ffb70 [ 462.397341][ T30] R13: 00007fc549634474 R14: 0000000000049c8b R15: 00007ffe082ffbb0 [ 462.407686][ T30] [ 462.462238][ T30] [ 462.462238][ T30] Showing all locks held in the system: [ 462.557493][ T30] 1 lock held by khungtaskd/30: [ 462.608139][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 462.720191][ T30] 2 locks held by getty/5354: [ 462.771167][ T30] #0: ffff888037db90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 462.852710][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 462.965749][ T30] 2 locks held by syz-executor/5591: [ 463.011403][ T30] #0: ffff88807aeec0d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.112786][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.200602][ T30] 2 locks held by syz-executor/5592: [ 463.237422][ T30] #0: ffff88807ac640d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.299376][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.315251][ T30] 2 locks held by syz-executor/5593: [ 463.321243][ T30] #0: ffff8880294e60d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.332066][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.342551][ T30] 2 locks held by syz-executor/5595: [ 463.347931][ T30] #0: ffff88805418a0d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.359200][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.369354][ T30] 3 locks held by kworker/u9:5/5606: [ 463.378100][ T30] #0: ffff888082fe2940 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 463.388747][ T30] #1: ffffc90002f6fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 463.404645][ T30] #2: ffff888082f20ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 463.420903][ T30] 5 locks held by kworker/0:9/5799: [ 463.426265][ T30] #0: ffff888020ae0d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 463.438012][ T30] #1: ffffc90004e5fd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 463.450007][ T30] #2: ffff88802ba9f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 463.460156][ T30] #3: ffff88802ba9c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 463.471131][ T30] #4: ffff88802bb24e60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 463.483066][ T30] 3 locks held by syz.2.969/8497: [ 463.488191][ T30] #0: ffff888079c14b70 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 463.497976][ T30] #1: ffff888054e1c450 (sb_writers#20){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 463.507486][ T30] #2: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x278/0x570 [ 463.525886][ T30] 2 locks held by syz-executor/8701: [ 463.531508][ T30] #0: ffff88802e95c0d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.543191][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.553872][ T30] 2 locks held by syz-executor/9000: [ 463.559205][ T30] #0: ffff8880563f20d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.570850][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.581039][ T30] 2 locks held by syz-executor/9169: [ 463.586451][ T30] #0: ffff88807c71a0d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.598855][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.608820][ T30] 2 locks held by syz-executor/9225: [ 463.614369][ T30] #0: ffff8880264320d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.630147][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.651924][ T30] 2 locks held by syz-executor/9334: [ 463.657296][ T30] #0: ffff88803707e0d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.668091][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.678037][ T30] 2 locks held by syz-executor/9398: [ 463.684490][ T30] #0: ffff888077cb40d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.695137][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.707649][ T30] 2 locks held by syz-executor/9471: [ 463.717052][ T30] #0: ffff8880268700d8 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 463.733400][ T30] #1: ffffffff8f0724c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 463.743419][ T30] 1 lock held by syz-executor/9666: [ 463.748709][ T30] #0: ffff88809c820ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.763856][ T30] 1 lock held by syz.0.1360/9949: [ 463.768984][ T30] #0: ffff88807ac640d8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 463.779284][ T30] 1 lock held by syz.9.1381/10014: [ 463.784978][ T30] #0: ffff88807ac640d8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 463.795564][ T5605] Bluetooth: hci7: command 0x0406 tx timeout [ 463.812165][ T30] 1 lock held by syz.8.1413/10165: [ 463.817369][ T30] #0: ffff88807ac640d8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 463.833842][ T30] 1 lock held by syz.3.1439/10282: [ 463.839292][ T30] #0: ffff88807ac640d8 (&type->s_umount_key#84){++++}-{4:4}, at: super_lock+0x320/0x3f0 [ 463.849483][ T30] 2 locks held by syz-executor/10440: [ 463.855211][ T30] #0: ffff8880404c8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.866331][ T30] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 463.887080][ T30] 1 lock held by syz.2.1488/10532: [ 463.892509][ T30] #0: ffff8880a7000ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.902425][ T30] 1 lock held by syz.7.1489/10519: [ 463.907568][ T30] #0: ffff8880a7218ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.918313][ T30] 2 locks held by syz.5.1491/10530: [ 463.932043][ T30] #0: ffff88809967cea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 463.942047][ T30] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 464.001969][ T30] [ 464.008441][ T30] ============================================= [ 464.008441][ T30] [ 464.042252][ T30] NMI backtrace for cpu 0 [ 464.042285][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.042300][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 464.042307][ T30] Call Trace: [ 464.042312][ T30] [ 464.042318][ T30] dump_stack_lvl+0x100/0x190 [ 464.042348][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 464.042365][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.042385][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 464.042403][ T30] sys_info+0x141/0x190 [ 464.042413][ T30] watchdog+0xcb1/0x1030 [ 464.042433][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 464.042450][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.042464][ T30] ? __kthread_parkme+0x18c/0x230 [ 464.042484][ T30] ? kthread+0x13a/0x450 [ 464.042495][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.042507][ T30] kthread+0x370/0x450 [ 464.042518][ T30] ? __pfx_kthread+0x10/0x10 [ 464.042530][ T30] ret_from_fork+0x72b/0xd50 [ 464.042550][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 464.042574][ T30] ? __switch_to+0x800/0x10f0 [ 464.042588][ T30] ? __pfx_kthread+0x10/0x10 [ 464.042599][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.042623][ T30] [ 464.456581][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 464.463480][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 464.472579][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 464.482618][ T30] Call Trace: [ 464.486296][ T30] [ 464.489212][ T30] dump_stack_lvl+0x100/0x190 [ 464.494050][ T30] vpanic+0x552/0x970 [ 464.498014][ T30] ? __pfx_vpanic+0x10/0x10 [ 464.502490][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 464.508642][ T30] panic+0xd1/0xe0 [ 464.512335][ T30] ? __pfx_panic+0x10/0x10 [ 464.516730][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 464.522946][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 464.529113][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 464.535261][ T30] ? watchdog.cold+0x1ec/0x234 [ 464.540006][ T30] ? watchdog+0xcc1/0x1030 [ 464.544407][ T30] watchdog.cold+0x1fd/0x234 [ 464.548985][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 464.554768][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.559427][ T30] ? __kthread_parkme+0x18c/0x230 [ 464.564477][ T30] ? kthread+0x13a/0x450 [ 464.568728][ T30] ? __pfx_watchdog+0x10/0x10 [ 464.573381][ T30] kthread+0x370/0x450 [ 464.577433][ T30] ? __pfx_kthread+0x10/0x10 [ 464.582002][ T30] ret_from_fork+0x72b/0xd50 [ 464.586580][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 464.591669][ T30] ? __switch_to+0x800/0x10f0 [ 464.596321][ T30] ? __pfx_kthread+0x10/0x10 [ 464.600887][ T30] ret_from_fork_asm+0x1a/0x30 [ 464.605638][ T30] [ 464.608711][ T30] Kernel Offset: disabled [ 464.613021][ T30] Rebooting in 86400 seconds..