last executing test programs: 3m13.785472483s ago: executing program 3 (id=27): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = fanotify_init(0x8, 0x80000) fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async, rerun: 32) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) fanotify_init(0x18, 0x0) 3m12.572554252s ago: executing program 3 (id=31): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)="00f2c2aab0d70735ac1b63998dd5ac15aade4f5a264d741e3af6fc55b98f7c42a5d2336c0f4b8432866b9977bc2d5cf2f74ecc4cfc193ec49008b7bc68f621bcfc7425b35ff4786d5f3c7434fd7b52e7f0dede1c9dc8df8e5f7d83d0e80af7", 0x5f}], 0x1}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') setsockopt(0xffffffffffffffff, 0x3, 0x1, &(0x7f00000000c0)="e9b61b6255d2c0ad5bc8bf19059fbb0291d80a", 0x13) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000040)='trans=rdma,') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800124000000000050015001f0000000500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 3m12.24160025s ago: executing program 3 (id=33): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x0, 0x5, 0xfc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x64, 0x3, 0x7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4d085}, 0x24000084) 3m11.27304805s ago: executing program 3 (id=34): io_uring_setup(0x664c, &(0x7f0000000480)={0x0, 0x202, 0x1880, 0x5}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) r3 = syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0x35a, 0x0, 0x20000002, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4044000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="9f00742f", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x14) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f7, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="e6646240d894eba2c031eaca27aa077b9d0ba5fd87a8e25b22fe3085cf02c3fb4659ae6f69", 0x25}], 0x1) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)) pidfd_send_signal(0xffffffffffffffff, 0x3c, &(0x7f0000000280)={0x16, 0xf, 0x1e}, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x3}, 0x10) 3m8.465370099s ago: executing program 3 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001300)={@val={0x800e}, @void, @eth={@local, @local, @val={@val={0x88a8, 0x0, 0x1, 0x3}, {0x86dd, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x68, 0x6000, 0xe, 0x2f, 0x0, @remote, @private=0xa010100}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x4, 0x3, 0x0, 0x1, 0x1, 0x9}, 0x1, {0x46}}}, {0x8, 0x22eb, 0x6, {{0x4, 0x2, 0x9, 0x1, 0x1, 0x0, 0x2, 0x29}, 0x2, {0x4, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x72) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x100) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2, 0x1) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000683afffe8000000000000000000000000000aaff020000000000000000000000000001860090780000040000000000000000000309bd3e6d4706598080a8030037ffffff0100000024732472eefa45ad96000000008e254c1e4a8a8b3f0ab0c430d3be27df3e34116d42ca0a5c15b37adac15084dbaf736b41e5af0302000100000005000000002600040070195bf648a1e0ad2958ab8eccb9435afdab4f66a4b26fae8862f821fb201668f0fa48"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={@loopback, 0x1, 0x0, 0xa0, 0x0, [{@broadcast}, {@broadcast}, {@multicast2}, {@initdev}, {@multicast1}, {}, {@dev}, {@empty}, {@broadcast}, {@dev}]}}) unlink(&(0x7f0000000040)='./file0\x00') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x1) 3m7.137717061s ago: executing program 3 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000040000001500000014002b80080001000100000005000200a100000008002a00050000000c0006000100000001000000cae93fa8d25b2560a5a5c47dced6d3bed3c15fb5fed10f35f8be751ee8cd95f4e1912c"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m51.725060903s ago: executing program 32 (id=48): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000040000001500000014002b80080001000100000005000200a100000008002a00050000000c0006000100000001000000cae93fa8d25b2560a5a5c47dced6d3bed3c15fb5fed10f35f8be751ee8cd95f4e1912c"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r2, 0x0, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00000800", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m45.525589628s ago: executing program 4 (id=214): syz_io_uring_setup(0x4455, &(0x7f0000000100)={0x0, 0xf289, 0x100, 0x3, 0x280}, &(0x7f0000000000), &(0x7f0000000080)) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001740)="88b9", 0x2}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844) 1m42.615332093s ago: executing program 4 (id=220): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000d6000000000000809500007b000000002a120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x92, &(0x7f0000000240)=""/146}, 0x94) socket$netlink(0x10, 0x3, 0x14) 1m41.555052409s ago: executing program 4 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = syz_usb_connect(0x3, 0x3f, &(0x7f00000003c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03feffffffffffffff0000000905e902000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r3 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0) io_uring_enter(r3, 0x48e9, 0x0, 0x2, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setresuid(0xee00, 0xee00, 0x0) fchmod(r5, 0x1ea) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0xd8, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) ioctl$FS_IOC_GETVERSION(r6, 0xc0105b08, &(0x7f0000000040)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000000200)=ANY=[@ANYBLOB="18dfa800000000000000000000000000be1aae3185a59df5b38b239fd6b2fa2fcd3e5cda23a7c2030f5df2cd5b17faadfb69c2239065f1c50af7f97983975d3b4eed1965ceda0525bbde9c1ed178320db1d882cfaacdecd6493f8467c8da5055bec017468d4ff7d70ebd74743329a556edfd074d2f0798d267136549912a51bdc344c4974e4194634af3c666ebf6308d4b4c7203ff301a6423671c0fcf9373a3723c6c3d84d809d4f35e719a2f401be7b4f7bee70f18181e3be67aa2a299bbf342dd9031d5af64468c8f8df97c5bcc0927ede0481ee4900d4e28a73e585c955b7be5fca83d4243a4f8fc1800"/246, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0401273, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r10, 0x25, 0x0, @val=@perf_event}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd6dee05607d170194bd7b1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0eceb155f0"], 0x0) 1m39.07691228s ago: executing program 4 (id=228): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) readv(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)=""/109, 0x6d}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') close(r1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)='6', 0x1}], 0x1) 1m37.937045476s ago: executing program 4 (id=232): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040203, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0xfffffffd, 0x1, 0x40, 0x3ffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x2}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setscheduler(r3, 0x6, &(0x7f00000000c0)=0x80000001) 1m37.205408739s ago: executing program 4 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b7000000010003c3bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff0000000065040200000000ff2d400500000000003400000001ed00007b030000000000001d440000000000007a0a00fe00ffffffdb280000a1000000b5000000000000009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e51815548000000000000000275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cc00eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2400000000000000800643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a974242aabfc8adbadc9ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10e98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad8018bbe4424edc6d9b0e61b404bb7a2d4883bbc200de8332029cbc04a0bc52"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2d, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000380)="2cbdc3de7f3f43ed1f53d3aab6d84c30efbba32635915a29154ab164461b31d6e887d99dcbe1e5e2153c15e69daac829cbcbddfbc6830cb75d4481fe0944a886cb57e86ebf5a62eeb665c834d02061b77e41f5f97a638d41bd154f70279ce0a09f1d3dd823cb236ab7386d9fb3354a68a8cb39f88cf59da6b353bfdb6fbf636345c708bf1b057e18b7a3013bc606a37c1daaaf004764a79b2256240cd4a87e47b72500"/176, 0xb0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000280)=0x44, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRESDEC=r8, @ANYRESOCT=r7, @ANYRESHEX=r1, @ANYRESDEC=r9, @ANYRES32=r5], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000040) 1m36.300997915s ago: executing program 33 (id=236): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2d, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000380)="2cbdc3de7f3f43ed1f53d3aab6d84c30efbba32635915a29154ab164461b31d6e887d99dcbe1e5e2153c15e69daac829cbcbddfbc6830cb75d4481fe0944a886cb57e86ebf5a62eeb665c834d02061b77e41f5f97a638d41bd154f70279ce0a09f1d3dd823cb236ab7386d9fb3354a68a8cb39f88cf59da6b353bfdb6fbf636345c708bf1b057e18b7a3013bc606a37c1daaaf004764a79b2256240cd4a87e47b72500"/176, 0xb0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f0000000280)=0x44, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/rt_acct\x00') r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16=r7, @ANYRESDEC=r8, @ANYRESOCT=r7, @ANYRESHEX=r1, @ANYRESDEC=r9, @ANYRES32=r5], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000040) 12.129257814s ago: executing program 0 (id=499): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000300)=0x49fc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x5d67, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x89cf, 0x7, 0x400, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x200000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c00118e8596390400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01980000000000002c0012800b000100697036746e6c00001c00028008000700ffffffff0500060003000000080008003d000000"], 0x4c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64-neon\x00'}, 0x58) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000006480)) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200000000000000000010006c0003000000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 11.925504934s ago: executing program 2 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000040), &(0x7f0000000380)='%-010d \x00'}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x18) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x99089e3cb07bf0d3}) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 9.953672828s ago: executing program 6 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './bus/../file0'}}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x2, 0x0, 0x2000000}, &(0x7f0000000240), 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 9.834011774s ago: executing program 1 (id=508): r0 = socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket(0x2, 0x80805, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xd789, 0x1000, 0x7fa, 0x10001}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) (rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_SHUTDOWN) (async) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0xfff9, 0x1, 0xa, 0x7}, 'syz1\x00', 0x46}) (async, rerun: 32) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) (rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000340)={{0xff, 0x9, 0x0, 0xc}, 'syz0\x00', 0x10}) ioctl$UI_DEV_CREATE(r7, 0x5501) (async) ioctl$UI_GET_SYSNAME(r7, 0x8040552c, 0xfffffffffffffffc) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) openat$kvm(0x0, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f00000001c0)={0x2, 0x8}) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x120c000, 0x800, 0x0, 0x3}, 0x20) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8.835426994s ago: executing program 2 (id=510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000084c0e3d47adcf716d5e0000606e4d8344d5bf6c142e0f82b924da57962f518f79bf21dbda266d3e2ce7ef796b3599375cc9064c6fe94059bbf24eee64566a95b9248976c61b4195e48c3234d1d0ed2553464c5e227c8939876f32c04cb59bd32db6a31d9cc83281a478ca7d8e546b3864289c7d1b80209124fa605d7b5789b320fba66e310a5c25361c820e0026e145f28c87f390ab4cf472897924d3b8245e50", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r3, r2}, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRES64=r4, @ANYRES32=r6, @ANYRES32=r0, @ANYRESHEX=r2], 0xc0}, 0x1, 0x0, 0x0, 0x28004800}, 0xc0) connect$unix(r0, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x10, 0x5, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002ac0)=@newtaction={0x88c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x101, 0x1000, 0x800, 0x5ff, 0xfff, 0x7fff, 0x3a9a, 0xffb, 0x9, 0x6, 0x2, 0x8001, 0xdc, 0x1, 0x7ff, 0x4, 0x3, 0xd242, 0x0, 0x114e, 0x80000000, 0x6, 0x0, 0x3, 0xff, 0x7ff, 0xfffffffb, 0x80002000, 0x6177d997, 0xb63b8771, 0x1, 0xc, 0x7c4, 0x123a9273, 0x4, 0xff, 0x5, 0x100, 0x9, 0x5, 0x1000006, 0x4, 0x0, 0x4, 0x0, 0x9, 0x7ff, 0x3, 0x1, 0x7, 0x7, 0x10, 0xe, 0x7, 0xffffffff, 0xc, 0xf74d, 0x8, 0x3a, 0x401, 0x5, 0x1, 0x7ff, 0x3, 0x9, 0xc, 0x3ff, 0x4139df5d, 0x1, 0xfffffff7, 0x1, 0x2, 0xfffffffd, 0x0, 0x8000, 0x0, 0x2, 0x100, 0x66, 0x3, 0x6, 0x2, 0x200, 0x9, 0x76, 0x4, 0xfffffff8, 0x4, 0x9, 0xfffffffe, 0x0, 0x101, 0x9, 0x9, 0x2, 0x2, 0x4, 0xff, 0x0, 0x1, 0x800, 0x2bc, 0xffff, 0x7fff, 0x3b0a, 0x2, 0x0, 0x3, 0x200, 0x2, 0x9, 0x6, 0x9, 0x4, 0xc34d, 0x80000000, 0x50, 0x8, 0x3, 0x7, 0x6, 0x4, 0x2, 0x3, 0xe256, 0xa0000000, 0xb, 0x7, 0x3, 0x5, 0x7, 0x5, 0x6, 0x6, 0x200, 0x7, 0xffffffff, 0x2, 0x5, 0x6a9, 0xc, 0x8000, 0x8, 0x5, 0x2, 0x7ff, 0x5, 0x6, 0xaa, 0x8, 0x8, 0x8, 0x4, 0x9, 0x1b9b, 0x75, 0x7, 0x40, 0x400, 0x4, 0x29, 0x8, 0x10000, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x6, 0x3, 0x7, 0x5, 0x2, 0x5, 0x9, 0x1, 0x0, 0x7, 0x5, 0x7, 0x0, 0x80000001, 0x9, 0x2, 0xfff, 0x5e, 0x7fff, 0x6, 0xa159, 0x4, 0x1, 0x7, 0x4, 0x2, 0x8, 0x80, 0xfffffffc, 0x9e, 0x61aa91f9, 0x2, 0x81, 0xffff21e7, 0x4, 0x1ff, 0x9, 0x5, 0x3, 0x10001, 0xfffffffd, 0x6d1, 0x8, 0x1, 0x957a, 0x3, 0x7, 0x8, 0xfffffffb, 0x8, 0x1, 0xffff, 0x6, 0xfa9, 0x8, 0x10000, 0x2, 0x5635, 0x3ff, 0x3, 0x7f, 0xedc, 0x8, 0x81, 0xd, 0xea1, 0xbef, 0x9, 0x3, 0xffff0000, 0x4, 0x6, 0x8000003, 0xffffffff, 0x210f993b, 0x5, 0x7, 0x7, 0x6, 0x9, 0x2e6, 0xb, 0x0, 0x6, 0xffffffff, 0x3, 0x8, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8, 0xe7, 0x4, 0x0, 0x2, 0x8, 0x9, 0x49, 0x1, 0x0, 0x10001, 0x1, 0x0, 0x0, 0x9, 0xf, 0x45, 0x2, 0x7, 0x1, 0x8000, 0x40, 0x8, 0x6e3, 0x0, 0x39cc, 0x5, 0x46c, 0x2, 0x2, 0x5, 0x2, 0x4, 0x8, 0x2, 0x10001, 0xcd, 0x80000400, 0x24, 0x5b, 0x4, 0x3, 0x99, 0x5, 0x6, 0x10, 0x2, 0x8000, 0x9b3e, 0x5, 0x5, 0x0, 0x7, 0x4, 0x9, 0x1, 0x0, 0x0, 0x3, 0x2, 0x0, 0x7, 0x3, 0xff, 0x7, 0x6, 0xc4ef, 0x5c56, 0x6, 0xf121, 0x1, 0xfffffffd, 0x4, 0x7fff, 0x9, 0x8, 0xff, 0x80, 0x7, 0xd07d, 0x16000, 0x198d, 0x1, 0x80, 0x1000, 0x47, 0x1, 0x9, 0x55ffe052, 0x100, 0x7, 0x7, 0x4, 0x1, 0x40000000, 0x4, 0x10000, 0x6, 0x0, 0x7, 0x3, 0xffffffff, 0x3, 0xab, 0x78a2cea1, 0x9, 0x4, 0x0, 0x2ec0000, 0x0, 0x0, 0x6, 0x8, 0x401, 0x1, 0x9, 0x4, 0x2, 0x5, 0x48, 0xfffffb0f, 0x0, 0x1, 0xa, 0x3, 0x8, 0x8, 0x4, 0x42, 0x7, 0x9, 0x2, 0x0, 0x3, 0x6, 0x8, 0x4, 0x80000001, 0x3, 0x80, 0x400, 0x2, 0xfffffff2, 0x5, 0x8, 0x81, 0xfffffde0, 0x8, 0x4, 0x4, 0x4, 0x3, 0x2, 0xffffffff, 0x9, 0xfffffffe, 0x10001, 0x2, 0xfff, 0x4, 0x0, 0xf, 0x6, 0x8, 0x4, 0x2, 0x8, 0x1, 0xfff, 0x8, 0x23fea2d4, 0xfff, 0x3ff, 0xff, 0x0, 0x3, 0x0, 0x10001, 0x0, 0xffff, 0xfffffff8, 0x1, 0xc36, 0x7, 0x29, 0x100, 0x2, 0x5c6c, 0x5, 0x8, 0x8, 0x0, 0x59d2, 0x80, 0xd72, 0xc2b8, 0x6, 0x10000, 0x238, 0x10b0, 0x8, 0xbda3, 0x40, 0x8, 0x5, 0x3, 0x6, 0x0, 0x0, 0x9, 0x6, 0xe6, 0x7, 0x7, 0x3, 0x401, 0x1d080096, 0x4, 0x9, 0x80, 0x4c02, 0x8000, 0x0, 0xff, 0x6, 0xfff, 0x9, 0x132, 0x3d, 0x10, 0x2000b93, 0xffffffff, 0x1, 0x2, 0x8, 0x8, 0x100, 0x1, 0x0, 0x7, 0x2, 0xfffffffb, 0x3, 0x9, 0x1, 0x7, 0xf, 0x3, 0xfffffff8, 0x7, 0xa6c, 0x3, 0x7fff, 0x7, 0x40]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x1, 0x4, 0x7, 0x1, {0x5, 0x3, 0x1, 0x4, 0xa, 0x10001}, {0xf, 0x0, 0x52f6, 0x9f20, 0x6, 0x5}, 0x1f4, 0x4, 0x6155}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x44090}, 0x400c810) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x50, 0x183000, 0x12345}) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000001c0)) r11 = syz_open_procfs(0x0, &(0x7f0000000480)='numa_maps\x00') read$FUSE(r11, &(0x7f00000023c0)={0x2020}, 0x2020) preadv(r11, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0) read$FUSE(r11, &(0x7f0000004400)={0x2020}, 0x2020) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac1414aa000490781200183f2500000000000000000100007f0000017f00001100186371ae9b1c03"], 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000340)="0683db4291743247", 0x8}, {&(0x7f0000000540)="3a7df4271d810bbfe75ff3c934b36ea9bbdaf502b38bd77110c02d4e8f49a80754d2fe7eb408faf818cf7118e019d680b341fe9e31783db61ad45b153e768f935fe50fc844af0b", 0x47}], 0x2}, 0x20004000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) io_uring_enter(r7, 0x47f6, 0x40, 0x2, 0x0, 0x0) 8.671322523s ago: executing program 6 (id=511): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x232) 8.306017287s ago: executing program 1 (id=513): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000c2a000/0x1000)=nil, &(0x7f0000013000/0x4000)=nil, 0x1000, 0x3}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x701, 0x3, 0x250, 0x100, 0xb, 0x108, 0x0, 0x0, 0x1b8, 0x1c8, 0x1c8, 0x1b8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'veth1_to_batadv\x00', '\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x7, 0x2, 0x2, 0x0, 0x0, 0x2], 0x6, 0x3}, {0xffffffffffffffff, [0x0, 0x4, 0x1, 0x4, 0x4, 0x4], 0x6, 0x4}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'ip6erspan0\x00', {}, {0xff}, 0x2e}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x3, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7f, 0x0, 0x5, 0x1, 0x9}, 0xb, 0x0, 0x80008, 0x5, 0x8, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x102, 0x2, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c060}, 0x4008000) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r14 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r14, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f000062f000/0x1000)=nil, 0x0, 0x0, 0x0, 0xc, 0x0, 0x60, 0x0, 0x36}) 8.28701148s ago: executing program 6 (id=514): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x78, 0x0, 0x2, {0x200000000000000, 0x401fd, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7, 0x522, 0xa000, 0x400000, 0x0, 0x0, 0x1000000, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x48, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100004e4aa92082053300578e01020301090236000200000000090400f50003ed02000905030000000000000904", @ANYRES16], 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fd"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xd}, 0x94) accept4(r0, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000040)=0x80, 0x0) close_range(r0, r0, 0x0) 8.036653665s ago: executing program 0 (id=516): mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x50, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000380)={0x20080522}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) read$msr(r3, &(0x7f0000000280)=""/44, 0x2c) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xfb, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) munlockall() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xe, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044) 6.763261267s ago: executing program 0 (id=518): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x80) r0 = getpid() socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x805, 0x3) getsockopt(r4, 0x114, 0x271d, 0x0, &(0x7f00000000c0)) pipe2$watch_queue(0x0, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc491"], 0x1c}}, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f00000000c0)={0x0, @multicast}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x72397000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 5.261471818s ago: executing program 5 (id=519): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e50002"], 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32, @ANYBLOB="0000000000000000c30000000001000095"], 0x0, 0x8}, 0x94) r2 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r5, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r2, 0x5d62, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000f0000000c000680040002060000000000000000000001000000000008000100000000000800020000009200080001000000000008001845000000000c0003800800030000080000"], 0x58}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', r7, &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', 0x24) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/tcp6\x00') preadv(r8, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}], 0x1, 0x0, 0x0) listen(r0, 0x25da) 5.260753292s ago: executing program 0 (id=520): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket(0x18, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45e3f364e554", 'sit0\x00'}}, 0x1e) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) (async) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0x15}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0xffffffffffffffa1, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) 5.15766328s ago: executing program 1 (id=521): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './bus/../file0'}}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x2, 0x0, 0x2000000}, &(0x7f0000000240), 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 4.902137258s ago: executing program 6 (id=522): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0xfffffffffffffd3a, 0x0, 0x0, &(0x7f0000002bc0)=""/4082, 0x1020}, 0x80181}], 0x400000000000039, 0x10000, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=@migrate={0xec, 0x21, 0x1, 0x70bd26, 0x25dfdbfc, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3d}, @in=@private=0xa010100, 0x4e23, 0x3, 0x4e22, 0x8, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x1}, [@migrate={0x9c, 0x11, [{@in6=@empty, @in6=@private1, @in=@broadcast, @in=@loopback, 0x3c, 0x3, 0x0, 0x3507, 0x2, 0xa}, {@in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0xff, 0x4, 0x0, 0x3506, 0x2, 0x2}]}]}, 0xec}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a857000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x5]}, 0x0, 0x8) 4.843186496s ago: executing program 1 (id=523): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xc1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x80) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xfb7f000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = syz_open_dev$video4linux(&(0x7f0000001140), 0x7, 0x101081) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r5, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x300f, 0x2, 0x8d54, 0xfffeffff, 0x0, 0x1}) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc, 0x2) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x50, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x22}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000011}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r9 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x100000]}}) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r10, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$sock_int(r10, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000051118010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) close_range(r11, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8, @ANYBLOB="05", @ANYRES32=r6, @ANYRES64=r8, @ANYRES16=r7], 0x0) 4.842819713s ago: executing program 5 (id=524): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x232) 4.841893394s ago: executing program 2 (id=525): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) unshare(0x24060400) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x7ffffffe, 0x0, 0x0, 0xfffffffffffffff7, 0x6}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000305010000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0122000000000000240012800800014067726500180002800400120008000700e00000010800040065c466d4"], 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0xc0b0) 4.51359829s ago: executing program 5 (id=526): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f, {}, {}, @raw32={[0x2600]}}], 0xffc8) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1]], '\x00', [{0x0, 0x1, 0x1}, {0x7, 0x4}, {}, {0x0, 0x1}, {0x400000}, {}, {}, {}, {0x0, 0x9}, {}, {0x8}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4.35806812s ago: executing program 0 (id=527): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2a, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) syz_emit_ethernet(0x3a, &(0x7f0000000ac0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x5, 0x4) sendmsg$tipc(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x10) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018120000", @ANYRES32=r7, @ANYBLOB="00000000000000006608ffffffff0000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb70200009f000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd9, &(0x7f0000000340)=""/217}, 0x94) 3.92569624s ago: executing program 2 (id=528): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffff1}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/mdstat\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000040)=""/17, 0x11}], 0x1, 0x10000, 0x0) read$msr(r3, &(0x7f0000000180)=""/92, 0x5c) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000000)=[0x9, 0x4], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(r5, r5, 0x0) connect$unix(r4, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:.:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0x1e, 0x4, 0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) 2.725197395s ago: executing program 0 (id=529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'wg1\x00', 0x600}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev, @remote, 0x1, @default}, &(0x7f0000000140)=0x1c, 0x80800) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000340)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) mmap(&(0x7f000026f000/0x1000)=nil, 0x1000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x208000) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000900020073797a320000000005000100070000000500050001000000050004000000000011000300686173683a69702c6d61726b0000000044529af815d0680bf81e1b93cde2fd6f56bd1386a6ffd6296d5f7b93084d9b2dde92183cea3eedec222ce9d1e1033efa8d88fca383cf7cddf48d68f5d654a41d8f669d32e90285f42738c54dbc601d2bdb47c254258fbc7c8fe252e36e3aa0749d2e4e09b80c86fe7bac6b3724f569a9621b12db43bebf4ec15cdb7fccc53b2e48fc8d6db755b94960cb5a719c0a"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8800) 2.653357972s ago: executing program 5 (id=530): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0xe0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200008cbd5cc3c3ecc7d7f6065c18627efa0c2f0b78c273c40a38000000090a010400000000000000000a00000409000100736c8c05797a3100000000080005400000000208000c40002d00010000000000000000000c00000a000000000000000000000000000000e62f2305cecc62dfb0f38a35c2eb0c1e99ea7d535d65316fa72771e8c2c616ee7ddc87e18d0feba938df3ec5723577eda63899a001936e5158751f957d9e14b097795abc30e1d6772309d4550907a7ea02f6d0e2dc08"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40008c0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000d0a010300000000000000000a0000020900020073797a3000005c00c3697babb4c69a50c7a990ad4817e5d128ce24950cd60c883ef704301146589822d0ef8f01b8b662209c7647a4afaa5bcd69344256461f0d5388949cd78c1a3a7467ddd492580a9f1ffc16833b9b0397000e19d5026f0625dbded52b148e13527b49c81a280b8d65d7"], 0x20}, 0x1, 0x0, 0x0, 0x20004940}, 0x44005) ftruncate(0xffffffffffffffff, 0x6eb6) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000540)=""/19, 0x1024000, 0x1000, 0x304}, 0x20) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLOPEN(r9, &(0x7f0000000140)={0x18, 0xd, 0x1, {{0x80, 0x3, 0x3}, 0x7}}, 0x18) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$snapshot(0xffffffffffffff9c, 0x0, 0x40000, 0x19) 2.647029405s ago: executing program 1 (id=531): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2a, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.472279296s ago: executing program 2 (id=532): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/comedi4\x00', 0x100400, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000001140)={0x0, 0x20, 0x10, 0x3, 0xffffffff, 0x3ff, 0x2, 0x1ff, 0x100, 0xa, 0x10, 0xffffffff, &(0x7f00000010c0)=[0x1], 0x1, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e6ffffffffffffffe52d1b298f44ea00"/35], 0x48) 2.368941373s ago: executing program 6 (id=533): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './bus/../file0'}}]}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x2, 0x0, 0x2000000}, &(0x7f0000000240), 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x3, 0x0, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x5422) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) 1.945688232s ago: executing program 2 (id=534): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) unshare(0x28000600) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect$uac1(0x1, 0xe5, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x0, 0x60, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb092, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x0, 0x1, 0x2, 0xff}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x7, 0x3, 0xe8, 0x80, "fca00bd2e43f"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x3}, @as_header={0x7, 0x24, 0x1, 0x2, 0x49, 0x1}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x2, 0xffb0, 0x2, "cabad2a73519"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x3, 0x2, 0x5, {0x7, 0x25, 0x1, 0x83, 0x80, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x1, 0x4, 0xfa, 0xfd, "acb80e"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x1b, "a04c"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x3, 0x0, 0x6, "aaf5", "8f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf9, 0x1, 0x4, 0x0, "8f", "05"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xd, 0x2, 0x90, 0xce, "b8d300889333"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x4, 0x4, 0x7, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0xf, 0x7f, {0x7, 0x25, 0x1, 0x2, 0x8, 0x8}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xff, 0x7, 0x8, 0x20, 0x1}, 0x1f, &(0x7f0000000680)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xd, "c31e83e659e62d5af2a024b5b2a8ccd7"}]}, 0x4, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x822}}, {0x3, &(0x7f0000000740)=@string={0x3, 0x3, "04"}}, {0xd7, &(0x7f0000000780)=@string={0xd7, 0x3, "83ac86a9d07e250a1a810c9ebaaa646bbf95aed9dcda60284528d0df759b563fdb5f10016ded4e2e0fe0f1e16e6131612a0649077a9d3d1ad36f2408a49df560794b12ef9500616c11bf4138f5f47fec5c3b0cd41d924b9cfca0b4fef47fc57d52ce3343bf5cc5841fdf5a67095028ec0aac8c9e2af148b67d9ade3dc34d85dc1794a70e37729d13fbe9ee2ae808a6245388bd06848439809326cfca56732536da4daeea5ae6d7a8f5a6d7c3803cbaf66aac043649942c41cd3c825e757d19cb7f927875a8a7953e1881378a4a474305678dd4b48e"}}]}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f0000000040)) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x49c, &(0x7f00000000c0)={[{0x40, 0x4e00, "201d2b139f0f50174f3555d1cd7ee6a06f8517a9e808e62ef0d4fa27ae61f476d4966234dd5c7a9782dd483e04d36edc8d04195dbc8c8e073be39d5207f5f0dd93f49462443f6bbffe7610db706b75d8a3fd7c61b6a26649c62ea56e4e5b00990328008ba2d37c0a79eba6f7690630a5ced6c29b050d78638c5dfc6ab9e779a31f0fd6890609eb3a75e8f8948e77d6bcd587b38e5d52205bc847a221e133b11f7ad5cb601d28158944607b193b6c9cdab260f7ae46deaf03a3f759e4e5f5a3d5c54107048aa373b87b1dc63478c39aac96"}, {0x39, 0x4e00, "5a0dfc24523445467498353ccd44c1bfb90c460f3a5e92f770cec446cb5e61c19c44145a287b3c403bc252a3a0f5a64e1a49f6b6d29a5507ca"}, {0x79, 0x4e00, "a45310d8b7b83767fe1548f2e143896df124dfbbad9218793442e53740761fa492c404f60ad724ae78b51f27b68bb32615c3d06d4b2e52cc452d0b84a19a41354a23d77a59c091b4a7ac8540bcea2c0471a0b126bf9ab07577a8926ed21ab67350bfa6370e427d8216176b617c945a09dadf93ca9523ff5cca"}, {0xf1, 0x4e00, "2af5c15ff6e1a32e5eb9bc8782a47ea9e719d6d91a24e2c7ffd8d066cbb1f92335b4e23203f084cb646bf7c261c8fd1d1f677d79aa7e78b1b2dfb2aa06f0879006eab2e9d5a491fd1a859e575a8e76cdbda772a23a78317fcca86097f7e458bb63c8b0dd512e0855dab78630ab086e4f7832b1e929722f6a288edddb3e5e912bf0137c595f9221a482546ab030c69346f480b93d8b961d9f1b6cd39e3142493f81c5d006f02709a6c8dc62fbefa7bc23efbace475fefdfe47e4dc12226802fb4bc5fd269728fcbd1d3e4013c0d6457c1b86c48ea332892a8f6e786742a6ce02b6f44ad5aa89854af6fab9d250986e4a6b1"}, {0x1d, 0x4e00, "ce911fc6c01bebd93d0a997466976c21d1d1079cafd13fb51f84e8be58"}, {0x138, 0x4e00, "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"}, {0xa7, 0x4e00, "cab4ee8882517c6a8c73490860ba8dfce47824d0aa62adecb268459d6c28ebcc6346b95d3e5dbf59c2eae0ca10f4fcce660bb0699860698c15562a6d29a4ed825d4afd044a43ddad2426f8f23f987ce043a165f130ae373705b850249d4ccabb56e15060b933e23080f82232574c1a1a6dafe2a92718042cb43b1b1e1d6d4dd98e94e602719cf5e6bc14c1797fce22cec24526c9d5cec1964c1c46e162d8f90dad8375be9c613c"}]}) 1.816020529s ago: executing program 6 (id=535): process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0xfffffffffffffccd}], 0x286, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x33d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000900)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022050000000000000024"], 0x0}, 0x0) 349.854131ms ago: executing program 5 (id=536): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x232) 135.727247ms ago: executing program 1 (id=537): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f0000000600)='\x00', 0x1}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000700000002"], 0x50) (async) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[], 0xa8) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) (async) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64) r4 = socket$inet6(0xa, 0x80002, 0x0) (rerun: 64) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000200)=0x1f, 0xb) (async) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file1\x00') (async) write$binfmt_elf32(r2, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x1378) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) (async, rerun: 32) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) (rerun: 32) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) 0s ago: executing program 5 (id=538): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000700)={0x233, 0x7d, 0x0, {{0x500, 0xf2, 0x500, 0x5000000, {}, 0x56080000, 0x0, 0x0, 0x0, 0x20, 'vfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00Y\x15j\\\xe0\x99\xac\x81\xe0', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3\xff\xff\xff\xff\xff\xff\xff\xf8\xb4\xf1t\xa6f\xa8R\xb9\xd1biG8cW\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00H\x05!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x233) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/48}, 0x40) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@smackfsdef={'smackfsdef', 0x3d, '#%'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fowner_lt}]}}) bind$bt_hci(r5, &(0x7f0000000040), 0x6) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x6, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x5, 0x6}) dup3(r5, r4, 0x80000) kernel console output (not intermixed with test programs): e_1) entered disabled state [ 111.018506][ T36] bridge_slave_0: left allmulticast mode [ 111.058385][ T36] bridge_slave_0: left promiscuous mode [ 111.058673][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.110209][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17'. [ 111.301025][ T6028] fuse: Unknown parameter 'groupÈ“d' [ 112.060023][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 112.071091][ T5157] Bluetooth: hci0: command tx timeout [ 112.798559][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.824539][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.836306][ T36] bond0 (unregistering): Released all slaves [ 112.861335][ T6010] netlink: 'syz.3.15': attribute type 9 has an invalid length. [ 112.923492][ T6020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17'. [ 112.974369][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 113.364617][ T6055] random: crng reseeded on system resumption [ 113.783285][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.176678][ T5157] Bluetooth: hci0: command tx timeout [ 114.182396][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 114.238778][ T24] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54 [ 114.258477][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.303663][ T24] usb 3-1: Product: syz [ 114.350830][ T24] usb 3-1: Manufacturer: syz [ 114.439968][ T24] usb 3-1: SerialNumber: syz [ 114.491808][ T24] usb 3-1: config 0 descriptor?? [ 114.559444][ T24] usb 3-1: invalid MIDI EP [ 114.664579][ T24] usb 3-1: snd-bcd2000: error during probing [ 114.699685][ T24] snd-bcd2000 3-1:0.0: probe with driver snd-bcd2000 failed with error -22 [ 114.783208][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.884981][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.937679][ T6074] XFS (nullb0): Invalid superblock magic number [ 114.962558][ T5824] usb 3-1: USB disconnect, device number 3 [ 115.402431][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.496089][ T6093] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 115.573868][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 115.595963][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 115.618853][ T6094] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 115.633647][ T24] usb 1-1: config 7 has an invalid interface number: 111 but max is 0 [ 115.669378][ T24] usb 1-1: config 7 has no interface number 0 [ 115.674333][ T6094] Zero length message leads to an empty skb [ 115.687922][ T24] usb 1-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 115.709308][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.750953][ T24] usb 1-1: Product: syz [ 115.758830][ T24] usb 1-1: Manufacturer: syz [ 115.774396][ T24] usb 1-1: SerialNumber: syz [ 115.819778][ T36] hsr_slave_0: left promiscuous mode [ 115.886916][ T36] hsr_slave_1: left promiscuous mode [ 115.895154][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.911482][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.918446][ T5957] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.944377][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.951944][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.046310][ T36] veth1_macvtap: left promiscuous mode [ 116.091147][ T36] veth0_macvtap: left promiscuous mode [ 116.107177][ T5957] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 116.112434][ T36] veth1_vlan: left promiscuous mode [ 116.143660][ T36] veth0_vlan: left promiscuous mode [ 116.149033][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 116.178761][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.222552][ T5157] Bluetooth: hci0: command tx timeout [ 116.234508][ T24] usb 1-1: bad CDC descriptors [ 116.862652][ T24] usb 1-1: USB disconnect, device number 2 [ 116.869429][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 116.929126][ T6116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.33'. [ 116.929527][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.997973][ T5957] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.025617][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.069472][ T5957] usb 3-1: config 0 descriptor?? [ 117.095920][ T6100] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.971503][ T5957] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 118.004594][ T5957] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 118.012406][ T5957] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 118.020026][ T5957] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 118.027768][ T5957] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 118.035701][ T5957] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 118.061237][ T5957] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 118.140677][ T6126] loop6: detected capacity change from 0 to 7 [ 118.164154][ T6126] Dev loop6: unable to read RDB block 7 [ 118.184518][ T6126] loop6: AHDI p1 p2 p3 [ 118.200582][ T6126] loop6: partition table partially beyond EOD, truncated [ 118.211363][ T6126] loop6: p1 start 1405162169 is beyond EOD, truncated [ 118.232973][ T6126] loop6: p2 size 46 extends beyond EOD, truncated [ 118.250088][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.263087][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.277199][ T43] usb 3-1: USB disconnect, device number 4 [ 118.302873][ T5157] Bluetooth: hci0: command tx timeout [ 118.427257][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 118.850153][ T36] team0 (unregistering): Port device team_slave_1 removed [ 118.897912][ T6140] mmap: syz.0.39 (6140) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.990116][ T36] team0 (unregistering): Port device team_slave_0 removed [ 119.512753][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.695792][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 119.720335][ T24] usb 3-1: config 0 has an invalid interface number: 25 but max is 0 [ 119.770759][ T24] usb 3-1: config 0 has no interface number 0 [ 119.795926][ T24] usb 3-1: config 0 interface 25 has no altsetting 0 [ 119.816733][ T24] usb 3-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=1d.e8 [ 119.862780][ T5994] chnl_net:caif_netlink_parms(): no params data found [ 119.891907][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.946851][ T24] usb 3-1: config 0 descriptor?? [ 120.013609][ T24] usb 3-1: can't set first interface for hiFace device. [ 120.053829][ T24] snd-usb-hiface 3-1:0.25: probe with driver snd-usb-hiface failed with error -5 [ 120.088883][ T6162] syz.3.44 uses obsolete (PF_INET,SOCK_PACKET) [ 120.136228][ T6158] capability: warning: `syz.4.45' uses deprecated v2 capabilities in a way that may be insecure [ 120.200437][ T30] audit: type=1400 audit(1754819897.186:2): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6156 comm="syz.4.45" name="8" dev="tmpfs" ino=53 [ 120.201144][ T982] usb 3-1: USB disconnect, device number 5 [ 120.264797][ T6160] process 'syz.3.44' launched './file2' with NULL argv: empty string added [ 120.955031][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.987924][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.033207][ T6181] loop6: detected capacity change from 0 to 7 [ 121.040412][ T5994] bridge_slave_0: entered allmulticast mode [ 121.092683][ T5994] bridge_slave_0: entered promiscuous mode [ 121.135674][ T5859] Dev loop6: unable to read RDB block 7 [ 121.146817][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.172918][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.197275][ T5859] loop6: AHDI p1 p2 p3 [ 121.201873][ T5859] loop6: partition table partially beyond EOD, truncated [ 121.416976][ T5859] loop6: p1 start 1405162169 is beyond EOD, truncated [ 121.587386][ T5859] loop6: p2 size 46 extends beyond EOD, truncated [ 121.911133][ T5994] bridge_slave_1: entered allmulticast mode [ 121.919528][ T5994] bridge_slave_1: entered promiscuous mode [ 122.008635][ T6190] random: crng reseeded on system resumption [ 122.460289][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 122.529587][ T5994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.543310][ T5994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.465345][ T5994] team0: Port device team_slave_0 added [ 123.912625][ T5957] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.028366][ T5994] team0: Port device team_slave_1 added [ 124.240952][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.257800][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.278029][ T5957] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 124.291846][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.419781][ T5957] usb 3-1: config 0 descriptor?? [ 124.965874][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.980229][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.050739][ T5994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.109717][ T5994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.127624][ T5994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.156372][ T5994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.384728][ T5994] hsr_slave_0: entered promiscuous mode [ 125.392087][ T5994] hsr_slave_1: entered promiscuous mode [ 125.423559][ T5994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.431221][ T5994] Cannot create hsr debugfs directory [ 126.534316][ T5957] usbhid 3-1:0.0: can't add hid device: -71 [ 126.540494][ T5957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 128.493469][ T5957] usb 3-1: USB disconnect, device number 6 [ 129.138072][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 130.242904][ T6267] overlayfs: failed to resolve './file0': -2 [ 131.863407][ T982] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 131.901888][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.68'. [ 132.036703][ T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.060171][ T982] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 132.088607][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.108459][ T982] usb 1-1: config 0 descriptor?? [ 132.204765][ T5994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.227756][ T5994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.258907][ T5994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.305771][ T5994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.535124][ T982] wacom 0003:056A:033B.0003: item fetching failed at offset 5/7 [ 132.566611][ T5994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.572998][ T982] wacom 0003:056A:033B.0003: parse failed [ 132.596226][ T982] wacom 0003:056A:033B.0003: probe with driver wacom failed with error -22 [ 132.630156][ T5994] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.681709][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.688972][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.774644][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.781984][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.929082][ T6316] can0: slcan on ptm0. [ 133.029099][ T6319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.70'. [ 133.133271][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.146259][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.488883][ T5994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.602055][ T5994] veth0_vlan: entered promiscuous mode [ 133.629280][ T5994] veth1_vlan: entered promiscuous mode [ 133.680835][ T5994] veth0_macvtap: entered promiscuous mode [ 133.731276][ T5994] veth1_macvtap: entered promiscuous mode [ 133.828438][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.852360][ T6315] can0 (unregistered): slcan off ptm0. [ 133.867040][ T5994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.890830][ T5994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.932393][ T5994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.941523][ T5994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.972394][ T5994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.244629][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 134.287418][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.301607][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 134.302537][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.457493][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.485282][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.136085][ T5824] usb 1-1: USB disconnect, device number 3 [ 135.545085][ T6358] netlink: 'syz.4.75': attribute type 2 has an invalid length. [ 135.553208][ T6358] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.75'. [ 135.565045][ T6358] nbd: must specify at least one socket [ 135.584287][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 135.782404][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 135.809016][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 135.870175][ T10] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 135.898404][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.305137][ T10] usb 2-1: config 0 descriptor?? [ 136.436721][ T6354] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 136.857906][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 136.871823][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 136.920559][ T10] usb 2-1: USB disconnect, device number 2 [ 137.084525][ T982] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 137.258031][ T5824] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.279783][ T982] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 137.302595][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.334328][ T982] usb 3-1: config 0 descriptor?? [ 137.356278][ T982] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 137.432225][ T5824] usb 1-1: Using ep0 maxpacket: 32 [ 137.450801][ T5824] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.500358][ T5824] usb 1-1: config 0 has no interface number 0 [ 137.544058][ T5824] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 137.587005][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.616854][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.620602][ T5824] usb 1-1: Product: syz [ 137.629230][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.638085][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.659059][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.672979][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 137.740005][ T5824] usb 1-1: Manufacturer: syz [ 137.767067][ T5824] usb 1-1: SerialNumber: syz [ 137.781263][ T982] gspca_cpia1: usb_control_msg 03, error -32 [ 137.845243][ T982] gspca_cpia1: usb_control_msg 03, error -71 [ 137.853759][ T982] gspca_cpia1: usb_control_msg 01, error -71 [ 137.859860][ T982] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 137.893015][ T5824] usb 1-1: config 0 descriptor?? [ 137.901908][ T982] usb 3-1: USB disconnect, device number 7 [ 137.986300][ T5824] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 138.041550][ T5824] usb 1-1: selecting invalid altsetting 1 [ 138.047569][ T5824] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 138.065848][ T5824] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.097713][ T5824] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 138.114993][ T5824] usb 1-1: media controller created [ 138.815462][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.915328][ T6403] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 139.062332][ T6403] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 139.120708][ T5824] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 139.148807][ T5824] zl10353_read_register: readreg error (reg=127, ret==-71) [ 139.176500][ T5824] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 139.404561][ T43] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 139.519780][ T5824] usb 1-1: USB disconnect, device number 4 [ 139.623260][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.671552][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.716745][ T43] usb 3-1: Product: syz [ 139.721005][ T43] usb 3-1: Manufacturer: syz [ 139.742797][ T5157] Bluetooth: hci5: command tx timeout [ 139.746006][ T43] usb 3-1: SerialNumber: syz [ 139.806707][ T43] usb 3-1: config 0 descriptor?? [ 139.938844][ T6423] openvswitch: netlink: Duplicate or invalid key (type 0). [ 139.943364][ T5957] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.988392][ T6423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.021764][ T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.380465][ T5957] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 140.549254][ T5957] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.661018][ T5957] usb 5-1: Product: syz [ 140.763828][ T5957] usb 5-1: Manufacturer: syz [ 140.842228][ T5957] usb 5-1: SerialNumber: syz [ 140.932860][ T5957] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 140.969517][ T6433] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.082989][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 141.172806][ T6389] chnl_net:caif_netlink_parms(): no params data found [ 141.376220][ T6415] netlink: 48 bytes leftover after parsing attributes in process `syz.4.87'. [ 141.388210][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 141.392746][ T982] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.416467][ T43] usb 3-1: USB disconnect, device number 8 [ 141.725986][ T43] usb 5-1: USB disconnect, device number 2 [ 141.824778][ T5157] Bluetooth: hci5: command tx timeout [ 141.986341][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.032738][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.040070][ T6389] bridge_slave_0: entered allmulticast mode [ 142.062056][ T6389] bridge_slave_0: entered promiscuous mode [ 142.085527][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.098323][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.109385][ T6389] bridge_slave_1: entered allmulticast mode [ 142.127092][ T6389] bridge_slave_1: entered promiscuous mode [ 142.283812][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 142.291881][ T24] ath9k_htc: Failed to initialize the device [ 142.302399][ T43] usb 5-1: ath9k_htc: USB layer deinitialized [ 142.334992][ T982] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 143.196204][ T982] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.228850][ T982] usb 1-1: not running at top speed; connect to a high speed hub [ 143.272724][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.289829][ T982] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 143.308690][ T982] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 143.329483][ T982] usb 1-1: config 4 has no interface number 0 [ 143.425871][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.458286][ T982] usb 1-1: string descriptor 0 read error: -22 [ 143.472382][ T982] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 143.483695][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.566272][ T982] usb 1-1: Found UVC 0.00 device (04f2:b746) [ 143.589032][ T982] usb 1-1: No valid video chain found. [ 143.670347][ T6389] team0: Port device team_slave_0 added [ 143.679463][ T6459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.93'. [ 143.703742][ T6389] team0: Port device team_slave_1 added [ 143.719326][ T24] usb 1-1: USB disconnect, device number 6 [ 144.033455][ T5157] Bluetooth: hci5: command tx timeout [ 144.043721][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.050826][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.079077][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.075338][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.092222][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.143147][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.368524][ T6484] loop6: detected capacity change from 0 to 8388608 [ 145.403427][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.458071][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.459459][ T6488] program syz.2.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 145.473336][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.481377][ T6389] hsr_slave_0: entered promiscuous mode [ 145.509120][ T6389] hsr_slave_1: entered promiscuous mode [ 145.512717][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.521356][ T6389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.539650][ T6389] Cannot create hsr debugfs directory [ 145.557909][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.576360][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.605341][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.632556][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.640556][ T6484] ldm_validate_partition_table(): Disk read failed. [ 145.671147][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.697831][ T6484] Buffer I/O error on dev loop6, logical block 0, async page read [ 145.745532][ T6484] Dev loop6: unable to read RDB block 0 [ 145.759926][ T6484] loop6: unable to read partition table [ 145.802845][ T6484] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 145.897456][ T6496] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 146.062436][ T5157] Bluetooth: hci5: command tx timeout [ 146.481332][ T6511] cgroup: fork rejected by pids controller in /syz4 [ 147.526617][ T6389] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.268081][ T6524] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 148.358194][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.500387][ T6389] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.527330][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 148.543988][ T24] usb 2-1: too many configurations: 46, using maximum allowed: 8 [ 148.569321][ T6529] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 148.574753][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 148.601939][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.110'. [ 148.602593][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.637690][ T6529] netlink: 44 bytes leftover after parsing attributes in process `syz.2.110'. [ 148.647030][ T24] usb 2-1: Product: syz [ 148.651245][ T24] usb 2-1: Manufacturer: syz [ 148.663060][ T6389] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.682597][ T24] usb 2-1: SerialNumber: syz [ 148.718529][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 148.763193][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 148.955768][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.066180][ T6389] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.206699][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.574255][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.833157][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 149.951164][ T43] ath9k_htc: Failed to initialize the device [ 149.997985][ T5843] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 150.253728][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 150.311739][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.421221][ T5843] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 150.552457][ T5843] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 150.561489][ T5843] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 150.573286][ T5843] usb 3-1: config 220 has no interface number 2 [ 150.579844][ T5843] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.593505][ T5925] usb 2-1: USB disconnect, device number 3 [ 150.599827][ T5843] usb 3-1: config 220 interface 0 has no altsetting 0 [ 150.601821][ T6547] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 150.662519][ T5843] usb 3-1: config 220 interface 76 has no altsetting 0 [ 150.669471][ T5843] usb 3-1: config 220 interface 1 has no altsetting 0 [ 150.760240][ T5843] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.778093][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.802041][ T5843] usb 3-1: Product: syz [ 150.811671][ T5843] usb 3-1: Manufacturer: syz [ 150.819269][ T5843] usb 3-1: SerialNumber: syz [ 151.064573][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.078188][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.088941][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.097732][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.106801][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.137447][ T5843] usb 3-1: selecting invalid altsetting 0 [ 151.153672][ T5843] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 151.163030][ T5843] usb 3-1: No valid video chain found. [ 151.181527][ T5843] usb 3-1: selecting invalid altsetting 0 [ 151.187581][ T5843] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 151.188768][ T49] bridge_slave_1: left allmulticast mode [ 151.200792][ T5843] usb 3-1: USB disconnect, device number 9 [ 151.238049][ T49] bridge_slave_1: left promiscuous mode [ 151.282805][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.335204][ T49] bridge_slave_0: left allmulticast mode [ 151.345033][ T49] bridge_slave_0: left promiscuous mode [ 151.357693][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.394208][ T6595] ======================================================= [ 152.394208][ T6595] WARNING: The mand mount option has been deprecated and [ 152.394208][ T6595] and is ignored by this kernel. Remove the mand [ 152.394208][ T6595] option from the mount to silence this warning. [ 152.394208][ T6595] ======================================================= [ 152.432209][ T6595] new mount options do not match the existing superblock, will be ignored [ 153.181726][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.190926][ T5157] Bluetooth: hci1: command tx timeout [ 153.199028][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.211521][ T49] bond0 (unregistering): Released all slaves [ 153.283016][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.291852][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.336244][ T6594] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 153.916453][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.022536][ T982] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 154.772235][ T982] usb 2-1: device descriptor read/64, error -71 [ 155.263335][ T5157] Bluetooth: hci1: command tx timeout [ 155.834605][ T982] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.983034][ T982] usb 2-1: device descriptor read/64, error -71 [ 156.107102][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.117265][ T982] usb usb2-port1: attempt power cycle [ 156.126536][ T6641] netlink: 36 bytes leftover after parsing attributes in process `syz.2.128'. [ 156.243294][ T49] hsr_slave_0: left promiscuous mode [ 156.260720][ T49] hsr_slave_1: left promiscuous mode [ 156.277376][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.306695][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.341621][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.381129][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.457387][ T49] veth1_macvtap: left promiscuous mode [ 156.473139][ T49] veth0_macvtap: left promiscuous mode [ 156.480074][ T49] veth1_vlan: left promiscuous mode [ 156.486689][ T982] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.502074][ T49] veth0_vlan: left promiscuous mode [ 156.523084][ T982] usb 2-1: device descriptor read/8, error -71 [ 156.773639][ T982] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.812254][ T5843] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 156.959107][ T5843] usb 3-1: device descriptor read/64, error -71 [ 157.012235][ T982] usb 2-1: device not accepting address 7, error -71 [ 157.135203][ T982] usb usb2-port1: unable to enumerate USB device [ 157.342541][ T5157] Bluetooth: hci1: command tx timeout [ 157.414642][ T5843] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 157.643202][ T5843] usb 3-1: device descriptor read/64, error -71 [ 157.767745][ T5843] usb usb3-port1: attempt power cycle [ 157.817348][ T49] team0 (unregistering): Port device team_slave_1 removed [ 157.858871][ T49] team0 (unregistering): Port device team_slave_0 removed [ 158.112473][ T5843] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 158.156232][ T5843] usb 3-1: device descriptor read/8, error -71 [ 158.267561][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.274818][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.395978][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.403251][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.412344][ T5843] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 158.470621][ T5843] usb 3-1: device descriptor read/8, error -71 [ 158.570592][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 158.592323][ T5843] usb usb3-port1: unable to enumerate USB device [ 158.804399][ T5824] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.080956][ T5824] usb 2-1: config 0 has no interfaces? [ 159.126503][ T5824] usb 2-1: New USB device found, idVendor=1bc7, idProduct=10a0, bcdDevice=6d.d9 [ 159.162777][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.179859][ T5824] usb 2-1: Product: syz [ 159.201407][ T5824] usb 2-1: Manufacturer: syz [ 159.223851][ T5824] usb 2-1: SerialNumber: syz [ 159.302336][ T5824] usb 2-1: config 0 descriptor?? [ 159.472848][ T5157] Bluetooth: hci1: command tx timeout [ 159.568360][ T6669] can0: slcan on ttyS3. [ 159.599232][ T982] usb 2-1: USB disconnect, device number 8 [ 159.674667][ T6669] can0 (unregistered): slcan off ttyS3. [ 159.814277][ T6568] chnl_net:caif_netlink_parms(): no params data found [ 160.292250][ T6683] befs: (nbd0): No write support. Marking filesystem read-only [ 160.303745][ T6683] syz.0.135: attempt to access beyond end of device [ 160.303745][ T6683] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 160.317438][ T6683] befs: (nbd0): unable to read superblock [ 162.525694][ T6568] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.534000][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.541321][ T6568] bridge_slave_0: entered allmulticast mode [ 162.556792][ T6568] bridge_slave_0: entered promiscuous mode [ 162.574658][ T6568] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.583472][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.591551][ T6568] bridge_slave_1: entered allmulticast mode [ 162.602971][ T6568] bridge_slave_1: entered promiscuous mode [ 162.645089][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.105962][ T6568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.200435][ T6568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.495329][ T6568] team0: Port device team_slave_0 added [ 163.563833][ T6729] 9pnet_fd: Insufficient options for proto=fd [ 163.571813][ T6568] team0: Port device team_slave_1 added [ 163.713415][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.732521][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.792767][ T6568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.814747][ T6568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.821736][ T6568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.850478][ T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 163.892977][ T6568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.032800][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 164.052695][ T43] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.075821][ T43] usb 2-1: config 0 has no interface number 0 [ 164.093174][ T43] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 164.120174][ T43] usb 2-1: config 0 interface 1 has no altsetting 0 [ 164.136811][ T43] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 164.150138][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.177036][ T43] usb 2-1: Product: syz [ 164.191630][ T43] usb 2-1: Manufacturer: syz [ 164.201806][ T43] usb 2-1: SerialNumber: syz [ 164.248422][ T43] usb 2-1: config 0 descriptor?? [ 164.327272][ T6568] hsr_slave_0: entered promiscuous mode [ 164.357296][ T6568] hsr_slave_1: entered promiscuous mode [ 164.372027][ T6568] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.381145][ T6568] Cannot create hsr debugfs directory [ 165.267509][ T43] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 165.307651][ T43] cx231xx 2-1:0.1: Not found matching IAD interface [ 165.343804][ T43] usb 2-1: USB disconnect, device number 9 [ 165.738992][ T6752] loop7: detected capacity change from 0 to 524255231 [ 165.764415][ T6389] veth0_vlan: entered promiscuous mode [ 165.793215][ T6752] loop7: detected capacity change from 524255231 to 524287912 [ 165.952926][ T6389] veth1_vlan: entered promiscuous mode [ 166.963040][ T6767] /dev/nullb0: Can't open blockdev [ 166.976888][ T6766] netlink: 'syz.2.149': attribute type 1 has an invalid length. [ 167.001016][ T6767] /dev/nullb0: Can't open blockdev [ 167.101219][ T6389] veth0_macvtap: entered promiscuous mode [ 167.295620][ T6766] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.499528][ T6769] vlan3: entered allmulticast mode [ 167.508274][ T6769] veth1: entered allmulticast mode [ 167.525165][ T6769] bond1: (slave vlan3): making interface the new active one [ 167.545781][ T6769] bond1: (slave vlan3): Enslaving as an active interface with an up link [ 167.581046][ T6389] veth1_macvtap: entered promiscuous mode [ 167.816160][ T6784] fuse: Bad value for 'fd' [ 167.847279][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.922109][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.087619][ T6389] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.225917][ T6389] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.347434][ T6389] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.450993][ T6389] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.845933][ T6568] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.934484][ T6568] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.158365][ T5956] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 169.165073][ T6568] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.181177][ T5956] dvb_usb_az6027 4-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 169.212393][ T5956] usb 4-1: USB disconnect, device number 2 [ 169.224458][ T6568] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.551190][ T6214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.578006][ T6214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.929845][ T6001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.954564][ T6001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.457300][ T6817] Driver unsupported XDP return value 0 on prog (id 67) dev N/A, expect packet loss! [ 170.777701][ T6214] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.124914][ T6568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.242540][ T6214] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.290531][ T6835] tmpfs: Bad value for 'mpol' [ 171.319145][ T6835] /dev/nullb0: Can't open blockdev [ 171.489940][ T6568] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.025170][ T6844] cgroup: fork rejected by pids controller in /syz2 [ 172.709297][ T6214] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.155384][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.162569][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.314690][ T6214] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.507192][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.514423][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.632845][ T5856] syz-executor (5856) used greatest stack depth: 19832 bytes left [ 173.871256][ T6568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.943320][ T6860] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.253225][ T6214] bridge_slave_1: left allmulticast mode [ 174.259108][ T6214] bridge_slave_1: left promiscuous mode [ 174.303912][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.361075][ T6214] bridge_slave_0: left allmulticast mode [ 174.376549][ T6214] bridge_slave_0: left promiscuous mode [ 174.394611][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.914754][ T982] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 175.080043][ T982] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32 [ 175.096469][ T982] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 175.128368][ T982] usb 1-1: config 1 interface 0 has no altsetting 0 [ 175.163504][ T982] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.175021][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.199931][ T982] usb 1-1: Product: 㡶怼㒹㔀쑳퓖é½é·å¾ë„˜æ´„έ䦲쟟丠쒅박憥⿿﫨굉ⳉà¦çº¢ç³Ÿê€•á¦ï•˜ã‹â…´æ±¢á»ï˜ƒïš‘䨾ꅔ◣ᨶ嫦똽ᗒ⥤笛í‹ìºæŒ†é±†ê¤§é¢ç‡å«•炿률ﱼ˓ïœá»¥Ü‹â”„匒뱛‎錮༥㶩 [ 175.223262][ T982] usb 1-1: Manufacturer: á Œ [ 175.259004][ T982] usb 1-1: SerialNumber: 퇸뷄⎛湒雲éŠï갉ᢅ৤ⴕ竮휥ç½ç»†é„ºèŽ¿ê‘œê¦…â‹í›­é˜æ–¶å–㚌ໂ汷砞۱ﹼ熧ߓá—⦜뇗ïœâ•»ã®™âƒ°é’ዱâ…ナåŽä³®á”’㖰哜ኋé¶é§§ëŒ¿ï€ŒÃ㊰惀筺硉舉랞馄ì‚峘⬘엤鉂鈪棰쾪앨먷푧淢瘺迩蠶⮠ꩄᦿ᧠穎翜먕딺摛ç™ã”Ÿïœæƒºéª½é¡«ì‚€á¤¨á©˜ï‡ºäŠ”à ¡ç¦‹Ú™ì¯”ä±ƒç¼ªíž¦è¦Ÿæ²¹äƒ¦é‰· [ 175.312447][ T6876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.336377][ T6876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.583270][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 175.593484][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 175.611340][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 175.642597][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 175.668785][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.747531][ T6894] overlayfs: missing 'workdir' [ 175.780402][ T982] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 175.802884][ T982] usb 1-1: USB disconnect, device number 7 [ 176.186437][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.447972][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.636905][ T6214] bond0 (unregistering): Released all slaves [ 177.195874][ T6910] atomic_op ffff8880226d2198 conn xmit_atomic 0000000000000000 [ 177.274357][ T5157] Bluetooth: hci0: Unknown advertising packet type: 0x31 [ 177.274495][ T5157] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 177.281766][ T5157] Bluetooth: hci0: Malformed LE Event: 0x0d [ 177.542428][ T5896] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.742466][ T5157] Bluetooth: hci2: command tx timeout [ 177.769154][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.857648][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.908364][ T5896] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 177.949778][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.971658][ T5896] usb 2-1: config 0 descriptor?? [ 178.477257][ T5896] cp2112 0003:10C4:EA90.0004: item fetching failed at offset 5/7 [ 178.528790][ T5896] cp2112 0003:10C4:EA90.0004: parse failed [ 178.541369][ T6568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.578202][ T5896] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -22 [ 179.187578][ T6214] hsr_slave_0: left promiscuous mode [ 179.195822][ T6214] hsr_slave_1: left promiscuous mode [ 179.203853][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.211316][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.228048][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.236271][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.403453][ T6936] cgroup: fork rejected by pids controller in /syz5 [ 180.080069][ T5157] Bluetooth: hci2: command tx timeout [ 180.150703][ T6214] veth1_macvtap: left promiscuous mode [ 180.170101][ T6214] veth0_macvtap: left promiscuous mode [ 180.178440][ T982] usb 2-1: USB disconnect, device number 10 [ 180.217771][ T6214] veth1_vlan: left promiscuous mode [ 180.233868][ T6214] veth0_vlan: left promiscuous mode [ 181.949687][ T6214] team0 (unregistering): Port device team_slave_1 removed [ 182.024369][ T6214] team0 (unregistering): Port device team_slave_0 removed [ 182.144386][ T5157] Bluetooth: hci2: command tx timeout [ 183.270510][ T6889] chnl_net:caif_netlink_parms(): no params data found [ 183.342709][ T24] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 183.520447][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 255: 33, using maximum allowed: 30 [ 183.549624][ T24] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 183.565511][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.605080][ T24] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 183.658699][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.744856][ T24] usb 2-1: config 0 descriptor?? [ 184.227114][ T5157] Bluetooth: hci2: command tx timeout [ 184.291058][ T6568] veth0_vlan: entered promiscuous mode [ 184.304673][ T24] kye 0003:0458:501B.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 184.322660][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.345340][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.353347][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.366366][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.373546][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.401073][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.415370][ T24] kye 0003:0458:501B.0005: hidraw0: USB HID v8.00 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0 [ 184.429146][ T6889] bridge_slave_0: entered allmulticast mode [ 184.430931][ T24] kye 0003:0458:501B.0005: tablet-enabling feature report not found [ 184.450179][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.458300][ T6985] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 184.468735][ T24] kye 0003:0458:501B.0005: tablet enabling failed [ 184.513258][ T6889] bridge_slave_0: entered promiscuous mode [ 184.553512][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.560752][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.597155][ T6889] bridge_slave_1: entered allmulticast mode [ 184.623305][ T6889] bridge_slave_1: entered promiscuous mode [ 184.665194][ T982] usb 2-1: USB disconnect, device number 11 [ 184.703599][ T6568] veth1_vlan: entered promiscuous mode [ 184.936497][ T7019] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 185.454489][ T6214] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.607533][ T6214] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.647773][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.652624][ T7022] overlayfs: missing 'workdir' [ 185.739662][ T6568] veth0_macvtap: entered promiscuous mode [ 186.618773][ T5157] Bluetooth: hci4: command tx timeout [ 186.739734][ T6214] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.759084][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.773946][ T6568] veth1_macvtap: entered promiscuous mode [ 187.042786][ T5956] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 187.053613][ T6214] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.219375][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 187.247862][ T5956] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 187.252715][ T6889] team0: Port device team_slave_0 added [ 187.269941][ T5956] usb 2-1: config 4 has no interface number 0 [ 187.280208][ T5956] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 187.297109][ T5956] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 187.311438][ T5956] usb 2-1: config 4 interface 9 has no altsetting 0 [ 187.324452][ T6889] team0: Port device team_slave_1 added [ 187.343616][ T5956] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 187.366407][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.380616][ T5956] usb 2-1: Product: syz [ 187.387748][ T5956] usb 2-1: Manufacturer: syz [ 187.395805][ T5956] usb 2-1: SerialNumber: syz [ 187.441965][ T7026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.489795][ T7026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 187.501221][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.518805][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.643430][ T5956] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 187.758981][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.827495][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.890801][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.894791][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.901373][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.007466][ T982] usb 2-1: USB disconnect, device number 12 [ 188.327555][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.370819][ T49] usb 2-1: Failed to submit usb control message: -71 [ 188.388796][ T49] usb 2-1: unable to send the bmi data to the device: -71 [ 188.404954][ T49] usb 2-1: unable to get target info from device [ 188.418698][ T49] usb 2-1: could not get target info (-71) [ 188.425727][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.439458][ T49] usb 2-1: could not probe fw (-71) [ 188.675481][ T6568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.705926][ T5157] Bluetooth: hci4: command tx timeout [ 188.777356][ T7056] loop6: detected capacity change from 0 to 7 [ 188.816718][ T7056] Dev loop6: unable to read RDB block 7 [ 188.826917][ T7056] loop6: AHDI p1 p2 p3 [ 188.829544][ T6568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.831563][ T7056] loop6: partition table partially beyond EOD, [ 188.841234][ T6568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.848668][ T7056] truncated [ 188.850242][ T7056] loop6: p1 start 1405162169 is beyond EOD, truncated [ 188.850273][ T7056] loop6: p2 size 46 extends beyond EOD, truncated [ 188.879834][ T6568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.888678][ T6568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.005922][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 189.135943][ T7059] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 189.137049][ T6889] hsr_slave_0: entered promiscuous mode [ 189.156705][ T7059] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.170121][ T7060] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 189.181429][ T6889] hsr_slave_1: entered promiscuous mode [ 189.190212][ T6889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.198493][ T7060] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 189.206059][ T6889] Cannot create hsr debugfs directory [ 189.397098][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 189.429542][ T7010] chnl_net:caif_netlink_parms(): no params data found [ 189.448064][ T6214] bridge_slave_1: left allmulticast mode [ 189.460396][ T6214] bridge_slave_1: left promiscuous mode [ 189.462363][ T982] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 189.467457][ T6214] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.486369][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 189.499826][ T6214] bridge_slave_0: left allmulticast mode [ 189.510017][ T6214] bridge_slave_0: left promiscuous mode [ 189.518516][ T6214] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.646582][ T982] usb 2-1: Using ep0 maxpacket: 16 [ 189.660862][ T982] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 189.682403][ T982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.722077][ T982] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.738144][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.755840][ T982] usb 2-1: Product: syz [ 189.759923][ T7076] loop8: detected capacity change from 0 to 7 [ 189.760191][ T982] usb 2-1: Manufacturer: syz [ 189.787438][ T982] usb 2-1: SerialNumber: syz [ 189.789067][ T7076] Dev loop8: unable to read RDB block 7 [ 189.810805][ T7076] loop8: unable to read partition table [ 189.820345][ T7076] loop8: partition table beyond EOD, truncated [ 189.836865][ T7076] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 190.012560][ T982] usb 2-1: 0:2 : does not exist [ 190.028602][ T7078] syz.0.193: attempt to access beyond end of device [ 190.028602][ T7078] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 190.046774][ T7078] FAT-fs (nbd0): unable to read boot sector [ 190.063381][ T982] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 190.121098][ T7079] XFS (nullb0): Invalid superblock magic number [ 190.132992][ T982] usb 2-1: USB disconnect, device number 13 [ 190.207722][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.408236][ T7089] overlayfs: missing 'workdir' [ 190.472076][ T6214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.592677][ T6214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.686130][ T6214] bond0 (unregistering): Released all slaves [ 190.862445][ T5157] Bluetooth: hci4: command tx timeout [ 192.362488][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.370451][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.639224][ T6889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.972299][ T5157] Bluetooth: hci4: command tx timeout [ 193.838263][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.1.200'. [ 193.898418][ T6634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.917442][ T6634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.969463][ T6889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.049997][ T6214] hsr_slave_0: left promiscuous mode [ 194.056624][ T6214] hsr_slave_1: left promiscuous mode [ 194.084400][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.091895][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.136083][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.177884][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.554209][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.560920][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.833197][ T6214] veth1_macvtap: left promiscuous mode [ 194.838840][ T6214] veth0_macvtap: left promiscuous mode [ 194.844650][ T6214] veth1_vlan: left promiscuous mode [ 194.851812][ T6214] veth0_vlan: left promiscuous mode [ 195.374596][ T6214] team0 (unregistering): Port device team_slave_1 removed [ 195.418349][ T6214] team0 (unregistering): Port device team_slave_0 removed [ 195.847699][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.855215][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.864429][ T7010] bridge_slave_0: entered allmulticast mode [ 195.872816][ T7010] bridge_slave_0: entered promiscuous mode [ 195.955969][ T6889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.043882][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.077646][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.115425][ T7010] bridge_slave_1: entered allmulticast mode [ 196.180845][ T7010] bridge_slave_1: entered promiscuous mode [ 196.774714][ T6889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.032658][ T7141] netlink: 'syz.1.203': attribute type 2 has an invalid length. [ 197.422425][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.549957][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.172744][ T5824] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 198.512520][ T5824] usb 1-1: Using ep0 maxpacket: 16 [ 198.600822][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.692504][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.768176][ T5824] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 199.081817][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.255232][ T5824] usb 1-1: config 0 descriptor?? [ 200.252039][ T7010] team0: Port device team_slave_0 added [ 200.305849][ T7010] team0: Port device team_slave_1 added [ 200.386356][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.393657][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.458064][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.521023][ T5824] hid-multitouch 0003:1FD2:6007.0006: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 200.577082][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.585343][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.588450][ T7168] Unknown options in mask 5 [ 200.628118][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.659703][ T5824] usb 1-1: USB disconnect, device number 8 [ 200.768977][ T7169] fido_id[7169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 201.089498][ T7010] hsr_slave_0: entered promiscuous mode [ 201.111392][ T7010] hsr_slave_1: entered promiscuous mode [ 201.162341][ T7010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.170053][ T7010] Cannot create hsr debugfs directory [ 201.200986][ T6889] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.235813][ T6889] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 201.334897][ T6889] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.371632][ T6889] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.644658][ T7192] mmap: syz.4.211 (7192): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 201.682270][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 201.888741][ T10] usb 1-1: config 0 has no interfaces? [ 201.931203][ T10] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 201.956764][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.977470][ T10] usb 1-1: Product: syz [ 201.993149][ T10] usb 1-1: Manufacturer: syz [ 201.997813][ T10] usb 1-1: SerialNumber: syz [ 202.021481][ T10] usb 1-1: config 0 descriptor?? [ 202.064016][ T7199] loop8: detected capacity change from 0 to 7 [ 202.178117][ T7199] Dev loop8: unable to read RDB block 7 [ 202.319142][ T7199] loop8: unable to read partition table [ 202.379492][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 202.406053][ T7199] loop8: partition table beyond EOD, truncated [ 202.466836][ T7199] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 203.143445][ T5956] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 203.170159][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.257769][ T6889] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.342516][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 203.358892][ T5956] usb 5-1: unable to get BOS descriptor or descriptor too short [ 203.395448][ T5956] usb 5-1: config 4 interface 0 has no altsetting 0 [ 203.409793][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.417146][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.426301][ T5956] usb 5-1: string descriptor 0 read error: -22 [ 203.435185][ T5956] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 203.460051][ T5956] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 203.513116][ T5956] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 203.631774][ T5956] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.658734][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.666062][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.674990][ T5956] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 203.685530][ T5956] usb 5-1: media controller created [ 203.785411][ T7010] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 203.813731][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.871701][ T7010] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 203.936598][ T7010] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.973094][ T7010] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 204.027199][ T7228] netlink: 'syz.1.216': attribute type 3 has an invalid length. [ 204.755165][ T5956] zl10353_read_register: readreg error (reg=127, ret==0) [ 205.101267][ T5843] usb 1-1: USB disconnect, device number 9 [ 205.428391][ T5956] usb 5-1: USB disconnect, device number 3 [ 205.836789][ T7251] netlink: 'syz.0.219': attribute type 10 has an invalid length. [ 205.978404][ T7251] openvswitch: netlink: Flow key attr not present in new flow. [ 206.907744][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.000909][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.046290][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.161887][ T6214] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.169180][ T6214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.206721][ T7271] netlink: 'syz.1.223': attribute type 27 has an invalid length. [ 207.212502][ T5843] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 207.231738][ T6214] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.239076][ T6214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.274711][ T6889] veth0_vlan: entered promiscuous mode [ 207.344904][ T6889] veth1_vlan: entered promiscuous mode [ 207.393140][ T5843] usb 5-1: Using ep0 maxpacket: 8 [ 207.409491][ T5843] usb 5-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 207.432726][ T5843] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.453403][ T5843] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 207.462922][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.516761][ T7010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.758852][ T6889] veth0_macvtap: entered promiscuous mode [ 207.849549][ T6889] veth1_macvtap: entered promiscuous mode [ 208.607560][ T5843] usb 5-1: string descriptor 0 read error: -71 [ 208.647987][ T5843] usb 5-1: USB disconnect, device number 4 [ 208.666660][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.896305][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.951922][ T6889] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.980438][ T6889] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.018692][ T6889] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.052177][ T6889] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.521757][ T7304] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 209.531745][ T7304] macvtap1: entered allmulticast mode [ 209.538353][ T7304] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 209.550366][ T7304] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 209.563123][ T7304] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 209.736739][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.802081][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.828759][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.960318][ T7318] kvm: emulating exchange as write [ 210.022234][ T6634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.062880][ T6634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.221569][ T7309] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 210.745260][ T7344] netlink: 'syz.1.233': attribute type 10 has an invalid length. [ 211.203791][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.235'. [ 211.397904][ T7356] XFS (nullb0): Invalid superblock magic number [ 211.486951][ T6634] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.651348][ T7010] veth0_vlan: entered promiscuous mode [ 211.754855][ T6634] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.855198][ T7010] veth1_vlan: entered promiscuous mode [ 211.979410][ T6634] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.408821][ T6634] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.422356][ T30] audit: type=1326 audit(1754819989.406:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7368 comm="syz.2.239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f318878ebe9 code=0x0 [ 212.566321][ T7010] veth0_macvtap: entered promiscuous mode [ 212.621547][ T7010] veth1_macvtap: entered promiscuous mode [ 212.897947][ T6634] bridge_slave_1: left allmulticast mode [ 212.918004][ T6634] bridge_slave_1: left promiscuous mode [ 212.943513][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.094851][ T6634] bridge_slave_0: left allmulticast mode [ 213.100597][ T6634] bridge_slave_0: left promiscuous mode [ 213.159339][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.468972][ T7383] overlayfs: missing 'lowerdir' [ 213.677705][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.680260][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.681466][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.691569][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.694512][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.298979][ T7404] overlayfs: missing 'lowerdir' [ 215.522694][ T7418] overlayfs: missing 'lowerdir' [ 215.742414][ T5157] Bluetooth: hci1: command tx timeout [ 216.449145][ T6634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.542757][ T6634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.546558][ T7431] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'. [ 216.567798][ T6634] bond0 (unregistering): Released all slaves [ 216.609692][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.688264][ T7427] veth0: entered promiscuous mode [ 216.719966][ T7426] veth0: left promiscuous mode [ 216.737823][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.139101][ T7010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.185764][ T7010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.206472][ T7453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.213068][ T7010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.228078][ T7010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.000481][ T5157] Bluetooth: hci1: command tx timeout [ 218.978143][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'. [ 218.995512][ T7475] overlayfs: missing 'lowerdir' [ 219.002294][ T7473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'. [ 219.023323][ T7473] netlink: 'syz.0.254': attribute type 6 has an invalid length. [ 219.873115][ T6634] hsr_slave_0: left promiscuous mode [ 219.908249][ T6634] hsr_slave_1: left promiscuous mode [ 219.930139][ T6634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.972414][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.009669][ T6634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.062287][ T5157] Bluetooth: hci1: command tx timeout [ 220.068472][ T6634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.171092][ T6634] veth1_macvtap: left promiscuous mode [ 220.213531][ T6634] veth0_macvtap: left promiscuous mode [ 220.219313][ T6634] veth1_vlan: left promiscuous mode [ 220.482564][ T43] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 220.492407][ T6634] veth0_vlan: left promiscuous mode [ 220.658658][ T43] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 220.683976][ T43] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 220.701127][ T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 220.716130][ T43] usb 1-1: config 1 has no interface number 0 [ 220.722509][ T43] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 220.733827][ T43] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 220.747078][ T43] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 220.758309][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.785559][ T43] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 221.337473][ T43] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 221.409792][ T7516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 221.563058][ T43] usb 1-1: USB disconnect, device number 10 [ 221.570370][ T6634] team0 (unregistering): Port device team_slave_1 removed [ 221.591835][ T43] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 221.665954][ T6634] team0 (unregistering): Port device team_slave_0 removed [ 222.100873][ T7481] bridge1: entered allmulticast mode [ 222.146133][ T5842] Bluetooth: hci1: command tx timeout [ 222.224318][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 222.592913][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.609410][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.724802][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.753253][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.822600][ T5896] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 222.919171][ T7536] loop8: detected capacity change from 0 to 7 [ 222.938719][ T7536] Dev loop8: unable to read RDB block 7 [ 222.957879][ T7536] loop8: unable to read partition table [ 222.986768][ T7536] loop8: partition table beyond EOD, truncated [ 223.002330][ T5896] usb 3-1: device descriptor read/64, error -71 [ 223.026850][ T7536] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 223.262239][ T5896] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 223.294574][ T7387] chnl_net:caif_netlink_parms(): no params data found [ 223.423123][ T5896] usb 3-1: device descriptor read/64, error -71 [ 223.462436][ T5957] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 223.542763][ T5896] usb usb3-port1: attempt power cycle [ 223.673753][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.695350][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.708295][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.726769][ T5957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.730722][ T7387] bridge_slave_0: entered allmulticast mode [ 223.767359][ T5957] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 223.783769][ T7387] bridge_slave_0: entered promiscuous mode [ 223.801082][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.803839][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.819930][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.830779][ T7387] bridge_slave_1: entered allmulticast mode [ 223.831690][ T5957] usb 6-1: config 0 descriptor?? [ 223.856585][ T7387] bridge_slave_1: entered promiscuous mode [ 223.902332][ T5896] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 223.919939][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 223.945632][ T5896] usb 3-1: device descriptor read/8, error -71 [ 224.036325][ T7387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.098181][ T7387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.102742][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.152071][ T43] usb 2-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 224.193474][ T43] usb 2-1: config 0 interface 0 has no altsetting 0 [ 224.202364][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 224.211547][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.212436][ T5896] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 224.293583][ T5896] usb 3-1: device descriptor read/8, error -71 [ 224.302437][ T5843] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 224.305221][ T43] usb 2-1: config 0 descriptor?? [ 224.359852][ T7387] team0: Port device team_slave_0 added [ 224.421141][ T7387] team0: Port device team_slave_1 added [ 224.436902][ T5896] usb usb3-port1: unable to enumerate USB device [ 224.467213][ T5843] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.508868][ T5843] usb 1-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 224.528541][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.635830][ T5843] usb 1-1: config 0 descriptor?? [ 224.663619][ T5843] usb 1-1: bad CDC descriptors [ 224.699173][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.729389][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.791021][ T7387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.831715][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.839309][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.869427][ T7387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.947182][ T24] usb 1-1: USB disconnect, device number 11 [ 225.198960][ T7387] hsr_slave_0: entered promiscuous mode [ 225.216787][ T7387] hsr_slave_1: entered promiscuous mode [ 225.237320][ T7387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.245938][ T7387] Cannot create hsr debugfs directory [ 225.339775][ T5957] playstation 0003:054C:0DF2.0007: unbalanced delimiter at end of report description [ 225.379335][ T5957] playstation 0003:054C:0DF2.0007: Parse failed [ 225.408319][ T5957] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 225.603734][ T5957] usb 6-1: USB disconnect, device number 2 [ 226.443493][ T7583] sctp: [Deprecated]: syz.0.271 (pid 7583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 226.443493][ T7583] Use struct sctp_sack_info instead [ 226.515270][ T7387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 226.545609][ T7387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 226.570277][ T7387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 226.596938][ T7387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 226.852316][ T43] usb 2-1: string descriptor 0 read error: -71 [ 226.904408][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 226.977675][ T5192] bcm5974 2-1:0.0: could not read from device [ 227.088587][ T43] usb 2-1: USB disconnect, device number 14 [ 227.096974][ T5192] bcm5974 2-1:0.0: could not read from device [ 227.266842][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.297644][ T5956] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.359050][ T5998] udevd[5998]: Error opening device "/dev/input/event4": No such file or directory [ 227.375997][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.405032][ T5998] udevd[5998]: Unable to EVIOCGABS device "/dev/input/event4" [ 227.428097][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.435370][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.462376][ T5998] udevd[5998]: Unable to EVIOCGABS device "/dev/input/event4" [ 227.470064][ T5998] udevd[5998]: Unable to EVIOCGABS device "/dev/input/event4" [ 227.520512][ T5998] udevd[5998]: Unable to EVIOCGABS device "/dev/input/event4" [ 227.528181][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.528216][ T5956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.528255][ T5956] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 227.528279][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.543784][ T5956] usb 1-1: config 0 descriptor?? [ 227.657033][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.664311][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.011418][ T5956] playstation 0003:054C:0DF2.0008: unbalanced delimiter at end of report description [ 228.104500][ T5956] playstation 0003:054C:0DF2.0008: Parse failed [ 228.162035][ T5956] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 228.738217][ T5956] usb 1-1: USB disconnect, device number 12 [ 229.441996][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.492274][ T5896] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 229.503331][ T5956] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 229.632400][ T5896] usb 2-1: device descriptor read/64, error -71 [ 229.728138][ T5956] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 229.785457][ T5956] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 229.808559][ T5956] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.854843][ T5956] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 229.869652][ T5956] usb 1-1: config 1 has no interface number 0 [ 229.879668][ T5956] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 229.890374][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.910215][ T5896] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 229.931859][ T5956] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 230.116246][ T5896] usb 2-1: device descriptor read/64, error -71 [ 230.134476][ T5956] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 230.204405][ T5956] snd_usb_pod 1-1:1.1: invalid control EP [ 230.242253][ T5956] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 230.249294][ T5956] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 230.249780][ T5896] usb usb2-port1: attempt power cycle [ 230.270067][ T5956] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 230.447501][ T5956] usb 1-1: USB disconnect, device number 13 [ 230.716782][ T5896] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 230.772868][ T5896] usb 2-1: device descriptor read/8, error -71 [ 230.777802][ T7387] veth0_vlan: entered promiscuous mode [ 230.793023][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 230.806701][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 230.855536][ T7387] veth1_vlan: entered promiscuous mode [ 231.041288][ T5896] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 231.097790][ T7387] veth0_macvtap: entered promiscuous mode [ 231.143412][ T5896] usb 2-1: device descriptor read/8, error -71 [ 231.182515][ T7387] veth1_macvtap: entered promiscuous mode [ 231.273912][ T5896] usb usb2-port1: unable to enumerate USB device [ 231.375169][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.460887][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.590050][ T7387] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.038233][ T7387] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.082209][ T7387] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.131693][ T7387] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.462846][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 232.650778][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.678399][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.715524][ T7705] netlink: 256 bytes leftover after parsing attributes in process `syz.1.292'. [ 232.729962][ T7705] unsupported nlmsg_type 40 [ 232.902385][ T7706] netlink: 256 bytes leftover after parsing attributes in process `syz.1.292'. [ 233.188038][ T6061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.234827][ T6061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.312232][ T982] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 233.484910][ T982] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.551861][ T982] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.667672][ T982] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.698606][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.750807][ T982] usb 6-1: Product: syz [ 233.780720][ T982] usb 6-1: Manufacturer: syz [ 233.793300][ T982] usb 6-1: SerialNumber: syz [ 233.923074][ T982] cdc_ncm 6-1:1.0: skipping garbage [ 233.928453][ T982] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 233.956665][ T982] cdc_ncm 6-1:1.0: bind() failure [ 233.990267][ T982] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 234.024942][ T982] cdc_ncm 6-1:1.1: bind() failure [ 234.562712][ T7738] tipc: Started in network mode [ 234.568087][ T7738] tipc: Node identity ac14140f, cluster identity 4711 [ 234.584018][ T7738] tipc: New replicast peer: 255.255.255.255 [ 234.603324][ T7738] tipc: Enabled bearer , priority 10 [ 234.606849][ T5956] usb 6-1: USB disconnect, device number 3 [ 235.203357][ T7742] Bluetooth: MGMT ver 1.23 [ 236.149731][ T5896] tipc: Node number set to 2886997007 [ 236.494210][ T1099] bridge_slave_1: left allmulticast mode [ 236.499937][ T1099] bridge_slave_1: left promiscuous mode [ 236.572447][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.683570][ T1099] bridge_slave_0: left allmulticast mode [ 236.689469][ T1099] bridge_slave_0: left promiscuous mode [ 236.708976][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.854809][ T7781] loop6: detected capacity change from 0 to 7 [ 236.871619][ T1099] bond_slave_0: left promiscuous mode [ 236.876795][ T7781] Dev loop6: unable to read RDB block 7 [ 236.892337][ T7781] loop6: AHDI p1 p2 p3 [ 236.896355][ T1099] bond_slave_1: left promiscuous mode [ 236.903573][ T7781] loop6: partition table partially beyond EOD, truncated [ 236.942765][ T7781] loop6: p1 start 1405162169 is beyond EOD, truncated [ 236.965207][ T7781] loop6: p2 size 46 extends beyond EOD, truncated [ 237.155934][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 237.189134][ T5957] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.322342][ T5957] usb 6-1: device descriptor read/64, error -71 [ 237.562936][ T5957] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 237.600335][ T7796] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 237.716721][ T5957] usb 6-1: device descriptor read/64, error -71 [ 237.834320][ T5957] usb usb6-port1: attempt power cycle [ 238.233334][ T5957] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 238.284342][ T5957] usb 6-1: device descriptor read/8, error -71 [ 238.346099][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.397924][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.434093][ T1099] bond0 (unregistering): Released all slaves [ 238.532221][ T5957] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 238.563053][ T5957] usb 6-1: device descriptor read/8, error -71 [ 238.678816][ T1099] bond1 (unregistering): (slave vlan3): Releasing active interface [ 238.682665][ T5957] usb usb6-port1: unable to enumerate USB device [ 238.695498][ T1099] bond1 (unregistering): Released all slaves [ 239.425344][ T5843] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 239.491238][ T7808] syz.1.314: attempt to access beyond end of device [ 239.491238][ T7808] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 239.504845][ T7808] (syz.1.314,7808,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 239.512651][ T7808] (syz.1.314,7808,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 239.519976][ T7808] (syz.1.314,7808,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 239.529042][ T7808] (syz.1.314,7808,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 241.332242][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 241.351495][ T7830] loop6: detected capacity change from 0 to 7 [ 241.404555][ T7830] Dev loop6: unable to read RDB block 7 [ 241.410331][ T7830] loop6: AHDI p1 p2 p3 [ 241.472839][ T7830] loop6: partition table partially beyond EOD, truncated [ 241.522718][ T7830] loop6: p1 start 1405162169 is beyond EOD, truncated [ 241.550866][ T24] usb 2-1: no configurations [ 241.562497][ T7830] loop6: p2 size 46 extends beyond EOD, truncated [ 241.581114][ T24] usb 2-1: can't read configurations, error -22 [ 241.782222][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 241.923873][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 242.018979][ T24] usb 2-1: no configurations [ 242.052278][ T24] usb 2-1: can't read configurations, error -22 [ 242.086212][ T7849] libceph: resolve '4' (ret=-3): failed [ 242.146948][ T24] usb usb2-port1: attempt power cycle [ 242.233691][ T1099] hsr_slave_0: left promiscuous mode [ 242.490695][ T1099] hsr_slave_1: left promiscuous mode [ 242.623157][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.642598][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.683483][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 242.699166][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.735583][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.761032][ T24] usb 2-1: no configurations [ 242.786129][ T24] usb 2-1: can't read configurations, error -22 [ 242.921285][ T1099] veth1_macvtap: left promiscuous mode [ 242.934370][ T1099] veth0_macvtap: left promiscuous mode [ 242.942352][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 242.953028][ T1099] veth1_vlan: left promiscuous mode [ 242.958468][ T1099] veth0_vlan: left promiscuous mode [ 242.997505][ T24] usb 2-1: no configurations [ 243.016568][ T24] usb 2-1: can't read configurations, error -22 [ 243.126894][ T24] usb usb2-port1: unable to enumerate USB device [ 244.827175][ T7880] fuse: Bad value for 'fd' [ 245.990592][ T7899] loop6: detected capacity change from 0 to 7 [ 246.012432][ T7899] Dev loop6: unable to read RDB block 7 [ 246.028998][ T7899] loop6: AHDI p1 p2 p3 [ 246.107771][ T7899] loop6: partition table partially beyond EOD, truncated [ 246.136951][ T7899] loop6: p1 start 1405162169 is beyond EOD, truncated [ 246.155723][ T7899] loop6: p2 size 46 extends beyond EOD, truncated [ 246.317131][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 246.525668][ T7909] netlink: 60 bytes leftover after parsing attributes in process `syz.1.341'. [ 246.885239][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 247.837526][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 249.386133][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.346'. [ 249.941013][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.950566][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.683517][ T7938] netlink: 'syz.1.349': attribute type 4 has an invalid length. [ 250.691263][ T7938] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.349'. [ 251.615748][ T5896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 251.668111][ T7966] dvmrp0: entered allmulticast mode [ 251.799074][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 251.820670][ T5896] usb 2-1: config 26 has too many interfaces: 141, using maximum allowed: 32 [ 251.846516][ T5896] usb 2-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 251.869777][ T5896] usb 2-1: config 26 has 0 interfaces, different from the descriptor's value: 141 [ 251.901722][ T5896] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 251.920120][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.953927][ T5896] usb 2-1: Product: syz [ 251.967165][ T5896] usb 2-1: Manufacturer: syz [ 251.989263][ T5896] usb 2-1: SerialNumber: syz [ 252.592494][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 252.651119][ T5896] usb 2-1: USB disconnect, device number 23 [ 252.763008][ T24] usb 6-1: config 0 has an invalid interface number: 176 but max is 0 [ 252.782034][ T24] usb 6-1: config 0 has no interface number 0 [ 252.808196][ T24] usb 6-1: config 0 interface 176 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.838053][ T24] usb 6-1: config 0 interface 176 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.869492][ T24] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 252.907134][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.975180][ T24] usb 6-1: config 0 descriptor?? [ 254.151508][ T7999] virtio-fs: tag not found [ 254.510577][ T8004] /dev/nullb0: Can't open blockdev [ 254.802708][ T8008] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 254.809740][ T8008] PKCS7: Only support pkcs7_signedData type [ 256.010624][ T8029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.366'. [ 256.056996][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.090274][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.095103][ T24] usbhid 6-1:0.176: can't add hid device: -71 [ 257.109502][ T24] usbhid 6-1:0.176: probe with driver usbhid failed with error -71 [ 257.208184][ T24] usb 6-1: USB disconnect, device number 8 [ 257.707709][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.371'. [ 260.063055][ T8067] trusted_key: syz.2.375 sent an empty control message without MSG_MORE. [ 261.510169][ T8083] netlink: 600 bytes leftover after parsing attributes in process `syz.1.379'. [ 261.539848][ T8083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'. [ 261.546643][ T8086] loop6: detected capacity change from 0 to 7 [ 261.587201][ T8083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.379'. [ 261.609229][ T5998] Dev loop6: unable to read RDB block 7 [ 261.623967][ T5998] loop6: AHDI p1 p2 p3 [ 261.639129][ T5998] loop6: partition table partially beyond EOD, truncated [ 261.682331][ T8083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.379'. [ 261.695550][ T5998] loop6: p1 start 1405162169 is beyond EOD, truncated [ 261.776207][ T5998] loop6: p2 size 46 extends beyond EOD, truncated [ 261.827204][ T8086] Dev loop6: unable to read RDB block 7 [ 261.839674][ T8086] loop6: AHDI p1 p2 p3 [ 261.856912][ T8086] loop6: partition table partially beyond EOD, truncated [ 261.864221][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 261.871628][ T8090] IPVS: Scheduler module ip_vs_•ip not found [ 261.901683][ T8086] loop6: p1 start 1405162169 is beyond EOD, truncated [ 261.939640][ T8086] loop6: p2 size 46 extends beyond EOD, truncated [ 262.042201][ T24] usb 2-1: device descriptor read/64, error -71 [ 262.332250][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 262.358152][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 262.512335][ T24] usb 2-1: device descriptor read/64, error -71 [ 262.605802][ T8107] Bluetooth: hci0: unsupported parameter 32780 [ 262.612044][ T8107] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 262.725300][ T24] usb usb2-port1: attempt power cycle [ 263.144761][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 263.232294][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 263.346869][ T24] usb 2-1: device descriptor read/8, error -71 [ 263.605660][ T8116] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 263.904217][ T5824] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 263.923362][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 263.956636][ T24] usb 2-1: device descriptor read/8, error -71 [ 264.090740][ T24] usb usb2-port1: unable to enumerate USB device [ 264.365224][ T5957] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 264.484814][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 265.074734][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.390'. [ 265.177234][ T8133] netlink: 44 bytes leftover after parsing attributes in process `syz.1.390'. [ 265.375253][ T8139] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 266.184579][ T3502] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.404065][ T3502] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 266.407166][ T24] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 266.671443][ T8147] loop6: detected capacity change from 0 to 7 [ 266.723494][ T24] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 266.731737][ T24] usb 7-1: config 0 has no interface number 0 [ 267.400066][ T5843] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 267.420153][ T24] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 267.442432][ T8147] Dev loop6: unable to read RDB block 7 [ 267.476808][ T8147] loop6: AHDI p1 p2 p3 [ 267.481070][ T8147] loop6: partition table partially beyond EOD, truncated [ 267.489156][ T24] usb 7-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 267.514398][ T24] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 267.530261][ T24] usb 7-1: config 0 interface 11 altsetting 253 endpoint 0x86 has invalid wMaxPacketSize 0 [ 267.532428][ T8147] loop6: p1 start 1405162169 is beyond EOD, [ 267.541150][ T24] usb 7-1: config 0 interface 11 has no altsetting 0 [ 267.554754][ T24] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 267.566794][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.586123][ T8147] truncated [ 267.591469][ T24] usb 7-1: config 0 descriptor?? [ 267.635504][ T8137] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 267.655905][ T24] keyspan 7-1:0.11: Keyspan 2 port adapter converter detected [ 267.672284][ T8147] loop6: p2 size 46 extends beyond EOD, truncated [ 267.687825][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 87 [ 267.850091][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 81 [ 267.907217][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 82 [ 267.943278][ T8162] netlink: 'syz.1.397': attribute type 8 has an invalid length. [ 267.952431][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 1 [ 268.005334][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 2 [ 268.060349][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 85 [ 268.123206][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 5 [ 268.124493][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 268.262540][ T24] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 268.309744][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 83 [ 268.321162][ T8173] overlayfs: missing 'workdir' [ 268.339332][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 84 [ 268.409856][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 3 [ 268.566134][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 4 [ 268.716895][ T24] keyspan 7-1:0.11: found no endpoint descriptor for endpoint 6 [ 269.311422][ T24] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 269.688424][ T24] usb 7-1: USB disconnect, device number 3 [ 269.727811][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 269.744851][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 269.756815][ T24] keyspan 7-1:0.11: device disconnected [ 270.029163][ T8187] Set syz0 is full, maxelem 0 reached [ 270.124817][ T8187] netlink: 52 bytes leftover after parsing attributes in process `syz.0.402'. [ 270.222412][ T8187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.302307][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 271.229516][ T8204] fuse: Invalid rootmode [ 272.641695][ T8232] netlink: 68 bytes leftover after parsing attributes in process `syz.0.413'. [ 276.210449][ T8280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.052669][ T5956] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 277.222264][ T5956] usb 7-1: Using ep0 maxpacket: 16 [ 277.235249][ T5956] usb 7-1: config 0 has an invalid interface number: 126 but max is 0 [ 277.262272][ T5956] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.262304][ T5956] usb 7-1: config 0 has no interface number 0 [ 277.262352][ T5956] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 277.263431][ T5956] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 277.263465][ T5956] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 277.263492][ T5956] usb 7-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 277.263518][ T5956] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 277.263546][ T5956] usb 7-1: config 0 interface 126 altsetting 0 endpoint 0x8F has invalid maxpacket 17488, setting to 1024 [ 277.263574][ T5956] usb 7-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 277.263622][ T5956] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 277.263646][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.499873][ T5956] usb 7-1: config 0 descriptor?? [ 277.502372][ T8276] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 277.502665][ T8276] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 277.507163][ T5956] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 277.552324][ T5843] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 277.689419][ T5843] usb 6-1: device descriptor read/64, error -71 [ 277.713735][ T8276] ip_tunnel: non-ECT from 0.0.8.0 with TOS=0x2 [ 277.729111][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.729618][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.742324][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 277.953964][ T5843] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 278.111921][ T5956] usb 7-1: USB disconnect, device number 4 [ 278.262738][ T5843] usb 6-1: device descriptor read/64, error -71 [ 278.372777][ T5843] usb usb6-port1: attempt power cycle [ 278.625287][ T8318] overlayfs: missing 'workdir' [ 278.842473][ T5843] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 279.242338][ T5843] usb 6-1: device descriptor read/8, error -71 [ 279.502316][ T5843] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 279.643261][ T5843] usb 6-1: device descriptor read/8, error -71 [ 279.695291][ T8358] netlink: 11 bytes leftover after parsing attributes in process `syz.2.433'. [ 279.842341][ T5843] usb usb6-port1: unable to enumerate USB device [ 280.413720][ T8374] bond_slave_0: entered promiscuous mode [ 280.419778][ T8374] bond_slave_1: entered promiscuous mode [ 280.472186][ T5843] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 280.524950][ T8374] macsec1: entered allmulticast mode [ 280.531051][ T8374] bond0: entered allmulticast mode [ 280.537052][ T8374] bond_slave_0: entered allmulticast mode [ 280.605587][ T8374] bond_slave_1: entered allmulticast mode [ 280.659687][ T8374] bond0: left allmulticast mode [ 280.684894][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 280.747936][ T5843] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 280.757379][ T8374] bond_slave_0: left allmulticast mode [ 280.842259][ T8374] bond_slave_1: left allmulticast mode [ 280.852886][ T8374] bond_slave_0: left promiscuous mode [ 280.858532][ T8374] bond_slave_1: left promiscuous mode [ 280.888682][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.918082][ T5843] usb 7-1: config 0 descriptor?? [ 280.929874][ T8375] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 281.457428][ T5843] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 281.613610][ T8407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.442'. [ 282.956650][ T8429] binfmt_misc: register: failed to install interpreter file ./file0 [ 283.829766][ T8433] netlink: 'syz.5.448': attribute type 3 has an invalid length. [ 283.838032][ T8433] netlink: 'syz.5.448': attribute type 1 has an invalid length. [ 283.846206][ T8433] netlink: 368 bytes leftover after parsing attributes in process `syz.5.448'. [ 283.855270][ T8433] NCSI netlink: No device for ifindex 33022 [ 284.211865][ T5956] usb 7-1: USB disconnect, device number 5 [ 284.722239][ T5956] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 284.802370][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 284.915391][ T5956] usb 7-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 284.959843][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.685791][ T5956] usb 7-1: config 0 descriptor?? [ 285.729571][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.747635][ T5956] pwc: Philips SPC 900NC USB webcam detected. [ 285.762361][ T24] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.792319][ T30] audit: type=1326 audit(1754820062.786:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 285.800280][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.887144][ T24] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 285.897710][ T30] audit: type=1326 audit(1754820062.826:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 285.946738][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.948732][ T30] audit: type=1326 audit(1754820062.826:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.043762][ T24] usb 1-1: config 0 descriptor?? [ 286.106944][ T30] audit: type=1326 audit(1754820062.826:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.216085][ T30] audit: type=1326 audit(1754820062.826:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.300558][ T30] audit: type=1326 audit(1754820062.826:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.405746][ T30] audit: type=1326 audit(1754820062.826:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.471225][ T30] audit: type=1326 audit(1754820062.826:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.568887][ T30] audit: type=1326 audit(1754820062.826:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.630944][ T5956] pwc: send_video_command error -71 [ 286.657054][ T30] audit: type=1326 audit(1754820062.826:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8461 comm="syz.1.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90fc38ebe9 code=0x50000 [ 286.672169][ T5956] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 286.753461][ T5956] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 286.877927][ T5956] usb 7-1: USB disconnect, device number 6 [ 286.900230][ T24] usb 1-1: string descriptor 0 read error: -71 [ 286.971219][ T24] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 286.987513][ T24] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 287.011064][ T24] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 287.038839][ T24] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 287.071372][ T24] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 287.123258][ T24] usb 1-1: USB disconnect, device number 14 [ 287.422959][ T8499] program syz.6.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.709755][ T8503] Device name cannot be null; rc = [-22] [ 288.332954][ T5843] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.302054][ T8528] fuse: Bad value for 'fd' [ 289.577170][ T5896] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 289.942329][ T8529] sctp: failed to load transform for md5: -2 [ 290.002243][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 290.052391][ T5896] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 290.120400][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 290.195355][ T5896] usb 2-1: config 0 has no interface number 0 [ 290.256842][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.317940][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.364117][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 290.404089][ T5896] usb 2-1: config 0 has no interface number 0 [ 290.422258][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.469858][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.508186][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 290.560727][ T5896] usb 2-1: config 0 has no interface number 0 [ 290.582893][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.622178][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 290.667316][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 290.688234][ T5896] usb 2-1: config 0 has no interface number 0 [ 291.084153][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.271541][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.319184][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 291.352715][ T8553] vlan2: entered allmulticast mode [ 291.368265][ T5896] usb 2-1: config 0 has no interface number 0 [ 291.377173][ T8553] bond0: entered allmulticast mode [ 291.395405][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.420811][ T8553] bond_slave_0: entered allmulticast mode [ 291.436789][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.464410][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 291.483295][ T5896] usb 2-1: config 0 has no interface number 0 [ 291.489482][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.492954][ T8553] bond_slave_1: entered allmulticast mode [ 291.501786][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.534320][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 291.546982][ T5896] usb 2-1: config 0 has no interface number 0 [ 291.778741][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.789292][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.800816][ T5896] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 291.809132][ T5896] usb 2-1: config 0 has no interface number 0 [ 291.815750][ T5896] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 291.827008][ T5896] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 291.837560][ T8565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.060069][ T8576] overlayfs: missing 'workdir' [ 292.218658][ T5896] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 292.248620][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.256805][ T5896] usb 2-1: Product: syz [ 292.261114][ T5896] usb 2-1: Manufacturer: syz [ 292.273904][ T5896] usb 2-1: SerialNumber: syz [ 292.514777][ T8587] fuse: Unknown parameter 's& úS' [ 293.102355][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.426535][ T5896] usb 2-1: config 0 descriptor?? [ 293.442184][ T5896] usb 2-1: can't set config #0, error -71 [ 293.472532][ T5896] usb 2-1: USB disconnect, device number 28 [ 293.809109][ T8602] capability: warning: `syz.5.485' uses 32-bit capabilities (legacy support in use) [ 295.048461][ T8621] ªªªªªª: renamed from lo [ 295.758692][ T8628] overlayfs: missing 'workdir' [ 295.868619][ T8630] loop8: detected capacity change from 0 to 7 [ 295.907837][ T8630] Dev loop8: unable to read RDB block 7 [ 295.928508][ T8630] loop8: unable to read partition table [ 295.972997][ T8630] loop8: partition table beyond EOD, truncated [ 296.038813][ T8630] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 297.294978][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 297.565709][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.690582][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.716659][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 297.766322][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.813554][ T24] usb 3-1: config 0 descriptor?? [ 298.297678][ T24] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 298.332421][ T24] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 298.390333][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000B/input/input7 [ 298.489338][ T8687] overlayfs: missing 'workdir' [ 298.537113][ T8652] wg2: entered promiscuous mode [ 298.542911][ T8652] wg2: entered allmulticast mode [ 298.557759][ T24] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 298.910595][ T24] usb 3-1: USB disconnect, device number 18 [ 299.056111][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 299.621413][ T8692] fido_id[8692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 300.204381][ T8713] Cannot find add_set index 0 as target [ 300.210856][ T8713] tipc: Started in network mode [ 300.222184][ T8713] tipc: Node identity a2f802c5473f, cluster identity 4711 [ 300.264208][ T8713] tipc: Enabled bearer , priority 0 [ 300.296900][ T8719] syzkaller0: entered promiscuous mode [ 300.331106][ T8719] syzkaller0: entered allmulticast mode [ 300.491682][ T5909] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 300.633692][ T8713] tipc: Resetting bearer [ 301.388348][ T5843] tipc: Node number set to 3855024837 [ 301.452175][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 301.586717][ T5909] usb 7-1: config 0 has an invalid interface number: 255 but max is 1 [ 301.625805][ T5909] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.651140][ T8711] tipc: Resetting bearer [ 301.752472][ T5909] usb 7-1: config 0 has no interface number 1 [ 301.772659][ T5909] usb 7-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 301.814236][ T5909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 301.948876][ T5909] usb 7-1: config 0 interface 255 has no altsetting 0 [ 301.963009][ T8711] tipc: Disabling bearer [ 301.977210][ T5909] usb 7-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 302.017502][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.102289][ T5909] usb 7-1: Product: syz [ 302.106540][ T5909] usb 7-1: Manufacturer: syz [ 302.111196][ T5909] usb 7-1: SerialNumber: syz [ 302.939595][ T5909] usb 7-1: config 0 descriptor?? [ 303.075267][ T5909] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 303.129538][ T5909] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.175904][ T5909] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 303.294255][ T8750] overlayfs: missing 'workdir' [ 303.319708][ T24] usb 7-1: USB disconnect, device number 7 [ 303.337409][ T8749] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 303.442681][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 303.990966][ T8759] gre1: entered allmulticast mode [ 304.164237][ T5896] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 304.394910][ T5896] usb 2-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 304.415927][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.484727][ T5896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 304.508259][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.519716][ T5896] usb 2-1: SerialNumber: syz [ 304.862782][ T8779] libceph: resolve '4' (ret=-3): failed [ 305.623194][ T5896] usb 2-1: 0:2 : does not exist [ 305.658964][ T5896] usb 2-1: unit 5 not found! [ 305.808522][ T5896] usb 2-1: USB disconnect, device number 29 [ 306.156999][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.266288][ T8800] overlayfs: missing 'workdir' [ 306.332214][ T5896] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 306.610523][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.652169][ T5896] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.678824][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.750878][ T5896] usb 2-1: config 0 descriptor?? [ 306.784402][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 306.852199][ T982] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 307.022294][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 307.033090][ T982] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 307.060967][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 307.114027][ T982] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 307.162294][ T982] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 307.198022][ T982] usb 3-1: config 1 has no interface number 0 [ 307.205603][ T982] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.217101][ T982] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 307.261225][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 307.262249][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 307.272922][ T982] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 307.280305][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.312742][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.322550][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 307.343650][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.386985][ T24] usb 7-1: New USB device found, idVendor=056a, idProduct=033d, bcdDevice= 0.00 [ 307.390747][ T982] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 307.455263][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.516363][ T24] usb 7-1: config 0 descriptor?? [ 307.545225][ T5896] pwc: recv_control_msg error -71 req 04 val 1000 [ 307.552928][ T5896] pwc: recv_control_msg error -71 req 04 val 1300 [ 307.588104][ T5896] pwc: recv_control_msg error -71 req 04 val 1400 [ 307.597890][ T8805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.607683][ T5896] pwc: recv_control_msg error -71 req 02 val 2000 [ 307.641202][ T8805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.657491][ T5896] pwc: recv_control_msg error -71 req 02 val 2100 [ 307.688995][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 307.717229][ T982] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 307.742740][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 307.760911][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 307.823472][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 307.855691][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 307.896258][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 307.929712][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 307.950459][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 307.961979][ T24] wacom 0003:056A:033D.000C: unknown main item tag 0x0 [ 307.992552][ T24] wacom 0003:056A:033D.000C: unknown main item tag 0x0 [ 308.000201][ T24] wacom 0003:056A:033D.000C: unknown main item tag 0x0 [ 308.019568][ T5896] pwc: Registered as video103. [ 308.024542][ T24] wacom 0003:056A:033D.000C: unknown main item tag 0x0 [ 308.117818][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 308.179674][ T24] usb 7-1: USB disconnect, device number 8 [ 308.191033][ T5896] usb 2-1: USB disconnect, device number 30 [ 324.462467][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 389.112330][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 413.612040][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 413.619230][ C0] rcu: 1-...!: (1 ticks this GP) idle=a00c/1/0x4000000000000000 softirq=43471/43471 fqs=0 [ 413.630198][ C0] rcu: (detected by 0, t=10502 jiffies, g=33593, q=346 ncpus=2) [ 413.637960][ C0] Sending NMI from CPU 0 to CPUs 1: [ 413.637993][ C1] NMI backtrace for cpu 1 [ 413.638009][ C1] CPU: 1 UID: 0 PID: 8827 Comm: syz.5.538 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 413.638028][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.638038][ C1] RIP: 0010:__kasan_check_byte+0x2d/0x40 [ 413.638063][ C1] Code: 00 41 56 53 48 89 f3 49 89 fe e8 5e 14 00 00 84 c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03 00 00 89 d8 5b <41> 5e c3 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 [ 413.638077][ C1] RSP: 0018:ffffc90000a08bb0 EFLAGS: 00000002 [ 413.638093][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3142ac06a82f8e00 [ 413.638104][ C1] RDX: 0000000000000000 RSI: ffffffff8b69127e RDI: 1ffff11006861060 [ 413.638116][ C1] RBP: ffffffff89865124 R08: 0000000000000001 R09: 0000000000000000 [ 413.638127][ C1] R10: dffffc0000000000 R11: ffffffff89865060 R12: 0000000000000000 [ 413.638139][ C1] R13: ffff888034308300 R14: ffff888034308300 R15: 0000000000000001 [ 413.638151][ C1] FS: 00007ff5b76d76c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 413.638165][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.638177][ C1] CR2: 000000110c3301ba CR3: 000000006b5f4000 CR4: 00000000003526f0 [ 413.638194][ C1] Call Trace: [ 413.638201][ C1] [ 413.638209][ C1] lock_acquire+0x8d/0x360 [ 413.638233][ C1] _raw_spin_lock+0x2e/0x40 [ 413.638256][ C1] ? advance_sched+0xc4/0xc90 [ 413.638278][ C1] advance_sched+0xc4/0xc90 [ 413.638302][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 413.638325][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 413.638353][ C1] ? __pfx_advance_sched+0x10/0x10 [ 413.638374][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 413.638402][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 413.638417][ C1] ? read_tsc+0x9/0x20 [ 413.638443][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 413.638473][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 413.638493][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 413.638518][ C1] [ 413.638523][ C1] [ 413.638530][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 413.638547][ C1] RIP: 0010:rcu_is_watching+0x15/0xb0 [ 413.638565][ C1] Code: 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 90 65 f5 10 e8 4b 77 bf 09 <89> c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 70 [ 413.638578][ C1] RSP: 0018:ffffc9000e3cf3b8 EFLAGS: 00000286 [ 413.638593][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 3142ac06a82f8e00 [ 413.638604][ C1] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 413.638615][ C1] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000 [ 413.638626][ C1] R10: ffffc9000e3cf598 R11: ffffffff81acfd40 R12: 0000000000000002 [ 413.638637][ C1] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000000 [ 413.638650][ C1] ? unwind_next_frame+0xa5/0x2390 [ 413.638667][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 413.638693][ C1] ? rcu_is_watching+0x15/0xb0 [ 413.638710][ C1] lock_acquire+0x5f/0x360 [ 413.638727][ C1] ? unwind_next_frame+0xa5/0x2390 [ 413.638743][ C1] ? do_syscall_64+0xfa/0x3b0 [ 413.638761][ C1] ? unwind_next_frame+0xa5/0x2390 [ 413.638777][ C1] unwind_next_frame+0xc2/0x2390 [ 413.638793][ C1] ? unwind_next_frame+0xa5/0x2390 [ 413.638812][ C1] ? unwind_next_frame+0xa5/0x2390 [ 413.638829][ C1] ? __se_sys_io_uring_enter+0x2df/0x2b20 [ 413.638848][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 413.638868][ C1] arch_stack_walk+0x11c/0x150 [ 413.638889][ C1] ? do_syscall_64+0xfa/0x3b0 [ 413.638909][ C1] stack_trace_save+0x9c/0xe0 [ 413.638928][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 413.638948][ C1] ? __lock_acquire+0xab9/0xd20 [ 413.638966][ C1] kasan_save_track+0x3e/0x80 [ 413.638989][ C1] ? kasan_save_track+0x3e/0x80 [ 413.639010][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 413.639024][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 413.639042][ C1] ? __io_alloc_req_refill+0x9d/0x280 [ 413.639060][ C1] ? io_submit_sqes+0xc31/0x1c50 [ 413.639081][ C1] ? __se_sys_io_uring_enter+0x2df/0x2b20 [ 413.639096][ C1] ? do_syscall_64+0xfa/0x3b0 [ 413.639136][ C1] __kasan_slab_alloc+0x6c/0x80 [ 413.639152][ C1] kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 413.639173][ C1] ? kmem_cache_alloc_bulk_noprof+0xfa/0x790 [ 413.639194][ C1] __io_alloc_req_refill+0x9d/0x280 [ 413.639213][ C1] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 413.639234][ C1] ? io_submit_sqes+0xa50/0x1c50 [ 413.639259][ C1] io_submit_sqes+0xc31/0x1c50 [ 413.639295][ C1] __se_sys_io_uring_enter+0x2df/0x2b20 [ 413.639312][ C1] ? __pfx_futex_wait+0x10/0x10 [ 413.639339][ C1] ? __mm_populate+0x308/0x380 [ 413.639363][ C1] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 413.639377][ C1] ? do_futex+0x333/0x420 [ 413.639394][ C1] ? up_write+0x1c4/0x420 [ 413.639414][ C1] ? __pfx_do_futex+0x10/0x10 [ 413.639431][ C1] ? vm_mmap_pgoff+0x3f0/0x4c0 [ 413.639455][ C1] ? __se_sys_futex+0x36f/0x400 [ 413.639479][ C1] ? rcu_is_watching+0x15/0xb0 [ 413.639497][ C1] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 413.639520][ C1] do_syscall_64+0xfa/0x3b0 [ 413.639536][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.639552][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.639567][ C1] ? clear_bhb_loop+0x60/0xb0 [ 413.639585][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.639600][ C1] RIP: 0033:0x7ff5b678ebe9 [ 413.639615][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.639628][ C1] RSP: 002b:00007ff5b76d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 413.639644][ C1] RAX: ffffffffffffffda RBX: 00007ff5b69b5fa0 RCX: 00007ff5b678ebe9 [ 413.639656][ C1] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000003 [ 413.639666][ C1] RBP: 00007ff5b6811e19 R08: 0000000000000000 R09: 0000000000000000 [ 413.639676][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.639686][ C1] R13: 00007ff5b69b6038 R14: 00007ff5b69b5fa0 R15: 00007ffce932ac48 [ 413.639705][ C1] [ 413.639988][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g33593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 414.257206][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=21695 [ 414.265119][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g33593 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 414.276514][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 414.286538][ C0] rcu: RCU grace-period kthread stack dump: [ 414.292457][ C0] task:rcu_preempt state:I stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 414.304524][ C0] Call Trace: [ 414.307835][ C0] [ 414.310882][ C0] __schedule+0x16aa/0x4c90 [ 414.315440][ C0] ? schedule+0x165/0x360 [ 414.319826][ C0] ? __pfx___schedule+0x10/0x10 [ 414.324723][ C0] ? schedule+0x91/0x360 [ 414.328992][ C0] schedule+0x165/0x360 [ 414.333188][ C0] schedule_timeout+0x12b/0x270 [ 414.338084][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 414.343588][ C0] ? __pfx_process_timeout+0x10/0x10 [ 414.348911][ C0] ? prepare_to_swait_event+0x341/0x380 [ 414.354513][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 414.359405][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 414.364369][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.369599][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 414.374911][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 414.380143][ C0] ? finish_swait+0xcd/0x1f0 [ 414.385205][ C0] rcu_gp_kthread+0x99/0x390 [ 414.390084][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.395331][ C0] ? __kthread_parkme+0x7b/0x200 [ 414.400315][ C0] ? __kthread_parkme+0x1a1/0x200 [ 414.405386][ C0] kthread+0x70e/0x8a0 [ 414.409516][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 414.414743][ C0] ? __pfx_kthread+0x10/0x10 [ 414.419378][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 414.424623][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.429858][ C0] ? __pfx_kthread+0x10/0x10 [ 414.434489][ C0] ret_from_fork+0x3fc/0x770 [ 414.439195][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 414.444345][ C0] ? __switch_to_asm+0x39/0x70 [ 414.449136][ C0] ? __switch_to_asm+0x33/0x70 [ 414.453929][ C0] ? __pfx_kthread+0x10/0x10 [ 414.458552][ C0] ret_from_fork_asm+0x1a/0x30 [ 414.463456][ C0]