last executing test programs: 2m33.701644641s ago: executing program 3 (id=3105): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a00000000000079113000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES8, @ANYRESHEX], 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = epoll_create1(0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000580), &(0x7f0000001580)=""/85}, 0x20) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @sco={0x1f, @none}, @generic={0x2d, "261cded8832115872078af5ef0c1"}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)='pim6reg0\x00', 0x1, 0x0, 0xba0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000440)="90e2944e09384f63d7a616cce90534b2851528543290d699026348c9dd66b8027e427556d36f3c38844d041de02d151a9f1c2be2c6075c78da7ed5f3151d94c000612ab31eabf86d0458daad11c05e63f90741cab00232390e64458179d84b7b", &(0x7f0000000580)=""/198, &(0x7f0000000680)="f85a22fc187b8d4e731a4c653e4efbcda2bf26dd323e011874823774a4e5eec79ba6eabd5fc04324a8fb34c1ecf85ea9e5dbe5dc4c7be66d39160d7fa4243ca7570a308264ed65dfe29486ef7a87ba686e6418efd921c89263", &(0x7f0000000700)="33f76911f493eebfa4595850d543a9a208f46a0ad064e53f169c8559f0141fd2acd75371b8ad2244d746cec28a6af18fa707b3b9693ad42bd12a422c113035c4faddb7429eca96c32fd97d38d996f0e6a698b8f1a38148bcb56a994544d2e3ea3690cbf3b6dceae701c7a4290d4f4c895a2b5df0064cda68945d9dc2056807557a9ec6819dacaf2b9d", 0x6, 0xffffffffffffffff, 0x4}, 0x38) 2m33.474509506s ago: executing program 3 (id=3107): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000007d00)={&(0x7f0000000380)="5e9897004b609984e3d4850c26a2d4004608fe0f13a357d18175426a1a47a44d4bb2728368e4c254d9ad3292ecf878bff715638b3ea0065e0dd8a4c158806c0f99b9d0043609e68e2d4ba4112758f22a55e9ced87ccd404010090000d3549f512d228e044a6dc050d4a5612cc804", 0x6e}, 0x1, 0x0, 0x0, 0x10}, 0x200080c4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioprio_get$uid(0x3, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="00861e976ec6ddbb9167606485734ac1fa9200000400000000e7ffffff9d7f70231e41ee5e49403b127e329f41df3917a024a3ecf113009839e903494949da7e6bba91f02f3f6321f8f32b371a6b9798f51cfb8df86a5828513038"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x11, 0x2, 0x0, {{}, {0x0, 0x6}}}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '4():/-@#+}8%'}, {0x20, '&'}, {0x20, '%,\x8e,\x8e%'}, {}, {0x20, '$'}], 0xa, "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"}, 0x124) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000bac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m32.12222754s ago: executing program 3 (id=3108): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) write$smackfs_netlabel(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="30303030303030303030303030303030323334322e303030303230303030303030303030302e30303030303030303030303030303032373232332e30303030303030303030303030303030303038312e2000df619ac30cd5cbfcb800cfbce5ac60ad47a8ce75f50b538e34ec96d29e86457d82aadc8db3eac839c1e61ef3cad96e4b89b88bed794f15c2a251ceb9ec263e1c5e5df342c21e8a6737afe8dc719c7c0a26e34a1ce0e629010e819d837a2379ae4094cb5ef5c10ece0d1f7867b55857c4e8930ade6a11de9cc4ba27f279dc2b033e85d2bb299ba024c6bac09e3b85f38bf6f5525da8cfc1bda8ba0059da4b8e6eec55ed548cd1db293a4e832d161ba2eeb4dead24bea4b19694"], 0x56) 2m31.90559656s ago: executing program 3 (id=3110): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff4}, {}, {0x1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m31.575328144s ago: executing program 3 (id=3111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r1, @ANYBLOB="05a3fdffffff000000000d00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x20000000) 2m31.440962413s ago: executing program 3 (id=3112): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_emit_vhci(0x0, 0x6) ioctl$NBD_DO_IT(r0, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0) 2m17.095776782s ago: executing program 32 (id=3112): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_emit_vhci(0x0, 0x6) ioctl$NBD_DO_IT(r0, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0) 16.2464323s ago: executing program 0 (id=3476): r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(0x0, 0x10, 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x1, 0x1, [0x0, 0x0, r3], [0x1, 0x8, 0x1, 0x2], [0x10001, 0x6, 0x3, 0x7f], [0x9, 0x2, 0x8, 0x401]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) keyctl$revoke(0x3, r1) close_range(r0, 0xffffffffffffffff, 0x0) 14.534333621s ago: executing program 0 (id=3479): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea46, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0xefdb, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7bf, 0x0, 0x4, 0x6, 0x401, 0x80c, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x5, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x0, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x10000, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0x7955, 0x2, 0xc068, 0x5, 0x9, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0xc818, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x2, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0xd, 0x8, 0x3, 0xfffffff7, 0x7, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7], [0x2, 0x9, 0x1a9e1bfd, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0xb, 0x5, 0x8, 0x10000, 0xc9b, 0xffffff3c, 0x8b0, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x3ff, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x7ffc, 0xb, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x8, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x802, 0x1, 0xfffffff3, 0x5, 0x4, 0xffffffff, 0x1f, 0x2, 0xa, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb33a, 0xec000000, 0x2, 0x1904, 0x4, 0x4009, 0x8, 0x6, 0x80, 0x5, 0xfffffffb, 0x1, 0x6e79, 0x9, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x8, 0x80, 0x8]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000001c0)='./file1\x00', 0x24) 13.740505319s ago: executing program 5 (id=3480): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1) 12.560724373s ago: executing program 0 (id=3481): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000008000000000000000017e9607668804ed0df80bbd5da15d59c97420d1df91760cc0ad9d0318a8efdbe6191b53fda0de8543bc5a57592"], 0x48) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x9}}, {{0x9, 0x5, 0x85, 0x1, 0x40}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213}, &(0x7f0000000380), &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000002001d00000000000009090000855951c7f244f7d30600000000000000b526ade1364b859249ed5bca2397259e81240ef1f8c30b4f77a26e9f32bd113eb6b133a05273cb6dc8efb538c95cecd707ecbd8644b8e3e315538b3d63912896da93f0a87dbf59b14570002b89c4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.187411357s ago: executing program 1 (id=3484): r0 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x2, 0x1, @mcast2}}, {{0xa, 0x0, 0x6, @local}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 10.787545638s ago: executing program 1 (id=3486): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.60588488s ago: executing program 4 (id=3488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000030000002b00000008000300", @ANYRES32=r2, @ANYBLOB="04004600050034006e000000080026006c090000300051802c"], 0x60}}, 0x4800) 10.585517645s ago: executing program 5 (id=3489): r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(0x0, 0x10, 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x7e8, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x848) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x1, 0x1, [0x0, 0x0, r3], [0x1, 0x8, 0x1, 0x2], [0x10001, 0x6, 0x3, 0x7f], [0x9, 0x2, 0x8, 0x401]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) keyctl$revoke(0x3, r1) close_range(r0, 0xffffffffffffffff, 0x0) 10.363972908s ago: executing program 4 (id=3490): socket(0x27, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x6, 0x0, 0x0, 0x0) 8.395732003s ago: executing program 4 (id=3492): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)) 8.342467024s ago: executing program 0 (id=3493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000080000000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x2, 0x3c8, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0xff]}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0x8, 0x1}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x9, {@empty, {[0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x44}}, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) socket$l2tp(0x2, 0x2, 0x73) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000180)={{0x5e, @multicast1, 0x4e20, 0x1, 'wlc\x00', 0x28, 0x3, 0x45}, {@loopback, 0x4e22, 0x10000, 0x0, 0x5, 0xff}}, 0x44) preadv(r8, &(0x7f0000000540)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, 0x6, 0x4) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x102, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r11, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r11, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 8.234772572s ago: executing program 2 (id=3494): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x6}}], 0x1, 0x14) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc}) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x347, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x17, 0x7800, 0x1000, 0x6, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x5e, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@timestamp={0x44, 0xc, 0x80, 0x0, 0x8, [0x16, 0xe]}, @lsrr={0x83, 0x7, 0x32, [@dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000050000000b0000000400009300000000030000004000000081000000040000006f00000080ffff05000000b8ffffff01000000030000000000000a010000000200000000000009020000001000000000000009030000000000000000000003000000000200000003000000000000000010005f00"], &(0x7f0000000580)=""/193, 0x95, 0xc1, 0x0, 0x58e73298, 0x10000, @value=r5}, 0x28) 7.056315737s ago: executing program 5 (id=3495): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0) 6.75931108s ago: executing program 4 (id=3496): r0 = socket$inet(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x2, 0x1, @mcast2}}, {{0xa, 0x0, 0x6, @local}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) read$msr(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4}}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0d, &(0x7f0000000040)) 6.200038587s ago: executing program 2 (id=3497): r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000001c0)=[0x0], 0x9, 0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(0x0, 0x10, 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x810, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={r3, 0x4, 0x1, 0x1, 0x1, [r4, 0x0, r5, r6], [0x1, 0x8, 0x1, 0x2], [0x10001, 0x6, 0x3, 0x7f], [0x9, 0x2, 0x8, 0x401]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) keyctl$revoke(0x3, r1) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.110474503s ago: executing program 1 (id=3498): epoll_create(0x1) io_uring_setup(0x1fc3, &(0x7f0000000000)={0x0, 0x0, 0x8000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r4, 0x6a98047402e98331, 0x0, 0x25dfdbff}, 0x14}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000380)='./bus\x00') fcntl$dupfd(r5, 0x0, r5) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0xfe33) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.679919065s ago: executing program 1 (id=3499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="c841826c2883", 0x6}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x11) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000940)}], 0x1) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r4, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x0, 0x0) 4.510870246s ago: executing program 5 (id=3500): syz_open_dev$dri(0x0, 0x1f, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e08810c"], 0xb) 4.509887478s ago: executing program 2 (id=3501): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xc, 0x0, &(0x7f00000000c0)="e0b9547e98a78c1e00b111f0", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_emit_ethernet(0x69, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x1f, 0x5b, 0x67, 0x0, 0xf0, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x33}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x3, 0x0, [], "7032ea"}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x3, 0x1, 0xff, 0x0, 0x1, 0x3, 0x0, 0x9}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x3c, 0x2, 0x0, 0x3, 0x5, 0x4}, 0x2, {0x9, 0x0, 0x3, 0x5}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.458547748s ago: executing program 0 (id=3502): socket(0x27, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000100)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x6, 0x0, 0x0, 0x0) 4.415414615s ago: executing program 5 (id=3503): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x0, 0x10}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB], 0xbc}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26000015}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.0197246s ago: executing program 0 (id=3504): socket$packet(0x11, 0x3, 0x300) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0xe) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)={0x3, @bcast}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xfc, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x8}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f00000003c0)="1c717ef7c29d88f7da91be0196f95b7fc92381774c8cebc74347343eabf563c40a53f7d7", 0x24}, {0x0}], 0x2) clock_getres(0xf1f81c070db0eba1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TCFLSH(r6, 0x8910, 0x20001114) 2.962504844s ago: executing program 4 (id=3505): r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(0x0, 0x10, 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x7e8, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x848) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={0x0, 0x4, 0x1, 0x1, 0x1, [0x0, 0x0, r3], [0x1, 0x8, 0x1, 0x2], [0x10001, 0x6, 0x3, 0x7f], [0x9, 0x2, 0x8, 0x401]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) keyctl$revoke(0x3, r1) close_range(r0, 0xffffffffffffffff, 0x0) 2.882280256s ago: executing program 2 (id=3506): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(0x0, 0x0, &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000080)={0x8, 0xeb, 0xffffffff, 0x2000}) socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) iopl(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x41, 0x107, 0x0, 0x7, {0x1, 0x7c}, [@nested={0x4, 0xfc}]}, 0x18}}, 0x4010) 2.199643067s ago: executing program 1 (id=3507): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea46, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0xefdb, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7bf, 0x0, 0x4, 0x6, 0x401, 0x80c, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x5, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x0, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x10000, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0x7955, 0x2, 0xc068, 0x5, 0x9, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0xc818, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0x2, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0xd, 0x8, 0x3, 0xfffffff7, 0x7, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7], [0x2, 0x9, 0x1a9e1bfd, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0xb, 0x5, 0x8, 0x10000, 0xc9b, 0xffffff3c, 0x8b0, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x3ff, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x7ffc, 0xb, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x8, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x802, 0x1, 0xfffffff3, 0x5, 0x4, 0xffffffff, 0x1f, 0x2, 0xa, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb33a, 0xec000000, 0x2, 0x1904, 0x4, 0x4009, 0x8, 0x6, 0x80, 0x5, 0xfffffffb, 0x1, 0x6e79, 0x9, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x8, 0x80, 0x8]}, 0x45c) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f00000001c0)='./file1\x00', 0x24) 1.67966951s ago: executing program 4 (id=3508): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r5, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.524953222s ago: executing program 2 (id=3509): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 446.094203ms ago: executing program 1 (id=3510): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x80000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getpid() ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='nilfs2\x00', 0x8080, 0x0) 5.313761ms ago: executing program 2 (id=3511): r0 = socket(0x10, 0x2, 0x0) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000080)="b5", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f00000001c0)=[0x0], 0x9, 0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000280)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(0x0, 0x10, 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x810, 0x0, 0x230, 0xf0, 0x230, 0x230, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x800}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000300)={r3, 0x4, 0x1, 0x1, 0x1, [r4, 0x0, r5, r6], [0x1, 0x8, 0x1, 0x2], [0x10001, 0x6, 0x3, 0x7f], [0x9, 0x2, 0x8, 0x401]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x100000000000f7) keyctl$revoke(0x3, r1) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=3512): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40003, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r1, 0x57de, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 504][ T5819] dvb-usb: bulk message failed: -22 (6/0) [ 854.114207][ T5819] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 854.142487][ T5819] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31 [ 854.157309][ T5819] dvb-usb: schedule remote query interval to 150 msecs. [ 854.166023][ T5819] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 854.232569][T17142] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 854.239799][T17142] dvb-usb: bulk message failed: -22 (4/0) [ 854.250437][ T5819] usb 3-1: USB disconnect, device number 75 [ 854.402599][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 855.426622][T17232] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 855.501490][T17233] net_ratelimit: 22 callbacks suppressed [ 855.501512][T17233] netlink: zone id is out of range [ 855.523925][T17233] netlink: zone id is out of range [ 855.552129][T17233] netlink: zone id is out of range [ 855.576957][T17233] netlink: zone id is out of range [ 855.714841][T17233] netlink: zone id is out of range [ 855.729150][T17233] netlink: zone id is out of range [ 855.751175][T17233] netlink: zone id is out of range [ 855.774420][T17233] netlink: zone id is out of range [ 855.814343][T17233] netlink: zone id is out of range [ 855.840994][T17233] netlink: zone id is out of range [ 858.785810][T17271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2694'. [ 859.257926][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2695'. [ 859.638376][T17277] 9pnet: Could not find request transport: fd0x0000000000000003 [ 859.791555][T16052] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 859.948740][T16052] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 859.975769][T16052] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 859.989056][T16052] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 860.000398][T16052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.030844][T16052] usb 4-1: config 0 descriptor?? [ 860.050525][T16052] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 860.057375][T16052] dvb-usb: bulk message failed: -22 (3/0) [ 860.409437][T17283] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 860.469397][T16052] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 860.479994][T16052] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 860.491077][T16052] usb 4-1: media controller created [ 860.501191][T16052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 860.519781][T16052] dvb-usb: bulk message failed: -22 (6/0) [ 860.528292][T16052] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 860.725393][T16052] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 860.756087][T16052] dvb-usb: schedule remote query interval to 150 msecs. [ 860.787070][T16052] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 860.812476][T16052] usb 4-1: USB disconnect, device number 67 [ 860.882222][T17315] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 860.920405][T16052] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 863.895513][T17353] net_ratelimit: 38 callbacks suppressed [ 863.895537][T17353] netlink: zone id is out of range [ 863.923673][T17348] 9pnet: Could not find request transport: fd0x0000000000000003 [ 863.924760][T17353] netlink: zone id is out of range [ 863.945361][T17353] netlink: zone id is out of range [ 863.950654][T17353] netlink: zone id is out of range [ 863.966677][T17353] netlink: zone id is out of range [ 863.976691][T17353] netlink: zone id is out of range [ 863.996820][T17356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2707'. [ 864.011115][T17353] netlink: zone id is out of range [ 864.024078][T17353] netlink: zone id is out of range [ 864.037223][T17353] netlink: zone id is out of range [ 864.052751][T17353] netlink: zone id is out of range [ 864.343555][T17365] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2711'. [ 864.356497][T17364] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2711'. [ 864.376966][ T5872] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 864.833990][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 864.854614][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 864.873826][ T5872] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 864.901890][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.750423][ T5872] usb 3-1: config 0 descriptor?? [ 865.760280][ T5872] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 865.769714][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 865.785235][ T5872] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 865.801094][ T5872] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 865.822421][ T5872] usb 3-1: media controller created [ 865.843983][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 865.857498][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 865.863553][ T5872] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 865.876514][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 865.900013][ T5872] dvb-usb: schedule remote query interval to 150 msecs. [ 865.910082][ T5872] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 866.047754][T17392] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 866.062834][ T5872] dvb-usb: bulk message failed: -22 (1/0) [ 866.082108][ T5872] dvb-usb: error while querying for an remote control event. [ 866.100841][T17358] dvb-usb: bulk message failed: -22 (4/0) [ 866.939285][ T5819] usb 3-1: USB disconnect, device number 76 [ 866.978404][ T5819] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 867.182386][ T5872] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 867.860353][ T5872] usb 5-1: Using ep0 maxpacket: 32 [ 867.918409][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 867.933743][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 867.941266][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.952103][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.986900][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 868.118442][ T5872] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=d3.fc [ 868.129776][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.141723][ T5872] usb 5-1: Product: syz [ 868.146261][ T5872] usb 5-1: Manufacturer: syz [ 868.151195][ T5872] usb 5-1: SerialNumber: syz [ 868.174430][ T5872] usb 5-1: config 0 descriptor?? [ 868.457758][T17426] 9pnet: Could not find request transport: fd0x0000000000000003 [ 868.543204][T17434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'. [ 868.553389][T17434] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2717'. [ 870.006569][T17434] bond2: entered promiscuous mode [ 870.046101][T17434] 8021q: adding VLAN 0 to HW filter on device bond2 [ 870.070891][T17441] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'. [ 870.772978][ T5915] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 870.934924][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 871.118222][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 871.154802][ T5915] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 871.177518][ T24] usb 5-1: USB disconnect, device number 68 [ 871.186217][ T5915] usb 3-1: can't read configurations, error -71 [ 871.597700][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 872.001601][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 872.156713][T17520] net_ratelimit: 21 callbacks suppressed [ 872.156747][T17520] netlink: zone id is out of range [ 872.851929][T17520] netlink: zone id is out of range [ 872.857743][T17527] 9pnet_fd: Insufficient options for proto=fd [ 872.880027][T17520] netlink: zone id is out of range [ 872.888834][T17520] netlink: zone id is out of range [ 872.897696][T17520] netlink: zone id is out of range [ 872.905246][T17520] netlink: zone id is out of range [ 872.913677][T17520] netlink: zone id is out of range [ 872.922572][T17520] netlink: zone id is out of range [ 872.929015][T17520] netlink: zone id is out of range [ 872.934744][T17520] netlink: zone id is out of range [ 873.673581][T17542] trusted_key: encrypted_key: key user:syz not found [ 874.382886][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 874.475456][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 874.552842][ T24] usb 5-1: can't read configurations, error -71 [ 874.647383][T17555] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2737'. [ 874.787906][T17559] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2739'. [ 875.705275][T17569] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2742'. [ 876.833528][T17579] 9pnet_fd: Insufficient options for proto=fd [ 877.411121][ T24] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 877.551790][T17593] net_ratelimit: 6 callbacks suppressed [ 877.552788][T17593] netlink: zone id is out of range [ 877.565477][T17593] netlink: zone id is out of range [ 877.571015][T17593] netlink: zone id is out of range [ 877.573082][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 877.659553][T17593] netlink: zone id is out of range [ 877.672961][T17593] netlink: zone id is out of range [ 877.707164][T17593] netlink: zone id is out of range [ 877.823267][T17593] netlink: zone id is out of range [ 878.624835][T17593] netlink: zone id is out of range [ 878.663337][T17593] netlink: zone id is out of range [ 878.669149][T17593] netlink: zone id is out of range [ 879.741867][T17619] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2754'. [ 879.906750][T17621] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2752'. [ 880.454607][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 880.484003][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 880.508338][ T24] usb 3-1: can't read configurations, error -71 [ 881.055809][T17637] 9pnet_fd: Insufficient options for proto=fd [ 882.001411][ T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 882.163918][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 882.183902][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.209622][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 882.234144][ T24] usb 3-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=d3.fc [ 882.243670][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.296398][ T24] usb 3-1: Product: syz [ 882.303365][ T24] usb 3-1: Manufacturer: syz [ 882.318228][ T24] usb 3-1: SerialNumber: syz [ 882.333611][ T24] usb 3-1: config 0 descriptor?? [ 882.642084][T17660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2760'. [ 882.651880][T17660] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2760'. [ 883.360165][ T30] audit: type=1326 audit(1747878202.839:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17658 comm="syz.0.2762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa98a98e969 code=0x0 [ 883.640687][T17660] bond3: entered promiscuous mode [ 883.648072][T17660] 8021q: adding VLAN 0 to HW filter on device bond3 [ 883.708191][T16052] usb 3-1: USB disconnect, device number 81 [ 883.821052][ T5915] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 884.268727][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 884.821793][T17725] 9pnet_fd: Insufficient options for proto=fd [ 885.583393][ T5819] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 885.936738][ T5819] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 886.033833][ T5819] usb 3-1: config 0 has no interface number 0 [ 886.056228][ T5819] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 886.091151][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.406068][ T5819] usb 3-1: Product: syz [ 886.410537][ T5819] usb 3-1: Manufacturer: syz [ 886.416638][ T5819] usb 3-1: SerialNumber: syz [ 886.425261][ T5819] usb 3-1: config 0 descriptor?? [ 886.437586][ T5819] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 886.447375][ T5819] pctv452e: pctv452e_power_ctrl: 1 [ 886.447375][ T5819] [ 886.456721][ T5819] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 886.456721][ T5819] [ 886.861400][ T5819] dvb-usb: bulk message failed: -22 (5/0) [ 886.928012][ T5819] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 887.115038][ T5819] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 887.149254][ T5819] usb 3-1: USB disconnect, device number 82 [ 887.528478][T17771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2775'. [ 887.983893][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 888.089090][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 888.108923][ T5915] usb 4-1: can't read configurations, error -71 [ 890.373837][ T5819] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 890.554910][ T5819] usb 5-1: Using ep0 maxpacket: 8 [ 890.587523][ T5819] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 890.713600][ T5819] usb 5-1: config 1 has no interface number 0 [ 890.974910][ T5819] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 890.986612][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.999644][ T5819] usb 5-1: Product: syz [ 891.032161][ T5819] usb 5-1: Manufacturer: syz [ 891.082708][ T5819] usb 5-1: SerialNumber: syz [ 891.429318][T17823] netlink: 'syz.3.2786': attribute type 1 has an invalid length. [ 891.475258][T17823] vlan2: entered allmulticast mode [ 891.523194][ T5819] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 891.530975][ T5819] visor 5-1:1.6: Handspring Visor / Palm OS converter detected [ 891.545241][ T5819] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 891.557156][ T5819] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 891.569631][ T5819] usb 5-1: USB disconnect, device number 71 [ 891.579926][ T5819] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 891.672638][ T5819] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 891.779666][ T5819] visor 5-1:1.6: device disconnected [ 892.068604][ T5810] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 892.532475][ T5810] usb 3-1: Using ep0 maxpacket: 8 [ 895.773417][ T24] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 896.154516][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 896.174058][ T24] usb 5-1: config 1 has an invalid interface number: 6 but max is 0 [ 896.182243][ T24] usb 5-1: config 1 has no interface number 0 [ 896.312622][ T24] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 896.443747][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.565261][ T24] usb 5-1: Product: syz [ 896.809877][ T24] usb 5-1: Manufacturer: syz [ 896.815043][ T24] usb 5-1: SerialNumber: syz [ 897.033009][ T24] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 897.056090][ T24] visor 5-1:1.6: Handspring Visor / Palm OS converter detected [ 897.074774][ T24] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 897.094544][ T5810] usb 3-1: unable to get BOS descriptor or descriptor too short [ 897.106759][ T24] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 897.120367][ T5810] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 897.134441][ T5810] usb 3-1: can't read configurations, error -71 [ 897.148010][ T24] usb 5-1: USB disconnect, device number 72 [ 897.161659][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 897.180531][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 897.193953][ T24] visor 5-1:1.6: device disconnected [ 897.948894][T17948] netlink: 'syz.3.2803': attribute type 27 has an invalid length. [ 899.261090][ T5810] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 900.060929][T17954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.105291][T17954] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.154773][T17954] net_ratelimit: 21 callbacks suppressed [ 900.154785][T17954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.269871][ T5810] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 906.474547][ T5810] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 906.561305][ T5810] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 906.600451][ T5810] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 906.615123][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.641366][T18020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 906.671142][ T5810] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 908.497936][T18070] netlink: 'syz.2.2829': attribute type 27 has an invalid length. [ 908.638349][T18070] bond2: left promiscuous mode [ 908.648360][T18070] bond3: left promiscuous mode [ 908.722483][T18071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.878844][ T5872] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 909.012186][ T5810] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 909.020294][ C1] raw-gadget.3 gadget.4: ignoring, device is not running [ 909.113468][T18071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 909.146984][ T5810] usb 5-1: device descriptor read/64, error -32 [ 909.221969][ T5872] usb 3-1: Using ep0 maxpacket: 32 [ 909.286814][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.322711][ T5872] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 909.341343][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.355126][ T5872] usb 3-1: Product: syz [ 909.365055][ T5872] usb 3-1: Manufacturer: syz [ 909.369716][ T5872] usb 3-1: SerialNumber: syz [ 909.390170][ T5810] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 909.405379][ T5872] usb 3-1: config 0 descriptor?? [ 909.433041][ T5872] usb 3-1: bad CDC descriptors [ 909.438377][ T5872] usb 3-1: unsupported MDLM descriptors [ 909.622751][ T5810] usb 5-1: config 0 has an invalid interface number: 56 but max is 0 [ 909.630896][ T5810] usb 5-1: config 0 has no interface number 0 [ 909.662958][ T5810] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 909.673586][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.682376][ T5810] usb 5-1: Product: syz [ 909.686589][ T5810] usb 5-1: Manufacturer: syz [ 909.695100][ T5810] usb 5-1: SerialNumber: syz [ 909.723588][ T5810] usb 5-1: config 0 descriptor?? [ 909.756914][ T5810] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 909.932159][ T5810] pctv452e: pctv452e_power_ctrl: 1 [ 909.932159][ T5810] [ 909.946435][ T5810] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 909.946435][ T5810] [ 909.975120][ T5810] dvb-usb: bulk message failed: -22 (5/0) [ 910.089871][ T5810] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 910.704361][ T5810] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 910.808174][ T5810] usb 5-1: USB disconnect, device number 74 [ 911.488929][ T5872] usb 4-1: USB disconnect, device number 71 [ 911.819877][ T10] usb 3-1: USB disconnect, device number 85 [ 911.974136][ T5872] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 912.147836][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 912.156297][ T5872] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 912.168857][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 912.352910][T18187] ubi: mtd0 is already attached to ubi31 [ 912.859152][ T5872] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 912.869457][ T5872] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 912.964821][ T5872] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 913.041282][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.518692][ T5872] usb 4-1: GET_CAPABILITIES returned 0 [ 913.558310][ T5872] usbtmc 4-1:16.0: can't read capabilities [ 913.700832][ T5872] usb 4-1: USB disconnect, device number 72 [ 916.161908][ T5915] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 916.855692][ T5915] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 916.883230][ T5915] usb 3-1: config 0 has no interface number 0 [ 916.904364][ T5915] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 916.920697][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.999172][ T30] audit: type=1326 audit(1747890310.237:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18235 comm="syz.3.2847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f970fd8e969 code=0x0 [ 917.275420][ T5915] usb 3-1: Product: syz [ 917.622225][ T5915] usb 3-1: Manufacturer: syz [ 917.755825][ T5915] usb 3-1: SerialNumber: syz [ 917.911216][ T5915] usb 3-1: config 0 descriptor?? [ 917.932565][ T5915] usb 3-1: can't set config #0, error -71 [ 917.948648][ T5915] usb 3-1: USB disconnect, device number 86 [ 918.171129][T18259] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2851'. [ 920.184582][ T5810] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 920.936416][ T5810] usb 5-1: Using ep0 maxpacket: 16 [ 920.949745][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.960795][ T5810] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 920.969944][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.990112][ T5810] usb 5-1: config 0 descriptor?? [ 921.191515][T18292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2860'. [ 921.326881][ T10] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 921.450583][T18327] usb usb8: usbfs: process 18327 (syz.4.2856) did not claim interface 0 before use [ 921.554321][T18331] gfs2: not a GFS2 filesystem [ 922.095735][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.184311][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 922.217487][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 922.255393][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.304886][ T10] usb 3-1: config 0 descriptor?? [ 922.350671][T18310] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 922.583255][ T10] usb 3-1: USB disconnect, device number 87 [ 922.768723][T18310] bridge0: port 3(netdevsim0) entered disabled state [ 922.807343][T18342] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2864'. [ 924.282613][ T30] audit: type=1326 audit(1747890317.892:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18365 comm="syz.3.2866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f970fd8e969 code=0x0 [ 925.597834][ T5810] usbhid 5-1:0.0: can't add hid device: -71 [ 925.634630][ T5810] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 925.673753][ T5810] usb 5-1: USB disconnect, device number 75 [ 926.508813][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.517703][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 928.275507][T18415] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 929.643286][T18434] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 929.677411][T18434] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 929.687649][T18434] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 929.696604][T18434] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.707630][T18434] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 931.699428][T18434] Bluetooth: hci5: command tx timeout [ 931.832451][T16266] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 931.844687][ T5925] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 931.872358][ T5925] bridge0: port 3(netdevsim0) entered disabled state [ 932.030424][T16266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.083782][T16266] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 932.121250][T16266] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 932.156332][T16266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.188241][T16266] usb 3-1: config 0 descriptor?? [ 932.205030][T16266] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 932.221600][T16266] dvb-usb: bulk message failed: -22 (3/0) [ 932.252604][T16266] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 932.277791][T16266] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 932.298449][T16266] usb 3-1: media controller created [ 932.321651][T16266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.327911][ T5925] bridge_slave_1: left allmulticast mode [ 932.335958][ T5925] bridge_slave_1: left promiscuous mode [ 932.361858][T16266] dvb-usb: bulk message failed: -22 (6/0) [ 932.368404][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.399046][T16266] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 932.399185][ T5925] bridge_slave_0: left allmulticast mode [ 932.427032][T16266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 932.432948][ T5925] bridge_slave_0: left promiscuous mode [ 932.445190][T18492] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 932.461591][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.464581][T18492] dvb-usb: bulk message failed: -22 (4/0) [ 932.487041][T16266] dvb-usb: schedule remote query interval to 150 msecs. [ 932.504746][T16266] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 932.660802][T16266] dvb-usb: bulk message failed: -22 (1/0) [ 932.666763][T16266] dvb-usb: error while querying for an remote control event. [ 932.832465][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 932.838481][ T5810] dvb-usb: error while querying for an remote control event. [ 933.034137][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 933.039959][ T5810] dvb-usb: error while querying for an remote control event. [ 933.224105][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 933.539771][ T5810] dvb-usb: error while querying for an remote control event. [ 933.680172][T18434] Bluetooth: hci5: command tx timeout [ 933.738806][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 933.746551][ T5810] dvb-usb: error while querying for an remote control event. [ 933.816964][T18513] futex_wake_op: syz.4.2889 tries to shift op by -33; fix this program [ 933.860926][ T5925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.881193][ T5925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.899927][ T5925] bond0 (unregistering): (slave team0): Releasing backup interface [ 933.909461][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 933.915239][ T5810] dvb-usb: error while querying for an remote control event. [ 933.932738][ T5925] bond0 (unregistering): Released all slaves [ 934.071004][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 934.092387][ T5810] dvb-usb: error while querying for an remote control event. [ 934.166435][ T5925] bond1 (unregistering): Released all slaves [ 934.265678][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 934.281867][ T5810] dvb-usb: error while querying for an remote control event. [ 934.356315][ T5925] bond2 (unregistering): Released all slaves [ 934.382255][ T5810] usb 3-1: USB disconnect, device number 88 [ 934.395689][T18513] netdevsim netdevsim4: Direct firmware load for . [ 934.395689][T18513] failed with error -2 [ 934.424019][T18513] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 934.424019][T18513] [ 934.453241][ T5810] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 935.794925][T18434] Bluetooth: hci5: command tx timeout [ 935.917109][T18429] chnl_net:caif_netlink_parms(): no params data found [ 937.337381][T18429] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.374859][T18429] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.408662][T18429] bridge_slave_0: entered allmulticast mode [ 937.436519][T18429] bridge_slave_0: entered promiscuous mode [ 937.487302][T18429] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.527700][T18429] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.545976][T18429] bridge_slave_1: entered allmulticast mode [ 937.588726][T18429] bridge_slave_1: entered promiscuous mode [ 937.718406][T18434] Bluetooth: hci5: command tx timeout [ 938.021151][T18429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.094089][T18429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.292262][T18429] team0: Port device team_slave_0 added [ 938.341670][T18429] team0: Port device team_slave_1 added [ 938.569722][T18429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.602943][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.690063][T18429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.764435][T18429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.779833][T18429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.883240][T18429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.230283][T18429] hsr_slave_0: entered promiscuous mode [ 939.243797][T18429] hsr_slave_1: entered promiscuous mode [ 939.260542][T18429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 939.279472][T18429] Cannot create hsr debugfs directory [ 939.306831][ T5925] hsr_slave_0: left promiscuous mode [ 939.320525][ T5925] hsr_slave_1: left promiscuous mode [ 939.332994][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.351978][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.404074][ T5810] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 939.575543][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 940.437635][ T5925] team0 (unregistering): Port device team_slave_1 removed [ 940.524666][ T5925] team0 (unregistering): Port device team_slave_0 removed [ 944.028896][ T5810] usb 5-1: unable to get BOS descriptor or descriptor too short [ 944.053402][ T5810] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 944.077811][ T5810] usb 5-1: can't read configurations, error -71 [ 944.454909][T18960] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 944.600696][ T5925] IPVS: stop unused estimator thread 0... [ 945.080137][ T5872] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 945.193635][T18429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 945.252253][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 945.274459][T18429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 945.304313][ T5872] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 945.354363][ T5872] usb 3-1: config 1 has no interface number 0 [ 945.361644][T18429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 945.383438][ T5872] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 945.444378][T18429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 945.452065][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.465891][ T5872] usb 3-1: Product: syz [ 945.480421][ T5872] usb 3-1: Manufacturer: syz [ 945.491660][ T5872] usb 3-1: SerialNumber: syz [ 945.776427][ T5872] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 945.803671][T18429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.812624][ T5872] visor 3-1:1.6: Handspring Visor / Palm OS converter detected [ 945.844149][ T5872] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 945.885989][T18429] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.899022][ T5872] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 945.932570][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.939761][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.951602][ T5872] usb 3-1: USB disconnect, device number 89 [ 945.976894][ T5872] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 946.009835][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.017013][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.037205][ T5872] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 946.089008][ T5872] visor 3-1:1.6: device disconnected [ 946.637175][T18429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.710427][T18429] veth0_vlan: entered promiscuous mode [ 947.739715][T18429] veth1_vlan: entered promiscuous mode [ 947.790311][T18429] veth0_macvtap: entered promiscuous mode [ 947.808723][T18429] veth1_macvtap: entered promiscuous mode [ 947.909479][T18429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.954533][T18429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.980230][T18429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.004182][T18429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.030770][T18429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.039836][T18429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.006632][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.204163][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.336116][T10302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.361711][T10302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.807804][T19100] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2926'. [ 950.026923][T19104] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2875'. [ 952.309553][T19129] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2932'. [ 952.360095][T19131] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.972933][T19131] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.089695][ T6212] syz_tun (unregistering): left allmulticast mode [ 953.153406][T19131] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.237548][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 953.251554][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 953.265405][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 953.276047][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 953.284762][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.384380][T19131] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 953.404416][T19131] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 953.425272][T19131] bridge0: port 3(netdevsim0) entered disabled state [ 953.456283][T19131] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.679290][T19131] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.758689][T19131] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.077470][ T5926] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 955.089971][ T5926] bridge0: port 1(netdevsim0) entered disabled state [ 955.144894][T19131] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.261998][T19190] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2939'. [ 955.263169][ T5832] Bluetooth: hci2: command tx timeout [ 955.686197][T19131] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.060872][T19203] xt_connbytes: Forcing CT accounting to be enabled [ 956.563844][T19215] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 957.223476][ T5832] Bluetooth: hci2: command tx timeout [ 957.516874][ T5926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.528082][ T5926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.542124][ T5926] bond0 (unregistering): Released all slaves [ 958.917215][ T5926] bond1 (unregistering): Released all slaves [ 959.057489][ T5926] bond2 (unregistering): Released all slaves [ 959.165597][ T5926] bond3 (unregistering): Released all slaves [ 959.214194][ T5832] Bluetooth: hci2: command tx timeout [ 959.317186][ T5926] tipc: Disabling bearer [ 959.365194][ T5926] tipc: Left network mode [ 959.814023][T19313] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2953'. [ 960.405428][ T5810] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 960.651010][ T5810] usb 5-1: config index 0 descriptor too short (expected 63186, got 210) [ 960.688555][ T5810] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 960.777364][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.794353][ T5810] usb 5-1: config 0 has no interface number 0 [ 960.807483][ T5810] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 960.826219][T19153] chnl_net:caif_netlink_parms(): no params data found [ 960.836902][ T5810] usb 5-1: config 0 interface 106 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 960.862518][ T5810] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 960.875798][ T5810] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 960.888683][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.928116][ T5810] usb 5-1: config 0 descriptor?? [ 960.964422][ T5810] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 961.026036][T19387] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2956'. [ 961.050492][T19369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.187321][ T5832] Bluetooth: hci2: command tx timeout [ 961.218047][ T10] usb 5-1: USB disconnect, device number 78 [ 961.224962][ T773] usb 5-1: Failed to submit usb control message: -71 [ 961.231974][ T773] usb 5-1: unable to send the bmi data to the device: -71 [ 961.247763][ T773] usb 5-1: unable to get target info from device [ 961.250383][T19369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.273416][ T773] usb 5-1: could not get target info (-71) [ 961.279313][ T773] usb 5-1: could not probe fw (-71) [ 961.461300][T19369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.630050][T19369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.753089][T19153] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.781576][T19153] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.796391][T19153] bridge_slave_0: entered allmulticast mode [ 961.963548][T19153] bridge_slave_0: entered promiscuous mode [ 962.061431][T19153] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.688413][T19153] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.696329][T19153] bridge_slave_1: entered allmulticast mode [ 962.819728][T19153] bridge_slave_1: entered promiscuous mode [ 962.956079][ T5926] hsr_slave_0: left promiscuous mode [ 962.962300][ T5926] hsr_slave_1: left promiscuous mode [ 962.969980][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.986888][ T5926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.774855][ T773] smc: removing ib device syz! [ 964.905892][T19505] ieee802154 phy0 wpan0: encryption failed: -22 [ 965.172392][T19369] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.208097][T19153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.415301][T19521] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2967'. [ 965.938179][T19369] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.012934][T19153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.209083][T19369] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.604845][ T5915] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 966.847072][ T5915] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 966.961514][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 967.172000][T19153] team0: Port device team_slave_0 added [ 967.188685][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 967.254803][T19153] team0: Port device team_slave_1 added [ 967.260697][ T5915] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 967.316446][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.336622][T19369] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 967.347267][ T5915] usb 5-1: Product: syz [ 967.354870][ T5915] usb 5-1: Manufacturer: syz [ 967.374823][ T5915] usb 5-1: SerialNumber: syz [ 967.397343][ T5915] usb 5-1: config 0 descriptor?? [ 967.413412][T19557] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 967.445334][ T5915] option 5-1:0.0: GSM modem (1-port) converter detected [ 967.549378][T19153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.596027][T19153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.651852][T19539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2968'. [ 967.657458][T19153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.708137][T19153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.710210][T16266] usb 5-1: USB disconnect, device number 79 [ 967.726782][T19153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.738613][T16266] option 5-1:0.0: device disconnected [ 967.808102][T19153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.324805][T19153] hsr_slave_0: entered promiscuous mode [ 968.349287][T19153] hsr_slave_1: entered promiscuous mode [ 968.365759][T19153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 968.385043][T19153] Cannot create hsr debugfs directory [ 968.815521][ T30] audit: type=1326 audit(1747890364.625:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19677 comm="syz.4.2974" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbc638e969 code=0x0 [ 969.364811][ T5926] IPVS: stop unused estimator thread 0... [ 970.540602][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2978'. [ 971.957976][ T30] audit: type=1326 audit(1747890367.870:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19785 comm="syz.3.2985" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbde78e969 code=0x0 [ 973.202384][T19153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 974.005721][T19153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 974.032453][T19153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 974.060550][T19153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 974.413788][ T5810] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 974.893611][T19153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.911316][ T5810] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 974.920399][T19153] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.656814][ T5810] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 975.668899][ T5810] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 975.678097][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.690550][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.691869][T19819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 975.697779][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.819756][ T5810] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 975.873942][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.881159][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.998699][T19850] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2994'. [ 976.544994][T19153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.508298][ T30] audit: type=1326 audit(1747890373.707:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19875 comm="syz.3.3001" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffbde78e969 code=0x0 [ 977.861118][T19153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.029257][T19153] veth0_vlan: entered promiscuous mode [ 978.052946][T19153] veth1_vlan: entered promiscuous mode [ 978.563843][T19153] veth0_macvtap: entered promiscuous mode [ 978.608755][T19153] veth1_macvtap: entered promiscuous mode [ 978.639967][T19153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.659570][T19153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.678120][T19153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.689304][T18178] usb 5-1: USB disconnect, device number 80 [ 978.805601][T19153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.822610][T19153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.833523][T19153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.613492][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.641711][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.717927][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.733098][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.245197][T19930] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3007'. [ 980.545369][T19932] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 983.139180][ T30] audit: type=1326 audit(1747890379.692:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19961 comm="syz.4.3014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbc638e969 code=0x0 [ 984.378288][ T5816] syz_tun (unregistering): left allmulticast mode [ 984.559297][T18434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 984.571131][T18434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 984.584922][T18434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 984.601468][T18434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 984.609319][T18434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 984.806584][ T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 984.891235][T19997] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3020'. [ 984.963940][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 984.971773][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 985.001221][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 985.011652][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 985.025814][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 985.037009][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 985.047059][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.086808][ T24] usb 3-1: config 0 descriptor?? [ 985.836182][ T5810] usb 3-1: USB disconnect, device number 90 [ 986.702557][T18434] Bluetooth: hci0: command tx timeout [ 987.103884][ T773] bridge_slave_1: left allmulticast mode [ 987.125812][ T773] bridge_slave_1: left promiscuous mode [ 987.153937][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.269585][ T773] bridge_slave_0: left allmulticast mode [ 987.280540][ T773] bridge_slave_0: left promiscuous mode [ 987.288721][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.986811][ T5810] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 988.182022][ T5810] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 988.253776][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.282114][ T5810] usb 5-1: config 0 descriptor?? [ 988.289987][ T5810] cp210x 5-1:0.0: cp210x converter detected [ 988.617096][T18434] Bluetooth: hci0: command tx timeout [ 988.689231][ T5810] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 988.859062][ T773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.887293][ T773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.917305][ T773] bond0 (unregistering): Released all slaves [ 989.437193][ T773] bond1 (unregistering): Released all slaves [ 990.113945][T19981] chnl_net:caif_netlink_parms(): no params data found [ 990.367834][T16266] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 990.673381][T18434] Bluetooth: hci0: command tx timeout [ 990.917090][T16266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 991.006258][T16266] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 991.024776][T16266] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 991.026760][ T773] hsr_slave_0: left promiscuous mode [ 991.043666][T16266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.056858][ T773] hsr_slave_1: left promiscuous mode [ 991.073151][T16266] usb 4-1: config 0 descriptor?? [ 991.093305][ T5810] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 991.115941][T16266] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 991.127913][ T5810] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 991.140615][T16266] dvb-usb: bulk message failed: -22 (3/0) [ 991.163160][T16266] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 991.174601][ T5810] usb 5-1: cp210x converter now attached to ttyUSB0 [ 991.198004][T16266] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 991.205194][T16266] usb 4-1: media controller created [ 991.215843][ T5810] usb 5-1: USB disconnect, device number 81 [ 991.239777][ T5810] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 991.249569][T16266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 991.286066][ T5810] cp210x 5-1:0.0: device disconnected [ 991.321918][T16266] dvb-usb: bulk message failed: -22 (6/0) [ 991.327842][T16266] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 991.341497][T16266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 991.363188][T20240] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 991.371847][T16266] dvb-usb: schedule remote query interval to 150 msecs. [ 991.380823][T16266] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 991.389455][T20240] dvb-usb: bulk message failed: -22 (4/0) [ 991.540574][T16266] dvb-usb: bulk message failed: -22 (1/0) [ 991.546400][T16266] dvb-usb: error while querying for an remote control event. [ 991.723964][T16266] dvb-usb: bulk message failed: -22 (1/0) [ 991.729928][T16266] dvb-usb: error while querying for an remote control event. [ 991.762903][ T5810] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 991.884047][T16266] dvb-usb: bulk message failed: -22 (1/0) [ 991.890159][T16266] dvb-usb: error while querying for an remote control event. [ 991.943119][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 991.954899][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 991.981897][ T5810] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 991.995081][ T5810] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 992.005040][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.055416][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 992.064622][ T5819] dvb-usb: error while querying for an remote control event. [ 992.073620][ T5810] usb 5-1: config 0 descriptor?? [ 992.235887][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 992.250164][ T5819] dvb-usb: error while querying for an remote control event. [ 992.695970][T18434] Bluetooth: hci0: command tx timeout [ 992.918417][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 992.962407][ T5819] dvb-usb: error while querying for an remote control event. [ 993.072043][T18178] usb 5-1: USB disconnect, device number 82 [ 993.130829][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 993.138881][ T5819] dvb-usb: error while querying for an remote control event. [ 993.301202][ T5819] dvb-usb: bulk message failed: -22 (1/0) [ 993.536242][ T5819] dvb-usb: error while querying for an remote control event. [ 993.703187][ T5810] dvb-usb: bulk message failed: -22 (1/0) [ 993.709703][ T5810] dvb-usb: error while querying for an remote control event. [ 993.738520][T18178] usb 4-1: USB disconnect, device number 73 [ 993.835254][T18178] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 994.027807][T20316] netlink: zone id is out of range [ 994.052133][T20316] netlink: zone id is out of range [ 994.071316][T20316] netlink: zone id is out of range [ 994.102730][T20316] netlink: zone id is out of range [ 994.107917][T20316] netlink: zone id is out of range [ 994.176732][T20328] netlink: 'syz.2.3041': attribute type 27 has an invalid length. [ 994.223087][T20316] netlink: zone id is out of range [ 994.247864][T20316] netlink: zone id is out of range [ 994.349618][T20316] netlink: set zone limit has 4 unknown bytes [ 994.374391][T20328] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.382059][T20328] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.538081][T20342] netlink: zone id is out of range [ 994.549996][T20342] netlink: zone id is out of range [ 994.568033][ T5819] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 994.935925][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 994.955570][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 994.976637][ T5819] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 994.986015][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.994136][ T5819] usb 3-1: Product: syz [ 994.999066][ T5819] usb 3-1: Manufacturer: syz [ 995.009759][ T5819] usb 3-1: SerialNumber: syz [ 995.019428][ T5819] usb 3-1: config 0 descriptor?? [ 995.028333][ T5819] usb 3-1: bad CDC descriptors [ 995.044839][ T5819] usb 3-1: unsupported MDLM descriptors [ 995.143782][T20328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 995.176493][T20328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 995.397425][T20328] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.410202][T20328] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.420564][T20328] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.432586][T20328] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.614117][T20333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.630340][T20333] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.645376][T19981] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.657357][T19981] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.674845][T19981] bridge_slave_0: entered allmulticast mode [ 995.689445][T19981] bridge_slave_0: entered promiscuous mode [ 995.725164][T19981] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.734577][T19981] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.745815][T19981] bridge_slave_1: entered allmulticast mode [ 995.757833][T19981] bridge_slave_1: entered promiscuous mode [ 996.038681][T19981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.066612][T19981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.075346][ T773] IPVS: stop unused estimator thread 0... [ 996.175004][T19981] team0: Port device team_slave_0 added [ 996.192983][T19981] team0: Port device team_slave_1 added [ 996.361934][T19981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.380029][T19981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.440109][T19981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.455753][T19981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.463329][T19981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.496429][T19981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.082456][ T5872] usb 3-1: USB disconnect, device number 91 [ 997.177191][T19981] hsr_slave_0: entered promiscuous mode [ 997.199741][T19981] hsr_slave_1: entered promiscuous mode [ 997.531946][T20528] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.558797][ T5872] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 997.726291][ T5872] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 997.764651][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 997.787811][ T5872] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 997.816162][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.833092][ T5872] usb 3-1: config 0 descriptor?? [ 997.860739][ T5872] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 997.898861][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 997.917908][ T5872] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 997.981308][ T5872] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 998.028359][ T5872] usb 3-1: media controller created [ 998.036522][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 998.048846][T20475] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 998.068734][T20475] dvb-usb: bulk message failed: -22 (4/0) [ 998.104278][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 998.136034][ T5872] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 998.157530][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 998.210430][ T5872] dvb-usb: schedule remote query interval to 150 msecs. [ 998.234864][ T5872] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 998.270950][ T5872] usb 3-1: USB disconnect, device number 92 [ 998.341839][ T5872] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 998.352951][T19981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 998.383593][T19981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 998.402599][T19981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 998.433898][T19981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 998.569747][T20590] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3050'. [ 998.832169][T19981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.480547][T19981] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.550788][T10302] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.558173][T10302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.655838][T10302] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.663014][T10302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.801183][T20620] net_ratelimit: 15 callbacks suppressed [ 999.801209][T20620] netlink: zone id is out of range [ 999.844558][T20620] netlink: zone id is out of range [ 999.871587][T20620] netlink: zone id is out of range [ 999.888038][T20620] netlink: zone id is out of range [ 999.907955][T20620] netlink: zone id is out of range [ 999.939093][T20620] netlink: zone id is out of range [ 999.966168][T20620] netlink: zone id is out of range [ 1000.004422][T20620] netlink: set zone limit has 4 unknown bytes [ 1000.843937][T19981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.989487][T19981] veth0_vlan: entered promiscuous mode [ 1001.017482][T19981] veth1_vlan: entered promiscuous mode [ 1001.068579][T19981] veth0_macvtap: entered promiscuous mode [ 1001.096557][T19981] veth1_macvtap: entered promiscuous mode [ 1001.216942][T19981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.309895][T19981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.375401][T19981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.447863][T19981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.516615][T19981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.561793][T16266] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1001.581992][T19981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.831120][T16266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.937022][T16266] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1001.944136][T20653] xt_connbytes: Forcing CT accounting to be enabled [ 1001.965752][T16266] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1002.049561][T16266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.272726][T16266] usb 4-1: config 0 descriptor?? [ 1002.399977][T16266] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1002.455886][T16266] dvb-usb: bulk message failed: -22 (3/0) [ 1002.485649][T16266] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1002.512397][T16266] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1002.519640][T16266] usb 4-1: media controller created [ 1002.538434][T20660] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1002.575092][T16266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.580417][T20643] dvb-usb: bulk message failed: -22 (4/0) [ 1002.623343][T16266] dvb-usb: bulk message failed: -22 (6/0) [ 1002.633160][T16266] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1002.659098][T10302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.670037][T16266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input37 [ 1002.674168][T10302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.706214][T16266] dvb-usb: schedule remote query interval to 150 msecs. [ 1002.716141][T20677] netlink: zone id is out of range [ 1002.733540][T20677] netlink: zone id is out of range [ 1002.740099][T16266] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1002.769338][T16266] usb 4-1: USB disconnect, device number 74 [ 1002.782626][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.802959][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.840663][T16266] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1003.840847][T20713] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3067'. [ 1004.921049][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1005.130222][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1007.847182][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1007.872143][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1007.910142][ T10] usb 3-1: can't read configurations, error -71 [ 1007.996395][T20774] net_ratelimit: 10 callbacks suppressed [ 1007.996419][T20774] netlink: zone id is out of range [ 1008.037180][T20774] netlink: zone id is out of range [ 1008.053567][T20774] netlink: zone id is out of range [ 1008.092282][T20774] netlink: zone id is out of range [ 1008.097594][T20774] netlink: zone id is out of range [ 1008.178036][T20774] netlink: zone id is out of range [ 1008.211040][T20774] netlink: zone id is out of range [ 1008.228138][T20774] netlink: zone id is out of range [ 1008.238944][T20774] netlink: zone id is out of range [ 1008.264130][T20774] netlink: zone id is out of range [ 1008.282783][ T10] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1008.385071][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.395661][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.405550][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.414175][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.423479][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1008.472409][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.492357][T18434] Bluetooth: Wrong link type (-57) [ 1008.507265][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1008.517184][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1008.531301][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.544234][ T10] usb 3-1: config 0 descriptor?? [ 1008.555498][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1008.571568][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1008.584787][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1008.595014][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1008.602905][ T10] usb 3-1: media controller created [ 1008.612857][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1008.653730][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1008.663816][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1008.693294][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input38 [ 1008.712031][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1008.719054][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1008.814690][T20765] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1008.844109][T20765] dvb-usb: bulk message failed: -22 (4/0) [ 1008.863837][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1008.872067][ T10] dvb-usb: error while querying for an remote control event. [ 1008.887443][T16052] usb 3-1: USB disconnect, device number 94 [ 1008.949461][T16052] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1009.278176][T20846] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3081'. [ 1010.406850][T18434] Bluetooth: hci3: command tx timeout [ 1010.446592][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1010.527965][ T13] bridge0: port 3(netdevsim0) entered disabled state [ 1011.298147][ T5872] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1011.711678][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1011.744838][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1011.823872][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1011.854037][ T5872] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1011.886972][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.938456][ T5872] usb 3-1: config 0 descriptor?? [ 1012.441017][T18434] Bluetooth: hci3: command tx timeout [ 1014.092168][T16052] usb 3-1: USB disconnect, device number 95 [ 1014.092211][ T13] bridge_slave_1: left allmulticast mode [ 1014.110938][ T13] bridge_slave_1: left promiscuous mode [ 1014.116982][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.172494][ T13] bridge_slave_0: left allmulticast mode [ 1014.197311][ T13] bridge_slave_0: left promiscuous mode [ 1014.223072][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.369267][T18434] Bluetooth: hci3: command tx timeout [ 1015.496975][T21031] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1016.066454][T21035] nbd4: detected capacity change from 0 to 4294967296 [ 1016.094909][T21037] block nbd4: shutting down sockets [ 1016.199617][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1016.211533][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1016.225279][ T13] bond0 (unregistering): (slave team0): Releasing backup interface [ 1016.237667][ T13] bond0 (unregistering): Released all slaves [ 1016.351610][T18434] Bluetooth: hci3: command tx timeout [ 1016.358607][ T13] bond1 (unregistering): Released all slaves [ 1016.479085][ T13] bond2 (unregistering): Released all slaves [ 1016.591606][ T13] bond3 (unregistering): Released all slaves [ 1016.679276][T20780] chnl_net:caif_netlink_parms(): no params data found [ 1017.132467][T21071] nbd2: detected capacity change from 0 to 4294967296 [ 1017.188006][T21059] block nbd2: shutting down sockets [ 1018.309790][T20780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.320596][T20780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.337816][T20780] bridge_slave_0: entered allmulticast mode [ 1018.346306][T20780] bridge_slave_0: entered promiscuous mode [ 1018.387222][T20780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.398058][T20780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.405307][T20780] bridge_slave_1: entered allmulticast mode [ 1018.510131][T20780] bridge_slave_1: entered promiscuous mode [ 1018.576027][T16052] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1019.090409][T20780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.099718][T16052] usb 3-1: Using ep0 maxpacket: 8 [ 1019.160229][T16052] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.181482][T16052] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1019.209379][T16052] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1019.455156][T20780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.465163][T16052] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.613448][T21183] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3107'. [ 1020.165877][T16052] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1020.223243][T16052] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.550183][T16052] usb 3-1: GET_CAPABILITIES returned 0 [ 1020.555911][T16052] usbtmc 3-1:16.0: can't read capabilities [ 1020.668257][T20780] team0: Port device team_slave_0 added [ 1020.710725][T20780] team0: Port device team_slave_1 added [ 1020.765331][T16052] usb 3-1: USB disconnect, device number 96 [ 1021.012840][ T13] hsr_slave_0: left promiscuous mode [ 1021.026529][ T13] hsr_slave_1: left promiscuous mode [ 1021.039341][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.111873][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.304637][T21271] nbd3: detected capacity change from 0 to 4294967296 [ 1022.127953][T18434] block nbd3: Receive control failed (result -104) [ 1023.082632][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1023.149291][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1023.225879][T10302] smc: removing ib device syz0 [ 1023.852784][T20780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.861088][T20780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.889875][T20780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.943000][T20780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.950353][T20780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1024.028735][T20780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.063709][T20780] hsr_slave_0: entered promiscuous mode [ 1026.328992][T20780] hsr_slave_1: entered promiscuous mode [ 1026.415015][T20780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.493454][T20780] Cannot create hsr debugfs directory [ 1029.836276][T18434] Bluetooth: hci2: command tx timeout [ 1030.305726][T21479] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3140'. [ 1030.860265][T21477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.097658][ T13] IPVS: stop unused estimator thread 0... [ 1031.175308][T21477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.273350][T21477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.493068][T21477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.771100][T21477] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.818804][T21477] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.932321][T21477] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1031.997655][T21477] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.016336][T20780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1032.114456][T20780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.226713][T20780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.250878][T20780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.737933][T21543] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1033.770810][T20780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.842348][T20780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.842763][T21545] net_ratelimit: 14 callbacks suppressed [ 1033.842782][T21545] netlink: zone id is out of range [ 1033.860888][T21545] netlink: zone id is out of range [ 1033.866685][T21545] netlink: zone id is out of range [ 1033.871223][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.879091][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.914200][T21545] netlink: zone id is out of range [ 1033.928256][T21545] netlink: zone id is out of range [ 1033.958077][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.965401][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.982866][T21545] netlink: zone id is out of range [ 1033.995471][T21545] netlink: zone id is out of range [ 1034.021816][T21545] netlink: zone id is out of range [ 1034.034808][T21545] netlink: zone id is out of range [ 1034.045468][T21545] netlink: zone id is out of range [ 1035.392912][T20780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.545514][T20780] veth0_vlan: entered promiscuous mode [ 1035.584621][T20780] veth1_vlan: entered promiscuous mode [ 1036.074688][T20780] veth0_macvtap: entered promiscuous mode [ 1036.093775][T18178] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1036.100169][T20780] veth1_macvtap: entered promiscuous mode [ 1036.124887][T20780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.142438][T20780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.181238][T20780] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.207894][T20780] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.223315][T20780] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.236607][T20780] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.302992][T18178] usb 3-1: Using ep0 maxpacket: 8 [ 1036.619593][T18178] usb 3-1: config 1 has an invalid interface number: 6 but max is 0 [ 1036.682568][T18178] usb 3-1: config 1 has no interface number 0 [ 1036.854697][T18178] usb 3-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=c3.4b [ 1036.915501][T18178] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.941488][T18178] usb 3-1: Product: syz [ 1036.945726][T18178] usb 3-1: Manufacturer: syz [ 1036.968399][T18178] usb 3-1: SerialNumber: syz [ 1037.016262][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.058992][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.131681][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.153797][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.194814][T18178] usb 3-1: palm_os_4_probe - error -71 getting connection info [ 1037.213224][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1037.214939][T18178] visor 3-1:1.6: Handspring Visor / Palm OS converter detected [ 1037.234391][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1037.250022][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1037.262898][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1037.272295][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1037.287324][T18178] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1037.337828][T18178] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1037.359134][T18178] usb 3-1: USB disconnect, device number 97 [ 1037.386875][T18178] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1037.422299][T18178] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1037.466021][T18178] visor 3-1:1.6: device disconnected [ 1039.251057][T21725] chnl_net:caif_netlink_parms(): no params data found [ 1039.284140][ T5832] Bluetooth: hci4: command tx timeout [ 1039.527889][T21725] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.556450][T21725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.564536][T21725] bridge_slave_0: entered allmulticast mode [ 1039.573941][T21725] bridge_slave_0: entered promiscuous mode [ 1039.582920][T21725] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.593726][T21725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.601175][T21725] bridge_slave_1: entered allmulticast mode [ 1039.609117][T21725] bridge_slave_1: entered promiscuous mode [ 1039.709686][T21725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.729564][T21725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.171258][T21725] team0: Port device team_slave_0 added [ 1040.184997][T21725] team0: Port device team_slave_1 added [ 1040.412746][T21725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.426101][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.461250][T21725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.479302][T21725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.487248][T21725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1040.633255][T21725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.739983][T21725] hsr_slave_0: entered promiscuous mode [ 1040.748956][T21725] hsr_slave_1: entered promiscuous mode [ 1040.756769][T21725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1040.765677][T21725] Cannot create hsr debugfs directory [ 1041.180810][T22231] net_ratelimit: 22 callbacks suppressed [ 1041.180832][T22231] netlink: zone id is out of range [ 1041.207285][T22231] netlink: zone id is out of range [ 1041.215861][T22231] netlink: zone id is out of range [ 1041.222082][T22231] netlink: zone id is out of range [ 1041.228552][T22231] netlink: zone id is out of range [ 1041.234047][T22231] netlink: zone id is out of range [ 1041.239664][T22231] netlink: zone id is out of range [ 1041.250253][T22231] netlink: zone id is out of range [ 1041.256192][T22231] netlink: zone id is out of range [ 1041.262155][T22231] netlink: zone id is out of range [ 1041.268805][ T5832] Bluetooth: hci4: command tx timeout [ 1041.443136][T21725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1041.470865][T21725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1041.494012][ T5832] Bluetooth: hci2: command tx timeout [ 1041.501164][T21725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1041.559806][T21725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1041.592619][T22258] NILFS (nbd0): device size too small [ 1041.628589][T22257] block nbd0: shutting down sockets [ 1041.985093][T22266] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3177'. [ 1042.992447][T22274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3175'. [ 1043.074475][T21725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.093840][T22272] uprobe: syz.1.3178:22272 failed to unregister, leaking uprobe [ 1043.260156][ T5832] Bluetooth: hci4: command tx timeout [ 1043.992761][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1044.001647][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1044.043074][T21725] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.095950][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.103100][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.156618][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.163874][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.232250][ T5832] Bluetooth: hci4: command tx timeout [ 1045.692907][T22306] Bluetooth: MGMT ver 1.23 [ 1045.805388][T21725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.447231][T22448] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3189'. [ 1048.113965][T22450] uprobe: syz.1.3191:22450 failed to unregister, leaking uprobe [ 1048.426800][T22462] net_ratelimit: 40 callbacks suppressed [ 1048.426821][T22462] netlink: zone id is out of range [ 1048.438381][T22462] netlink: zone id is out of range [ 1048.444232][T22462] netlink: zone id is out of range [ 1048.449977][T22462] netlink: zone id is out of range [ 1048.455190][T22462] netlink: zone id is out of range [ 1048.460674][T22462] netlink: zone id is out of range [ 1048.469761][T22462] netlink: zone id is out of range [ 1048.475162][T22462] netlink: zone id is out of range [ 1048.480690][T22462] netlink: zone id is out of range [ 1048.486389][T22462] netlink: zone id is out of range [ 1049.115271][T22467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1049.311916][T21725] veth0_vlan: entered promiscuous mode [ 1049.328997][T21725] veth1_vlan: entered promiscuous mode [ 1049.377788][T21725] veth0_macvtap: entered promiscuous mode [ 1049.581855][T21725] veth1_macvtap: entered promiscuous mode [ 1049.652791][T21725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.697620][T21725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.740800][T21725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.756535][T21725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.778324][T21725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.795810][T21725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.088292][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.111455][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.224480][T10349] block nbd3: Possible stuck request ffff888024efe000: control (read@0,4096B). Runtime 30 seconds [ 1050.335317][T18434] Bluetooth: hci5: command 0x0406 tx timeout [ 1050.348413][ T5925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.362069][ T5925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.864574][T22508] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3202'. [ 1052.524430][T22510] uprobe: syz.2.3204:22510 failed to unregister, leaking uprobe [ 1053.437419][T16052] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1054.251669][T16052] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.262611][T16052] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1054.302562][T16052] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1054.312067][T16052] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.330832][T16052] usb 6-1: Product: syz [ 1054.338641][T16052] usb 6-1: Manufacturer: syz [ 1054.346366][T18434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1054.347633][ T30] audit: type=1326 audit(1747902526.453:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af1b8e969 code=0x7ffc0000 [ 1054.378426][T16052] usb 6-1: SerialNumber: syz [ 1054.378428][T18434] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1054.390009][ T30] audit: type=1326 audit(1747902526.453:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af1b8e969 code=0x7ffc0000 [ 1054.403897][T18434] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1054.416184][ T30] audit: type=1326 audit(1747902526.453:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4af1b8e969 code=0x7ffc0000 [ 1054.450747][T18434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1054.461165][T18434] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1054.481749][ T30] audit: type=1326 audit(1747902526.453:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4af1b8e969 code=0x7ffc0000 [ 1054.503756][ T30] audit: type=1326 audit(1747902526.453:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4af1b8d2d0 code=0x7ffc0000 [ 1054.526129][ T30] audit: type=1326 audit(1747902526.453:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4af1b8e56b code=0x7ffc0000 [ 1054.548192][ T30] audit: type=1326 audit(1747902526.453:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4af1b8e56b code=0x7ffc0000 [ 1054.575434][ T30] audit: type=1326 audit(1747902526.484:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4af1b8e56b code=0x7ffc0000 [ 1054.603680][ T30] audit: type=1326 audit(1747902526.484:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22540 comm="syz.1.3210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4af1b8e56b code=0x7ffc0000 [ 1054.742858][T18178] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1054.895131][T18178] usb 3-1: device descriptor read/64, error -71 [ 1054.973109][T22535] chnl_net:caif_netlink_parms(): no params data found [ 1054.998472][T16052] usb 6-1: cannot find UAC_HEADER [ 1055.043964][T16052] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1055.058268][T16052] usb 6-1: USB disconnect, device number 2 [ 1055.141790][T18178] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1055.170499][T22535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.178575][T22535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.187992][T22535] bridge_slave_0: entered allmulticast mode [ 1055.197102][T22535] bridge_slave_0: entered promiscuous mode [ 1055.205327][T22535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.213535][T22535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.224802][T22535] bridge_slave_1: entered allmulticast mode [ 1055.239632][T22535] bridge_slave_1: entered promiscuous mode [ 1055.285361][T18178] usb 3-1: device descriptor read/64, error -71 [ 1055.339607][T22535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.355003][T22535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.410081][T18178] usb usb3-port1: attempt power cycle [ 1055.414888][T22535] team0: Port device team_slave_0 added [ 1055.431662][T22535] team0: Port device team_slave_1 added [ 1055.501327][T22535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.532836][T22535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.562845][T22535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.577084][T22535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.585990][T22535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.612914][T22535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.740075][T22535] hsr_slave_0: entered promiscuous mode [ 1055.749993][T22535] hsr_slave_1: entered promiscuous mode [ 1055.766627][T22535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.792007][T22535] Cannot create hsr debugfs directory [ 1056.104167][T18178] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1056.129780][T18178] usb 3-1: device descriptor read/8, error -71 [ 1056.253342][T22535] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.329571][T22535] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.418645][T18178] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1056.429665][T18434] Bluetooth: hci1: command tx timeout [ 1056.439831][T22535] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.456649][T18178] usb 3-1: device descriptor read/8, error -71 [ 1056.510131][T22535] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.536285][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 1056.560543][T22901] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1056.571707][T18178] usb usb3-port1: unable to enumerate USB device [ 1056.759819][T22535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1056.776702][T22535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1056.796499][T22535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1056.813241][T22535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1057.737799][T22535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.772421][T22535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.801766][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.809096][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.880480][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.887747][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1058.005988][T22535] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1058.072418][T22535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1058.254272][T22931] kvm_intel: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xb26 [ 1058.274034][T22931] kvm: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa8bd [ 1058.289827][T22931] kvm: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xe5ba [ 1058.309627][T22931] kvm: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x68e7 [ 1058.346088][T22931] kvm: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd3f4 [ 1058.362939][T22931] kvm_intel: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x331d [ 1058.409488][T18434] Bluetooth: hci1: command tx timeout [ 1058.426870][T22931] kvm: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xbf09 [ 1058.440481][ T5925] bridge_slave_1: left allmulticast mode [ 1058.446297][ T5925] bridge_slave_1: left promiscuous mode [ 1059.228615][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.277230][T22931] kvm_intel: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x6cc1 [ 1059.373698][ T5925] bridge_slave_0: left allmulticast mode [ 1059.379424][ T5925] bridge_slave_0: left promiscuous mode [ 1059.390189][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.422978][T22931] kvm_intel: kvm [22930]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5e63 [ 1060.392215][T18434] Bluetooth: hci1: command tx timeout [ 1061.765956][ T5819] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1061.904484][ T5819] usb 3-1: device descriptor read/64, error -71 [ 1062.151837][ T5819] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1062.285589][ T5819] usb 3-1: device descriptor read/64, error -71 [ 1062.376496][ T5832] Bluetooth: hci1: command tx timeout [ 1062.390741][ T5819] usb usb3-port1: attempt power cycle [ 1062.411546][T23063] nbd5: detected capacity change from 0 to 4294967296 [ 1062.425404][ T5925] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 1062.435069][T23076] block nbd5: shutting down sockets [ 1062.469271][ T5925] bond_slave_0: left promiscuous mode [ 1062.492617][ T5925] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 1062.520990][ T5925] bond_slave_1: left promiscuous mode [ 1062.534983][ T5925] $Hÿ (unregistering): Released all slaves [ 1062.725090][ T5819] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1062.771672][ T5819] usb 3-1: device descriptor read/8, error -71 [ 1063.325653][ T5819] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1063.396315][ T5819] usb 3-1: device descriptor read/8, error -71 [ 1063.566274][ T5819] usb usb3-port1: unable to enumerate USB device [ 1063.661142][ T5925] bond0 (unregistering): Released all slaves [ 1064.044418][ T5925] bond1 (unregistering): Released all slaves [ 1064.312509][ T5925] bond2 (unregistering): Released all slaves [ 1064.549672][T23146] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1064.659663][ T5925] tipc: Disabling bearer [ 1064.784944][ T5925] tipc: Left network mode [ 1065.357453][T23161] block nbd5: shutting down sockets [ 1065.374265][T23156] NILFS (nbd5): device size too small [ 1065.572359][T22535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.018978][T23334] block nbd1: shutting down sockets [ 1067.161840][ T5925] hsr_slave_0: left promiscuous mode [ 1067.168100][ T5925] hsr_slave_1: left promiscuous mode [ 1067.186197][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.208312][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.217062][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.225390][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.250643][ T5925] veth1_macvtap: left promiscuous mode [ 1067.260528][ T5925] veth1_vlan: left promiscuous mode [ 1067.266136][ T5925] veth0_vlan: left promiscuous mode [ 1067.314012][ T24] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1067.466463][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1067.483319][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.503733][ T24] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1067.523854][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.551521][ T24] usb 3-1: config 0 descriptor?? [ 1069.347865][T22535] veth0_vlan: entered promiscuous mode [ 1069.405131][T22535] veth1_vlan: entered promiscuous mode [ 1069.499677][T22535] veth0_macvtap: entered promiscuous mode [ 1069.520348][T22535] veth1_macvtap: entered promiscuous mode [ 1069.656722][T22535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.779878][T22535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.807396][T22535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.836262][T22535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.846250][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 1069.875908][T22535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.887990][T22535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.091324][ T5925] IPVS: stop unused estimator thread 0... [ 1070.174380][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 1070.188790][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1070.202795][ T24] usb 3-1: USB disconnect, device number 106 [ 1070.281416][ T5924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.293540][ T5924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.828419][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.837877][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.287575][T23422] nbd5: detected capacity change from 0 to 4294967296 [ 1071.314535][T23429] block nbd5: shutting down sockets [ 1071.528800][T23437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.564159][T23432] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1071.615905][T23437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.694916][T18178] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1071.696591][T23437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.769187][T23437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.840014][T18178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1071.851862][T18178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1071.863013][T18178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1071.885110][T18178] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1071.904568][T18178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.915955][T18178] usb 3-1: config 0 descriptor?? [ 1071.972535][T23437] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.012621][T23437] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.032568][T23437] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.053356][T23437] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.157889][ T5819] usb 3-1: USB disconnect, device number 107 [ 1074.849345][T23506] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1075.522585][T23509] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1075.531041][T23509] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1075.608768][ T30] audit: type=1804 audit(1747914620.767:810): pid=23529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.3280" name="/newroot/6/file1" dev="fuse" ino=1 res=1 errno=0 [ 1075.714129][T23509] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1075.720217][T23509] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1075.739431][T23509] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.745548][T23509] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1075.872615][T23509] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1075.878741][T23509] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1075.912125][T23509] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.919721][T23509] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1075.973323][T23509] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.979323][T23509] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1076.543072][ T5872] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1076.714140][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 1077.828841][T23609] xt_connbytes: Forcing CT accounting to be enabled [ 1078.850462][T14940] block nbd3: Possible stuck request ffff888024efe000: control (read@0,4096B). Runtime 60 seconds [ 1079.654661][ T5872] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1079.667700][ T5872] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1079.695724][ T5872] usb 6-1: can't read configurations, error -71 [ 1080.013733][ T30] audit: type=1804 audit(1747914625.377:811): pid=23637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.3294" name="/newroot/59/file1" dev="fuse" ino=1 res=1 errno=0 [ 1080.227413][T23643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3297'. [ 1081.873628][ T30] audit: type=1804 audit(1747914627.351:812): pid=23688 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.3308" name="/newroot/70/file1" dev="fuse" ino=1 res=1 errno=0 [ 1081.946321][T23691] NILFS (nbd4): device size too small [ 1082.078388][T23690] nbd4: detected capacity change from 0 to 4294967296 [ 1082.349462][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1082.954010][T18434] block nbd4: Receive control failed (result -32) [ 1082.984712][T23690] block nbd4: shutting down sockets [ 1083.147974][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1083.219507][T23715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3310'. [ 1084.997524][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1085.056469][T23725] futex_wake_op: syz.2.3313 tries to shift op by -33; fix this program [ 1085.074037][T23725] netdevsim netdevsim2: Direct firmware load for . [ 1085.074037][T23725] failed with error -2 [ 1085.085480][T23725] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1085.085480][T23725] [ 1085.248702][ T24] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1085.277142][ T24] usb 6-1: can't read configurations, error -71 [ 1085.491024][T23746] xt_connbytes: Forcing CT accounting to be enabled [ 1086.543466][T23760] NILFS (nbd0): device size too small [ 1086.714924][ T30] audit: type=1804 audit(1747914632.432:813): pid=23769 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.3319" name="/newroot/32/file1" dev="fuse" ino=1 res=1 errno=0 [ 1089.496041][T18178] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1091.134220][T18178] usb 6-1: Using ep0 maxpacket: 8 [ 1092.196860][T23840] NILFS (nbd1): device size too small [ 1092.816490][T23858] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1093.589006][T18178] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1093.644286][T23856] futex_wake_op: syz.0.3334 tries to shift op by -33; fix this program [ 1093.670906][T18178] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1093.699331][T18178] usb 6-1: can't read configurations, error -71 [ 1100.614815][T23993] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1100.912618][T24018] futex_wake_op: syz.1.3361 tries to shift op by -33; fix this program [ 1101.255765][T24018] netdevsim netdevsim1: Direct firmware load for . [ 1101.255765][T24018] failed with error -2 [ 1101.267570][T24018] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1101.267570][T24018] [ 1102.506566][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1102.513064][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1103.020158][ T30] audit: type=1326 audit(1747914649.526:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24046 comm="syz.2.3369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c15f8e969 code=0x0 [ 1107.479285][T23496] block nbd3: Possible stuck request ffff888024efe000: control (read@0,4096B). Runtime 90 seconds [ 1107.553531][T18178] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1107.589454][T24087] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1107.721726][T18178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1107.741652][T18178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1107.801503][T18178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1107.976262][T18178] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1108.017838][T18178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.299530][T18178] usb 5-1: config 0 descriptor?? [ 1109.790889][ T30] audit: type=1326 audit(1747914656.655:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24105 comm="syz.2.3381" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c15f8e969 code=0x0 [ 1110.369807][T18178] usb 5-1: USB disconnect, device number 83 [ 1110.484265][T24115] futex_wake_op: syz.1.3380 tries to shift op by -33; fix this program [ 1110.717931][T24115] netdevsim netdevsim1: Direct firmware load for . [ 1110.717931][T24115] failed with error -2 [ 1111.429476][T24115] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1111.429476][T24115] [ 1112.506971][ T5810] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 1113.528279][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.538600][ T5810] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1113.551508][ T5810] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1113.673621][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.964950][ T5810] usb 3-1: config 0 descriptor?? [ 1114.003335][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1114.025829][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 1114.038974][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1114.221869][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1114.229447][T24134] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1114.250564][ T5810] usb 3-1: media controller created [ 1114.293122][T24164] dvb-usb: bulk message failed: -22 (4/0) [ 1114.325712][ T5872] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1115.112429][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1115.169482][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 1115.298904][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 1115.335348][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1115.350783][ T5872] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1115.360023][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 1115.378289][ T5872] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1115.611674][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 1115.618339][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.627478][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1115.646243][ T5810] usb 3-1: USB disconnect, device number 108 [ 1115.688464][ T5872] usb 6-1: Product: syz [ 1115.708584][ T5872] usb 6-1: Manufacturer: syz [ 1115.717918][ T5810] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1115.724750][ T5872] usb 6-1: SerialNumber: syz [ 1115.779625][ T5872] usb 6-1: config 0 descriptor?? [ 1116.958565][ T5872] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1117.131606][ T5872] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1117.144692][ T5872] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 1117.162834][ T5872] usb 6-1: USB disconnect, device number 9 [ 1117.468323][ T10] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 1118.220831][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.233350][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1118.249830][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1118.280732][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.298228][ T10] usb 3-1: config 0 descriptor?? [ 1118.315514][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1118.322531][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1118.338929][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1118.351703][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1118.365455][ T10] usb 3-1: media controller created [ 1118.372236][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1118.387446][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1118.555428][T24224] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1118.609249][T24224] dvb-usb: bulk message failed: -22 (4/0) [ 1118.618718][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1118.781635][T24237] futex_wake_op: syz.5.3397 tries to shift op by -33; fix this program [ 1118.809307][T24237] netdevsim netdevsim5: Direct firmware load for . [ 1118.809307][T24237] failed with error -2 [ 1118.822206][T24237] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1118.822206][T24237] [ 1118.832041][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 1119.526123][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1119.568634][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1119.599767][ T10] usb 3-1: USB disconnect, device number 109 [ 1120.378251][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1124.583479][ T30] audit: type=1326 audit(1747914672.110:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24315 comm="syz.0.3406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4e38e969 code=0x0 [ 1124.604597][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.104954][T24333] netlink: 'syz.4.3409': attribute type 10 has an invalid length. [ 1125.113170][T24333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3409'. [ 1125.164816][T24333] team0: Port device geneve0 added [ 1127.533519][T20194] usb 3-1: new full-speed USB device number 110 using dummy_hcd [ 1127.740311][T20194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.808041][T20194] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1127.870361][T20194] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1127.880694][T20194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.920840][T20194] usb 3-1: config 0 descriptor?? [ 1127.957896][T20194] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1127.978274][T20194] dvb-usb: bulk message failed: -22 (3/0) [ 1128.122011][T20194] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1128.148676][T24346] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1128.156232][T24346] dvb-usb: bulk message failed: -22 (4/0) [ 1128.170752][T24362] net_ratelimit: 23 callbacks suppressed [ 1128.170771][T24362] netlink: zone id is out of range [ 1128.216946][T24362] netlink: zone id is out of range [ 1128.231140][T20194] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1128.238394][T24362] netlink: zone id is out of range [ 1128.250041][T20194] usb 3-1: media controller created [ 1128.253365][T24362] netlink: zone id is out of range [ 1128.258102][T20194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1128.274698][T24364] futex_wake_op: syz.5.3415 tries to shift op by -33; fix this program [ 1128.293973][T24364] netdevsim netdevsim5: Direct firmware load for . [ 1128.293973][T24364] failed with error -2 [ 1128.315328][T24364] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1128.315328][T24364] [ 1128.325764][T20194] dvb-usb: bulk message failed: -22 (6/0) [ 1128.331644][T20194] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1128.341200][T24362] netlink: zone id is out of range [ 1128.360510][T20194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 1128.426521][T24362] netlink: zone id is out of range [ 1128.449650][T24362] netlink: zone id is out of range [ 1128.449682][T20194] dvb-usb: schedule remote query interval to 150 msecs. [ 1128.476472][T24362] netlink: zone id is out of range [ 1128.486497][T24362] netlink: zone id is out of range [ 1128.496495][T24362] netlink: zone id is out of range [ 1128.505831][T20194] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1128.522787][T20194] usb 3-1: USB disconnect, device number 110 [ 1128.562901][T20194] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1128.761233][T24396] block nbd0: shutting down sockets [ 1128.937985][T24400] NILFS (nbd0): device size too small [ 1130.980726][ T30] audit: type=1326 audit(1747914678.914:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24412 comm="syz.0.3424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f4e38e969 code=0x0 [ 1133.306833][ T5872] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1133.532853][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1134.298396][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1134.307058][T20194] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1134.322756][ T5872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1134.342519][ T5872] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1134.357395][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.372391][ T5872] usb 6-1: config 0 descriptor?? [ 1134.378938][ T5872] usb 6-1: can't set config #0, error -71 [ 1134.393502][ T5872] usb 6-1: USB disconnect, device number 10 [ 1134.413907][T24464] syz_tun: entered allmulticast mode [ 1134.427030][T24464] xfrm0: entered allmulticast mode [ 1134.473364][T20194] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.486575][T20194] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1134.507667][T20194] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1134.526385][T20194] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.534844][T24473] block nbd5: shutting down sockets [ 1134.555486][T20194] usb 5-1: config 0 descriptor?? [ 1134.572316][T24468] NILFS (nbd5): device size too small [ 1134.582557][T20194] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1134.602396][T18178] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1134.605717][T20194] dvb-usb: bulk message failed: -22 (3/0) [ 1134.633423][T20194] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1134.664189][T20194] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1134.682013][T20194] usb 5-1: media controller created [ 1134.702294][T20194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.724793][T20194] dvb-usb: bulk message failed: -22 (6/0) [ 1134.732981][T20194] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1134.761551][T20194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input42 [ 1134.779658][T24439] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1134.806060][T24439] dvb-usb: bulk message failed: -22 (4/0) [ 1134.823623][T20194] dvb-usb: schedule remote query interval to 150 msecs. [ 1134.845763][T20194] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1134.902175][T20194] usb 5-1: USB disconnect, device number 84 [ 1134.982780][T20194] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1135.189874][T18178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1135.199869][T18178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1135.274918][T18178] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1135.341893][T18178] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1135.384730][T18178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.502537][T18178] usb 3-1: config 0 descriptor?? [ 1136.281046][T23496] block nbd3: Possible stuck request ffff888024efe000: control (read@0,4096B). Runtime 120 seconds [ 1136.346088][T24207] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1138.002847][T24207] usb 5-1: Using ep0 maxpacket: 16 [ 1138.088918][T20194] usb 3-1: USB disconnect, device number 111 [ 1138.095234][T24207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1138.281136][T24207] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1138.324436][T24207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.183397][T24207] usb 5-1: config 0 descriptor?? [ 1139.210674][ T30] audit: type=1326 audit(1747914687.545:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24529 comm="syz.2.3440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c15f8e969 code=0x0 [ 1139.264623][T24207] usb 5-1: can't set config #0, error -71 [ 1139.302757][T24207] usb 5-1: USB disconnect, device number 85 [ 1140.680183][T24567] NILFS (nbd0): device size too small [ 1140.698115][T24207] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1140.840598][T20194] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1140.938181][T24207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1142.147835][T24207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1142.159482][T24207] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1142.202998][T24207] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1142.212112][T24207] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1142.223657][T24207] usb 5-1: config 0 descriptor?? [ 1142.546483][T20194] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.660695][T20194] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1142.853786][T20194] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1143.264362][T18178] usb 5-1: USB disconnect, device number 86 [ 1143.389158][T20194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.347362][T24622] NILFS (nbd1): device size too small [ 1149.920152][T20194] usb 6-1: can't set config #27, error -110 [ 1150.845023][ T10] usb 6-1: USB disconnect, device number 11 [ 1152.860629][T16266] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1152.926531][T24669] NILFS (nbd4): device size too small [ 1153.022553][T24672] netlink: 'syz.1.3471': attribute type 10 has an invalid length. [ 1153.030504][T24672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 1153.060344][T16266] usb 3-1: Using ep0 maxpacket: 16 [ 1153.201269][T24672] team0: Port device geneve0 added [ 1156.188789][ T10] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1156.434951][T24689] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 1156.443022][T24689] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3475'. [ 1157.302900][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.327731][ T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1157.374899][ T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1157.487866][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.949122][ T10] usb 5-1: config 0 descriptor?? [ 1157.972457][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1157.980242][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 1158.019785][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1158.114138][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1158.121786][ T10] usb 5-1: media controller created [ 1158.140104][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.765316][T16266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1158.825566][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 1158.863798][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1158.904302][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 1159.043599][T16266] usb 3-1: unable to read config index 0 descriptor/start: -32 [ 1159.562731][T24682] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20000 [ 1160.030838][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 1160.041421][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1160.078096][T24707] dvb-usb: bulk message failed: -22 (4/0) [ 1160.084068][T16266] usb 3-1: chopping to 0 config(s) [ 1160.112184][T16266] usb 3-1: can't read configurations, error -32 [ 1160.119844][ T5871] usb 5-1: USB disconnect, device number 87 [ 1160.164356][ T5871] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1160.337264][T24777] nbd2: detected capacity change from 0 to 4294967296 [ 1160.371778][T24808] block nbd2: shutting down sockets [ 1160.521400][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1160.530216][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1165.518724][T23496] block nbd3: Possible stuck request ffff888024efe000: control (read@0,4096B). Runtime 150 seconds [ 1166.479918][T24929] nbd5: detected capacity change from 0 to 4294967296 [ 1166.510809][T24931] block nbd5: shutting down sockets [ 1172.642284][T24992] nbd1: detected capacity change from 0 to 4294967296 [ 1172.690939][T24996] block nbd1: shutting down sockets [ 1172.700067][ T31] INFO: task syz.3.3112:21271 blocked for more than 143 seconds. [ 1172.708519][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 1172.724016][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1172.750579][ T31] task:syz.3.3112 state:D stack:28176 pid:21271 tgid:21270 ppid:18429 task_flags:0x400140 flags:0x00004006 [ 1173.049615][ T31] Call Trace: [ 1173.089159][ T31] [ 1173.145245][ T31] __schedule+0x168f/0x4c70 [ 1173.365775][ T31] ? schedule+0x165/0x360 [ 1173.734339][ T31] ? __pfx___schedule+0x10/0x10 [ 1173.831175][ T31] ? schedule+0x91/0x360 [ 1173.885792][ T31] schedule+0x165/0x360 [ 1173.918596][ T31] schedule_preempt_disabled+0x13/0x30 [ 1173.924116][ T31] __mutex_lock+0x724/0xe80 [ 1173.956702][ T31] ? __mutex_lock+0x51b/0xe80 [ 1173.961485][ T31] ? bdev_release+0x1a9/0x650 [ 1173.984598][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1174.023116][ T31] ? __asan_memset+0x22/0x50 [ 1174.041217][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 1174.053573][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1174.070831][ T31] bdev_release+0x1a9/0x650 [ 1174.075437][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 1174.089877][ T31] blkdev_release+0x15/0x20 [ 1174.094476][ T31] __fput+0x449/0xa70 [ 1174.098500][ T31] task_work_run+0x1d4/0x260 [ 1174.103728][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1174.109192][ T31] get_signal+0x11c5/0x1310 [ 1174.113770][ T31] arch_do_signal_or_restart+0x95/0x780 [ 1174.127887][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1174.134135][ T31] ? __file_ref_put+0xd5/0x130 [ 1174.139427][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1174.145386][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 1174.177923][ T31] do_syscall_64+0x103/0x210 [ 1174.182605][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1174.189001][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.195423][ T31] RIP: 0033:0x7ffbde78e969 [ 1174.199889][ T31] RSP: 002b:00007ffbdf564038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.212456][ T31] RAX: 0000000000000000 RBX: 00007ffbde9b5fa0 RCX: 00007ffbde78e969 [ 1174.220828][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1174.229300][ T31] RBP: 00007ffbde810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1174.237696][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.246042][ T31] R13: 0000000000000000 R14: 00007ffbde9b5fa0 R15: 00007ffdcd30bd18 [ 1174.254427][ T31] [ 1174.257554][ T31] INFO: task syz.3.3112:21272 blocked for more than 144 seconds. [ 1174.294307][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 1174.324023][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1174.349541][ T31] task:syz.3.3112 state:D stack:23176 pid:21272 tgid:21270 ppid:18429 task_flags:0x400140 flags:0x00004006 [ 1174.374804][ T31] Call Trace: [ 1174.390105][ T31] [ 1174.393115][ T31] __schedule+0x168f/0x4c70 [ 1174.398177][ T31] ? schedule+0x165/0x360 [ 1174.402555][ T31] ? __pfx___schedule+0x10/0x10 [ 1174.412463][ T31] ? schedule+0x91/0x360 [ 1174.417097][ T31] schedule+0x165/0x360 [ 1174.421299][ T31] io_schedule+0x81/0xe0 [ 1174.430443][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 1174.436942][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 1174.447612][ T31] ? irqentry_exit+0x74/0x90 [ 1174.452701][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 1174.458306][ T31] ? do_read_cache_folio+0x19a/0x590 [ 1174.468722][ T31] do_read_cache_folio+0x1ae/0x590 [ 1174.474558][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 1174.484907][ T31] read_part_sector+0xb6/0x270 [ 1174.494188][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 1174.505038][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 1174.511623][ T31] bdev_disk_changed+0x75c/0x14b0 [ 1174.516717][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 1174.537744][ T31] blkdev_get_whole+0x380/0x510 [ 1174.542684][ T31] ? disk_block_events+0xab/0x120 [ 1174.556504][ T31] bdev_open+0x31e/0xd30 [ 1174.560876][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 1174.580294][ T31] setup_bdev_super+0x5a/0x5b0 [ 1174.585610][ T31] nilfs_get_tree+0x3d7/0x870 [ 1174.590349][ T31] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1174.613629][ T31] ? rcu_is_watching+0x15/0xb0 [ 1174.618495][ T31] ? __pfx_nilfs_get_tree+0x10/0x10 [ 1174.632914][ T31] ? cap_capable+0x11f/0x460 [ 1174.637576][ T31] ? safesetid_security_capable+0xa9/0x1a0 [ 1174.651669][ T31] vfs_get_tree+0x92/0x2b0 [ 1174.656181][ T31] do_new_mount+0x24a/0xa40 [ 1174.660736][ T31] __se_sys_mount+0x317/0x410 [ 1174.680383][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 1174.685682][ T31] ? do_syscall_64+0xba/0x210 [ 1174.698275][ T31] ? __x64_sys_mount+0x20/0xc0 [ 1174.703495][ T31] do_syscall_64+0xf6/0x210 [ 1174.708060][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1174.713081][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.725495][ T31] RIP: 0033:0x7ffbde78e969 [ 1174.733902][ T31] RSP: 002b:00007ffbdf543038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1174.742530][ T31] RAX: ffffffffffffffda RBX: 00007ffbde9b6080 RCX: 00007ffbde78e969 [ 1174.750731][ T31] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000200000000000 [ 1174.758889][ T31] RBP: 00007ffbde810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1174.766982][ T31] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000000 [ 1174.774957][ T31] R13: 0000000000000001 R14: 00007ffbde9b6080 R15: 00007ffdcd30bd18 [ 1174.783070][ T31] [ 1174.786321][ T31] [ 1174.786321][ T31] Showing all locks held in the system: [ 1174.794489][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1174.831968][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1174.856472][ T31] 1 lock held by khungtaskd/31: [ 1174.861674][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1174.874939][ T31] 2 locks held by getty/5580: [ 1174.879637][ T31] #0: ffff8880306fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1174.908878][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1174.952404][ T31] 2 locks held by kworker/0:4/5871: [ 1174.957772][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1174.994593][ T31] #1: ffffc90004f27c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1175.023288][ T31] 2 locks held by kworker/u8:10/5925: [ 1175.061855][ T31] 2 locks held by syz-executor/19153: [ 1175.067303][ T31] #0: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1175.123016][ T31] #1: ffffffff8df439b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 1175.185092][ T31] 1 lock held by syz-executor/19981: [ 1175.190641][ T31] 3 locks held by kworker/1:5/20194: [ 1175.223224][ T31] 1 lock held by syz-executor/20780: [ 1175.228581][ T31] #0: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1175.275265][ T31] 1 lock held by syz.3.3112/21271: [ 1175.299384][ T31] #0: ffff888024e4a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 1175.328587][ T31] 2 locks held by syz.3.3112/21272: [ 1175.333962][ T31] #0: ffff888020f9a0e0 (&type->s_umount_key#84/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 1175.366278][ T31] #1: ffff888024e4a358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1175.385121][ T31] 1 lock held by syz.5.3512/24997: [ 1175.390300][ T31] #0: ffffffff8f2e8588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1175.418090][ T31] [ 1175.420486][ T31] ============================================= [ 1175.420486][ T31] [ 1175.444343][ T31] NMI backtrace for cpu 0 [ 1175.444370][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1175.444395][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1175.444407][ T31] Call Trace: [ 1175.444415][ T31] [ 1175.444424][ T31] dump_stack_lvl+0x189/0x250 [ 1175.444455][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1175.444480][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.444507][ T31] ? __pfx__printk+0x10/0x10 [ 1175.444551][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1175.444576][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1175.444594][ T31] ? _printk+0xcf/0x120 [ 1175.444630][ T31] ? __pfx__printk+0x10/0x10 [ 1175.444663][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1175.444686][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1175.444711][ T31] watchdog+0xfee/0x1030 [ 1175.444739][ T31] ? watchdog+0x1de/0x1030 [ 1175.444779][ T31] kthread+0x711/0x8a0 [ 1175.444808][ T31] ? __pfx_watchdog+0x10/0x10 [ 1175.444831][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.444856][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.444878][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.444902][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.444928][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.444950][ T31] ret_from_fork+0x4b/0x80 [ 1175.444969][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.444992][ T31] ret_from_fork_asm+0x1a/0x30 [ 1175.445038][ T31] [ 1175.445047][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1175.593673][ C1] NMI backtrace for cpu 1 [ 1175.593690][ C1] CPU: 1 UID: 0 PID: 5810 Comm: kworker/1:3 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1175.593712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1175.593724][ C1] Workqueue: events_power_efficient gc_worker [ 1175.593754][ C1] RIP: 0010:__lock_acquire+0x2bd/0xd20 [ 1175.593781][ C1] Code: c6 31 d2 83 bf d4 0a 00 00 00 0f 95 c2 c1 e2 0d c1 e6 0e 09 d6 41 c1 e2 0f 41 0f b7 d2 09 f2 41 83 e7 03 41 c1 e7 10 41 09 d7 <8b> 54 24 08 83 e2 01 c1 e2 12 44 09 fa 41 c1 e4 14 41 09 d4 41 c1 [ 1175.593795][ C1] RSP: 0018:ffffc9000488f8a0 EFLAGS: 00000006 [ 1175.593810][ C1] RAX: 000000000000000a RBX: ffffffff8df3dee0 RCX: 0000000000000007 [ 1175.593829][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880256a5a00 [ 1175.593840][ C1] RBP: ffff8880256a64f0 R08: 0000000000000000 R09: 0000000000000000 [ 1175.593851][ C1] R10: 0000000000000000 R11: ffffffff898253b4 R12: 0000000000000000 [ 1175.593863][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000020000 [ 1175.593874][ C1] FS: 0000000000000000(0000) GS:ffff8881261f6000(0000) knlGS:0000000000000000 [ 1175.593888][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1175.593901][ C1] CR2: 00007f78c640ef98 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 1175.593917][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1175.593927][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1175.593938][ C1] Call Trace: [ 1175.593947][ C1] [ 1175.593958][ C1] ? gc_worker+0x264/0x1380 [ 1175.593981][ C1] lock_acquire+0x120/0x360 [ 1175.594003][ C1] ? gc_worker+0x264/0x1380 [ 1175.594030][ C1] ? gc_worker+0x264/0x1380 [ 1175.594054][ C1] gc_worker+0x285/0x1380 [ 1175.594077][ C1] ? gc_worker+0x264/0x1380 [ 1175.594103][ C1] ? gc_worker+0x264/0x1380 [ 1175.594128][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1175.594152][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.594171][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1175.594197][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1175.594223][ C1] process_scheduled_works+0xade/0x17a0 [ 1175.594261][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1175.594294][ C1] worker_thread+0x8a0/0xda0 [ 1175.594311][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1175.594334][ C1] ? __kthread_parkme+0x7b/0x200 [ 1175.594355][ C1] kthread+0x711/0x8a0 [ 1175.594376][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1175.594391][ C1] ? __pfx_kthread+0x10/0x10 [ 1175.594410][ C1] ? __pfx_kthread+0x10/0x10 [ 1175.594428][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.594446][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.594467][ C1] ? __pfx_kthread+0x10/0x10 [ 1175.594485][ C1] ret_from_fork+0x4b/0x80 [ 1175.594501][ C1] ? __pfx_kthread+0x10/0x10 [ 1175.594520][ C1] ret_from_fork_asm+0x1a/0x30 [ 1175.594559][ C1] [ 1175.599196][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1175.599222][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 1175.599250][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1175.599266][ T31] Call Trace: [ 1175.599277][ T31] [ 1175.599290][ T31] dump_stack_lvl+0x99/0x250 [ 1175.599327][ T31] ? __asan_memcpy+0x40/0x70 [ 1175.599358][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1175.599390][ T31] ? __pfx__printk+0x10/0x10 [ 1175.599438][ T31] panic+0x2db/0x790 [ 1175.599475][ T31] ? __pfx_panic+0x10/0x10 [ 1175.599502][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 1175.599543][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1175.599568][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1175.599603][ T31] watchdog+0x102d/0x1030 [ 1175.599634][ T31] ? watchdog+0x1de/0x1030 [ 1175.599671][ T31] kthread+0x711/0x8a0 [ 1175.599702][ T31] ? __pfx_watchdog+0x10/0x10 [ 1175.599728][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.599756][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.599780][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.599806][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.599833][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.599858][ T31] ret_from_fork+0x4b/0x80 [ 1175.599880][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.599905][ T31] ret_from_fork_asm+0x1a/0x30 [ 1175.599956][ T31] [ 1176.010697][ T31] Kernel Offset: disabled [ 1176.015027][ T31] Rebooting in 86400 seconds..