last executing test programs: 25m11.035444348s ago: executing program 32 (id=999): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) 23m40.16594346s ago: executing program 33 (id=2390): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 23m20.910369917s ago: executing program 34 (id=2532): r0 = syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x44) ptrace(0x4207, r0) ptrace(0x4208, r0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) 21m2.228639983s ago: executing program 35 (id=3873): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = syz_clone(0xd104200, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='environ\x00') syz_fuse_handle_req(r2, &(0x7f0000000ac0)="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", 0x2000, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m47.791065882s ago: executing program 36 (id=3970): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 16m8.027982113s ago: executing program 37 (id=4773): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x18, 0x5, 0xe, 0x8, 0x4f, 0x7, 0x7, 0x5}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000000200)='qnx6\x00', 0x8000, 0x0) 13m36.731036624s ago: executing program 0 (id=6174): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 13m36.532279014s ago: executing program 0 (id=6178): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4, 0x5) 13m36.405525352s ago: executing program 0 (id=6180): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000000), 0x10, &(0x7f0000000240)={0x0}, 0x8, 0x0, 0x0, 0x4004845}, 0x0) 13m35.331631997s ago: executing program 0 (id=6185): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x100800, {0x2, 0x6, "3fe435", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) 13m35.271321034s ago: executing program 0 (id=6186): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 13m35.186405283s ago: executing program 0 (id=6188): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r0, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) 13m20.090201297s ago: executing program 38 (id=6188): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCSETA(r0, 0x8925, &(0x7f0000000100)={0x2, 0x0, 0x1, 0x0, 0x13, "31f40000f7ece2f4"}) 11m25.056024167s ago: executing program 2 (id=7525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x48, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 11m24.837036206s ago: executing program 2 (id=7528): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 11m24.616747709s ago: executing program 2 (id=7529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, 0x0, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$netlink(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/nfsfs\x00') syz_usb_connect(0x4, 0x1b, &(0x7f0000000800)=ANY=[], 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x31, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8054}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m23.871652247s ago: executing program 2 (id=7537): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) 11m23.764132495s ago: executing program 2 (id=7539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 11m21.315957722s ago: executing program 2 (id=7551): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xbf, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0xd}, {}, {}, {0x80000008, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x37ef}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0xd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 11m20.984753246s ago: executing program 39 (id=7551): r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xbf, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0xd}, {}, {}, {0x80000008, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x37ef}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0xd}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) 6m34.255407378s ago: executing program 3 (id=9099): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x71, 0x11cfa, 0xffffffff, 0x8000008, 0x4, 0x7, 0x1, 0x0, 0x0, 0x4d}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) 6m31.00850344s ago: executing program 3 (id=9101): syz_open_procfs(0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) add_key(&(0x7f0000005a80)='rxrpc\x00', 0x0, &(0x7f0000005b00)="88", 0x1, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)) capget(0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 6m19.705889115s ago: executing program 3 (id=9112): socket(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r4, &(0x7f0000000400)=""/4096, 0x1000) lseek(r4, 0x2, 0x1) 6m18.127032653s ago: executing program 3 (id=9113): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x400d4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r4, @ANYBLOB="05005b"], 0x24}}, 0x0) 6m15.199169087s ago: executing program 3 (id=9118): dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x9, 0x2, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) setpriority(0x2, 0x0, 0x2a14b58) 6m12.828263807s ago: executing program 3 (id=9121): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a2100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000440)={r7}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1800001, 0x12, r9, 0x6a6db000) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 6m8.27649253s ago: executing program 1 (id=9127): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4, 0x1}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6m6.596585065s ago: executing program 1 (id=9130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x160) close(r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r5 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) dup3(r0, r4, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r5) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) 6m5.014743704s ago: executing program 1 (id=9132): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x30) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m2.958156886s ago: executing program 1 (id=9133): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto(r4, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c24", 0xad, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) close(0x3) sendto$inet(r3, 0x0, 0x0, 0x20040004, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m56.429088372s ago: executing program 40 (id=9121): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a2100, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000440)={r7}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x15, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x5, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r8, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1800001, 0x12, r9, 0x6a6db000) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 5m48.345304153s ago: executing program 1 (id=9152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) msgget$private(0x0, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x5, 0x5, 0x2}, 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 5m45.652557813s ago: executing program 1 (id=9154): syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x5c}}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 5m28.840629606s ago: executing program 41 (id=9154): syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14}}, 0x5c}}, 0x0) write$P9_RVERSION(r0, 0x0, 0xfffffcd9) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r7, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) 2m18.978722013s ago: executing program 4 (id=10432): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="7b87f2", @ANYBLOB="85ee"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) 2m18.784372854s ago: executing program 4 (id=10434): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) ptrace$poke(0x5, r1, 0x0, 0xd6) tkill(r1, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000002200)={{}, {0x0, 0xea60}}, 0x0) 2m17.6546709s ago: executing program 4 (id=10441): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m17.455559362s ago: executing program 4 (id=10443): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) chdir(&(0x7f0000000080)='./file0/../file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000240)='./file0/../file0\x00', 0x2) 2m17.181307798s ago: executing program 4 (id=10445): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200088d7, &(0x7f0000b63fe4)={0xa, 0x2, 0x80}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) pipe(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) 2m15.023560254s ago: executing program 4 (id=10462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x7f, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0x8, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x4, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40, 0xfd}, {0x26000, 0x2, 0x0, 0x5, 0x7, 0x0, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xc000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xa, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x5c000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) 2m14.438895383s ago: executing program 42 (id=10462): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x6f, 0x3, 0x7f, 0x40, 0x29, 0x0, 0x2e, 0x19}, {0xd000, 0x1, 0xc, 0x0, 0x40, 0x5, 0x7d, 0x8, 0x58, 0x3, 0x3, 0xc0}, {0xdddd1000, 0x10000, 0x8, 0x9, 0x3, 0x8, 0xfe, 0x9, 0x5, 0xab, 0x5, 0x81}, {0x3000, 0x26000, 0x3, 0x5d, 0x4, 0x42, 0x9, 0x2, 0x6, 0x7, 0xe}, {0x0, 0x9000, 0x9, 0x4, 0x7, 0x7, 0xab, 0x7f, 0x9e, 0x9, 0xf7, 0x83}, {0x1000, 0x80a0000, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0x11, 0x40, 0xfd}, {0x26000, 0x2, 0x0, 0x5, 0x7, 0x0, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xc000, 0x1000, 0x8, 0x5, 0xf, 0x7, 0xa, 0x18, 0x2, 0x3, 0x7, 0x9}, {0x5c000, 0x30}, {0x10000, 0x86}, 0x80000031, 0x0, 0x70000, 0x242101, 0xb, 0x0, 0xa000, [0x6840000000000000, 0x4, 0x5a, 0x100]}) 1m28.225229446s ago: executing program 7 (id=10671): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x44, r0, 0x101, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x4004880) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_emit_vhci(&(0x7f0000002580)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0x0, 0xcd28}}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 1m24.510461259s ago: executing program 8 (id=10676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m24.51017027s ago: executing program 7 (id=10677): getsockopt(0xffffffffffffffff, 0xff, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x11b) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000004) mkdir(0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 1m24.318041185s ago: executing program 8 (id=10678): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x1) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r2, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 1m24.091409604s ago: executing program 7 (id=10681): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@empty, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 1m20.153277419s ago: executing program 7 (id=10690): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m18.147349709s ago: executing program 7 (id=10693): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x9, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000000), &(0x7f0000000080)) 1m16.589446121s ago: executing program 7 (id=10694): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1m14.856043786s ago: executing program 8 (id=10697): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x49) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 1m13.734697127s ago: executing program 8 (id=10698): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x1f, 0x0, 0x0) write(r2, &(0x7f0000000340), 0x11000) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) 1m13.252756594s ago: executing program 8 (id=10699): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m12.0675642s ago: executing program 8 (id=10701): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 57.629289845s ago: executing program 43 (id=10694): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 55.056249083s ago: executing program 44 (id=10701): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x3, 0x3a) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 35.649163778s ago: executing program 5 (id=10738): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(r3, 0x369a, 0x0, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x3, @loopback, 0x2}}, 0xfffffffc, 0x4, 0x2, 0x7, 0x45, 0x2, 0x9}, &(0x7f00000000c0)=0x9c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = dup(r4) r6 = socket(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f00001fb000/0x3000)=nil, 0x3000, 0x37ffff2, 0x13, r7, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 33.684344738s ago: executing program 5 (id=10740): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 30.174844304s ago: executing program 5 (id=10745): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0xb, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mlockall(0x6) futex_waitv(&(0x7f0000001080), 0x0, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) setgroups(0x1, &(0x7f0000000140)=[0x0]) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4000000) 28.543834486s ago: executing program 5 (id=10746): socket$netlink(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r4, &(0x7f0000000580)=""/174, 0xae) 26.638167984s ago: executing program 5 (id=10749): r0 = eventfd2(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_io_uring_setup(0x3e41, &(0x7f0000000080)={0x0, 0x2000d2e4, 0x10000, 0x6, 0x308}, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x4, &(0x7f0000000400)=0x0) io_pgetevents(r6, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 24.620889815s ago: executing program 5 (id=10752): syz_open_dev$char_usb(0xc, 0xb4, 0x345) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2000000000000069, 0x0, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x4c314356, 0x0, 0xb, [{0x80000004, 0x8}, {0x7ff, 0xb325}, {0x10000001}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540), 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) setns(0xffffffffffffffff, 0x20000000) writev(r6, 0x0, 0x0) 8.787438844s ago: executing program 6 (id=10776): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x80104d12, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f00000000c0)={0x34, 0x1, 0x5, 0xc, 0x7fff, 0x81}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setregid(0x0, 0xee01) sendmmsg(r5, 0x0, 0x0, 0x1) sendmsg$NL80211_CMD_SET_REG(r3, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "cb8f97", 0x14, 0x6, 0x0, @private1, @mcast2, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xc}}}}}}}, 0x0) 8.223299656s ago: executing program 45 (id=10752): syz_open_dev$char_usb(0xc, 0xb4, 0x345) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2000000000000069, 0x0, &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x4, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x2, {0x9, @pix_mp={0xf, 0x5be7, 0x4c314356, 0x0, 0xb, [{0x80000004, 0x8}, {0x7ff, 0xb325}, {0x10000001}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x4, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540), 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2) setns(0xffffffffffffffff, 0x20000000) writev(r6, 0x0, 0x0) 7.212911547s ago: executing program 6 (id=10780): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1c, 0x0, 0x1, [@typed={0x4, 0x125}, @nested={0x4, 0x91}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0xc000) 6.942621964s ago: executing program 6 (id=10782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000580)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r4, 0x0, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000000500)=ANY=[], 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000600), 0x4) 5.677865111s ago: executing program 6 (id=10784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 5.451011539s ago: executing program 6 (id=10786): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004400)='/proc/mdstat\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x18, 0x5, 0xe, 0x8, 0x4f, 0x7, 0x7, 0x5}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0xffffffff, @mcast2}, {0xa, 0x0, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x86}}}, 0x48) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c00"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) 2.957990956s ago: executing program 9 (id=10791): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffffdff8) 2.686852094s ago: executing program 9 (id=10792): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0xffffffff00000000}, 0x38) 2.530295964s ago: executing program 9 (id=10793): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x0, 0x4, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @str='GPL\x00'}]}, 0x1c}}, 0x0) 2.433168427s ago: executing program 9 (id=10794): accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000580)) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, &(0x7f0000000280)=""/100, 0x0, 0x64, 0x1, 0x1000}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setpgid(0x0, r0) close(r3) 1.385176225s ago: executing program 9 (id=10795): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xffffffffffffffef, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 1.333648667s ago: executing program 9 (id=10796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r4, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=10797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x40}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ][T29818] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9090'. [ 1273.861958][ T37] audit: type=1326 audit(1770964417.733:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29822 comm="syz.5.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1273.862005][ T37] audit: type=1326 audit(1770964417.733:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29822 comm="syz.5.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1273.863411][ T37] audit: type=1326 audit(1770964417.733:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29822 comm="syz.5.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1273.863454][ T37] audit: type=1326 audit(1770964417.733:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29822 comm="syz.5.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1273.863490][ T37] audit: type=1326 audit(1770964417.733:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29822 comm="syz.5.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1273.863525][ T37] audit: type=1326 audit(1770964417.733:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29822 comm="syz.5.9092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1279.136367][ T1498] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1281.577950][T29855] syz.6.9098 (29855): drop_caches: 2 [ 1283.417835][T29863] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9101'. [ 1295.577002][T17039] Bluetooth: hci3: command 0x0406 tx timeout [ 1295.778004][T29897] udevd[29897]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1295.804953][T29893] udevd[29893]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1305.219979][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.010238][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9121'. [ 1310.866385][T30004] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1316.770699][ T1519] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1321.303445][T17039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1322.341744][T17039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1322.344725][T17039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1322.345863][T17039] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1322.346579][T17039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1323.730307][T30052] virt_wifi0 speed is unknown, defaulting to 1000 [ 1323.738893][T30052] lo speed is unknown, defaulting to 1000 [ 1325.383994][T30076] netlink: 64 bytes leftover after parsing attributes in process `syz.5.9151'. [ 1326.096615][T21074] Bluetooth: hci5: command tx timeout [ 1328.328468][T21074] Bluetooth: hci5: command tx timeout [ 1329.454876][T30052] chnl_net:caif_netlink_parms(): no params data found [ 1330.533552][T21074] Bluetooth: hci5: command tx timeout [ 1330.559057][T30092] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9156'. [ 1332.757466][T21074] Bluetooth: hci5: command tx timeout [ 1332.813644][T30052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.842631][T30052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.842902][T30052] bridge_slave_0: entered allmulticast mode [ 1332.845411][T30052] bridge_slave_0: entered promiscuous mode [ 1332.888158][T30052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.888274][T30052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.888526][T30052] bridge_slave_1: entered allmulticast mode [ 1332.939543][T30052] bridge_slave_1: entered promiscuous mode [ 1334.178290][T30052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.233812][T30052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.448448][T30052] team0: Port device team_slave_0 added [ 1334.452021][T30052] team0: Port device team_slave_1 added [ 1338.516517][T30052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.516533][T30052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.516557][T30052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.579036][ T5904] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1339.657840][T30052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.657857][T30052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.657882][T30052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.864648][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1339.878242][ T5904] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1339.878270][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1339.878291][ T5904] usb 2-1: Product: syz [ 1339.878305][ T5904] usb 2-1: Manufacturer: syz [ 1339.878319][ T5904] usb 2-1: SerialNumber: syz [ 1339.887291][ T5904] usb 2-1: config 0 descriptor?? [ 1340.953631][T30052] hsr_slave_0: entered promiscuous mode [ 1340.954913][T30052] hsr_slave_1: entered promiscuous mode [ 1340.955896][T30052] debugfs: 'hsr0' already exists in 'hsr' [ 1340.955918][T30052] Cannot create hsr debugfs directory [ 1341.271949][ T5904] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1344.475171][T30137] udevd[30137]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1345.021078][T17039] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1345.029933][T17039] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1345.037276][T17039] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1345.038371][T17039] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1345.044430][T17039] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1345.403548][ T5869] usb 2-1: USB disconnect, device number 18 [ 1346.419840][T30171] slcan: can't register candev [ 1346.513946][T30149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.537893][T30149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.776014][T30149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1346.791697][T20974] lo speed is unknown, defaulting to 1000 [ 1346.791726][T20974] syz2: Port: 1 Link ACTIVE [ 1348.661927][T21074] Bluetooth: hci6: command tx timeout [ 1352.905640][T21074] Bluetooth: hci6: command tx timeout [ 1354.301634][T30224] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 1355.259336][T21074] Bluetooth: hci6: command tx timeout [ 1356.518168][T30259] syz.8.9193 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1357.473984][T21074] Bluetooth: hci6: command tx timeout [ 1361.133001][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1363.675894][T30296] binder: 30295:30296 ioctl c0306201 2000000003c0 returned -14 [ 1365.525430][T30343] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9208'. [ 1365.525462][T30343] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9208'. [ 1365.525490][T30343] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9208'. [ 1365.525555][T30343] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9208'. [ 1366.762049][ T37] audit: type=1326 audit(1770964505.991:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762102][ T37] audit: type=1326 audit(1770964505.991:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762142][ T37] audit: type=1326 audit(1770964505.991:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762181][ T37] audit: type=1326 audit(1770964505.991:4313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762218][ T37] audit: type=1326 audit(1770964505.991:4314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762259][ T37] audit: type=1326 audit(1770964506.001:4315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762313][ T37] audit: type=1326 audit(1770964506.001:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762352][ T37] audit: type=1326 audit(1770964506.001:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762390][ T37] audit: type=1326 audit(1770964506.010:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca26bf79 code=0x7ffc0000 [ 1366.762427][ T37] audit: type=1326 audit(1770964506.010:4319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30346 comm="syz.6.9211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff9ca22c84e code=0x7ffc0000 [ 1367.817090][T30163] virt_wifi0 speed is unknown, defaulting to 1000 [ 1369.282746][T30377] trusted_key: encrypted_key: keylen parameter is missing [ 1372.239014][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.616310][ T815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.873725][T30163] lo speed is unknown, defaulting to 1000 [ 1373.051514][T30390] [U]  [ 1373.051914][T30390] [U] K{ [ 1373.055515][T30390] [U] T 1ŠFFˊ`GJǘGO/MC [ 1373.072675][T30390] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1373.078515][T30390] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1373.119607][T30390] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1373.155940][T30390] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1373.163714][T30390] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1373.171155][T30390] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1373.188024][T30390] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1373.250452][T30390] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1373.259293][T30390] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1373.260649][T30390] [U] 22Ʃ۩X?0;3U [ 1373.279087][T30390] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1373.284908][T30390] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1373.290181][T30390] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1373.293342][T30390] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1373.301471][T30390] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1373.302001][T30390] [U] EC [ 1373.310217][T30390] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1373.472961][T30380] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1378.109118][ T815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1378.427437][ T5869] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1378.592679][ T5869] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1378.592711][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1378.592731][ T5869] usb 7-1: Product: syz [ 1378.592745][ T5869] usb 7-1: Manufacturer: syz [ 1378.592759][ T5869] usb 7-1: SerialNumber: syz [ 1378.624681][ T5869] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1378.675872][T20974] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1378.932784][ T815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.233984][T20974] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1380.234163][T20974] ath9k_htc: Failed to initialize the device [ 1380.244474][T29218] usb 7-1: USB disconnect, device number 63 [ 1380.298114][T29218] usb 7-1: ath9k_htc: USB layer deinitialized [ 1380.517074][ T815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.977517][T30052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1381.104703][T30052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1381.369221][T30052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1382.061426][T30515] ceph: No mds server is up or the cluster is laggy [ 1382.202631][T29218] libceph: connect (1)[c::]:6789 error -13 [ 1382.202817][T29218] libceph: mon0 (1)[c::]:6789 connect error [ 1382.241779][T30163] chnl_net:caif_netlink_parms(): no params data found [ 1382.525870][ T815] bridge_slave_1: left allmulticast mode [ 1382.525897][ T815] bridge_slave_1: left promiscuous mode [ 1382.526156][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.776758][ T815] bridge_slave_0: left allmulticast mode [ 1382.776790][ T815] bridge_slave_0: left promiscuous mode [ 1382.777015][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.067885][T17039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1383.093149][T17039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1383.097960][T17039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1383.114943][T17039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1383.115918][T17039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1385.366149][T21074] Bluetooth: hci2: command tx timeout [ 1385.503772][T30575] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9271'. [ 1385.956730][ T815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.018256][ T815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.075093][ T815] bond0 (unregistering): Released all slaves [ 1387.578512][T21074] Bluetooth: hci2: command tx timeout [ 1391.161466][T21074] Bluetooth: hci2: command tx timeout [ 1391.423628][T30163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.423748][T30163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.424032][T30163] bridge_slave_0: entered allmulticast mode [ 1391.464165][T30163] bridge_slave_0: entered promiscuous mode [ 1391.473507][T30644] netlink: 6 bytes leftover after parsing attributes in process `syz.8.9294'. [ 1391.492584][T30536] virt_wifi0 speed is unknown, defaulting to 1000 [ 1391.508888][T30163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.508964][T30163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.509166][T30163] bridge_slave_1: entered allmulticast mode [ 1391.510611][T30163] bridge_slave_1: entered promiscuous mode [ 1391.541426][T30536] lo speed is unknown, defaulting to 1000 [ 1391.795710][ T37] kauditd_printk_skb: 62 callbacks suppressed [ 1391.795728][ T37] audit: type=1326 audit(1770964530.144:4382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30656 comm="syz.8.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1391.816539][ T37] audit: type=1326 audit(1770964530.162:4383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30656 comm="syz.8.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1391.859077][ T37] audit: type=1326 audit(1770964530.200:4384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30656 comm="syz.8.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1391.859126][ T37] audit: type=1326 audit(1770964530.200:4385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30656 comm="syz.8.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1391.859164][ T37] audit: type=1326 audit(1770964530.200:4386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30656 comm="syz.8.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1392.073168][T30661] ISOFS: Unable to identify CD-ROM format. [ 1392.165188][ T815] hsr_slave_0: left promiscuous mode [ 1392.207766][ T815] hsr_slave_1: left promiscuous mode [ 1392.209466][ T815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.209491][ T815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.267391][ T815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.267502][ T815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.728813][ T815] veth1_macvtap: left promiscuous mode [ 1392.728928][ T815] veth0_macvtap: left promiscuous mode [ 1392.735652][ T815] veth1_vlan: left promiscuous mode [ 1392.735819][ T815] veth0_vlan: left promiscuous mode [ 1393.104610][T30706] kAFS: unable to lookup cell '(' [ 1393.308926][T21074] Bluetooth: hci2: command tx timeout [ 1396.334939][ T815] team0 (unregistering): Port device team_slave_1 removed [ 1396.591372][ T815] team0 (unregistering): Port device team_slave_0 removed [ 1398.195477][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1399.106337][T30163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.148109][T30724] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1399.178105][T30163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.428397][T30163] team0: Port device team_slave_0 added [ 1399.482855][T30163] team0: Port device team_slave_1 added [ 1399.770259][T30163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1399.770275][T30163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.770299][T30163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1399.773725][T30163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1399.773739][T30163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1399.773764][T30163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.067897][T30163] hsr_slave_0: entered promiscuous mode [ 1400.069348][T30163] hsr_slave_1: entered promiscuous mode [ 1403.848720][T30803] bond0: entered promiscuous mode [ 1403.848743][T30803] bond_slave_0: entered promiscuous mode [ 1403.848885][T30803] @0: entered promiscuous mode [ 1403.849048][T30803] bridge_slave_1: entered promiscuous mode [ 1403.849182][T30803] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 1403.850888][T30803] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1404.199701][T30536] chnl_net:caif_netlink_parms(): no params data found [ 1404.649798][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9363'. [ 1405.076204][T30865] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 1405.771635][T30536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.771815][T30536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.772063][T30536] bridge_slave_0: entered allmulticast mode [ 1405.788032][T30536] bridge_slave_0: entered promiscuous mode [ 1405.825094][T30536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.825309][T30536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.825574][T30536] bridge_slave_1: entered allmulticast mode [ 1405.849015][T30536] bridge_slave_1: entered promiscuous mode [ 1406.538983][ T37] audit: type=1326 audit(1770964543.931:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.539997][ T37] audit: type=1326 audit(1770964543.931:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.555480][ T37] audit: type=1326 audit(1770964543.950:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.555524][ T37] audit: type=1326 audit(1770964543.950:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.555560][ T37] audit: type=1326 audit(1770964543.950:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.560538][ T37] audit: type=1326 audit(1770964543.950:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.573392][ T37] audit: type=1326 audit(1770964543.959:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30925 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fed2306c84e code=0x7ffc0000 [ 1406.573437][ T37] audit: type=1326 audit(1770964543.959:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.575771][ T37] audit: type=1326 audit(1770964543.959:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30923 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.742671][ T37] audit: type=1326 audit(1770964544.118:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=30925 comm="syz.5.9393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1406.885918][T30918] netlink: 288 bytes leftover after parsing attributes in process `syz.8.9390'. [ 1406.955368][T30536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.042156][T30942] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9401'. [ 1407.200005][T30946] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9403'. [ 1407.451442][T30536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1408.091936][T30960] vlan3: entered promiscuous mode [ 1408.837461][T30982] trusted_key: encrypted_key: keylen parameter is missing [ 1410.443985][T30536] team0: Port device team_slave_0 added [ 1410.556680][T30536] team0: Port device team_slave_1 added [ 1410.643146][T17039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1410.678434][T17039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1410.714384][T17039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1410.717932][T17039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1410.733428][T17039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1410.832616][T30536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.832634][T30536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.832657][T30536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.840286][T30536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.840301][T30536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.840327][T30536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.968976][T30996] IPVS: Scheduler module ip_vs_sip not found [ 1411.292701][T30991] virt_wifi0 speed is unknown, defaulting to 1000 [ 1411.301462][ T5869] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1411.369448][T30991] lo speed is unknown, defaulting to 1000 [ 1411.463078][T30536] hsr_slave_0: entered promiscuous mode [ 1411.464442][T30536] hsr_slave_1: entered promiscuous mode [ 1411.466662][T30536] debugfs: 'hsr0' already exists in 'hsr' [ 1411.467506][T30536] Cannot create hsr debugfs directory [ 1411.477990][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 1411.512894][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.516158][ T5869] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1411.516184][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.516203][ T5869] usb 6-1: Product: syz [ 1411.516216][ T5869] usb 6-1: Manufacturer: syz [ 1411.516229][ T5869] usb 6-1: SerialNumber: syz [ 1411.588061][ T5869] usb 6-1: config 0 descriptor?? [ 1411.591853][ T5869] hub 6-1:0.0: bad descriptor, ignoring hub [ 1411.591888][ T5869] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1411.616488][ T5869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1411.720637][ T5869] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1411.833623][T30890] udevd[30890]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1412.015280][T31018] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9433'. [ 1412.017677][ T5877] usb 6-1: USB disconnect, device number 22 [ 1412.979629][T17039] Bluetooth: hci3: command tx timeout [ 1413.585139][T31034] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9439'. [ 1413.585162][T31034] netlink: 'syz.5.9439': attribute type 30 has an invalid length. [ 1413.585170][T31034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9439'. [ 1413.674639][ T5877] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1413.776825][T31040] netlink: 'syz.5.9442': attribute type 4 has an invalid length. [ 1413.776845][T31040] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9442'. [ 1413.866535][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 1413.871555][ T5877] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1413.871580][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.871591][ T5877] usb 7-1: Product: syz [ 1413.871598][ T5877] usb 7-1: Manufacturer: syz [ 1413.871606][ T5877] usb 7-1: SerialNumber: syz [ 1413.917831][ T5877] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1413.917856][ T5877] r8152-cfgselector 7-1: config 0 descriptor?? [ 1413.967237][T31040] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1414.210599][ T37] audit: type=1326 audit(1770964551.115:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31045 comm="syz.5.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1414.210647][ T37] audit: type=1326 audit(1770964551.115:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31045 comm="syz.5.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1414.210688][ T37] audit: type=1326 audit(1770964551.115:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31045 comm="syz.5.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1414.210730][ T37] audit: type=1326 audit(1770964551.115:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31045 comm="syz.5.9445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fed230abf79 code=0x7ffc0000 [ 1414.241555][T31042] netlink: 'syz.8.9443': attribute type 1 has an invalid length. [ 1414.396752][T25636] r8152-cfgselector 7-1: USB disconnect, device number 64 [ 1414.405003][T31050] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9447'. [ 1415.027460][T30991] chnl_net:caif_netlink_parms(): no params data found [ 1415.205277][T17039] Bluetooth: hci3: command tx timeout [ 1415.737900][ T815] bridge_slave_1: left allmulticast mode [ 1415.737926][ T815] bridge_slave_1: left promiscuous mode [ 1415.738249][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.850047][ T815] bridge_slave_0: left allmulticast mode [ 1415.850074][ T815] bridge_slave_0: left promiscuous mode [ 1415.850309][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.980547][ T815] bridge_slave_1: left allmulticast mode [ 1415.980574][ T815] bridge_slave_1: left promiscuous mode [ 1415.980793][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.071593][ T815] bridge_slave_0: left allmulticast mode [ 1416.071620][ T815] bridge_slave_0: left promiscuous mode [ 1416.071866][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.294797][ T5876] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1416.464324][ T5876] usb 7-1: Using ep0 maxpacket: 32 [ 1416.466560][ T5876] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1416.466598][ T5876] usb 7-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 1416.466621][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.478019][ T5876] usb 7-1: config 0 descriptor?? [ 1416.882268][ T815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.948634][ T5876] hid-led 0003:1D34:0004.0041: item fetching failed at offset 5/7 [ 1416.949522][ T5876] hid-led 0003:1D34:0004.0041: probe with driver hid-led failed with error -22 [ 1417.000237][ T815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.066073][ T815] bond0 (unregistering): Released all slaves [ 1417.119159][ T815] tipc: Disabling bearer [ 1417.169292][ T5876] usb 7-1: USB disconnect, device number 65 [ 1417.449329][T17039] Bluetooth: hci3: command tx timeout [ 1419.490945][ T815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.556014][ T815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.576882][ T815] bond0 (unregistering): Released all slaves [ 1419.618564][ T815] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 1419.650689][T17039] Bluetooth: hci3: command tx timeout [ 1419.664084][ T815] bond1 (unregistering): Released all slaves [ 1419.678682][ T815] bond2 (unregistering): Released all slaves [ 1420.581285][ T815] bond3 (unregistering): (slave veth5): Releasing backup interface [ 1420.647440][ T815] bond3 (unregistering): Released all slaves [ 1420.681728][T31142] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9483'. [ 1420.833280][T30991] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.833405][T30991] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.833672][T30991] bridge_slave_0: entered allmulticast mode [ 1420.836162][T30991] bridge_slave_0: entered promiscuous mode [ 1421.068588][ T815] C: left promiscuous mode [ 1421.254697][T30991] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.254820][T30991] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.255088][T30991] bridge_slave_1: entered allmulticast mode [ 1421.257587][T30991] bridge_slave_1: entered promiscuous mode [ 1421.480574][T30991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.581675][T30991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.582397][ T815] tipc: Left network mode [ 1421.814786][T30536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1421.876039][ T815] IPVS: stopping backup sync thread 23328 ... [ 1421.910618][T30991] team0: Port device team_slave_0 added [ 1422.046425][T30536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1422.118276][T30991] team0: Port device team_slave_1 added [ 1423.140328][T30536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1423.229738][T30536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1423.389699][T17039] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1423.510949][T30991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.510966][T30991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.510984][T30991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.650666][T30991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.650684][T30991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.650710][T30991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.169698][T30991] hsr_slave_0: entered promiscuous mode [ 1424.171003][T30991] hsr_slave_1: entered promiscuous mode [ 1424.186046][T30991] debugfs: 'hsr0' already exists in 'hsr' [ 1424.186072][T30991] Cannot create hsr debugfs directory [ 1424.357589][T31271] autofs: Bad value for 'fd' [ 1425.510837][ T815] hsr_slave_0: left promiscuous mode [ 1425.555190][ T815] hsr_slave_1: left promiscuous mode [ 1425.556161][ T815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.620453][ T815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.701669][ T815] macvlan0: left promiscuous mode [ 1425.744140][ T815] batadv0: left promiscuous mode [ 1425.896368][ T815] hsr_slave_0: left promiscuous mode [ 1425.947571][ T815] hsr_slave_1: left promiscuous mode [ 1425.948688][ T815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.185548][T31344] netlink: 'syz.5.9561': attribute type 1 has an invalid length. [ 1427.263866][ T815] team0 (unregistering): Port device team_slave_1 removed [ 1427.525535][ T815] team0 (unregistering): Port device team_slave_0 removed [ 1430.865252][ T815] team0 (unregistering): Port device team_slave_1 removed [ 1431.122586][ T815] team0 (unregistering): Port device team_slave_0 removed [ 1432.393594][T29012] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1433.539614][T31308] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 1433.632465][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9564'. [ 1433.915415][T30536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1433.954439][T30536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1433.972277][ T1498] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.972415][ T1498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.211192][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.211320][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.418176][T31378] netlink: 'syz.8.9574': attribute type 322 has an invalid length. [ 1434.510445][T30991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1434.571168][T30991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1434.585089][ T5876] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1434.613626][T30991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1434.660995][T30991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1434.793200][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.793313][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1434.793356][ T5876] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1434.793380][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.799684][ T5876] usb 6-1: config 0 descriptor?? [ 1434.981019][ T5869] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1435.141462][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 1435.163509][ T5869] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1435.163535][ T5869] usb 7-1: config 0 has no interface number 0 [ 1435.198854][ T5869] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1435.198883][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.198904][ T5869] usb 7-1: Product: syz [ 1435.198917][ T5869] usb 7-1: Manufacturer: syz [ 1435.198931][ T5869] usb 7-1: SerialNumber: syz [ 1435.236661][ T5869] usb 7-1: config 0 descriptor?? [ 1435.261495][ T5869] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1435.340628][T30991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.375520][ T5876] kovaplus 0003:1E7D:2D50.0042: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1435.460884][T30991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.619547][ T5876] kovaplus 0003:1E7D:2D50.0042: couldn't init struct kovaplus_device [ 1435.619594][ T5876] kovaplus 0003:1E7D:2D50.0042: couldn't install mouse [ 1435.635622][ T5876] kovaplus 0003:1E7D:2D50.0042: probe with driver kovaplus failed with error -71 [ 1435.668282][ T5869] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1435.674183][ T5876] usb 6-1: USB disconnect, device number 23 [ 1435.699802][ T5869] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1435.708544][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.708671][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.736835][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.736989][T18114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.988336][T31411] fido_id[31411]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1436.072186][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1436.073978][T25636] usb 7-1: USB disconnect, device number 66 [ 1436.093243][T25636] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1436.128101][T25636] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1436.129070][T25636] quatech2 7-1:0.51: device disconnected [ 1436.551268][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1436.599136][T30536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.210980][T30991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.236591][T21660] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1437.238866][ T815] bridge_slave_1: left allmulticast mode [ 1437.238892][ T815] bridge_slave_1: left promiscuous mode [ 1437.239146][ T815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.344995][ T815] bridge_slave_0: left allmulticast mode [ 1437.345030][ T815] bridge_slave_0: left promiscuous mode [ 1437.345274][ T815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.396585][T21660] usb 7-1: Using ep0 maxpacket: 16 [ 1437.398843][T21660] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.398874][T21660] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.398911][T21660] usb 7-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1437.398934][T21660] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.404397][T21660] usb 7-1: config 0 descriptor?? [ 1437.879062][T21660] apple 0003:05AC:024B.0043: unknown global tag 0xe [ 1437.879084][T21660] apple 0003:05AC:024B.0043: item 0 1 1 14 parsing failed [ 1437.887629][T21660] apple 0003:05AC:024B.0043: parse failed [ 1437.887741][T21660] apple 0003:05AC:024B.0043: probe with driver apple failed with error -22 [ 1438.114092][T29218] usb 7-1: USB disconnect, device number 67 [ 1438.419754][ T37] audit: type=1326 audit(1770964573.752:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.421308][ T37] audit: type=1326 audit(1770964573.752:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.440078][ T37] audit: type=1326 audit(1770964573.771:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.440125][ T37] audit: type=1326 audit(1770964573.771:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.440164][ T37] audit: type=1326 audit(1770964573.771:4405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.441435][ T37] audit: type=1326 audit(1770964573.771:4406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.584737][ T815] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1438.639506][ T37] audit: type=1326 audit(1770964573.958:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=31500 comm="syz.8.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x7ffc0000 [ 1438.745468][ T815] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1438.832908][ T815] bond0 (unregistering): Released all slaves [ 1439.258022][T30536] veth0_vlan: entered promiscuous mode [ 1439.354713][T30536] veth1_vlan: entered promiscuous mode [ 1439.490939][T30536] veth0_macvtap: entered promiscuous mode [ 1439.548780][T30536] veth1_macvtap: entered promiscuous mode [ 1439.659189][T30536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.793944][T30536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1439.882393][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.889622][T15973] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.957442][T15973] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1439.977718][T15973] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.600726][ T815] hsr_slave_0: left promiscuous mode [ 1441.645704][ T815] hsr_slave_1: left promiscuous mode [ 1441.646749][ T815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1441.695406][ T815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.302170][ T815] team0 (unregistering): Port device team_slave_1 removed [ 1443.523729][ T815] team0 (unregistering): Port device team_slave_0 removed [ 1445.144836][T30991] veth0_vlan: entered promiscuous mode [ 1445.221676][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.221696][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.286981][T30991] veth1_vlan: entered promiscuous mode [ 1445.520847][T30991] veth0_macvtap: entered promiscuous mode [ 1445.528426][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1445.528445][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1445.545010][T30991] veth1_macvtap: entered promiscuous mode [ 1445.615395][T30991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1445.650827][T30991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1445.705008][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.707685][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.707740][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1445.707790][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1446.413549][T21074] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1446.430634][T21074] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1446.519100][T21074] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1446.550618][T21074] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1446.570025][T21074] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1447.045718][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.045739][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.142739][T31671] lo speed is unknown, defaulting to 1000 [ 1447.297433][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.297453][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.019367][T21074] Bluetooth: hci5: command tx timeout [ 1449.981700][T31724] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9657'. [ 1450.654807][ T5876] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1450.851711][T15973] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.857850][ T5876] usb 5-1: Using ep0 maxpacket: 32 [ 1450.877053][ T5876] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1450.877117][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1450.877139][ T5876] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1450.940748][ T5876] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1450.940778][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.940807][ T5876] usb 5-1: Product: syz [ 1450.940820][ T5876] usb 5-1: Manufacturer: syz [ 1450.940835][ T5876] usb 5-1: SerialNumber: syz [ 1450.988485][ T5876] usb 5-1: config 0 descriptor?? [ 1451.000578][ T5876] usb 5-1: no audio or video endpoints found [ 1451.080511][ T5869] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1451.209949][T17039] Bluetooth: hci5: command tx timeout [ 1451.230857][T15917] usb 5-1: USB disconnect, device number 35 [ 1451.241328][ T5869] usb 6-1: Using ep0 maxpacket: 32 [ 1451.245161][ T5869] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1451.245186][ T5869] usb 6-1: config 0 has no interface number 0 [ 1451.255381][ T5869] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1451.255434][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.255453][ T5869] usb 6-1: Product: syz [ 1451.255467][ T5869] usb 6-1: Manufacturer: syz [ 1451.255480][ T5869] usb 6-1: SerialNumber: syz [ 1451.328491][ T5869] usb 6-1: config 0 descriptor?? [ 1451.359179][ T5869] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1451.444109][T15973] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.608186][ T5869] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1451.707218][ T5869] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1452.057815][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1452.068253][ T5904] usb 6-1: USB disconnect, device number 24 [ 1452.136723][ T5904] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1452.163929][ T5904] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1452.164946][ T5904] quatech2 6-1:0.51: device disconnected [ 1452.391426][T15973] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.600614][T31671] chnl_net:caif_netlink_parms(): no params data found [ 1452.795244][T31815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9686'. [ 1453.106885][T15973] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.433661][T17039] Bluetooth: hci5: command tx timeout [ 1453.842048][T31671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.842113][T31671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.842271][T31671] bridge_slave_0: entered allmulticast mode [ 1453.844038][T31671] bridge_slave_0: entered promiscuous mode [ 1453.889247][T31671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.891869][T31671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.908045][T31671] bridge_slave_1: entered allmulticast mode [ 1453.910195][T31671] bridge_slave_1: entered promiscuous mode [ 1454.273902][T31671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.309931][T31671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.422643][T31671] team0: Port device team_slave_0 added [ 1454.514783][T31671] team0: Port device team_slave_1 added [ 1454.635684][T31877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9705'. [ 1454.638095][T15973] bridge_slave_1: left allmulticast mode [ 1454.638120][T15973] bridge_slave_1: left promiscuous mode [ 1454.638346][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1454.773001][T15973] bridge_slave_0: left allmulticast mode [ 1454.773029][T15973] bridge_slave_0: left promiscuous mode [ 1454.773274][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.182155][T31894] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9709'. [ 1455.182182][T31894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9709'. [ 1455.182190][T31894] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9709'. [ 1455.657032][T17039] Bluetooth: hci5: command tx timeout [ 1456.190699][T25636] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1456.402350][T25636] usb 7-1: config 24 has 1 interface, different from the descriptor's value: 2 [ 1456.402440][T25636] usb 7-1: config 24 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1456.402468][T25636] usb 7-1: config 24 interface 0 has no altsetting 0 [ 1456.402487][T25636] usb 7-1: config 24 interface 0 has no altsetting 1 [ 1456.410548][T25636] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice=70.25 [ 1456.410577][T25636] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.410596][T25636] usb 7-1: Product: syz [ 1456.410611][T25636] usb 7-1: Manufacturer: syz [ 1456.410624][T25636] usb 7-1: SerialNumber: syz [ 1456.820240][T25636] usb 7-1: selecting invalid altsetting 0 [ 1456.820330][T25636] usb 7-1: selecting invalid altsetting 0 [ 1456.820398][T25636] usb 7-1: selecting invalid altsetting 0 [ 1456.821115][T25636] usb 7-1: selecting invalid altsetting 0 [ 1456.821582][T25636] usb 7-1: selecting invalid altsetting 0 [ 1456.821663][T25636] usb 7-1: selecting invalid altsetting 0 [ 1456.977665][T25636] usb 7-1: USB disconnect, device number 68 [ 1457.083916][T31938] udevd[31938]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:24.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1458.367895][T15973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1458.429275][T15973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1458.470610][T15973] bond0 (unregistering): Released all slaves [ 1458.789294][T31671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.789311][T31671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.789337][T31671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.799232][T31671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.799248][T31671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.799275][T31671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.012161][T31969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9733'. [ 1459.102323][T31973] 9p: Bad value for 'rfdno' [ 1459.530370][T31671] hsr_slave_0: entered promiscuous mode [ 1459.531669][T31671] hsr_slave_1: entered promiscuous mode [ 1459.569474][ T5904] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1459.729610][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 1459.741600][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.741632][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.741670][ T5904] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1459.741693][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.791450][ T5904] usb 7-1: config 0 descriptor?? [ 1460.272967][ T5904] hid_parser_main: 1245 callbacks suppressed [ 1460.272990][ T5904] savu 0003:1E7D:2D5A.0044: unknown main item tag 0x0 [ 1460.273017][ T5904] savu 0003:1E7D:2D5A.0044: unknown main item tag 0x0 [ 1460.273041][ T5904] savu 0003:1E7D:2D5A.0044: unknown main item tag 0x0 [ 1460.273064][ T5904] savu 0003:1E7D:2D5A.0044: unknown main item tag 0x0 [ 1460.273087][ T5904] savu 0003:1E7D:2D5A.0044: unknown main item tag 0x0 [ 1460.273110][ T5904] savu 0003:1E7D:2D5A.0044: unbalanced collection at end of report description [ 1460.273702][ T5904] savu 0003:1E7D:2D5A.0044: parse failed [ 1460.273769][ T5904] savu 0003:1E7D:2D5A.0044: probe with driver savu failed with error -22 [ 1460.486244][T25636] usb 7-1: USB disconnect, device number 69 [ 1460.726843][T22924] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1460.756744][T32032] program syz.5.9763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1460.853394][T15973] hsr_slave_0: left promiscuous mode [ 1460.883742][T22924] usb 5-1: Using ep0 maxpacket: 16 [ 1460.890160][T22924] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1460.890177][T22924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.890188][T22924] usb 5-1: Product: syz [ 1460.890195][T22924] usb 5-1: Manufacturer: syz [ 1460.890208][T22924] usb 5-1: SerialNumber: syz [ 1460.898774][T15973] hsr_slave_1: left promiscuous mode [ 1460.914982][T15973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.915010][T15973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.968821][T15973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.968840][T15973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.199330][T22924] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1461.234032][T22924] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1461.234420][T22924] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1461.234507][T22924] usb 5-1: media controller created [ 1461.293456][T22924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1461.329093][T15973] veth1_macvtap: left promiscuous mode [ 1461.329203][T15973] veth0_macvtap: left promiscuous mode [ 1461.329452][T15973] veth1_vlan: left promiscuous mode [ 1461.329624][T15973] veth0_vlan: left promiscuous mode [ 1461.370536][T22924] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1461.525900][T22924] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1461.568183][T22924] usb 5-1: USB disconnect, device number 36 [ 1461.867341][T25636] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1462.070621][T25636] usb 7-1: Using ep0 maxpacket: 8 [ 1462.072919][T25636] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1462.072965][T25636] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1462.072986][T25636] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1462.073008][T25636] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1462.073029][T25636] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1462.073065][T25636] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1462.073085][T25636] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.305233][T25636] usb 7-1: GET_CAPABILITIES returned 0 [ 1462.305262][T25636] usbtmc 7-1:16.0: can't read capabilities [ 1462.554684][T22924] usb 7-1: USB disconnect, device number 70 [ 1465.044085][T15973] team0 (unregistering): Port device team_slave_1 removed [ 1465.326132][T15973] team0 (unregistering): Port device team_slave_0 removed [ 1466.621538][T29012] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1467.961710][T32035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9764'. [ 1469.511678][ T5869] usb 7-1: new full-speed USB device number 71 using dummy_hcd [ 1469.679014][ T5869] usb 7-1: config 8 has an invalid interface number: 95 but max is 0 [ 1469.679040][ T5869] usb 7-1: config 8 has no interface number 0 [ 1469.705447][ T5869] usb 7-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78 [ 1469.705475][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.705493][ T5869] usb 7-1: Product: syz [ 1469.705507][ T5869] usb 7-1: Manufacturer: syz [ 1469.705520][ T5869] usb 7-1: SerialNumber: syz [ 1469.990002][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:8.95/input/input51 [ 1470.009504][ T5148] bcm5974 7-1:8.95: could not read from device [ 1470.100141][ T5148] bcm5974 7-1:8.95: could not read from device [ 1470.170140][ T5869] usb 7-1: USB disconnect, device number 71 [ 1470.742234][T32116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9785'. [ 1471.338831][T32139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.655905][T32184] option changes via remount are deprecated (pid=32182 comm=syz.5.9804) [ 1472.856455][T32139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.277633][T32139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.439174][T32217] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9813'. [ 1474.439207][T32217] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9813'. [ 1474.742001][T32139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.826710][T31671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1474.892035][T32237] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9823'. [ 1474.897461][T32237] bridge0: left allmulticast mode [ 1474.897947][T31671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1474.965026][T31671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1475.143945][T31671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1475.356214][ T57] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.389493][ T57] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.440536][T18114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.502107][T15973] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.753551][T31671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.833853][T31671] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.842069][T32276] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.9832'. [ 1475.842187][T32276] openvswitch: netlink: Message has 16 unknown bytes. [ 1475.962554][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.963386][T18104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.026655][T18114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.026783][T18114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1476.043471][T15917] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1476.214992][T15917] usb 6-1: Using ep0 maxpacket: 16 [ 1476.237675][T15917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.237700][T15917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1476.240241][T15917] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1476.240268][T15917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.240297][T15917] usb 6-1: Product: syz [ 1476.240312][T15917] usb 6-1: Manufacturer: syz [ 1476.240326][T15917] usb 6-1: SerialNumber: syz [ 1476.471803][T32290] pim6reg: entered allmulticast mode [ 1476.515731][T32288] pim6reg: left allmulticast mode [ 1476.718331][T15917] usb 6-1: 0:2 : does not exist [ 1477.167072][T15917] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1477.182845][T31671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.372231][T15917] usb 6-1: USB disconnect, device number 25 [ 1477.567165][T32118] udevd[32118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1478.082872][T31671] veth0_vlan: entered promiscuous mode [ 1478.111744][T31671] veth1_vlan: entered promiscuous mode [ 1478.206730][T31671] veth0_macvtap: entered promiscuous mode [ 1478.263264][T31671] veth1_macvtap: entered promiscuous mode [ 1478.360054][T31671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1478.403530][T31671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1478.431997][ T57] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.458527][T29005] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.470291][T29005] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1478.470561][T29005] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.018855][T29005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.018874][T29005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.106681][T29012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1479.106701][T29012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.278276][ T37] audit: type=1326 audit(1770964611.972:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32365 comm="syz.8.9859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f689cd5bf79 code=0x0 [ 1479.345916][ T37] audit: type=1326 audit(1770964612.038:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32365 comm="syz.8.9859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f689cd5bf79 code=0x0 [ 1479.811021][T32379] netlink: 2048 bytes leftover after parsing attributes in process `syz.7.9142'. [ 1480.471140][T32402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input52 [ 1480.698367][T32407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9871'. [ 1480.698702][T32407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9871'. [ 1482.992037][T25636] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1483.163097][T25636] usb 7-1: Using ep0 maxpacket: 32 [ 1483.173491][T25636] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1483.231234][T25636] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1483.231273][T25636] usb 7-1: can't read configurations, error -71 [ 1483.580503][T32483] netlink: 504 bytes leftover after parsing attributes in process `syz.7.9896'. [ 1483.580544][T32483] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1484.573597][T32515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9907'. [ 1484.927241][T32527] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1484.927269][T32527] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1485.034576][T32532] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9913'. [ 1486.011127][T25636] kernel write not supported for file [landlock-ruleset] (pid: 25636 comm: kworker/0:6) [ 1486.774327][T32588] 9pnet: p9_errstr2errno: server reported unknown error [ 1486.847213][T32595] netlink: 'syz.5.9936': attribute type 34 has an invalid length. [ 1488.690778][T32658] loop5: detected capacity change from 0 to 7 [ 1488.691625][T32658] buffer_io_error: 138 callbacks suppressed [ 1488.691640][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691680][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691717][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691749][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691800][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691846][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691878][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691896][T32658] ldm_validate_partition_table(): Disk read failed. [ 1488.691924][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691955][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.691986][T32658] Buffer I/O error on dev loop5, logical block 0, async page read [ 1488.692041][T32658] Dev loop5: unable to read RDB block 0 [ 1488.692113][T32658] loop5: unable to read partition table [ 1488.692344][T32658] loop5: partition table beyond EOD, truncated [ 1488.692362][T32658] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1490.007396][T32690] Invalid argument reading file caps for ./file0 [ 1491.108967][T32716] netlink: 'syz.7.9976': attribute type 10 has an invalid length. [ 1491.108988][T32716] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9976'. [ 1491.109150][T32716] dummy0: entered promiscuous mode [ 1491.173925][T32716] bridge0: port 3(dummy0) entered blocking state [ 1491.174060][T32716] bridge0: port 3(dummy0) entered disabled state [ 1491.174332][T32716] dummy0: entered allmulticast mode [ 1491.215725][T32716] bridge0: port 3(dummy0) entered blocking state [ 1491.219590][T32716] bridge0: port 3(dummy0) entered forwarding state [ 1491.320526][ T5904] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1491.483449][ T5904] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.486068][ T5904] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1491.486095][ T5904] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1491.486115][ T5904] usb 6-1: Product: syz [ 1491.486136][ T5904] usb 6-1: Manufacturer: syz [ 1491.486150][ T5904] usb 6-1: SerialNumber: syz [ 1491.499264][ T5904] usb 6-1: config 0 descriptor?? [ 1491.515558][ T5904] dm9601 6-1:0.0: probe with driver dm9601 failed with error -22 [ 1491.620274][T32729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9980'. [ 1494.068078][ T5904] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1494.229926][ T5904] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1494.229955][ T5904] usb 7-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1494.229978][ T5904] usb 7-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.232241][ T5904] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1494.232267][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.232285][ T5904] usb 7-1: Product: syz [ 1494.232295][ T5904] usb 7-1: Manufacturer: syz [ 1494.232302][ T5904] usb 7-1: SerialNumber: syz [ 1494.303389][ T5904] usblp0: Disabling reads from problematic bidirectional printer [ 1494.366764][ T5877] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1494.382252][ T5869] usb 6-1: USB disconnect, device number 26 [ 1494.538125][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 1494.540486][ T5877] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.540519][ T5877] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.540542][ T5877] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1494.540570][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1494.540680][ T5877] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1494.540703][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.570862][ T5904] usblp 7-1:4.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1494.628484][ T5877] usb 5-1: config 0 descriptor?? [ 1494.743966][T25636] usb 7-1: USB disconnect, device number 74 [ 1494.786715][T25636] usblp0: removed [ 1495.134750][ T5877] hid (null): report_id 0 is invalid [ 1495.396650][ T5904] usb 5-1: USB disconnect, device number 37 [ 1495.502865][ T388] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1496.430030][T25636] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1496.606762][T25636] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1496.606796][T25636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1496.606820][T25636] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1496.606842][T25636] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1496.606881][T25636] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1496.606902][T25636] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.678431][T25636] usb 5-1: config 0 descriptor?? [ 1496.829135][ T436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10043'. [ 1497.124416][T25636] plantronics 0003:047F:FFFF.0046: ignoring exceeding usage max [ 1497.162730][T25636] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1498.197930][ T465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10054'. [ 1499.358803][ T490] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10064'. [ 1499.377260][ T492] 9p: Bad value for 'wfdno' [ 1499.449341][ T5876] usb 5-1: USB disconnect, device number 38 [ 1499.851771][ T513] Invalid argument reading file caps for ./file0 [ 1500.225598][ T5869] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1500.386102][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 1500.388336][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1500.389731][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1500.389765][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1500.389787][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1500.389814][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1500.389838][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1500.389860][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 1500.389885][ T5869] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1500.392271][ T5869] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1500.392299][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.392319][ T5869] usb 5-1: Product: syz [ 1500.392341][ T5869] usb 5-1: Manufacturer: syz [ 1500.392355][ T5869] usb 5-1: SerialNumber: syz [ 1500.535500][ T5869] usb 5-1: config 0 descriptor?? [ 1500.543957][ T519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1500.544314][ T519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1500.579731][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1500.814742][T18114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1500.910960][ T5876] usb 5-1: USB disconnect, device number 39 [ 1502.202390][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1503.125851][ T622] loop5: detected capacity change from 0 to 7 [ 1503.130154][ T622] Dev loop5: unable to read RDB block 7 [ 1503.130195][ T622] loop5: unable to read partition table [ 1503.130358][ T622] loop5: partition table beyond EOD, truncated [ 1503.130378][ T622] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1503.273697][ T5876] usb 7-1: new full-speed USB device number 75 using dummy_hcd [ 1503.442555][ T5876] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1503.452817][ T5876] usb 7-1: not running at top speed; connect to a high speed hub [ 1503.462422][ T5876] usb 7-1: config 6 has an invalid interface number: 57 but max is 1 [ 1503.462448][ T5876] usb 7-1: config 6 has an invalid interface number: 199 but max is 1 [ 1503.462466][ T5876] usb 7-1: config 6 has no interface number 0 [ 1503.462481][ T5876] usb 7-1: config 6 has no interface number 1 [ 1503.462534][ T5876] usb 7-1: config 6 interface 57 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 1503.462561][ T5876] usb 7-1: config 6 interface 57 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 1503.462584][ T5876] usb 7-1: config 6 interface 57 has no altsetting 0 [ 1503.462601][ T5876] usb 7-1: config 6 interface 199 has no altsetting 0 [ 1503.504266][ T5876] usb 7-1: New USB device found, idVendor=110a, idProduct=1658, bcdDevice=73.62 [ 1503.504294][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.504315][ T5876] usb 7-1: Product: syz [ 1503.504328][ T5876] usb 7-1: Manufacturer: syz [ 1503.504341][ T5876] usb 7-1: SerialNumber: syz [ 1503.785798][ T5876] mxuport 7-1:6.57: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1503.786195][ T5876] mxuport 7-1:6.57: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1503.786261][ T5876] mxuport 7-1:6.57: probe with driver mxuport failed with error -71 [ 1503.794300][ T5876] mxuport 7-1:6.199: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1503.794619][ T5876] mxuport 7-1:6.199: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 1503.794661][ T5876] mxuport 7-1:6.199: probe with driver mxuport failed with error -71 [ 1503.808059][ T5876] usb 7-1: USB disconnect, device number 75 [ 1503.828391][T15917] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1503.999957][T15917] usb 5-1: Using ep0 maxpacket: 32 [ 1504.001914][T15917] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 1504.001938][T15917] usb 5-1: config 0 has no interface number 0 [ 1504.001985][T15917] usb 5-1: config 0 interface 230 has no altsetting 0 [ 1504.004273][T15917] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1504.004301][T15917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.004321][T15917] usb 5-1: Product: syz [ 1504.004335][T15917] usb 5-1: Manufacturer: syz [ 1504.004350][T15917] usb 5-1: SerialNumber: syz [ 1504.072921][T15917] usb 5-1: config 0 descriptor?? [ 1504.084994][T15917] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 1504.110774][T15917] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1504.131292][ T641] loop8: detected capacity change from 0 to 8 [ 1504.162939][ T641] Dev loop8: unable to read RDB block 8 [ 1504.163542][ T641] loop8: unable to read partition table [ 1504.164551][ T641] loop8: partition table beyond EOD, truncated [ 1504.164583][ T641] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1504.750770][ T659] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10136'. [ 1505.561381][ T690] netem: invalid attributes len -24 [ 1505.561397][ T690] netem: change failed [ 1506.490497][T20974] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1506.657357][T20974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1506.657407][T20974] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1506.657431][T20974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.692328][T15917] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 1506.787698][T15917] usb 5-1: USB disconnect, device number 40 [ 1506.796614][T20974] usb 7-1: config 0 descriptor?? [ 1506.797540][ T719] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1507.110957][ T740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10164'. [ 1507.110983][ T740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10164'. [ 1507.294727][ T746] netlink: 'syz.5.10167': attribute type 11 has an invalid length. [ 1507.350732][T20974] elan 0003:04F3:0755.0047: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1507.540417][ T5877] usb 7-1: USB disconnect, device number 76 [ 1507.772167][ T754] fido_id[754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1508.275295][T22924] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1508.495166][T22924] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.495218][T22924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1508.495244][T22924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1508.495266][T22924] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1508.502280][T22924] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1508.502306][T22924] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1508.502325][T22924] usb 6-1: Manufacturer: syz [ 1508.573236][T22924] usb 6-1: config 0 descriptor?? [ 1508.716215][ T793] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1508.736731][ T793] @0: renamed from bond_slave_1 (while UP) [ 1509.156755][T22924] rc_core: IR keymap rc-hauppauge not found [ 1509.156777][T22924] Registered IR keymap rc-empty [ 1509.156951][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.163328][T20974] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1509.173295][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.196384][T22924] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1509.199525][T22924] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input53 [ 1509.270062][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.301706][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.323136][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.341020][T20974] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1509.341062][T20974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.341087][T20974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.341108][T20974] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1509.344763][T20974] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1509.344791][T20974] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1509.344811][T20974] usb 7-1: Manufacturer: syz [ 1509.352462][T20974] usb 7-1: config 0 descriptor?? [ 1509.418810][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.430108][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.451329][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.473017][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.494083][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.526171][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.558256][T22924] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1509.583001][T22924] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1509.583024][T22924] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1509.588547][T22924] usb 6-1: USB disconnect, device number 27 [ 1509.818301][T20974] appleir 0003:05AC:8243.0048: unknown main item tag 0x0 [ 1509.870368][T20974] appleir 0003:05AC:8243.0048: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1510.107513][T22924] usb 7-1: USB disconnect, device number 77 [ 1510.176968][ T824] fido_id[824]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1510.732102][ T846] overlayfs: failed to clone lowerpath [ 1510.747027][ T845] input: syz0 as /devices/virtual/input/input54 [ 1511.055038][T15917] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1511.217802][T15917] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.217830][T15917] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1511.222126][T15917] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1511.222154][T15917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1511.222173][T15917] usb 7-1: SerialNumber: syz [ 1511.529539][T15917] usb 7-1: 0:2 : does not exist [ 1511.681778][T15917] usb 7-1: USB disconnect, device number 78 [ 1511.876997][T32118] udevd[32118]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1513.471439][ T5904] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1513.633800][ T5904] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1513.633835][ T5904] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1513.633881][ T5904] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1513.633902][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.682658][ T942] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1513.691943][ T5904] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1514.201701][ T5904] usb 6-1: USB disconnect, device number 28 [ 1514.508359][T20974] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1514.679768][T20974] usb 5-1: Using ep0 maxpacket: 8 [ 1514.691106][T20974] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1514.691135][T20974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.691154][T20974] usb 5-1: Product: syz [ 1514.691167][T20974] usb 5-1: Manufacturer: syz [ 1514.691181][T20974] usb 5-1: SerialNumber: syz [ 1514.706719][T20974] usb 5-1: config 0 descriptor?? [ 1514.968252][T20974] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1514.993236][ T999] wireguard0: entered promiscuous mode [ 1514.993260][ T999] wireguard0: entered allmulticast mode [ 1515.345222][ T5869] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 1515.580206][ T5869] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1515.580257][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1515.580350][ T5869] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1515.580376][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1515.580399][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1515.581749][ T5869] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1515.581796][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1515.581879][ T5869] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1515.581904][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1515.581929][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1515.583248][ T5869] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1515.583295][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1515.583377][ T5869] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1515.583402][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1515.583427][ T5869] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1515.629521][ T5869] usb 6-1: string descriptor 0 read error: -22 [ 1515.629748][ T5869] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1515.629817][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.858676][T20974] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1515.875152][ T5869] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1515.880828][T20974] usb 5-1: USB disconnect, device number 41 [ 1516.190307][T20974] usb 6-1: USB disconnect, device number 29 [ 1516.202179][ T1020] usb 6-1: Couldn't submit interrupt_out_urb -19 [ 1516.334932][ T1030] loop5: detected capacity change from 0 to 7 [ 1516.503700][ T37] audit: type=1800 audit(1770964646.788:4410): pid=1040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.10250" name="bus" dev="tmpfs" ino=7650 res=0 errno=0 [ 1516.752220][ T1030] Dev loop5: unable to read RDB block 7 [ 1516.752264][ T1030] loop5: unable to read partition table [ 1516.752485][ T1030] loop5: partition table beyond EOD, truncated [ 1516.774244][ T1030] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1516.977891][T20974] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1517.150444][T20974] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1517.150479][T20974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1517.150505][T20974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1517.150532][T20974] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1517.150581][T20974] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1517.150605][T20974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.158518][T20974] usb 5-1: config 0 descriptor?? [ 1517.703844][T20974] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1517.703882][T20974] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1517.703922][T20974] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1517.704173][T20974] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1517.704212][T20974] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 1517.761937][T20974] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1518.038260][T22924] usb 5-1: USB disconnect, device number 42 [ 1518.432387][ T1105] netlink: 92 bytes leftover after parsing attributes in process `syz.8.10267'. [ 1518.864562][ T1115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10271'. [ 1519.507033][ T1138] ip6gretap0: entered promiscuous mode [ 1519.517494][ T1138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10278'. [ 1521.144331][ T1204] overlayfs: statfs failed on './file0' [ 1522.230543][ T1236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10316'. [ 1522.366253][T21074] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1522.835108][ T1260] syzkaller0: mtu greater than device maximum [ 1523.061557][ T5904] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1523.229932][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1523.229965][ T5904] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.229987][ T5904] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1523.230028][ T5904] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1523.230058][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.238423][ T5904] usb 6-1: config 0 descriptor?? [ 1523.503502][T21660] kernel read not supported for file /admmidi2 (pid: 21660 comm: kworker/0:1) [ 1523.694439][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694473][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694499][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694524][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694548][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694573][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694598][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694624][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.694649][ T5904] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 1523.713887][ T5904] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1524.380436][ T1313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10343'. [ 1524.621638][ T5904] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1524.781907][ T5904] usb 7-1: Using ep0 maxpacket: 32 [ 1524.784739][ T5904] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1524.784762][ T5904] usb 7-1: config 0 has no interface number 0 [ 1524.787177][ T5904] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1524.787194][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.787204][ T5904] usb 7-1: Product: syz [ 1524.787218][ T5904] usb 7-1: Manufacturer: syz [ 1524.787225][ T5904] usb 7-1: SerialNumber: syz [ 1524.816293][ T5904] usb 7-1: config 0 descriptor?? [ 1524.954198][ T5904] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1524.954234][ T5904] usb 7-1: selecting invalid altsetting 1 [ 1524.954250][ T5904] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1525.007986][ T5904] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1525.008334][ T5904] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1525.008379][ T5904] usb 7-1: media controller created [ 1525.173809][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1525.960541][T21660] usb 6-1: USB disconnect, device number 30 [ 1526.318013][ T1310] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1526.369183][ T5904] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1526.369243][ T5904] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1526.378255][ T5904] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1526.549852][ T5904] usb 7-1: USB disconnect, device number 79 [ 1526.792357][T15917] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1526.976792][T15917] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1526.976824][T15917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.031783][T15917] usb 5-1: config 0 descriptor?? [ 1527.495254][ T1352] netlink: 'syz.5.10361': attribute type 1 has an invalid length. [ 1527.716935][ T1352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1527.779026][ T1354] bond2: (slave dummy0): making interface the new active one [ 1527.784300][ T1354] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1528.499787][T15917] usb 5-1: Cannot set autoneg [ 1528.500034][T15917] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1528.549459][T15917] usb 5-1: USB disconnect, device number 43 [ 1528.639581][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10369'. [ 1528.639604][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10369'. [ 1528.639630][ T1374] netlink: 'syz.6.10369': attribute type 11 has an invalid length. [ 1528.652137][ T1374] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10369'. [ 1528.652160][ T1374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10369'. [ 1528.652184][ T1374] netlink: 'syz.6.10369': attribute type 11 has an invalid length. [ 1528.785047][ T1378] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10371'. [ 1530.807441][ T1434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10396'. [ 1530.807476][ T1434] netlink: 'syz.5.10396': attribute type 5 has an invalid length. [ 1530.807490][ T1434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10396'. [ 1530.856091][ T1434] geneve2: entered promiscuous mode [ 1530.856107][ T1434] geneve2: entered allmulticast mode [ 1530.865931][T15973] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 45095 - 0 [ 1530.867133][T15973] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 45095 - 0 [ 1530.867273][T15973] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 45095 - 0 [ 1530.867396][T15973] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 45095 - 0 [ 1531.164678][ T1448] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1532.491400][ T5904] usb 7-1: new full-speed USB device number 80 using dummy_hcd [ 1532.631087][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10417'. [ 1532.672061][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1532.672094][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.672133][ T5904] usb 7-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 1532.672155][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.680990][ T1480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10417'. [ 1532.681022][ T5904] usb 7-1: config 0 descriptor?? [ 1532.688772][ T43] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.704202][ T43] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.704257][ T43] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1532.704291][ T43] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1533.256935][ T5904] magicmouse 0003:05AC:0324.004B: item fetching failed at offset 5/7 [ 1533.257374][ T5904] magicmouse 0003:05AC:0324.004B: magicmouse hid parse failed [ 1533.257434][ T5904] magicmouse 0003:05AC:0324.004B: probe with driver magicmouse failed with error -22 [ 1533.718599][T22924] usb 7-1: USB disconnect, device number 80 [ 1535.042483][T18114] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1537.045577][ T1559] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10449'. [ 1537.064751][ T1559] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10449'. [ 1538.185905][T15973] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.659479][T15973] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1538.942778][T15973] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.058600][ T1596] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 1539.212561][T15973] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1539.299631][T22924] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1539.413500][T17039] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1539.432310][T17039] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1539.435150][T17039] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1539.465573][T17039] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1539.470892][T22924] usb 6-1: Using ep0 maxpacket: 32 [ 1539.472968][T22924] usb 6-1: config 0 has an invalid interface number: 254 but max is 0 [ 1539.472992][T22924] usb 6-1: config 0 has no interface number 0 [ 1539.475821][T22924] usb 6-1: New USB device found, idVendor=5215, idProduct=1103, bcdDevice=e3.da [ 1539.475847][T22924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.475867][T22924] usb 6-1: Product: syz [ 1539.475880][T22924] usb 6-1: Manufacturer: syz [ 1539.475893][T22924] usb 6-1: SerialNumber: syz [ 1539.481444][T17039] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1539.487722][T22924] usb 6-1: config 0 descriptor?? [ 1539.491390][T22924] usb-storage 6-1:0.254: USB Mass Storage device detected [ 1539.680335][ T1606] lo speed is unknown, defaulting to 1000 [ 1540.025407][T15917] usb 6-1: USB disconnect, device number 31 [ 1540.582873][T15973] bridge_slave_1: left promiscuous mode [ 1540.583210][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.684505][T15973] bridge_slave_0: left allmulticast mode [ 1540.684532][T15973] bridge_slave_0: left promiscuous mode [ 1540.684761][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.705023][T17039] Bluetooth: hci2: command tx timeout [ 1542.433221][ T1671] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10487'. [ 1542.829635][T15973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.924546][T15973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.952931][T15973] bond0 (unregistering): Released all slaves [ 1543.116917][ T1671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1543.176291][ T1672] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 1543.288629][ T1606] chnl_net:caif_netlink_parms(): no params data found [ 1543.918024][T17039] Bluetooth: hci2: command tx timeout [ 1544.367449][ T1715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10501'. [ 1544.445506][ T1719] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10501'. [ 1545.037971][ T1715] bond4: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1545.038190][ T1719] bond4: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1545.352202][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.352401][ T1606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.352608][ T1606] bridge_slave_0: entered allmulticast mode [ 1545.460370][ T1606] bridge_slave_0: entered promiscuous mode [ 1545.750416][T15973] hsr_slave_0: left promiscuous mode [ 1545.838841][T15973] hsr_slave_1: left promiscuous mode [ 1545.852477][T15973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1545.852513][T15973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1545.924768][T15973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1545.924793][T15973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1546.142103][T17039] Bluetooth: hci2: command tx timeout [ 1546.237318][T15973] veth1_macvtap: left promiscuous mode [ 1546.237420][T15973] veth0_macvtap: left promiscuous mode [ 1546.248871][T15973] veth1_vlan: left promiscuous mode [ 1546.249024][T15973] veth0_vlan: left promiscuous mode [ 1546.678613][ T1771] netlink: 7 bytes leftover after parsing attributes in process `syz.6.10516'. [ 1548.365156][T17039] Bluetooth: hci2: command tx timeout [ 1549.723942][T15973] team0 (unregistering): Port device team_slave_1 removed [ 1550.001437][T15973] team0 (unregistering): Port device team_slave_0 removed [ 1552.514363][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.514435][ T1606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.514632][ T1606] bridge_slave_1: entered allmulticast mode [ 1552.516034][ T1606] bridge_slave_1: entered promiscuous mode [ 1552.517985][ T1758] netem: incorrect ge model size [ 1552.518011][ T1758] netem: change failed [ 1553.236702][ T1606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1553.304587][ T1606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1553.366828][ T1606] team0: Port device team_slave_0 added [ 1553.375421][ T1606] team0: Port device team_slave_1 added [ 1553.476879][ T1606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.476896][ T1606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.476921][ T1606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.480731][ T1606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.480745][ T1606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1553.480770][ T1606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.696034][ T1606] hsr_slave_0: entered promiscuous mode [ 1553.697339][ T1606] hsr_slave_1: entered promiscuous mode [ 1553.698223][ T1606] debugfs: 'hsr0' already exists in 'hsr' [ 1553.698246][ T1606] Cannot create hsr debugfs directory [ 1554.163823][ T1820] bond2: entered promiscuous mode [ 1554.186423][ T1827] vcan1: entered promiscuous mode [ 1554.186447][ T1827] vcan1: entered allmulticast mode [ 1554.186849][ T1827] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 1554.187358][ T1827] bond2: (slave vcan1): Error -95 calling set_mac_address [ 1555.112521][ T1606] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.420633][ T1864] overlayfs: failed to clone upperpath [ 1555.625282][ T1606] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.744632][ T1606] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.199990][ T1606] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.650782][ T1930] tipc: Failed to remove unknown binding: 66,1,1/0:1315863650/1315863652 [ 1557.650819][ T1930] tipc: Failed to remove unknown binding: 66,1,1/0:1315863650/1315863652 [ 1557.756966][ T1935] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10567'. [ 1558.042206][ T1940] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10569'. [ 1558.164739][ T1940] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1558.192839][ T1943] macvlan2: entered promiscuous mode [ 1558.193974][ T1943] team0: entered promiscuous mode [ 1558.193992][ T1943] team_slave_0: entered promiscuous mode [ 1558.194169][ T1943] team_slave_1: entered promiscuous mode [ 1558.194963][ T1943] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1558.224403][ T1943] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 1558.465603][ T1606] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1558.653077][ T1606] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1558.697183][ T1606] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1558.784432][ T1606] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1559.127738][ T1606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1559.190455][ T1606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.234399][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.234539][T18104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.278483][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.278577][T15973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1560.550398][ T1987] overlayfs: failed to clone upperpath [ 1560.988138][ T1606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.766259][ T1606] veth0_vlan: entered promiscuous mode [ 1561.786024][ T1606] veth1_vlan: entered promiscuous mode [ 1561.855524][ T1606] veth0_macvtap: entered promiscuous mode [ 1561.905570][ T1606] veth1_macvtap: entered promiscuous mode [ 1561.972978][ T1606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1562.003187][ T1606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1562.023326][T18114] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.023610][T18114] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.023664][T18114] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.023696][T18114] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.026579][ T2027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.087179][ T2027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.143875][ T2027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1562.245528][ T2031] input: syz0 as /devices/virtual/input/input55 [ 1562.688905][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.688926][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.796942][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.796963][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1563.079885][ T2049] loop5: detected capacity change from 0 to 7 [ 1563.081407][ T2049] Dev loop5: unable to read RDB block 7 [ 1563.081451][ T2049] loop5: unable to read partition table [ 1563.081664][ T2049] loop5: partition table beyond EOD, truncated [ 1563.081683][ T2049] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1563.588694][ T2032] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1563.749552][ T2032] usb 7-1: Using ep0 maxpacket: 32 [ 1563.779836][ T2032] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1563.779863][ T2032] usb 7-1: config 0 has no interface number 0 [ 1563.779923][ T2032] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1563.784874][ T2032] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1563.784902][ T2032] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.784921][ T2032] usb 7-1: Product: syz [ 1563.784934][ T2032] usb 7-1: Manufacturer: syz [ 1563.784948][ T2032] usb 7-1: SerialNumber: syz [ 1563.812327][ T2032] usb 7-1: config 0 descriptor?? [ 1563.828706][ T2032] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1563.828738][ T2032] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1564.744274][ T2032] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1566.060510][ T2032] em28xx 7-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 1566.062409][ T2032] em28xx 7-1:0.89: failed to read eeprom (err=-5) [ 1566.062470][ T2032] em28xx 7-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1566.122269][ T2032] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1566.122299][ T2032] em28xx 7-1:0.89: analog set to bulk mode. [ 1566.126807][T21660] em28xx 7-1:0.89: Registering V4L2 extension [ 1566.608581][ T2032] usb 7-1: USB disconnect, device number 81 [ 1566.771377][ T2032] em28xx 7-1:0.89: Disconnecting em28xx [ 1567.148769][T21660] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1567.148790][T21660] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1567.148803][T21660] em28xx 7-1:0.89: No AC97 audio processor [ 1567.227577][T21660] usb 7-1: Decoder not found [ 1567.227596][T21660] em28xx 7-1:0.89: failed to create media graph [ 1567.227625][T21660] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1567.229626][T21660] em28xx 7-1:0.89: Registering snapshot button... [ 1567.232666][T21660] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input56 [ 1567.304797][T21660] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1567.304857][ T2032] em28xx 7-1:0.89: Closing input extension [ 1567.304901][ T2032] em28xx 7-1:0.89: Deregistering snapshot button [ 1567.531584][ T2032] em28xx 7-1:0.89: Freeing device [ 1567.557008][ T2107] netlink: 'syz.9.10619': attribute type 10 has an invalid length. [ 1567.614852][ T2107] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1567.870142][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1568.449261][ T2124] kvm: pic: non byte read [ 1568.449475][ T2124] kvm: pic: non byte read [ 1568.449632][ T2124] kvm: pic: single mode not supported [ 1568.449681][ T2124] kvm: pic: non byte read [ 1568.449875][ T2124] kvm: pic: non byte read [ 1568.452079][ T2124] kvm: pic: non byte read [ 1568.452243][ T2124] kvm: pic: single mode not supported [ 1568.452251][ T2124] kvm: pic: level sensitive irq not supported [ 1568.452301][ T2124] kvm: pic: non byte read [ 1568.496912][ T2124] kvm: pic: single mode not supported [ 1568.496968][ T2124] kvm: pic: non byte read [ 1568.497186][ T2124] kvm: pic: non byte read [ 1568.497387][ T2124] kvm: pic: non byte read [ 1568.583031][ T2126] lo speed is unknown, defaulting to 1000 [ 1569.236322][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1571.336682][ T2154] overlayfs: failed to clone upperpath [ 1575.137420][ T37] audit: type=1800 audit(1770964701.630:4411): pid=2179 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.9.10640" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1576.271323][ T2172] team0: Port device team_slave_0 removed [ 1578.518737][ T37] audit: type=1107 audit(1770964704.296:4412): pid=2229 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1583.077932][ T2271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1590.988751][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10684'. [ 1615.508230][T29012] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1620.742156][T21074] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1620.928547][T21074] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1620.933797][T21074] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1620.952520][T21074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1620.956731][T21074] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1621.589465][ T5904] IPVS: starting estimator thread 0... [ 1621.797721][ T2500] lo speed is unknown, defaulting to 1000 [ 1621.820299][ T2512] IPVS: using max 9 ests per chain, 21600 per kthread [ 1623.638986][T17039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1623.662238][T17039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1623.672824][T17039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1623.681308][T17039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1623.713840][T17039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1623.969724][T17039] Bluetooth: hci3: command tx timeout [ 1624.246487][ T2525] lo speed is unknown, defaulting to 1000 [ 1625.965893][T21074] Bluetooth: hci4: command tx timeout [ 1626.234608][ T2556] : Can't lookup blockdev [ 1626.466551][T17039] Bluetooth: hci3: command tx timeout [ 1626.770528][ T2500] chnl_net:caif_netlink_parms(): no params data found [ 1628.673252][T21074] Bluetooth: hci4: command tx timeout [ 1628.673282][T21074] Bluetooth: hci3: command tx timeout [ 1629.189241][T29014] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.038121][T17039] Bluetooth: hci3: command tx timeout [ 1631.038154][T17039] Bluetooth: hci4: command tx timeout [ 1633.253999][T21074] Bluetooth: hci4: command tx timeout [ 1634.601644][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1635.781104][ T2618] 9p: Could not find request transport: tcp*por0000000004e22 [ 1636.476467][T29014] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.542395][T21074] block nbd9: Receive control failed (result -107) [ 1637.504038][ T2633] nbd9: detected capacity change from 0 to 8589934592 [ 1637.529429][ T2594] block nbd9: Dead connection, failed to find a fallback [ 1637.529454][ T2594] block nbd9: shutting down sockets [ 1637.529471][ T2594] blk_print_req_error: 136 callbacks suppressed [ 1637.529483][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.529508][ T2594] buffer_io_error: 5 callbacks suppressed [ 1637.529519][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.529601][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.529634][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.529692][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.529714][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.529770][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.529792][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.529848][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.529869][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.529964][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.529986][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.530058][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.530081][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.530137][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.530159][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.530179][ T2594] ldm_validate_partition_table(): Disk read failed. [ 1637.530228][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.530251][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.530307][ T2594] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1637.530329][ T2594] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1637.530440][ T2594] Dev nbd9: unable to read RDB block 0 [ 1637.530739][ T2594] nbd9: unable to read partition table [ 1638.914420][ T2594] ldm_validate_partition_table(): Disk read failed. [ 1638.914601][ T2594] Dev nbd9: unable to read RDB block 0 [ 1638.914888][ T2594] nbd9: unable to read partition table [ 1641.632351][T29014] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.811309][ T2665] netlink: 212344 bytes leftover after parsing attributes in process `syz.6.10742'. [ 1642.161409][ T2500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.183973][ T2500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.258806][ T2500] bridge_slave_0: entered allmulticast mode [ 1642.549604][ T2500] bridge_slave_0: entered promiscuous mode [ 1642.632108][ T2500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.632240][ T2500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1642.632512][ T2500] bridge_slave_1: entered allmulticast mode [ 1642.646380][ T2500] bridge_slave_1: entered promiscuous mode [ 1644.733088][ T2668] orangefs_mount: mount request failed with -4 [ 1644.793066][T29014] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.865003][ T2525] chnl_net:caif_netlink_parms(): no params data found [ 1645.156615][ T2684] fuse: Unknown parameter '0x0000000000000005' [ 1645.382795][ T2500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.435928][ T2500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.563098][ T2500] team0: Port device team_slave_0 added [ 1646.506724][ T2500] team0: Port device team_slave_1 added [ 1648.415882][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.416008][ T2525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.416225][ T2525] bridge_slave_0: entered allmulticast mode [ 1648.445382][ T2525] bridge_slave_0: entered promiscuous mode [ 1648.698294][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.698412][ T2525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.698628][ T2525] bridge_slave_1: entered allmulticast mode [ 1648.708885][ T2525] bridge_slave_1: entered promiscuous mode [ 1648.733832][ T2500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1648.733847][ T2500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.733872][ T2500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.874753][ T2714] netlink: 20 bytes leftover after parsing attributes in process `syz.9.10751'. [ 1649.480051][ T2500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.480068][ T2500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.480095][ T2500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1649.643263][ T2525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.077840][ T2525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.055475][T29014] dummy0: left allmulticast mode [ 1651.055731][T29014] bridge0: port 3(dummy0) entered disabled state [ 1651.144507][T29014] bridge_slave_1: left allmulticast mode [ 1651.144534][T29014] bridge_slave_1: left promiscuous mode [ 1651.182028][T29014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.599004][ T2731] 9pnet_virtio: no channels available for device syz [ 1652.771309][T29014] bridge_slave_0: left allmulticast mode [ 1652.771337][T29014] bridge_slave_0: left promiscuous mode [ 1652.771553][T29014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.893635][ T2730] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1654.095970][T18060] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1655.153904][T17039] Bluetooth: hci4: command 0x0405 tx timeout [ 1661.159396][ T2795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10769'. [ 1661.296709][ T2795] SQUASHFS error: Failed to read block 0x0: -5 [ 1666.312541][ T2826] netlink: zone id is out of range [ 1666.504124][T17039] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1666.530825][T17039] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1666.546726][T17039] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1666.547984][T17039] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1666.548795][T17039] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1667.398470][ T2836] ieee802154 phy0 wpan0: encryption failed: -22 [ 1667.620461][ T2846] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10783'. [ 1668.288512][T29014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.325359][T29014] bond0 (unregistering): (slave c@0): Releasing backup interface [ 1669.217840][T17039] Bluetooth: hci5: command tx timeout [ 1669.257835][T29014] bond0 (unregistering): Released all slaves [ 1671.677936][T17039] Bluetooth: hci5: command tx timeout [ 1672.356489][ T2900] 9pnet_virtio: no channels available for device syz [ 1672.427408][ T2900] overlay: Unknown parameter '/' [ 1672.573264][ T2901] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1673.309815][ T2857] Process accounting resumed [ 1673.322678][ T2901] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1673.323480][ T2901] overlayfs: failed to look up (tracing) for ino (-66) [ 1673.652622][T15459] ------------[ cut here ]------------ [ 1673.652635][T15459] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1673.652661][T15459] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:0/15459 [ 1673.652699][T15459] Modules linked in: [ 1673.652726][T15459] CPU: 1 UID: 0 PID: 15459 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1673.652748][T15459] Tainted: [L]=SOFTLOCKUP [ 1673.652754][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1673.652765][T15459] Workqueue: events drm_fb_helper_damage_work [ 1673.652787][T15459] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1673.652807][T15459] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1673.652823][T15459] RSP: 0018:ffffc9000fccf8e0 EFLAGS: 00010246 [ 1673.652838][T15459] RAX: 1ffff110049a7c00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1673.652851][T15459] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1673.652865][T15459] RBP: ffffc9000fccf9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1673.652878][T15459] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1673.652892][T15459] R13: ffff888024d3e000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1673.652905][T15459] FS: 0000000000000000(0000) GS:ffff888126695000(0000) knlGS:0000000000000000 [ 1673.652921][T15459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1673.652934][T15459] CR2: 00007f7e216296c0 CR3: 0000000054988000 CR4: 00000000003526f0 [ 1673.652950][T15459] Call Trace: [ 1673.652963][T15459] [ 1673.652976][T15459] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1673.652997][T15459] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1673.653022][T15459] ? rt_spin_unlock+0x160/0x200 [ 1673.653044][T15459] ? drm_vblank_get+0x147/0x260 [ 1673.653072][T15459] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1673.653097][T15459] drm_fb_helper_damage_work+0x131/0x6f0 [ 1673.653127][T15459] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1673.653147][T15459] ? lock_acquire+0x221/0x330 [ 1673.653169][T15459] ? process_scheduled_works+0xa0f/0x17a0 [ 1673.653190][T15459] ? process_scheduled_works+0xa0f/0x17a0 [ 1673.653210][T15459] process_scheduled_works+0xaec/0x17a0 [ 1673.653261][T15459] ? __pfx_process_scheduled_works+0x10/0x10 [ 1673.653289][T15459] ? assign_work+0x3d5/0x5e0 [ 1673.653316][T15459] worker_thread+0xa50/0xfc0 [ 1673.653365][T15459] kthread+0x388/0x470 [ 1673.653428][T15459] ? __pfx_worker_thread+0x10/0x10 [ 1673.653447][T15459] ? __pfx_kthread+0x10/0x10 [ 1673.653472][T15459] ret_from_fork+0x51e/0xb90 [ 1673.653496][T15459] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.653516][T15459] ? __switch_to+0xc7d/0x1400 [ 1673.653540][T15459] ? __pfx_kthread+0x10/0x10 [ 1673.653578][T15459] ret_from_fork_asm+0x1a/0x30 [ 1673.653679][T15459] [ 1673.653707][T15459] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1673.653724][T15459] CPU: 1 UID: 0 PID: 15459 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1673.653750][T15459] Tainted: [L]=SOFTLOCKUP [ 1673.653756][T15459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1673.653767][T15459] Workqueue: events drm_fb_helper_damage_work [ 1673.653789][T15459] Call Trace: [ 1673.653797][T15459] [ 1673.653805][T15459] vpanic+0x1e0/0x670 [ 1673.653831][T15459] panic+0xc5/0xd0 [ 1673.653853][T15459] ? __pfx_panic+0x10/0x10 [ 1673.653885][T15459] ? ret_from_fork_asm+0x1a/0x30 [ 1673.653912][T15459] __warn+0x315/0x4a0 [ 1673.653932][T15459] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1673.653952][T15459] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1673.653972][T15459] __report_bug+0x29a/0x540 [ 1673.654000][T15459] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1673.654020][T15459] ? __pfx___report_bug+0x10/0x10 [ 1673.654061][T15459] report_bug_entry+0x19a/0x290 [ 1673.654083][T15459] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1673.654100][T15459] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1673.654118][T15459] handle_bug+0xca/0x200 [ 1673.654141][T15459] exc_invalid_op+0x1a/0x50 [ 1673.654165][T15459] asm_exc_invalid_op+0x1a/0x20 [ 1673.654182][T15459] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1673.654200][T15459] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 da ee db fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1673.654217][T15459] RSP: 0018:ffffc9000fccf8e0 EFLAGS: 00010246 [ 1673.654233][T15459] RAX: 1ffff110049a7c00 RBX: ffffffff8f53f3f0 RCX: 0000000000000000 [ 1673.654246][T15459] RDX: ffffffff8b9eec00 RSI: ffffffff8ba0aa40 RDI: ffffffff8f53f3f0 [ 1673.654260][T15459] RBP: ffffc9000fccf9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1673.654272][T15459] R10: dffffc0000000000 R11: fffffbfff1e9250f R12: ffffffff8ba0aa40 [ 1673.654287][T15459] R13: ffff888024d3e000 R14: 0000000000000000 R15: ffffffff8b9eec00 [ 1673.654322][T15459] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1673.654342][T15459] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1673.654365][T15459] ? rt_spin_unlock+0x160/0x200 [ 1673.654388][T15459] ? drm_vblank_get+0x147/0x260 [ 1673.654415][T15459] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1673.654441][T15459] drm_fb_helper_damage_work+0x131/0x6f0 [ 1673.654470][T15459] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1673.654490][T15459] ? lock_acquire+0x221/0x330 [ 1673.654512][T15459] ? process_scheduled_works+0xa0f/0x17a0 [ 1673.654531][T15459] ? process_scheduled_works+0xa0f/0x17a0 [ 1673.654553][T15459] process_scheduled_works+0xaec/0x17a0 [ 1673.654610][T15459] ? __pfx_process_scheduled_works+0x10/0x10 [ 1673.654638][T15459] ? assign_work+0x3d5/0x5e0 [ 1673.654664][T15459] worker_thread+0xa50/0xfc0 [ 1673.654714][T15459] kthread+0x388/0x470 [ 1673.654738][T15459] ? __pfx_worker_thread+0x10/0x10 [ 1673.654756][T15459] ? __pfx_kthread+0x10/0x10 [ 1673.654780][T15459] ret_from_fork+0x51e/0xb90 [ 1673.654805][T15459] ? __pfx_ret_from_fork+0x10/0x10 [ 1673.654823][T15459] ? __switch_to+0xc7d/0x1400 [ 1673.654847][T15459] ? __pfx_kthread+0x10/0x10 [ 1673.654872][T15459] ret_from_fork_asm+0x1a/0x30 [ 1673.654912][T15459] [ 1673.655225][T15459] Kernel Offset: disabled