last executing test programs: 27.362974312s ago: executing program 0 (id=969): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400fd03020600"], 0x0) 24.361073669s ago: executing program 0 (id=978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003800000008000300", @ANYRES32=r7, @ANYBLOB="0c005800010000000053"], 0x28}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r9, @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r10, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000280)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r11) syz_io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f00000001c0), &(0x7f0000000040)) 22.716235575s ago: executing program 0 (id=984): socket$inet(0x2, 0x6, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) r0 = epoll_create(0x6) epoll_pwait(r0, &(0x7f0000000440)=[{}], 0x1, 0xfffffffa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) socket$kcm(0x10, 0x2, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0x6) 21.249059088s ago: executing program 0 (id=988): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109023b000101000000090400fd03020600"], 0x0) 18.888740949s ago: executing program 0 (id=999): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x7fc}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) 18.678508283s ago: executing program 0 (id=1003): mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x43, 0x0, 0x0) 16.309020561s ago: executing program 4 (id=1008): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket(0x10, 0x803, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0xfc68f3af10fe046c, 0x0) socket$packet(0x11, 0x3, 0x300) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000075c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r0], 0x10) 15.210410582s ago: executing program 4 (id=1009): r0 = socket$inet(0xa, 0x3, 0x40084) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x78) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d0000090582020000000000090503"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sndseq(0xffffffffffffff9c, 0x0, 0xb8800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0xff600000, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r3, 0x11, 0x66, 0x0, 0x300000000000000) open(&(0x7f0000000580)='./file0\x00', 0x100000001a1540, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) link(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./file1\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8880}, 0x800) r4 = fsopen(&(0x7f0000000000)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x6, 0x0, 0x0, 0x0) 14.47316993s ago: executing program 3 (id=1010): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000003a"]) 14.370969545s ago: executing program 3 (id=1011): socket$inet(0x2, 0x6, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) unshare(0x22020600) epoll_pwait(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0xfffffffa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x6) 9.679653724s ago: executing program 1 (id=1012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1018004, &(0x7f0000000100)={[{@shortname_win95}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}]}, 0x1, 0x217, &(0x7f00000004c0)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x400800000000) 9.622858861s ago: executing program 3 (id=1013): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)={0x51c, r2, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0x4f8, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x318, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ALLOWEDIPS={0x2e8, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}]}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 9.234278336s ago: executing program 1 (id=1014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) 9.037645542s ago: executing program 3 (id=1016): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', 0x0}) r0 = syz_open_dev$sg(0x0, 0x8, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000000c0)={0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180100"/13, @ANYRESDEC=r3, @ANYRES64=r3, @ANYRES64=r0, @ANYRESHEX=r3, @ANYRES8=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) r8 = socket$key(0xf, 0x3, 0x2) recvmmsg(r8, &(0x7f00000046c0)=[{{&(0x7f0000000380)=@xdp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000000800)=""/70, 0x46}], 0x2}, 0xffffffff}, {{&(0x7f0000000640)=@phonet, 0x80, &(0x7f0000001dc0)=[{&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f00000024c0)=""/149, 0x95}, {&(0x7f00000008c0)=""/226, 0xe2}, {&(0x7f0000001a00)=""/241, 0xf1}, {&(0x7f0000001b00)=""/148, 0x94}, {&(0x7f0000001bc0)=""/249, 0xf9}, {&(0x7f0000001cc0)=""/252, 0xfc}], 0x9, &(0x7f00000047c0)=""/78, 0x4e}, 0x7f}, {{&(0x7f0000001f00)=@generic, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f80)=""/60, 0x3c}, {&(0x7f0000001fc0)=""/143, 0x8f}, {&(0x7f0000002080)=""/147, 0x93}, {&(0x7f0000002140)=""/43, 0x2b}, {0x0}, {&(0x7f0000002240)=""/240, 0xf0}], 0x6, &(0x7f00000023c0)=""/105, 0x69}, 0x10001}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000004840)=""/224, 0xe0}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/126, 0x7e}], 0x3, &(0x7f0000004940)=""/4105, 0x1009}, 0xfffffffd}], 0x4, 0x40010020, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r8, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14752455960608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) 8.903005162s ago: executing program 4 (id=1017): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x28}}], 0x1, 0x0) 8.856268158s ago: executing program 1 (id=1018): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, 0xbf}) 7.858010033s ago: executing program 3 (id=1020): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000005c0)=[@increfs, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, 0x0, 0x0) 7.558700384s ago: executing program 1 (id=1022): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x3ee5}, {0x6}]}, 0x10) fanotify_init(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000000000800000000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_setup(0x6, &(0x7f0000000000)=0x0) io_pgetevents(r5, 0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) 7.558137441s ago: executing program 4 (id=1023): socket$inet(0x2, 0x6, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00'}, 0x10) unshare(0x22020600) epoll_pwait(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0xfffffffa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) socket$kcm(0x10, 0x2, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0x6) 6.310244767s ago: executing program 3 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x1018004, &(0x7f0000000100)={[{@shortname_win95}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@nfs_nostale_ro}]}, 0x1, 0x217, &(0x7f00000004c0)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x400800000000) 5.344182664s ago: executing program 4 (id=1026): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 5.319986109s ago: executing program 1 (id=1027): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdbc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa90d]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="fcb334a80f6b0b108112f3be5fcd680b70e2079046cc8f9e60e9136305bb5485083034e725d6516b3ec2fb3cbbd52f1421ca2eb25d0b5d9f27bef3f588f262021f6c0ad88be94f94768fb513d8815b9a273948fd68ddaa35a8f4", @ANYRES16=r6, @ANYBLOB="050000000000000000002e000000", @ANYRES32=r7, @ANYBLOB="0a003400020202020202000004009300"], 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffc1}, 0x1c) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000280)={@mcast1, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xd533, 0x8, 0x4, 0x400, 0xbb0, 0x80900020}) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @private2}}}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) 4.481674265s ago: executing program 2 (id=1028): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x2) listen(r0, 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(0xffffffffffffffff, 0x3a5) 3.706632847s ago: executing program 2 (id=1029): pipe(&(0x7f0000000040)) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x2}, 0x0, [0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x80000001, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x717a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xf, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x81f], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x200, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf25, 0x0, 0x7], [0x1, 0x0, 0xe6c7, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1]}, 0x45c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r6, 0x40049366, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) 2.456917126s ago: executing program 1 (id=1030): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket(0x2c, 0x0, 0x0) epoll_create1(0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) add_key$fscrypt_v1(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x4, 0x4, 0x400, 0x0, 0x210, 0x108, 0x318, 0x318, 0x318, 0x7fffffe, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'pimreg0\x00'}, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7fff, 'syz0\x00'}}}, {{@arp={@rand_addr, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00'}}}, {{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'lo\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8400, 'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x450) 2.292641113s ago: executing program 2 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r5, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000065c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9}}, 0x50) read$FUSE(r5, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r5, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r7}, 0x10) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r8, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000000c0)={r1, r9, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x702, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) 1.046999985s ago: executing program 2 (id=1032): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) memfd_secret(0x0) 903.011242ms ago: executing program 2 (id=1033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="340e0400412000"], 0x7) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x4}, 0x1c) listen(r5, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r6, 0x10d, 0x8c, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffffdf) 645.18374ms ago: executing program 4 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x1, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 0s ago: executing program 2 (id=1035): mmap(&(0x7f0000d56000/0x3000)=nil, 0x3000, 0x1000009, 0x11, 0xffffffffffffffff, 0x3000) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) syz_emit_ethernet(0x1012, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) sendto$packet(r1, &(0x7f0000000100)="15ce72a1e57001d772f6e6d41acf1f94e24eb54496375dbae5d52194717e40da7abe25313b3fbd9db0f70d4ae1b6e8c5bdd18893ff56e4e77eaef5a2053d71017749fd660eddd5acdbe3c24fa631175652d88bfe2e97d8d3743abf5281756c6dfe6d4f408d89d783c0c5221e96ffa52b82029dad446cfd7e1182d3bb92bf23531488d1ad3c5603ae86db97b32eddb21504beb75103571f6dba6c985bd9a3d934c36d1ef28b96bfed755018e52725b172e643d91a5ec2c6", 0xb7, 0xc044088, 0x0, 0x0) kernel console output (not intermixed with test programs): 5] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.126920][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.154763][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.177673][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.210984][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.228026][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.255004][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.280585][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.295368][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.313110][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.331482][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.350690][ T6311] delete_channel: no stack [ 98.363034][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.388048][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.404041][ T25] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 98.416966][ T25] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 98.470647][ T25] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 98.579516][ T25] usb 5-1: USB disconnect, device number 3 [ 98.924333][ T6331] warning: `syz.1.373' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.322691][ T6346] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 99.811218][ T9] usb 4-1: USB disconnect, device number 4 [ 99.859687][ T9] Unregistered device nBox DVB-T Dongle [ 99.900634][ T9] as10x_usb: device has been disconnected [ 100.064729][ T5238] Bluetooth: hci2: command tx timeout [ 100.164284][ T1167] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.355079][ T1167] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 100.373399][ T1167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.399397][ T1167] usb 5-1: config 0 descriptor?? [ 100.636087][ T1167] ath6kl: Failed to submit usb control message: -71 [ 100.678069][ T1167] ath6kl: unable to send the bmi data to the device: -71 [ 100.703388][ T1167] ath6kl: Unable to send get target info: -71 [ 100.724661][ T1167] ath6kl: Failed to init ath6kl core: -71 [ 100.754672][ T1167] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 100.806740][ T1167] usb 5-1: USB disconnect, device number 4 [ 101.533664][ T1167] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.684711][ T5309] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 102.210461][ T6420] loop4: detected capacity change from 0 to 1024 [ 102.433476][ T6420] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 102.440290][ T6420] hfsplus: xattr searching failed [ 102.463677][ T6420] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 102.470890][ T6420] hfsplus: xattr searching failed [ 102.884983][ T1167] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 102.896813][ T1167] usb 4-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 102.907561][ T5309] usb 3-1: Using ep0 maxpacket: 32 [ 102.912814][ T1167] usb 4-1: Manufacturer: syz [ 102.924870][ T5309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.936320][ T1167] usb 4-1: config 0 descriptor?? [ 102.948754][ T5309] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 102.971169][ T5309] usb 3-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice= 6.87 [ 102.995456][ T5309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.006897][ T5309] usb 3-1: config 0 descriptor?? [ 103.228730][ T5309] usb 3-1: string descriptor 0 read error: -71 [ 103.248556][ T5309] usb 3-1: USB disconnect, device number 3 [ 103.352692][ T1167] gs_usb 4-1:0.0: Configuring for 133 interfaces [ 103.370356][ T1167] gs_usb 4-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 103.382181][ T1167] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 103.571470][ T6439] loop1: detected capacity change from 0 to 512 [ 103.583767][ T5309] usb 4-1: USB disconnect, device number 5 [ 103.592813][ T6439] ext4: Unknown parameter 'noacl' [ 105.069682][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 105.093332][ T6452] netlink: 59 bytes leftover after parsing attributes in process `syz.3.419'. [ 105.135244][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 105.660428][ T5278] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.851873][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.909216][ T5278] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.930783][ T5278] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.943006][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.978063][ T5278] usb 1-1: config 0 descriptor?? [ 106.044953][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.283638][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 106.301575][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.342065][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.370492][ T9] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=14 [ 106.406038][ T5278] hid (null): bogus close delimiter [ 106.409633][ T9] usb 2-1: Manufacturer: syz [ 106.425357][ T9] usb 2-1: SerialNumber: syz [ 106.463043][ T9] usb 2-1: config 0 descriptor?? [ 106.505826][ T9] em28xx 2-1:0.0: New device syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.527170][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 106.614136][ T5278] usb 1-1: language id specifier not provided by device, defaulting to English [ 106.738210][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.787416][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.817137][ T6459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.856239][ T6459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.869652][ T6471] loop4: detected capacity change from 0 to 40427 [ 106.915221][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 106.941249][ T6471] F2FS-fs (loop4): heap/no_heap options were deprecated [ 106.988001][ T6471] F2FS-fs (loop4): invalid crc value [ 107.018740][ T6471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.025484][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.053747][ T9] em28xx 2-1:0.0: board has no eeprom [ 107.119230][ T5278] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input11 [ 107.138172][ T29] audit: type=1326 audit(1723804512.922:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78495799b9 code=0x7ffc0000 [ 107.167599][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.184478][ T5278] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input12 [ 107.207110][ T29] audit: type=1326 audit(1723804512.922:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78495799b9 code=0x7ffc0000 [ 107.210710][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 107.280098][ T1167] em28xx 2-1:0.0: Binding DVB extension [ 107.285642][ T5278] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input13 [ 107.308926][ T6471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 107.313213][ T6483] loop3: detected capacity change from 0 to 512 [ 107.322976][ T29] audit: type=1326 audit(1723804512.922:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f78495799b9 code=0x7ffc0000 [ 107.372421][ T6483] ext4: Unknown parameter 'noacl' [ 107.418575][ T9] usb 2-1: USB disconnect, device number 3 [ 107.420566][ T5278] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0004/input/input14 [ 107.438345][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 107.449234][ T29] audit: type=1326 audit(1723804512.922:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6480 comm="syz.2.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78495799b9 code=0x7ffc0000 [ 107.613369][ T1167] em28xx 2-1:0.0: Registering input extension [ 107.695606][ T5278] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 107.710161][ T5278] usb 1-1: USB disconnect, device number 3 [ 108.460431][ T9] em28xx 2-1:0.0: Closing input extension [ 108.500450][ T5225] syz-executor: attempt to access beyond end of device [ 108.500450][ T5225] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 108.554662][ T5225] syz-executor: attempt to access beyond end of device [ 108.554662][ T5225] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 108.671882][ T6504] loop2: detected capacity change from 0 to 512 [ 108.688959][ T9] em28xx 2-1:0.0: Freeing device [ 108.699636][ T6504] ext4: Unknown parameter 'noacl' [ 108.735911][ T6506] loop3: detected capacity change from 0 to 1024 [ 108.742942][ T6506] EXT4-fs: Ignoring removed orlov option [ 108.751168][ T6506] EXT4-fs (loop3): filesystem is read-only [ 108.757605][ T6506] EXT4-fs (loop3): #clusters per group too big: 8193 [ 108.931474][ T52] kworker/u8:3: attempt to access beyond end of device [ 108.931474][ T52] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 109.021853][ T52] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.032367][ T52] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.039473][ T52] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.049255][ T52] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 109.917100][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.086209][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.192598][ T29] audit: type=1326 audit(1723804515.972:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939cf799b9 code=0x7ffc0000 [ 110.269013][ T29] audit: type=1326 audit(1723804516.012:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939cf799b9 code=0x7ffc0000 [ 110.370196][ T29] audit: type=1326 audit(1723804516.012:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f939cf799b9 code=0x7ffc0000 [ 110.399357][ T6503] loop1: detected capacity change from 0 to 40427 [ 110.417755][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.466789][ T6503] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.476151][ T29] audit: type=1326 audit(1723804516.012:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939cf799b9 code=0x7ffc0000 [ 110.498224][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.510530][ T6503] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 110.550584][ T6503] F2FS-fs (loop1): invalid crc value [ 110.594374][ T29] audit: type=1326 audit(1723804516.012:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939cf799b9 code=0x7ffc0000 [ 110.616877][ C0] vkms_vblank_simulate: vblank timer overrun [ 110.652182][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.666121][ T29] audit: type=1326 audit(1723804516.012:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6521 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f939cf799b9 code=0x7ffc0000 [ 110.704628][ T6503] F2FS-fs (loop1): Found nat_bits in checkpoint [ 110.944771][ T6503] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 110.951855][ T6503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.046488][ T52] bridge_slave_1: left allmulticast mode [ 111.093776][ T52] bridge_slave_1: left promiscuous mode [ 111.110116][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.199615][ T6540] syz.1.436: attempt to access beyond end of device [ 111.199615][ T6540] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 111.215638][ T52] bridge_slave_0: left allmulticast mode [ 111.251060][ T52] bridge_slave_0: left promiscuous mode [ 111.258197][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.577151][ T5278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.980428][ T5278] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 112.110118][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.154704][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 112.190671][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 112.200943][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 112.201707][ T5278] usb 3-1: config 0 descriptor?? [ 112.214026][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 112.233951][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 112.242107][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 112.348940][ T6553] loop0: detected capacity change from 0 to 512 [ 112.358430][ T6553] ext4: Unknown parameter 'noacl' [ 112.882085][ T5278] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 113.510069][ T5278] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 113.548132][ T5278] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 113.567430][ T5278] usb 3-1: USB disconnect, device number 4 [ 114.002788][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.113340][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.127577][ T52] bond0 (unregistering): Released all slaves [ 114.304245][ T5238] Bluetooth: hci1: command tx timeout [ 114.363733][ T1167] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 114.433980][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 114.574073][ T1167] usb 4-1: Using ep0 maxpacket: 16 [ 114.585357][ T1167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.610413][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 114.621175][ T1167] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.648181][ T1167] usb 4-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 114.697623][ T52] hsr_slave_0: left promiscuous mode [ 114.706404][ T1167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.716544][ T52] hsr_slave_1: left promiscuous mode [ 114.726177][ T1167] usb 4-1: config 0 descriptor?? [ 114.733780][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.741621][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.767961][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.775734][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.824077][ T52] veth1_macvtap: left promiscuous mode [ 114.840563][ T52] veth0_macvtap: left promiscuous mode [ 114.858297][ T52] veth1_vlan: left promiscuous mode [ 114.906608][ T52] veth0_vlan: left promiscuous mode [ 115.808473][ T6614] loop0: detected capacity change from 0 to 512 [ 115.820491][ T6614] ext4: Unknown parameter 'noacl' [ 116.194801][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.384384][ T5238] Bluetooth: hci1: command tx timeout [ 116.453942][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 116.547208][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 116.831587][ T25] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 116.859682][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.869527][ T52] team0 (unregistering): Port device team_slave_1 removed [ 116.875842][ T25] usb 2-1: Product: syz [ 116.881049][ T25] usb 2-1: Manufacturer: syz [ 116.891530][ T25] usb 2-1: SerialNumber: syz [ 116.898883][ T25] usb 2-1: config 0 descriptor?? [ 116.908253][ T25] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 116.917544][ T25] usb 2-1: Detected FT232R [ 116.935567][ T52] team0 (unregistering): Port device team_slave_0 removed [ 117.084793][ T1167] usbhid 4-1:0.0: can't add hid device: -71 [ 117.091096][ T1167] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 117.117631][ T1167] usb 4-1: USB disconnect, device number 6 [ 117.126181][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 117.159984][ T6621] serio: Serial port pts0 [ 117.378164][ T25] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 117.585045][ T1167] usb 2-1: USB disconnect, device number 4 [ 117.617946][ T1167] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 117.618336][ T6607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.457'. [ 117.628466][ T1167] ftdi_sio 2-1:0.0: device disconnected [ 117.788473][ T6633] loop2: detected capacity change from 0 to 2048 [ 117.795646][ T6633] EXT4-fs: Ignoring removed orlov option [ 117.839988][ T6633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.861022][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.888601][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.937066][ T6548] bridge_slave_0: entered allmulticast mode [ 117.946466][ T6633] EXT4-fs (loop2): shut down requested (0) [ 117.954359][ T6548] bridge_slave_0: entered promiscuous mode [ 117.962935][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.970694][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.978389][ T6548] bridge_slave_1: entered allmulticast mode [ 117.986186][ T6548] bridge_slave_1: entered promiscuous mode [ 117.987822][ T1112] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 118.023686][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 118.078048][ T1112] EXT4-fs (loop2): Remounting filesystem read-only [ 118.089338][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.129888][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.219022][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.229156][ T5226] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.266107][ T9] usb 4-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.277018][ T6548] team0: Port device team_slave_0 added [ 118.299389][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 118.314802][ T6548] team0: Port device team_slave_1 added [ 118.341441][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 118.366649][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 118.387716][ T9] usb 4-1: SerialNumber: syz [ 118.422623][ T9] usb 4-1: bad CDC descriptors [ 118.455583][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.473830][ T5238] Bluetooth: hci1: command tx timeout [ 118.496359][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.550353][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.563148][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.571224][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.624430][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.705140][ T6548] hsr_slave_0: entered promiscuous mode [ 118.720565][ T6548] hsr_slave_1: entered promiscuous mode [ 119.543328][ T6548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.553307][ T6548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.566370][ T6548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.586698][ T6548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.793000][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.820139][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.843493][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.850677][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.882155][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.889360][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.015531][ T6683] coredump: 6683(dhcpcd-run-hook): over coredump resource limit, skipping core dump [ 120.034256][ T6683] coredump: 6683(dhcpcd-run-hook): coredump has not been created, error -7 [ 120.086770][ T6685] coredump: 6685(dhcpcd-run-hook): over coredump resource limit, skipping core dump [ 120.096855][ T6685] coredump: 6685(dhcpcd-run-hook): coredump has not been created, error -7 [ 120.131204][ T6686] coredump: 6686(dhcpcd-run-hook): over coredump resource limit, skipping core dump [ 120.153751][ T6686] coredump: 6686(dhcpcd-run-hook): coredump has not been created, error -7 [ 120.174254][ T6687] coredump: 6687(dhcpcd-run-hook): over coredump resource limit, skipping core dump [ 120.184616][ T6687] coredump: 6687(dhcpcd-run-hook): coredump has not been created, error -7 [ 120.206603][ T6688] coredump: 6688(dhcpcd-run-hook): over coredump resource limit, skipping core dump [ 120.222475][ T6688] coredump: 6688(dhcpcd-run-hook): coredump has not been created, error -7 [ 120.255155][ T6689] coredump: 6689(dhcpcd-run-hook): over coredump resource limit, skipping core dump [ 120.265215][ T6689] coredump: 6689(dhcpcd-run-hook): coredump has not been created, error -7 [ 120.373412][ T1167] usb 4-1: USB disconnect, device number 7 [ 120.531439][ T6283] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.627719][ T6690] coredump: 6690(syz-executor): over coredump resource limit, skipping core dump [ 120.637922][ T6690] coredump: 6690(syz-executor): coredump has not been created, error -7 [ 120.653366][ T6691] coredump: 6691(syz-executor): over coredump resource limit, skipping core dump [ 120.662850][ T6691] coredump: 6691(syz-executor): coredump has not been created, error -7 [ 120.678634][ T6283] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.679008][ T6692] coredump: 6692(syz-executor): over coredump resource limit, skipping core dump [ 120.699706][ T6692] coredump: 6692(syz-executor): coredump has not been created, error -7 [ 120.720005][ T6693] coredump: 6693(syz-executor): over coredump resource limit, skipping core dump [ 120.729819][ T6693] coredump: 6693(syz-executor): coredump has not been created, error -7 [ 120.780823][ T6283] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.874398][ T6283] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.181419][ T6283] bridge_slave_1: left allmulticast mode [ 121.208304][ T6283] bridge_slave_1: left promiscuous mode [ 121.228584][ T6283] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.257062][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 121.271312][ T6283] bridge_slave_0: left allmulticast mode [ 121.277691][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 121.285048][ T6283] bridge_slave_0: left promiscuous mode [ 121.294163][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 121.301439][ T6283] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.325152][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 121.337302][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 121.347629][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.377159][ T4621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 121.389911][ T4621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 121.398808][ T4621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 121.406969][ T4621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 121.415767][ T1167] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.436238][ T4621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 121.445753][ T4621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.623659][ T1167] usb 2-1: Using ep0 maxpacket: 16 [ 121.635637][ T1167] usb 2-1: config 253 has an invalid interface number: 157 but max is 3 [ 121.645388][ T1167] usb 2-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 121.656557][ T1167] usb 2-1: config 253 has an invalid interface number: 213 but max is 3 [ 121.672054][ T1167] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 121.682794][ T1167] usb 2-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 121.692180][ T1167] usb 2-1: config 253 has no interface number 0 [ 121.703476][ T1167] usb 2-1: config 253 has no interface number 1 [ 121.709876][ T1167] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 121.728503][ T1167] usb 2-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 121.739842][ T1167] usb 2-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 121.751482][ T1167] usb 2-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 121.765802][ T1167] usb 2-1: config 253 interface 157 has no altsetting 0 [ 121.772785][ T1167] usb 2-1: config 253 interface 213 has no altsetting 0 [ 121.782510][ T1167] usb 2-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 121.791932][ T1167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.800122][ T1167] usb 2-1: Product: syz [ 121.804458][ T1167] usb 2-1: Manufacturer: syz [ 121.809053][ T1167] usb 2-1: SerialNumber: syz [ 121.922970][ T6283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.939126][ T6283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.950356][ T6283] bond0 (unregistering): Released all slaves [ 122.032855][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.071787][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.106206][ T1167] r8712u: register rtl8712_netdev_ops to netdev_ops [ 122.112896][ T1167] usb 2-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 122.136450][ T1167] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 122.143117][ T1167] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 122.161419][ T1167] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 122.187837][ T1167] usb 2-1: Found UVC 0.00 device syz (0b05:1791) [ 122.196796][ T1167] usb 2-1: No valid video chain found. [ 122.215074][ T1167] r8712u: register rtl8712_netdev_ops to netdev_ops [ 122.233061][ T1167] usb 2-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 122.248221][ T1167] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed [ 122.256063][ T1167] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 122.264196][ T1167] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 122.278222][ T1167] usb 2-1: USB disconnect, device number 5 [ 122.595292][ T6283] hsr_slave_0: left promiscuous mode [ 122.612369][ T6283] hsr_slave_1: left promiscuous mode [ 122.625530][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.632983][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.670805][ T6283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.702095][ T6283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.771258][ T6283] veth1_macvtap: left promiscuous mode [ 122.792438][ T6283] veth0_macvtap: left promiscuous mode [ 122.813730][ T6283] veth1_vlan: left promiscuous mode [ 122.819080][ T6283] veth0_vlan: left promiscuous mode [ 122.915064][ T6740] serio: Serial port pts0 [ 122.962455][ T4621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 122.974595][ T4621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 122.983449][ T4621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 122.994959][ T4621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.004347][ T4621] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 123.012649][ T4621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.324493][ T6283] team0 (unregistering): Port device team_slave_1 removed [ 123.360058][ T6283] team0 (unregistering): Port device team_slave_0 removed [ 123.426900][ T54] Bluetooth: hci0: command tx timeout [ 123.511497][ T54] Bluetooth: hci1: command tx timeout [ 123.845085][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 123.934580][ T6704] chnl_net:caif_netlink_parms(): no params data found [ 124.120727][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.133773][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.141033][ T6701] bridge_slave_0: entered allmulticast mode [ 124.155721][ T6701] bridge_slave_0: entered promiscuous mode [ 124.210627][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.218936][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.233744][ T6701] bridge_slave_1: entered allmulticast mode [ 124.240589][ T6701] bridge_slave_1: entered promiscuous mode [ 124.249006][ T6704] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.257467][ T6704] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.267222][ T6704] bridge_slave_0: entered allmulticast mode [ 124.274128][ T6704] bridge_slave_0: entered promiscuous mode [ 124.283383][ T6704] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.290674][ T6704] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.297999][ T6704] bridge_slave_1: entered allmulticast mode [ 124.304984][ T6704] bridge_slave_1: entered promiscuous mode [ 124.391293][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.403230][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.413429][ T6741] chnl_net:caif_netlink_parms(): no params data found [ 124.448555][ T6704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.476216][ T6704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.507559][ T6701] team0: Port device team_slave_0 added [ 124.542683][ T6701] team0: Port device team_slave_1 added [ 124.593498][ T6704] team0: Port device team_slave_0 added [ 124.617763][ T6704] team0: Port device team_slave_1 added [ 124.638008][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.649405][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.679869][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.692102][ T6741] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.699741][ T6741] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.707336][ T6741] bridge_slave_0: entered allmulticast mode [ 124.714316][ T6741] bridge_slave_0: entered promiscuous mode [ 124.747447][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.756955][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.783106][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.813325][ T6741] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.820697][ T6741] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.828292][ T6741] bridge_slave_1: entered allmulticast mode [ 124.836726][ T6741] bridge_slave_1: entered promiscuous mode [ 124.853984][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.861050][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.887539][ T6704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.902142][ T6704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.910046][ T6704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.963237][ T6704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.042337][ T6741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.090742][ T6741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.113975][ T54] Bluetooth: hci3: command tx timeout [ 125.194960][ T6701] hsr_slave_0: entered promiscuous mode [ 125.212379][ T6701] hsr_slave_1: entered promiscuous mode [ 125.222320][ T6701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.234483][ T6701] Cannot create hsr debugfs directory [ 125.280150][ T6741] team0: Port device team_slave_0 added [ 125.292255][ T6741] team0: Port device team_slave_1 added [ 125.342517][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.358078][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.384732][ T6741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.398477][ T6741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.405594][ T6741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.433062][ T6741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.450534][ T6704] hsr_slave_0: entered promiscuous mode [ 125.456783][ T6704] hsr_slave_1: entered promiscuous mode [ 125.462883][ T6704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.470647][ T6704] Cannot create hsr debugfs directory [ 125.514018][ T54] Bluetooth: hci0: command tx timeout [ 125.593938][ T54] Bluetooth: hci1: command tx timeout [ 125.615158][ T6741] hsr_slave_0: entered promiscuous mode [ 125.622670][ T6741] hsr_slave_1: entered promiscuous mode [ 125.635949][ T6741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.643508][ T6741] Cannot create hsr debugfs directory [ 125.729892][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.827816][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.097519][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.207145][ T6807] loop1: detected capacity change from 0 to 256 [ 126.220587][ T6807] exfat: Bad value for 'uid' [ 126.241270][ T6807] exfat: Bad value for 'uid' [ 126.307440][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.650114][ T35] bridge_slave_1: left allmulticast mode [ 126.656978][ T35] bridge_slave_1: left promiscuous mode [ 126.662662][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.671392][ T35] bridge_slave_0: left allmulticast mode [ 126.678479][ T35] bridge_slave_0: left promiscuous mode [ 126.685482][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.696151][ T35] bridge_slave_1: left allmulticast mode [ 126.701905][ T35] bridge_slave_1: left promiscuous mode [ 126.708205][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.719140][ T35] bridge_slave_0: left allmulticast mode [ 126.725358][ T35] bridge_slave_0: left promiscuous mode [ 126.731006][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.195891][ T54] Bluetooth: hci3: command tx timeout [ 127.232935][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.244846][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.256626][ T35] bond0 (unregistering): Released all slaves [ 127.392396][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.409490][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.424346][ T35] bond0 (unregistering): Released all slaves [ 127.584098][ T54] Bluetooth: hci0: command tx timeout [ 127.637323][ T6812] loop1: detected capacity change from 0 to 40427 [ 127.646918][ T35] tipc: Disabling bearer [ 127.649278][ T6812] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 127.662573][ T6812] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 127.672627][ T54] Bluetooth: hci1: command tx timeout [ 127.673123][ T6701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.681293][ T35] tipc: Left network mode [ 127.709159][ T6812] F2FS-fs (loop1): invalid crc value [ 127.719076][ T6812] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.787679][ T6701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.800015][ T6812] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 127.807526][ T6812] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 127.810529][ T6701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.950859][ T6701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 128.103960][ T35] hsr_slave_0: left promiscuous mode [ 128.116522][ T35] hsr_slave_1: left promiscuous mode [ 128.128692][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.147297][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.166223][ T35] hsr_slave_0: left promiscuous mode [ 128.237012][ T35] hsr_slave_1: left promiscuous mode [ 128.256735][ T5234] syz-executor: attempt to access beyond end of device [ 128.256735][ T5234] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 128.286055][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.302492][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.311705][ T5234] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.324927][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.332379][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.437758][ T35] veth1_macvtap: left promiscuous mode [ 128.443336][ T35] veth0_macvtap: left promiscuous mode [ 128.470456][ T35] veth1_vlan: left promiscuous mode [ 128.494418][ T35] veth0_vlan: left promiscuous mode [ 128.717031][ T4621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 128.732316][ T4621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 128.745133][ T4621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 128.758057][ T4621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 128.765964][ T4621] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 128.773239][ T4621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.852038][ T6839] loop1: detected capacity change from 0 to 2048 [ 128.915287][ T6839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.058651][ T35] team0 (unregistering): Port device team_slave_1 removed [ 129.119701][ T35] team0 (unregistering): Port device team_slave_0 removed [ 129.323740][ T4621] Bluetooth: hci3: command tx timeout [ 129.712796][ T4621] Bluetooth: hci0: command tx timeout [ 129.743742][ T4621] Bluetooth: hci1: command tx timeout [ 129.872196][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.043780][ T6848] serio: Serial port pts0 [ 130.361393][ T35] team0 (unregistering): Port device team_slave_1 removed [ 130.399565][ T35] team0 (unregistering): Port device team_slave_0 removed [ 130.863786][ T4621] Bluetooth: hci5: command tx timeout [ 130.883202][ T6701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.941805][ T6704] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.970837][ T6704] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.011948][ T6701] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.085724][ T6704] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.108148][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.115316][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.159786][ T6704] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.193218][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.200412][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.354301][ T4621] Bluetooth: hci3: command tx timeout [ 131.488104][ T6834] chnl_net:caif_netlink_parms(): no params data found [ 131.661465][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.670710][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.679034][ T6834] bridge_slave_0: entered allmulticast mode [ 131.686320][ T6834] bridge_slave_0: entered promiscuous mode [ 131.694378][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.701470][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.709130][ T6834] bridge_slave_1: entered allmulticast mode [ 131.716182][ T6834] bridge_slave_1: entered promiscuous mode [ 131.768712][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.814068][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.834302][ T6701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.849206][ T6741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.859783][ T6741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 131.869925][ T6741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 131.907712][ T6834] team0: Port device team_slave_0 added [ 131.917940][ T6834] team0: Port device team_slave_1 added [ 131.927011][ T6741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 131.949771][ T6704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.999362][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.007658][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.034296][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.069729][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.076852][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.107790][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.142075][ T6704] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.227485][ T5296] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.234672][ T5296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.260509][ T6834] hsr_slave_0: entered promiscuous mode [ 132.269640][ T6834] hsr_slave_1: entered promiscuous mode [ 132.389159][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.396430][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.512356][ T6701] veth0_vlan: entered promiscuous mode [ 132.567406][ T6701] veth1_vlan: entered promiscuous mode [ 132.691006][ T6834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.732743][ T6704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.777856][ T6741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.849988][ T6834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.954006][ T4621] Bluetooth: hci5: command tx timeout [ 132.970318][ T6834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.005244][ T6741] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.109945][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.123781][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.146568][ T6834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.195094][ T6701] veth0_macvtap: entered promiscuous mode [ 133.203226][ T6704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.228758][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.235951][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.288554][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.295730][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.310867][ T6701] veth1_macvtap: entered promiscuous mode [ 133.404527][ T1167] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 133.413211][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.433733][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.443871][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.454562][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.466080][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.524835][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.542605][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.553178][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.571197][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.582468][ T6701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.593859][ T1167] usb 2-1: Using ep0 maxpacket: 8 [ 133.602164][ T1167] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.622888][ T1167] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 133.645595][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 133.661292][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 133.664907][ T6704] veth0_vlan: entered promiscuous mode [ 133.677935][ T1167] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.694619][ T1167] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 133.704916][ T1167] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 133.713018][ T1167] usb 2-1: Product: syz [ 133.727165][ T6701] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.736883][ T1167] usb 2-1: Manufacturer: syz [ 133.741516][ T1167] usb 2-1: SerialNumber: syz [ 133.747106][ T6701] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.764431][ T1167] usb 2-1: config 0 descriptor?? [ 133.769547][ T6701] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.783852][ T6701] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.821998][ T6704] veth1_vlan: entered promiscuous mode [ 133.858361][ T6834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.881094][ T6834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.951571][ T6834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.990436][ T1167] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 133.995952][ T6834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.011290][ T1167] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 134.162064][ T6704] veth0_macvtap: entered promiscuous mode [ 134.189913][ T1167] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 134.207751][ T6704] veth1_macvtap: entered promiscuous mode [ 134.220253][ T1167] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 134.236366][ T1167] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 134.315687][ T5296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.332562][ T5296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.342005][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.361629][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.373201][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.391775][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.402686][ T1167] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 134.421356][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.440562][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.452581][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.469053][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.487968][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.502242][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.524260][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.542170][ T6704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.553501][ T6704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.573127][ T6704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.593980][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.632521][ T6704] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.661879][ T6704] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.674267][ T6704] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.682999][ T6704] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.721929][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.731885][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.828385][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.918999][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.016660][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.023787][ T4621] Bluetooth: hci5: command tx timeout [ 135.023816][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.075025][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.082201][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.224954][ T5296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.232812][ T5296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.255705][ T2634] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.349273][ T6741] veth0_vlan: entered promiscuous mode [ 135.360129][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.381604][ T6741] veth1_vlan: entered promiscuous mode [ 135.387507][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.455876][ T2634] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.494675][ T6741] veth0_macvtap: entered promiscuous mode [ 135.500605][ T2634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.536671][ T6741] veth1_macvtap: entered promiscuous mode [ 135.556002][ T2634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.594098][ T2634] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.617708][ T2634] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.643689][ T2634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.696748][ T2634] usb 1-1: config 0 descriptor?? [ 135.815282][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.830102][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.850547][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.878317][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.019668][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.299563][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.558751][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.623795][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.634121][ T2634] usbhid 1-1:0.0: can't add hid device: -71 [ 136.640268][ T2634] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 136.690769][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.709360][ T5309] usb 2-1: USB disconnect, device number 6 [ 136.737423][ T2634] usb 1-1: USB disconnect, device number 4 [ 136.757137][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.793573][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.816263][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.835362][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.851522][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.862472][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.875498][ T6741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.896473][ T6741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.915117][ T6741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.943322][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.963923][ T6741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.972822][ T6741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.992652][ T6741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.001843][ T6741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.103938][ T4621] Bluetooth: hci5: command tx timeout [ 137.119691][ T6834] veth0_vlan: entered promiscuous mode [ 137.157131][ T6834] veth1_vlan: entered promiscuous mode [ 137.240715][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.317946][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.499416][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.519096][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.536839][ T6834] veth0_macvtap: entered promiscuous mode [ 137.549750][ T6834] veth1_macvtap: entered promiscuous mode [ 137.608187][ T6998] loop1: detected capacity change from 0 to 128 [ 137.665803][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.723959][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.773751][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.833737][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.866291][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.978304][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.193467][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.535751][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.553714][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.593721][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.615247][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.694874][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.753008][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.789557][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.822553][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.852756][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.886210][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.913581][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.953697][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.993691][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.013219][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.035158][ T7020] serio: Serial port pts0 [ 139.065182][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.076726][ T6834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.100134][ T6834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.133733][ T6834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.163200][ T6834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.204885][ T7015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 139.464181][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.488515][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.493827][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.500'. [ 139.577932][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.604097][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.163742][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.371624][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.400131][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 140.423787][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 140.443789][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 140.482770][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.510433][ T7039] loop0: detected capacity change from 0 to 40427 [ 140.511474][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.538585][ T7039] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 140.556243][ T25] usb 5-1: config 0 descriptor?? [ 140.576967][ T7039] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 140.604202][ T7039] F2FS-fs (loop0): invalid crc value [ 140.638056][ T7039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.740778][ T7039] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 140.753731][ T7039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 141.303943][ T5228] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.681835][ T7064] overlayfs: failed to resolve './file0': -2 [ 141.795663][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 141.812325][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 141.820387][ T12] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 141.822364][ T25] usb 5-1: USB disconnect, device number 5 [ 141.844782][ T12] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 141.995840][ T5228] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 142.028492][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.065024][ T5228] usb 2-1: config 0 descriptor?? [ 142.382442][ T7070] nlmon0: entered promiscuous mode [ 142.391304][ T7070] vlan2: entered promiscuous mode [ 142.419338][ T7070] nlmon0: left promiscuous mode [ 142.473833][ T7074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.508'. [ 142.483735][ T5228] gs_usb 2-1:0.0: Configuring for 128 interfaces [ 142.490115][ T5228] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 142.528356][ T5228] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 142.701697][ T5228] usb 2-1: USB disconnect, device number 7 [ 143.646704][ T7104] netlink: 36 bytes leftover after parsing attributes in process `syz.0.520'. [ 143.773911][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 143.976959][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 143.993629][ T8] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.023873][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.040884][ T7111] netlink: 56 bytes leftover after parsing attributes in process `syz.2.523'. [ 144.064047][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 144.085595][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.115336][ T7093] loop4: detected capacity change from 0 to 40427 [ 144.139914][ T8] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.152492][ T7093] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 144.165997][ T7089] loop3: detected capacity change from 0 to 40427 [ 144.166251][ T7119] Bluetooth: MGMT ver 1.23 [ 144.189846][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.197467][ T7093] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 144.215531][ T8] usb 2-1: config 0 descriptor?? [ 144.220613][ T7089] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 144.249963][ T7093] F2FS-fs (loop4): invalid crc value [ 144.270171][ T7089] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 144.319398][ T7089] F2FS-fs (loop3): invalid crc value [ 144.331887][ T7089] F2FS-fs (loop3): Found nat_bits in checkpoint [ 144.378467][ T7093] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.425470][ T7089] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 144.442949][ T7089] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 144.534561][ T7093] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 144.551227][ T7093] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 144.564134][ T7089] syz.3.514: attempt to access beyond end of device [ 144.564134][ T7089] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 145.062926][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 145.072071][ T8] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 145.097347][ T8] usb 2-1: USB disconnect, device number 8 [ 146.103620][ T1167] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 146.124542][ T7143] overlayfs: failed to resolve './file0': -2 [ 146.269326][ T5296] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 146.299996][ T5296] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 146.326760][ T1167] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 146.343643][ T1167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.370142][ T1167] usb 3-1: config 0 descriptor?? [ 146.652709][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.532'. [ 146.814415][ T1167] gs_usb 3-1:0.0: Configuring for 128 interfaces [ 146.820805][ T1167] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 146.825394][ T25] IPVS: starting estimator thread 0... [ 146.864590][ T1167] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 146.954446][ T7152] IPVS: using max 22 ests per chain, 52800 per kthread [ 147.028017][ T5228] usb 3-1: USB disconnect, device number 5 [ 147.750129][ T7187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.543'. [ 148.584025][ T2634] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 148.815420][ T2634] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.848204][ T2634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 149.427828][ T2634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 149.439030][ T2634] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.452359][ T2634] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.462763][ T2634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.505017][ T2634] usb 3-1: config 0 descriptor?? [ 149.986947][ T7214] binder: 7209:7214 ioctl c018620c 20000040 returned -22 [ 150.181241][ T2634] usbhid 3-1:0.0: can't add hid device: -71 [ 150.202797][ T2634] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.244118][ T2634] usb 3-1: USB disconnect, device number 6 [ 150.263736][ T8] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 150.463762][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 150.486220][ T8] usb 5-1: config 253 has an invalid interface number: 157 but max is 3 [ 150.512591][ T8] usb 5-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 150.543897][ T8] usb 5-1: config 253 has an invalid interface number: 213 but max is 3 [ 150.564332][ T8] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 150.593672][ T8] usb 5-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 150.633690][ T8] usb 5-1: config 253 has no interface number 0 [ 150.639999][ T8] usb 5-1: config 253 has no interface number 1 [ 150.659614][ T8] usb 5-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 150.671090][ T8] usb 5-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 150.694037][ T8] usb 5-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 150.730445][ T8] usb 5-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 150.771397][ T8] usb 5-1: config 253 interface 157 has no altsetting 0 [ 150.783604][ T8] usb 5-1: config 253 interface 213 has no altsetting 0 [ 150.809701][ T8] usb 5-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 150.840335][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.871213][ T8] usb 5-1: Product: syz [ 150.875575][ T8] usb 5-1: Manufacturer: syz [ 150.880200][ T8] usb 5-1: SerialNumber: syz [ 151.112485][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.125926][ T5228] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 151.146248][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.176810][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 151.195809][ T8] usb 5-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 151.213248][ T8] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 151.230771][ T8] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 151.250548][ T8] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 151.289820][ T8] usb 5-1: Found UVC 0.00 device syz (0b05:1791) [ 151.302420][ T8] usb 5-1: No valid video chain found. [ 151.318970][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 151.335316][ T5228] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 151.346299][ T8] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 151.360799][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.375708][ T8] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 151.381178][ T5228] usb 3-1: config 0 descriptor?? [ 151.408339][ T8] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 151.438116][ T8] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 151.458570][ T8] usb 5-1: USB disconnect, device number 6 [ 151.816166][ T5228] gs_usb 3-1:0.0: Configuring for 128 interfaces [ 151.824324][ T5228] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 151.832998][ T5228] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 152.563943][ T4121] usb 3-1: USB disconnect, device number 7 [ 153.427976][ T7254] binder: 7253:7254 ioctl c018620c 20000040 returned -22 [ 153.573748][ T1167] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.815506][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.827587][ T1167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.840058][ T1167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 153.851349][ T1167] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.864910][ T1167] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.876890][ T1167] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.892751][ T1167] usb 5-1: config 0 descriptor?? [ 154.263019][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 154.507759][ T1167] usbhid 5-1:0.0: can't add hid device: -71 [ 154.523738][ T1167] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 154.544177][ T1167] usb 5-1: USB disconnect, device number 7 [ 155.973878][ T5228] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 156.013634][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.181148][ T5228] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 156.190593][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.334037][ T5228] usb 2-1: config 0 descriptor?? [ 156.340201][ T8] usb 5-1: config 0 has no interfaces? [ 156.346097][ T8] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e350, bcdDevice=f8.fa [ 156.357019][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.372577][ T8] usb 5-1: config 0 descriptor?? [ 156.681753][ T8] usb 5-1: USB disconnect, device number 8 [ 157.376875][ T5228] gs_usb 2-1:0.0: Configuring for 128 interfaces [ 157.383257][ T5228] gs_usb 2-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 157.413675][ T5228] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 158.032615][ T5228] usb 2-1: USB disconnect, device number 9 [ 158.227507][ T7318] loop4: detected capacity change from 0 to 256 [ 159.244194][ T4121] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.689050][ T7334] netlink: 'syz.0.589': attribute type 10 has an invalid length. [ 159.697431][ T4121] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.724409][ T4121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.749401][ T7334] netlink: 40 bytes leftover after parsing attributes in process `syz.0.589'. [ 159.759841][ T4121] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.784062][ T7334] hsr0: entered promiscuous mode [ 159.791452][ T4121] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.794117][ T7334] hsr0: entered allmulticast mode [ 159.805231][ T4121] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.825189][ T7334] hsr_slave_0: entered allmulticast mode [ 159.830886][ T7334] hsr_slave_1: entered allmulticast mode [ 159.836756][ T4121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.847391][ T7334] bridge0: port 3(hsr0) entered blocking state [ 159.857996][ T4121] usb 5-1: config 0 descriptor?? [ 159.876360][ T7334] bridge0: port 3(hsr0) entered disabled state [ 159.892915][ T7334] bridge0: port 3(hsr0) entered blocking state [ 159.899718][ T7334] bridge0: port 3(hsr0) entered forwarding state [ 161.464496][ T4121] usbhid 5-1:0.0: can't add hid device: -71 [ 161.502605][ T4121] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 161.718520][ T4121] usb 5-1: USB disconnect, device number 9 [ 162.024249][ T5228] IPVS: starting estimator thread 0... [ 162.141984][ T7367] loop1: detected capacity change from 0 to 256 [ 162.273889][ T7366] IPVS: using max 16 ests per chain, 38400 per kthread [ 164.826773][ T7360] 9pnet_fd: Insufficient options for proto=fd [ 164.953164][ T7395] loop0: detected capacity change from 0 to 512 [ 164.962375][ T7395] EXT4-fs: quotafile must be on filesystem root [ 165.889365][ T7405] netlink: 32 bytes leftover after parsing attributes in process `syz.1.610'. [ 165.960510][ T7407] capability: warning: `syz.4.611' uses deprecated v2 capabilities in a way that may be insecure [ 166.128922][ T5228] IPVS: starting estimator thread 0... [ 166.206767][ T7416] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 166.236495][ T7415] IPVS: using max 21 ests per chain, 50400 per kthread [ 166.373859][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.430046][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.611'. [ 166.440024][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 166.646453][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.671599][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.703726][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.727388][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.758551][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.183949][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.225701][ T8] usb 1-1: config 0 descriptor?? [ 167.683434][ T7431] loop4: detected capacity change from 0 to 256 [ 168.308316][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 168.323468][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 168.350365][ T8] usb 1-1: USB disconnect, device number 5 [ 168.595356][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 169.936426][ T7465] loop4: detected capacity change from 0 to 128 [ 170.587605][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'. [ 171.773853][ T6987] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.983734][ T6987] usb 3-1: Using ep0 maxpacket: 32 [ 172.001606][ T6987] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 172.049313][ T6987] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.068893][ T6987] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.109815][ T6987] usb 3-1: Product: syz [ 172.125392][ T6987] usb 3-1: Manufacturer: syz [ 172.144987][ T6987] usb 3-1: SerialNumber: syz [ 172.157441][ T6987] usb 3-1: config 0 descriptor?? [ 172.183998][ T7506] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 172.464014][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.480031][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 172.480049][ T29] audit: type=1326 audit(1723804578.262:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda75799b9 code=0x7ffc0000 [ 172.480079][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.500275][ T29] audit: type=1326 audit(1723804578.262:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda75799b9 code=0x7ffc0000 [ 172.603232][ T29] audit: type=1326 audit(1723804578.262:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fbda75799b9 code=0x7ffc0000 [ 172.654391][ T6987] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 172.731814][ T29] audit: type=1326 audit(1723804578.262:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7521 comm="syz.0.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbda75799b9 code=0x7ffc0000 [ 172.791381][ T5277] usb 3-1: USB disconnect, device number 8 [ 172.868782][ T6987] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 172.883139][ T6987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.928768][ T6987] usb 5-1: config 0 descriptor?? [ 174.417374][ T7554] binder: 7552:7554 ioctl c018620c 20000040 returned -22 [ 174.463661][ T2634] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 174.663949][ T2634] usb 3-1: Using ep0 maxpacket: 32 [ 174.674630][ T2634] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 174.695612][ T2634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 174.723663][ T2634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 174.753599][ T2634] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 174.774009][ T2634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.794774][ T2634] usb 3-1: config 0 descriptor?? [ 174.801735][ T7542] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.825253][ T2634] hub 3-1:0.0: USB hub found [ 174.914782][ T5309] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 175.204509][ T2634] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 175.305724][ T5309] usb 1-1: Using ep0 maxpacket: 32 [ 175.314080][ T5309] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.324343][ T5309] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.337435][ T5309] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 175.347164][ T5309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.355396][ T5309] usb 1-1: Product: syz [ 175.359796][ T5309] usb 1-1: Manufacturer: syz [ 175.364623][ T5309] usb 1-1: SerialNumber: syz [ 175.403586][ C0] hrtimer: interrupt took 62889 ns [ 175.422798][ T2634] hid-generic 0003:046D:C314.0005: item fetching failed at offset 0/1 [ 175.435682][ T2634] hid-generic 0003:046D:C314.0005: probe with driver hid-generic failed with error -22 [ 175.483793][ T4121] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 175.581386][ T5309] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 175.664173][ T4121] usb 4-1: Using ep0 maxpacket: 32 [ 175.703280][ T4121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 175.723693][ T4121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 175.747409][ T5309] usb 3-1: USB disconnect, device number 9 [ 175.764806][ T4121] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 175.795622][ T4121] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 175.812493][ T4121] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 175.831612][ T5277] usb 1-1: USB disconnect, device number 6 [ 175.853106][ T4121] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 175.872571][ T4121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.899624][ T4121] usb 4-1: config 0 descriptor?? [ 176.143807][ T5235] Bluetooth: hci2: command 0x0406 tx timeout [ 176.150033][ T5235] Bluetooth: hci4: command 0x0406 tx timeout [ 176.318318][ T7570] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 176.394449][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.220122][ T7570] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 179.294888][ T6987] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -22 [ 179.337886][ T6987] usb 5-1: USB disconnect, device number 10 [ 179.405423][ T7565] usblp0: removed [ 179.505769][ T4121] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 179.564997][ T4121] usb 4-1: USB disconnect, device number 8 [ 179.589711][ T4121] usblp0: removed [ 179.653714][ T1167] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.865195][ T1167] usb 2-1: Using ep0 maxpacket: 8 [ 179.888447][ T1167] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 179.908934][ T1167] usb 2-1: New USB device found, idVendor=0421, idProduct=008f, bcdDevice=ba.de [ 179.928804][ T1167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.945909][ T1167] usb 2-1: config 0 descriptor?? [ 179.969203][ T1167] rndis_host 2-1:0.0: invalid descriptor buffer length [ 179.986984][ T1167] usb 2-1: bad CDC descriptors [ 179.992188][ T1167] cdc_acm 2-1:0.0: invalid descriptor buffer length [ 180.133812][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.188970][ T7584] random: crng reseeded on system resumption [ 180.362490][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 180.372841][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.389922][ T25] usb 1-1: config 0 descriptor?? [ 180.525026][ T7614] Sensor A: ================= START STATUS ================= [ 180.534818][ T7614] Sensor A: Test Pattern: 75% Colorbar [ 180.558142][ T7614] Sensor A: Show Information: All [ 180.563246][ T7614] Sensor A: Vertical Flip: false [ 180.581354][ T7614] Sensor A: Horizontal Flip: false [ 180.600849][ T7621] Sensor A: ================= START STATUS ================= [ 180.607979][ T25] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 180.617129][ T7614] Sensor A: Brightness: 128 [ 180.617190][ T7614] Sensor A: Contrast: 128 [ 180.628355][ T25] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 180.641751][ T7614] [ 180.645835][ T7614] Sensor A: Hue: 0 [ 180.674623][ T25] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 180.676688][ T7614] Sensor A: Saturation: [ 180.681354][ T25] [drm] Initialized udl on minor 2 [ 180.700168][ T4121] usb 2-1: USB disconnect, device number 10 [ 180.727617][ T7614] 128 [ 180.744281][ T7621] Sensor A: Test Pattern: 75% Colorbar [ 180.763795][ T7614] Sensor A: ================== END STATUS ================== [ 180.774297][ T7621] Sensor A: Show Information: All [ 180.794151][ T7621] Sensor A: Vertical Flip: false [ 180.800242][ T7621] Sensor A: Horizontal Flip: false [ 180.809461][ T7621] Sensor A: Brightness: 128 [ 180.814609][ T7621] Sensor A: Contrast: 128 [ 180.821058][ T7621] Sensor A: Hue: 0 [ 180.827670][ T7621] Sensor A: Saturation: 128 [ 180.833330][ T7621] Sensor A: ================== END STATUS ================== [ 180.836372][ T7625] binder: 7624:7625 ioctl c018620c 200005c0 returned -1 [ 180.844858][ T25] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 180.883277][ T25] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 181.141698][ T1167] usb 1-1: USB disconnect, device number 7 [ 181.209767][ T5228] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 181.220789][ T5228] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 181.341493][ T7631] process 'syz.2.682' launched './file0' with NULL argv: empty string added [ 181.363066][ T7631] sctp: [Deprecated]: syz.2.682 (pid 7631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.363066][ T7631] Use struct sctp_sack_info instead [ 182.294418][ T6987] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.163836][ T6987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 183.211407][ T6987] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 183.251586][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.692'. [ 183.256875][ T6987] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 183.261553][ T7655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.692'. [ 183.290507][ T6987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.302717][ T6987] usb 4-1: Product: syz [ 183.308342][ T6987] usb 4-1: Manufacturer: syz [ 183.313178][ T6987] usb 4-1: SerialNumber: syz [ 183.345743][ T6987] usb 4-1: config 0 descriptor?? [ 183.357154][ T7638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 183.389778][ T7638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.257231][ T7638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.284452][ T7638] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.391699][ T29] audit: type=1326 audit(1723804590.162:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7670 comm="syz.4.696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7eb43799b9 code=0x0 [ 184.715186][ T29] audit: type=1326 audit(1723804590.502:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.2.702" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f643799b9 code=0x0 [ 184.795330][ T6987] dm9601: No valid MAC address in EEPROM, using e2:cc:6c:50:40:5a [ 185.393805][ T6987] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 185.443663][ T6987] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, e2:cc:6c:50:40:5a [ 185.488784][ T6987] usb 4-1: USB disconnect, device number 9 [ 185.515899][ T6987] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 186.337170][ T7719] sctp: [Deprecated]: syz.0.712 (pid 7719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 186.337170][ T7719] Use struct sctp_sack_info instead [ 187.027291][ T7722] netlink: 48 bytes leftover after parsing attributes in process `syz.2.716'. [ 188.774454][ T7762] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.729'. [ 190.949458][ T29] audit: type=1326 audit(1723804596.732:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab799b9 code=0x7fc00000 [ 191.005921][ T29] audit: type=1326 audit(1723804596.762:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f779ab799b9 code=0x7fc00000 [ 191.047361][ T29] audit: type=1326 audit(1723804596.772:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.1.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f779ab799b9 code=0x7fc00000 [ 191.594038][ T5228] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 191.801239][ T5228] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 191.884690][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.892729][ T5228] usb 2-1: Product: syz [ 191.906255][ T5228] usb 2-1: Manufacturer: syz [ 191.916214][ T5228] usb 2-1: SerialNumber: syz [ 191.945673][ T5228] usb 2-1: config 0 descriptor?? [ 192.570044][ T5228] dm9601: No valid MAC address in EEPROM, using e2:cc:6c:50:40:5a [ 192.708476][ T7805] loop4: detected capacity change from 0 to 32768 [ 192.779350][ T5228] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 192.816195][ T5228] usb 2-1: USB disconnect, device number 11 [ 194.550062][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.563912][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.336074][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 196.753865][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.770'. [ 197.070469][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 201.273726][ T5308] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 202.909301][ T5308] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 203.149191][ T5308] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 203.198295][ T5308] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 203.232538][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.293979][ T5308] usb 3-1: Product: syz [ 203.310685][ T5308] usb 3-1: Manufacturer: syz [ 203.351278][ T5308] usb 3-1: SerialNumber: syz [ 203.377489][ T5308] usb 3-1: config 0 descriptor?? [ 203.401056][ T7928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.411051][ T7928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.656880][ T7928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 203.703854][ T7928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 204.140273][ T5308] dm9601: No valid MAC address in EEPROM, using e2:cc:6c:50:40:5a [ 204.262287][ T7958] loop3: detected capacity change from 0 to 32768 [ 204.339903][ T5308] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 204.379010][ T5308] usb 3-1: USB disconnect, device number 10 [ 205.916440][ T8004] evm: overlay not supported [ 206.665187][ T29] audit: type=1804 audit(1723804611.712:49): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.813" name="/newroot/186/bus/bus" dev="overlay" ino=997 res=1 errno=0 [ 207.496375][ T5277] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 208.185982][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 208.227819][ T5277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 208.285115][ T5277] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.441503][ T5277] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 208.451814][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.461516][ T5277] usb 2-1: Product: syz [ 208.477046][ T5277] usb 2-1: Manufacturer: syz [ 208.539985][ T5277] usb 2-1: SerialNumber: syz [ 208.595957][ T5277] usb 2-1: config 0 descriptor?? [ 209.498062][ T8012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 209.603819][ T5277] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 209.766991][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 209.824017][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 209.911364][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 209.979414][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 210.431291][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 210.585824][ T7998] usb 2-1: USB disconnect, device number 12 [ 210.591908][ T5277] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 210.619733][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.643797][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 210.658215][ T5277] usb 4-1: config 0 descriptor?? [ 210.664058][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.670119][ T8035] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.685261][ T5277] hub 4-1:0.0: USB hub found [ 210.699240][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=57.47 [ 210.727239][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.736334][ T9] usb 5-1: Product: syz [ 210.740532][ T9] usb 5-1: Manufacturer: syz [ 210.747092][ T9] usb 5-1: SerialNumber: syz [ 210.757515][ T9] usb 5-1: config 0 descriptor?? [ 211.030141][ T7998] usb 5-1: USB disconnect, device number 11 [ 212.187499][ T5277] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 212.996468][ T8075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.836'. [ 213.155785][ T5277] hid-generic 0003:046D:C314.0006: item fetching failed at offset 0/1 [ 213.199695][ T5277] hid-generic 0003:046D:C314.0006: probe with driver hid-generic failed with error -22 [ 213.555959][ T5277] usb 4-1: USB disconnect, device number 10 [ 214.057139][ T8073] loop0: detected capacity change from 0 to 32768 [ 214.082165][ T8073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.835 (8073) [ 214.148059][ T8073] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 214.171316][ T8073] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 214.194143][ T8073] BTRFS info (device loop0): using free-space-tree [ 214.226181][ T29] audit: type=1326 audit(1723804620.012:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.1.844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f779ab799b9 code=0x0 [ 214.657473][ T8112] BTRFS info (device loop0): balance: start -slimit=0..0 [ 214.664917][ T8112] BTRFS info (device loop0): balance: ended with status: 0 [ 215.104661][ T6701] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.071008][ T8119] netlink: 108 bytes leftover after parsing attributes in process `syz.0.845'. [ 217.390114][ T8132] loop4: detected capacity change from 0 to 256 [ 217.443709][ T6721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 217.712418][ T8137] mkiss: ax0: crc mode is auto. [ 217.793746][ T6721] usb 1-1: Using ep0 maxpacket: 16 [ 217.800765][ T6721] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 217.815631][ T6721] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 217.825344][ T6721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.834214][ T6721] usb 1-1: Product: syz [ 217.866964][ T6721] usb 1-1: Manufacturer: syz [ 217.872066][ T6721] usb 1-1: SerialNumber: syz [ 217.880161][ T8139] fuse: Bad value for 'fd' [ 217.947829][ T6721] usb 1-1: config 0 descriptor?? [ 217.988180][ T6721] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 218.891978][ T6721] usb 1-1: Detected FT232R [ 219.082836][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.158504][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.209139][ T6721] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 219.222492][ T8149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.857'. [ 219.235990][ T6721] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 219.269905][ T6721] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 219.294040][ T6721] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 219.343506][ T6721] usb 1-1: USB disconnect, device number 8 [ 219.377429][ T6721] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 219.416622][ T6721] ftdi_sio 1-1:0.0: device disconnected [ 219.680636][ T8164] mmap: syz.3.862 (8164) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.953323][ T8171] loop1: detected capacity change from 0 to 256 [ 220.498354][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 220.717668][ T8191] loop1: detected capacity change from 0 to 512 [ 220.753831][ T8191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.785820][ T8191] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.981257][ T8191] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.872: Directory hole found for htree leaf block 0 [ 221.812559][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.327332][ T8232] loop0: detected capacity change from 0 to 256 [ 223.984956][ T8245] netlink: 40 bytes leftover after parsing attributes in process `syz.4.889'. [ 224.234970][ T5228] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 224.522092][ T5228] usb 4-1: Using ep0 maxpacket: 8 [ 224.603926][ T5228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.815407][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 224.971496][ T8235] loop1: detected capacity change from 0 to 32768 [ 224.990991][ T8235] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.884 (8235) [ 224.999725][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 225.014948][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 225.025322][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 225.055081][ T5228] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 225.087305][ T8235] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.107067][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 225.134583][ T8235] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 225.143318][ T8235] BTRFS info (device loop1): using free-space-tree [ 225.150661][ T5228] usb 4-1: Product: syz [ 225.156424][ T5228] usb 4-1: Manufacturer: syz [ 225.161051][ T5228] usb 4-1: SerialNumber: syz [ 225.192653][ T5228] usb 4-1: config 0 descriptor?? [ 225.447870][ T8279] loop4: detected capacity change from 0 to 2048 [ 225.456475][ T5228] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 225.469885][ T5228] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 225.673663][ T5228] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 225.693267][ T8279] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.706638][ T5228] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 225.726794][ T8235] BTRFS info (device loop1): balance: start -slimit=0..0 [ 225.733820][ T5228] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 225.734012][ T8235] BTRFS info (device loop1): balance: ended with status: 0 [ 225.911175][ T5234] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.966241][ T5228] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 226.779248][ T7998] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 227.006680][ T7998] usb 5-1: Using ep0 maxpacket: 32 [ 227.044933][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 227.063139][ T7998] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43 [ 227.191038][ T7998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.339086][ T7998] usb 5-1: Product: syz [ 227.408321][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.436145][ T7998] usb 5-1: Manufacturer: syz [ 227.504757][ T7998] usb 5-1: SerialNumber: syz [ 227.530597][ T5228] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 227.550704][ T5228] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 227.550705][ T9] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.550734][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 227.582979][ T7998] usb 5-1: config 0 descriptor?? [ 227.595289][ T5228] usb 4-1: USB disconnect, device number 11 [ 227.613814][ T7998] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG [ 227.697405][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.713219][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.730018][ T9] usb 3-1: SerialNumber: syz [ 227.746281][ T8303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.902'. [ 227.981254][ T8305] loop0: detected capacity change from 0 to 256 [ 229.525952][ T9] usb 3-1: can't set config #1, error -71 [ 229.554051][ T9] usb 3-1: USB disconnect, device number 11 [ 229.572516][ T29] audit: type=1326 audit(1723804635.352:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8319 comm="syz.3.907" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29765799b9 code=0x0 [ 229.647224][ T25] usb 5-1: USB disconnect, device number 12 [ 230.134311][ T6741] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.255031][ T8340] loop3: detected capacity change from 0 to 256 [ 231.638594][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.2.914'. [ 231.876907][ T8345] syzkaller0: entered allmulticast mode [ 232.059727][ T8355] mkiss: ax0: crc mode is auto. [ 233.079644][ T8332] loop4: detected capacity change from 0 to 32768 [ 233.226622][ T8332] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 233.353717][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 233.466719][ T8332] XFS (loop4): Ending clean mount [ 233.581683][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.623390][ T9] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.626877][ T8332] XFS (loop4): Quotacheck needed: Please wait. [ 233.650043][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 233.701186][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.733934][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.760957][ T9] usb 3-1: SerialNumber: syz [ 233.847031][ T9] usb 3-1: bad CDC descriptors [ 234.037784][ T8332] XFS (loop4): Quotacheck: Done. [ 234.102077][ T6741] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 235.280170][ T8378] loop4: detected capacity change from 0 to 32768 [ 235.390710][ T8378] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 235.509740][ T8378] XFS (loop4): Ending clean mount [ 235.623041][ T6741] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 235.900558][ T8388] netlink: 'syz.4.924': attribute type 11 has an invalid length. [ 235.909473][ T8388] netlink: 80220 bytes leftover after parsing attributes in process `syz.4.924'. [ 236.101795][ T9] usb 3-1: USB disconnect, device number 12 [ 236.274045][ T29] audit: type=1326 audit(1723804642.052:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8389 comm="syz.2.925" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f643799b9 code=0x0 [ 238.739659][ T8419] netlink: 'syz.1.937': attribute type 11 has an invalid length. [ 238.768123][ T8419] netlink: 80220 bytes leftover after parsing attributes in process `syz.1.937'. [ 238.842850][ T8417] loop3: detected capacity change from 0 to 256 [ 240.581128][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.949'. [ 240.642002][ T8456] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.651331][ T8456] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.660141][ T8456] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.669008][ T8456] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.669063][ T8460] netlink: 'syz.4.951': attribute type 11 has an invalid length. [ 240.723803][ T8460] netlink: 80220 bytes leftover after parsing attributes in process `syz.4.951'. [ 240.833685][ T7998] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 240.895806][ T8458] loop1: detected capacity change from 0 to 256 [ 241.225710][ T7998] usb 4-1: Using ep0 maxpacket: 16 [ 241.296197][ T7998] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 241.527451][ T7998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 241.740741][ T7998] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 241.786249][ T7998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.808563][ T8474] loop4: detected capacity change from 0 to 128 [ 241.854356][ T7998] usb 4-1: Product: syz [ 241.858583][ T7998] usb 4-1: Manufacturer: syz [ 241.863198][ T7998] usb 4-1: SerialNumber: syz [ 241.892587][ T7998] usb 4-1: config 0 descriptor?? [ 242.114818][ T7998] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.124238][ T7998] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 243.223775][ T5308] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 243.429053][ T5308] usb 1-1: Using ep0 maxpacket: 16 [ 243.497776][ T5308] usb 1-1: config 253 has an invalid interface number: 157 but max is 3 [ 243.600505][ T5308] usb 1-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 243.699289][ T5308] usb 1-1: config 253 has an invalid interface number: 213 but max is 3 [ 243.794242][ T5308] usb 1-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 243.819163][ T5308] usb 1-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 243.850197][ T5308] usb 1-1: config 253 has no interface number 0 [ 243.865825][ T7998] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 243.873704][ T5308] usb 1-1: config 253 has no interface number 1 [ 243.880014][ T5308] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 243.905090][ T7998] em28xx 4-1:0.0: Config register raw data: 0x41 [ 243.933605][ T5308] usb 1-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 243.973146][ T5308] usb 1-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 244.009884][ T5308] usb 1-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 244.033937][ T5308] usb 1-1: config 253 interface 157 has no altsetting 0 [ 244.051170][ T5308] usb 1-1: config 253 interface 213 has no altsetting 0 [ 244.065696][ T5308] usb 1-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 244.079093][ T5308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.123684][ T5308] usb 1-1: Product: syz [ 244.138596][ T5308] usb 1-1: Manufacturer: syz [ 244.143240][ T5308] usb 1-1: SerialNumber: syz [ 244.801866][ T8488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.037882][ T8488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.097462][ T5308] r8712u: register rtl8712_netdev_ops to netdev_ops [ 245.113633][ T5308] usb 1-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 245.129232][ T5308] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 245.135995][ T5308] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 245.143486][ T5308] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 245.180391][ T5308] usb 1-1: Found UVC 0.00 device syz (0b05:1791) [ 245.188090][ T5308] usb 1-1: No valid video chain found. [ 245.278115][ T5308] r8712u: register rtl8712_netdev_ops to netdev_ops [ 245.286305][ T5308] usb 1-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 245.296815][ T5308] usb 1-1: r8712u: Boot from EFUSE: Autoload Failed [ 245.303445][ T5308] usb 1-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 245.311125][ T5308] usb 1-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 245.331117][ T5308] usb 1-1: USB disconnect, device number 9 [ 245.343771][ T4121] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 245.451145][ T8] usb 4-1: USB disconnect, device number 12 [ 245.476840][ T8] em28xx 4-1:0.0: Disconnecting em28xx [ 245.524297][ T8] em28xx 4-1:0.0: Freeing device [ 245.713850][ T4121] usb 2-1: Using ep0 maxpacket: 16 [ 246.177533][ T4121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.200342][ T4121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.210943][ T4121] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 246.220482][ T4121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.256728][ T4121] usb 2-1: config 0 descriptor?? [ 247.356983][ T4121] hid-led 0003:1D34:0004.0007: unknown main item tag 0xd [ 247.633716][ T7998] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 247.773848][ T5308] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 247.837455][ T7998] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.864248][ T7998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.886922][ T7998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.903353][ T7998] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.953090][ T7998] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.969178][ T7998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.981584][ T5308] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.997830][ T5308] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.013139][ T5308] usb 1-1: config 1 interface 0 has no altsetting 0 [ 248.020491][ T7998] usb 4-1: config 0 descriptor?? [ 248.025781][ T5308] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.035343][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 248.043706][ T5308] usb 1-1: SerialNumber: syz [ 248.057452][ T5308] usb 1-1: bad CDC descriptors [ 248.063716][ T4621] Bluetooth: hci1: command 0x0406 tx timeout [ 248.143828][ T5235] Bluetooth: hci3: command 0x0406 tx timeout [ 248.143972][ T4621] Bluetooth: hci0: command 0x0406 tx timeout [ 248.257570][ T9] usb 1-1: USB disconnect, device number 10 [ 248.641592][ T7998] usbhid 4-1:0.0: can't add hid device: -71 [ 248.658467][ T7998] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 248.682797][ T7998] usb 4-1: USB disconnect, device number 13 [ 248.830736][ T4121] hid-led 0003:1D34:0004.0007: probe with driver hid-led failed with error -71 [ 248.880981][ T4121] usb 2-1: USB disconnect, device number 13 [ 250.096788][ T8553] fuse: Bad value for 'fd' [ 250.573211][ T6721] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 251.029623][ T6721] usb 4-1: Using ep0 maxpacket: 16 [ 251.037847][ T6721] usb 4-1: config 253 has an invalid interface number: 157 but max is 3 [ 251.046540][ T6721] usb 4-1: config 253 contains an unexpected descriptor of type 0x2, skipping [ 251.056998][ T6721] usb 4-1: config 253 has an invalid interface number: 213 but max is 3 [ 251.067299][ T6721] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 251.083603][ T6721] usb 4-1: config 253 has 2 interfaces, different from the descriptor's value: 4 [ 251.092761][ T6721] usb 4-1: config 253 has no interface number 0 [ 251.110672][ T6721] usb 4-1: config 253 has no interface number 1 [ 251.126412][ T4121] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 251.518585][ T6721] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 251.530012][ T6721] usb 4-1: config 253 interface 157 altsetting 4 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 251.541247][ T6721] usb 4-1: config 253 interface 157 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 251.552394][ T6721] usb 4-1: config 253 interface 213 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 251.990549][ T6721] usb 4-1: config 253 interface 157 has no altsetting 0 [ 252.016469][ T6721] usb 4-1: config 253 interface 213 has no altsetting 0 [ 252.032743][ T6721] usb 4-1: New USB device found, idVendor=0b05, idProduct=1791, bcdDevice= 4.57 [ 252.043298][ T6721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.051666][ T6721] usb 4-1: Product: syz [ 252.056339][ T6721] usb 4-1: Manufacturer: syz [ 252.061073][ T6721] usb 4-1: SerialNumber: syz [ 252.323418][ T4121] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 252.333330][ T4121] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 252.364101][ T4121] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 252.373273][ T4121] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.444053][ T4121] usb 5-1: Product: syz [ 252.465640][ T4121] usb 5-1: Manufacturer: syz [ 252.483731][ T4121] usb 5-1: SerialNumber: syz [ 252.509169][ T8574] netlink: 108 bytes leftover after parsing attributes in process `syz.1.987'. [ 252.515388][ T8548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.533412][ T4121] usb 5-1: config 0 descriptor?? [ 252.554781][ T8558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.562846][ T8548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.573819][ T8558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.597313][ T6721] r8712u: register rtl8712_netdev_ops to netdev_ops [ 252.613766][ T6721] usb 4-1: r8712u: USB_SPEED_HIGH with 4 endpoints [ 252.630273][ T6721] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 252.647481][ T6721] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 252.656305][ T6721] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 252.676677][ T6721] usb 4-1: Found UVC 0.00 device syz (0b05:1791) [ 252.683075][ T6721] usb 4-1: No valid video chain found. [ 252.690789][ T6721] r8712u: register rtl8712_netdev_ops to netdev_ops [ 252.697737][ T6721] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 252.706709][ T6721] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 252.713419][ T6721] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 252.721729][ T6721] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 252.739122][ T6721] usb 4-1: USB disconnect, device number 14 [ 252.807671][ T8558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.823744][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 252.823781][ T8558] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.893851][ T7998] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 252.944739][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 253.003685][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 253.010460][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 253.022609][ T8] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 253.031963][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.042390][ T8] usb 2-1: Product: syz [ 253.046689][ T8] usb 2-1: Manufacturer: syz [ 253.051310][ T8] usb 2-1: SerialNumber: syz [ 253.058050][ T8] usb 2-1: config 0 descriptor?? [ 253.071419][ T8] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 253.083155][ T8] usb 2-1: Detected FT232R [ 253.093777][ T7998] usb 3-1: Using ep0 maxpacket: 32 [ 253.111015][ T7998] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 253.121507][ T7998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.141508][ T7998] usb 3-1: config 0 descriptor?? [ 253.161924][ T7998] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 253.243464][ T4121] Error reading MAC address [ 253.253866][ T5277] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 253.273507][ T4121] usb 5-1: USB disconnect, device number 13 [ 253.309321][ T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 253.328277][ T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 253.340054][ T8] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 253.353690][ T8] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 253.383096][ T8] usb 2-1: USB disconnect, device number 14 [ 253.410735][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 253.432808][ T8] ftdi_sio 2-1:0.0: device disconnected [ 253.465435][ T5277] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.478380][ T5277] usb 1-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.492634][ T5277] usb 1-1: config 1 interface 0 has no altsetting 0 [ 253.502115][ T5277] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.512755][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.521234][ T5277] usb 1-1: SerialNumber: syz [ 253.557156][ T5277] usb 1-1: bad CDC descriptors [ 253.777807][ T5277] usb 1-1: USB disconnect, device number 11 [ 254.019163][ T4121] usb 3-1: USB disconnect, device number 13 [ 255.139241][ T8614] mkiss: ax0: crc mode is auto. [ 255.809615][ T8592] loop4: detected capacity change from 0 to 32768 [ 255.818711][ T8592] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.993 (8592) [ 255.871746][ T8592] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 255.991752][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.998210][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.004028][ T8592] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 256.043915][ T8592] BTRFS info (device loop4): using free-space-tree [ 256.173666][ T6721] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.534370][ T6721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 256.679645][ T6721] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 257.010194][ T6721] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 257.095835][ T6721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.142936][ T6721] usb 2-1: Product: syz [ 257.193040][ T6721] usb 2-1: Manufacturer: syz [ 257.219299][ T6721] usb 2-1: SerialNumber: syz [ 257.371749][ T6721] usb 2-1: config 0 descriptor?? [ 257.384616][ T6741] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 257.388740][ T8647] openvswitch: netlink: Message has 16 unknown bytes. [ 257.650137][ T8618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 257.682542][ T8618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.023725][ T8618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 258.035868][ T8618] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.114600][ T6721] Error reading MAC address [ 259.124188][ T6721] usb 2-1: USB disconnect, device number 15 [ 264.206996][ T8663] loop1: detected capacity change from 0 to 256 [ 265.005413][ T8674] mkiss: ax0: crc mode is auto. [ 267.374288][ T5235] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 267.385636][ T5235] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 267.396109][ T5235] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 267.411144][ T5235] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 267.825812][ T5235] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 267.838471][ T5235] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 270.001528][ T5235] Bluetooth: hci6: command tx timeout [ 271.142950][ T8713] loop3: detected capacity change from 0 to 256 [ 271.351613][ T8692] chnl_net:caif_netlink_parms(): no params data found [ 271.376787][ T8722] loop1: detected capacity change from 0 to 128 [ 272.141753][ T5235] Bluetooth: hci6: command tx timeout [ 272.696561][ T8692] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.726100][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.733364][ T8692] bridge_slave_0: entered allmulticast mode [ 272.770269][ T8692] bridge_slave_0: entered promiscuous mode [ 272.778296][ T8704] coredump: 273(syz.4.1026): interrupted: fatal signal pending [ 272.798108][ T8704] coredump: 273(syz.4.1026): written to core: VMAs: 34, size 80515072; core: 15014538 bytes, pos 15470592 [ 272.837859][ T8692] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.856499][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.960073][ T8692] bridge_slave_1: entered allmulticast mode [ 273.079347][ T8692] bridge_slave_1: entered promiscuous mode [ 273.837302][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 273.873911][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.905573][ T30] INFO: task syz-executor:5226 blocked for more than 143 seconds. [ 273.933682][ T30] Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 273.948570][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 273.972847][ T30] task:syz-executor state:D stack:19792 pid:5226 tgid:5226 ppid:1 flags:0x00004006 [ 274.013699][ T30] Call Trace: [ 274.017031][ T30] [ 274.019981][ T30] __schedule+0x17ff/0x4ad0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 274.170520][ T30] ? __pfx___schedule+0x10/0x10 [ 274.587243][ T5235] Bluetooth: hci6: command tx timeout [ 274.911918][ T30] ? __pfx_lock_release+0x10/0x10 [ 274.919535][ T30] ? schedule+0x90/0x320 [ 274.936074][ T30] schedule+0x14b/0x320 [ 274.940285][ T30] schedule_timeout+0xb0/0x310 [ 274.993666][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 274.999157][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.013670][ T30] ? wait_for_completion+0x2fe/0x620 [ 275.019026][ T30] ? wait_for_completion+0x2fe/0x620 [ 275.035332][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 275.040584][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 275.054336][ T30] ? wait_for_completion+0x2fe/0x620 [ 275.059679][ T30] wait_for_completion+0x355/0x620 [ 275.083658][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 275.089389][ T30] ? kthread_unpark+0x17b/0x210 [ 275.094633][ T30] kthread_stop+0x19e/0x640 [ 275.099167][ T30] ext4_stop_mmpd+0x47/0xb0 [ 275.104085][ T30] ext4_put_super+0x753/0xd50 [ 275.108787][ T30] ? __pfx_ext4_put_super+0x10/0x10 [ 275.114313][ T30] generic_shutdown_super+0x139/0x2d0 [ 275.121064][ T30] kill_block_super+0x44/0x90 [ 275.126098][ T30] ext4_kill_sb+0x68/0xa0 [ 275.130456][ T30] deactivate_locked_super+0xc4/0x130 [ 275.136213][ T30] cleanup_mnt+0x41f/0x4b0 [ 275.140652][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 275.146473][ T30] task_work_run+0x24f/0x310 [ 275.151103][ T30] ? __pfx_task_work_run+0x10/0x10 [ 275.157010][ T30] ? __x64_sys_umount+0x123/0x170 [ 275.162082][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 275.169169][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 275.177256][ T30] do_syscall_64+0x100/0x230 [ 275.181877][ T30] ? clear_bhb_loop+0x35/0x90 [ 275.187244][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.193185][ T30] RIP: 0033:0x7f784957ace7 [ 275.198180][ T30] RSP: 002b:00007fff624b0e48 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 275.210278][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f784957ace7 [ 275.227725][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff624b0f00 [ 275.239546][ T30] RBP: 00007fff624b0f00 R08: 0000000000000000 R09: 0000000000000000 [ 275.248007][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff624b1f80 [ 275.264025][ T30] R13: 00007f78495e7764 R14: 000000000001cbc9 R15: 00007fff624b1fc0 [ 275.272064][ T30] [ 275.283463][ T30] INFO: task kmmpd-loop2:6634 blocked for more than 144 seconds. [ 275.301514][ T30] Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 275.308817][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 275.318136][ T30] task:kmmpd-loop2 state:D stack:26776 pid:6634 tgid:6634 ppid:2 flags:0x00024000 [ 275.330230][ T30] Call Trace: [ 275.333924][ T30] [ 275.336902][ T30] __schedule+0x17ff/0x4ad0 [ 275.341449][ T30] ? __pfx___schedule+0x10/0x10 [ 275.346974][ T30] ? __pfx_lock_release+0x10/0x10 [ 275.352025][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 275.358594][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.365380][ T30] ? schedule+0x90/0x320 [ 275.369661][ T30] schedule+0x14b/0x320 [ 275.375876][ T30] ? percpu_rwsem_wait+0x34c/0x450 [ 275.381007][ T30] percpu_rwsem_wait+0x3c2/0x450 [ 275.386904][ T30] ? __pfx_percpu_rwsem_wait+0x10/0x10 [ 275.392400][ T30] ? __pfx_percpu_rwsem_wake_function+0x10/0x10 [ 275.398826][ T30] ? rcu_is_watching+0x15/0xb0 [ 275.405660][ T30] __percpu_down_read+0xee/0x130 [ 275.410641][ T30] ? kmmpd+0x26d/0xaa0 [ 275.414803][ T30] write_mmp_block+0x2f2/0x3a0 [ 275.419573][ T30] kmmpd+0x26d/0xaa0 [ 275.425150][ T30] ? __pfx_kmmpd+0x10/0x10 [ 275.429597][ T30] ? __kthread_parkme+0x169/0x1d0 [ 275.434702][ T30] ? __pfx_kmmpd+0x10/0x10 [ 275.439108][ T30] kthread+0x2f0/0x390 [ 275.443159][ T30] ? __pfx_kmmpd+0x10/0x10 [ 275.447726][ T30] ? __pfx_kthread+0x10/0x10 [ 275.452330][ T30] ret_from_fork+0x4b/0x80 [ 275.456857][ T30] ? __pfx_kthread+0x10/0x10 [ 275.461451][ T30] ret_from_fork_asm+0x1a/0x30 [ 275.466392][ T30] [ 275.469454][ T30] [ 275.469454][ T30] Showing all locks held in the system: [ 275.579161][ T30] 6 locks held by kworker/u8:0/11: [ 275.594164][ T30] 3 locks held by kworker/u8:1/12: [ 275.613689][ T30] 1 lock held by khungtaskd/30: [ 275.618580][ T30] #0: ffffffff8e939720 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 275.658344][ T30] 2 locks held by getty/4978: [ 275.663075][ T30] #0: ffff88802b7cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 275.674578][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 275.693667][ T30] 1 lock held by syz-executor/5226: [ 275.703645][ T30] #0: ffff88801f56e0e0 (&type->s_umount_key#33){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 275.723644][ T30] 1 lock held by kmmpd-loop2/6634: [ 275.747817][ T30] #0: ffff88801f56e420 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x26d/0xaa0 [ 275.784747][ T30] 3 locks held by kworker/u8:11/8658: [ 275.790162][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 275.853682][ T30] #1: ffffc90002527d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 275.875705][ T30] #2: ffffffff8fc90548 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 275.892022][ T30] 3 locks held by syz.1.1030/8733: [ 275.897330][ T30] #0: ffff888023ebcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 275.907410][ T30] #1: ffff888023ebc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 275.917264][ T30] #2: ffffffff8fdfc468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 275.927428][ T30] 3 locks held by syz.2.1035/8743: [ 275.932544][ T30] #0: ffff888079514d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 275.944161][ T30] #1: ffff888079514078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 275.954333][ T30] #2: ffffffff8fdfc468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 275.964675][ T30] 2 locks held by syz.4.1034/8747: [ 275.969905][ T30] #0: ffffffff8fc90548 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 275.979432][ T30] #1: ffffffff8e93ecb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 275.994779][ T30] [ 276.002022][ T30] ============================================= [ 276.002022][ T30] [ 276.024751][ T30] NMI backtrace for cpu 0 [ 276.029138][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 276.039156][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 276.049231][ T30] Call Trace: [ 276.052519][ T30] [ 276.055458][ T30] dump_stack_lvl+0x241/0x360 [ 276.060168][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.065391][ T30] ? __pfx__printk+0x10/0x10 [ 276.069999][ T30] ? vprintk_emit+0x667/0x7c0 [ 276.074693][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 276.079732][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 276.084688][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 276.090157][ T30] ? _printk+0xd5/0x120 [ 276.094324][ T30] ? __pfx__printk+0x10/0x10 [ 276.098930][ T30] ? __wake_up_klogd+0xcc/0x110 [ 276.103801][ T30] ? __pfx__printk+0x10/0x10 [ 276.108409][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 276.113450][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 276.119451][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 276.125446][ T30] watchdog+0xff4/0x1040 [ 276.129694][ T30] ? watchdog+0x1ea/0x1040 [ 276.134101][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.138770][ T30] kthread+0x2f0/0x390 [ 276.142841][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.147506][ T30] ? __pfx_kthread+0x10/0x10 [ 276.152079][ T30] ret_from_fork+0x4b/0x80 [ 276.156482][ T30] ? __pfx_kthread+0x10/0x10 [ 276.161051][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.165812][ T30] [ 276.169723][ T30] Sending NMI from CPU 0 to CPUs 1: [ 276.175373][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 276.179120][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 276.194123][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240816-syzkaller #0 [ 276.204106][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 276.214156][ T30] Call Trace: [ 276.217434][ T30] [ 276.220349][ T30] dump_stack_lvl+0x241/0x360 [ 276.225015][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.230195][ T30] ? __pfx__printk+0x10/0x10 [ 276.234767][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.240735][ T30] ? vscnprintf+0x5d/0x90 [ 276.245053][ T30] panic+0x349/0x870 [ 276.248940][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 276.255080][ T30] ? __pfx_panic+0x10/0x10 [ 276.259563][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 276.264934][ T30] ? __irq_work_queue_local+0x137/0x410 [ 276.270485][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 276.275861][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 276.282003][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 276.288141][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 276.294281][ T30] watchdog+0x1033/0x1040 [ 276.298593][ T30] ? watchdog+0x1ea/0x1040 [ 276.302993][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.307645][ T30] kthread+0x2f0/0x390 [ 276.311693][ T30] ? __pfx_watchdog+0x10/0x10 [ 276.316347][ T30] ? __pfx_kthread+0x10/0x10 [ 276.320924][ T30] ret_from_fork+0x4b/0x80 [ 276.325337][ T30] ? __pfx_kthread+0x10/0x10 [ 276.329931][ T30] ret_from_fork_asm+0x1a/0x30 [ 276.334692][ T30] [ 276.337957][ T30] Kernel Offset: disabled [ 276.342270][ T30] Rebooting in 86400 seconds..