last executing test programs: 12m36.748390729s ago: executing program 3 (id=13): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0xb, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000) request_key(0x0, 0x0, &(0x7f0000001940)='./binderfs/binder0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x8044) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000040)={'hsr0\x00', @remote}) 12m33.641946522s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000000)='./file1/file0\x00', 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000002c0)='./file0\x00') 12m32.905202603s ago: executing program 3 (id=19): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x9, @empty, 0x37a4}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000300)=""/212, 0xd4) mount$tmpfs(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) 12m30.717707316s ago: executing program 3 (id=24): socket$nl_route(0x10, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x80800) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000b80)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 12m23.11756759s ago: executing program 3 (id=30): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 12m21.092405731s ago: executing program 3 (id=33): setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 12m18.347210806s ago: executing program 4 (id=39): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000000), 0x8) 12m15.567257205s ago: executing program 4 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 12m13.161466143s ago: executing program 4 (id=45): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 12m11.806015608s ago: executing program 4 (id=48): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fanotify_init(0x0, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x41, 0x8000038, r5, 0x0) fanotify_mark(r4, 0x80, 0x20, r5, 0x0) 12m9.678282101s ago: executing program 4 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x81c0, 0x0) 12m5.795630078s ago: executing program 32 (id=33): setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 11m58.756880698s ago: executing program 4 (id=63): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01"], 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x35, &(0x7f00000001c0)={0x5, 0xf, 0x35, 0x1, [@generic={0x30, 0x10, 0x4, "21a6162e974f045ebedcb2d991ecb4418f98bcf3513d6520a8015fb63c50f9317929e3518a0844ecac1a84137f"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x0, 0x0}, {0x2, &(0x7f00000006c0)=@string={0x2}}]}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 11m41.778605186s ago: executing program 33 (id=63): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01"], 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x35, &(0x7f00000001c0)={0x5, 0xf, 0x35, 0x1, [@generic={0x30, 0x10, 0x4, "21a6162e974f045ebedcb2d991ecb4418f98bcf3513d6520a8015fb63c50f9317929e3518a0844ecac1a84137f"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2401}}, {0x0, 0x0}, {0x2, &(0x7f00000006c0)=@string={0x2}}]}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 11m4.659592376s ago: executing program 2 (id=116): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x1b) syz_open_dev$sndpcmp(0x0, 0xb, 0x0) syz_pidfd_open(0x0, 0x0) futex(0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=0x1, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000780)={{0x5, 0x0, 0x0, 0xfffffffd, 'syz1\x00'}, 0x0, [0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x8, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x2, 0x100000, 0x10000, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x274, 0x0, 0x800, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000001, 0x0, 0x2, 0x0, 0x80000000]}) 10m59.163225784s ago: executing program 2 (id=122): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) memfd_secret(0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x50, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x50}}, 0x40000) 10m55.882254275s ago: executing program 2 (id=125): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)="5338a3848b25e258a25f9dae13edecbd5949e59b", 0x14}], 0x1}}], 0x1, 0x20008000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8001, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x40000) 10m54.389571526s ago: executing program 2 (id=127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x1, 0x0) r0 = openat$smackfs_access(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$smackfs_access(r0, 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r1, 0xc6c3, 0x2001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f00000005c0)={0x9, {"a2e3ad21ed0d52f91b25090947f70e06d038e7ff7fc6e5539b5b43078b089b3b073172090890e0878f0e1ac6e7049b3371959b6e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6b922f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa0b9d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c71568f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897f3411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2de8a50ddefeb12c46342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f02f4cded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000040)) syz_open_dev$midi(0x0, 0x10001, 0x8000) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x5, 0x7, 0x5, 0x3, 0x9f, 0x9, 0x1}, 0xc) 10m53.139395582s ago: executing program 2 (id=129): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) userfaultfd(0x80001) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) openat$ttyS3(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 10m49.798508242s ago: executing program 2 (id=132): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) recvfrom$packet(r0, 0x0, 0x0, 0x10041, &(0x7f0000000100)={0x11, 0x1a, r1, 0x1, 0x5, 0x6, @broadcast}, 0x14) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004) recvmmsg(r7, 0x0, 0x0, 0x2021, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000"], 0x123) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 10m34.025164758s ago: executing program 34 (id=132): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x94) recvfrom$packet(r0, 0x0, 0x0, 0x10041, &(0x7f0000000100)={0x11, 0x1a, r1, 0x1, 0x5, 0x6, @broadcast}, 0x14) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffe0000}, 0x1c) recvmmsg(r4, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {&(0x7f00000020c0)=""/4096, 0x1000}], 0x3}, 0x80000001}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmsg$alg(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4008011}, 0x4040004) recvmmsg(r7, 0x0, 0x0, 0x2021, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000002040)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d00200800e911ff20010000000000"], 0x123) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 9m36.770131187s ago: executing program 0 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000004fbff0008"], 0x50) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) syz_emit_ethernet(0x86, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_pidfd_open(r4, 0x0) process_mrelease(r5, 0x700000000000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_io_uring_setup(0x7605, &(0x7f0000000200)={0x0, 0xd094, 0x10100, 0x83, 0xaa}, 0x0, &(0x7f0000000140)) eventfd2(0x6, 0x80000) io_uring_enter(r6, 0x474a, 0xdfffeff8, 0x48, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000040)) io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x0, 0xfffffffc, 0xffffffff}) 9m35.716640845s ago: executing program 0 (id=200): creat(&(0x7f00000001c0)='./file0\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d300000000000"], 0xfc}}, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x40) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x0, &(0x7f0000000140), 0x0, 0x4) ioctl$UFFDIO_CONTINUE(r3, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 9m34.791655937s ago: executing program 0 (id=202): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x12023, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000480)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 9m32.959552276s ago: executing program 0 (id=204): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 9m31.384319043s ago: executing program 0 (id=205): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48c00, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x8) lseek(r1, 0x5, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x3) ioctl$TCFLSH(r0, 0x540b, 0xfdfd) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) close(r2) recvmsg(0xffffffffffffffff, 0x0, 0x100) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) getpid() r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) 9m30.461233105s ago: executing program 0 (id=206): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x400c744d, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) shutdown(r6, 0x1) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 9m14.619130034s ago: executing program 35 (id=206): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xa2, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x400c744d, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56"}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) shutdown(r6, 0x1) bind$alg(r5, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 8.337248334s ago: executing program 5 (id=1289): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f00000000c0)={0x0, 0x86f7, 0x10100, 0x0, 0x1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x26}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 8.146857293s ago: executing program 5 (id=1292): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESDEC], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040881) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, 0x0, &(0x7f0000000000)='devpts\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x10400, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e24,posixacl,smackfsroot=+%,rootcontext=user_u,measure,permit_directio,fowner>', @ANYRESDEC=r4, @ANYBLOB='\x00']) 6.766756834s ago: executing program 5 (id=1298): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0xff, 0xf9, 0xe4, 0x40, 0x3, 0x0, 0x2d, 0x2}, {0x1000, 0xeeee6001, 0xf, 0x0, 0x8, 0x5, 0x7d, 0x9e, 0x5, 0x3, 0x1, 0x4}, {0xffffffff, 0xb000, 0xa, 0x5, 0x83, 0x4, 0x4, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x6000, 0xffef3000, 0xa, 0x6, 0x4, 0x2, 0xe0, 0x4, 0x8, 0x6, 0xe}, {0xeeef0000, 0xd000, 0x0, 0x3, 0x15, 0x80, 0xab, 0x9, 0xf, 0x82, 0xf7, 0x83}, {0x1000, 0x8080000, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1}, {0x3000, 0x8000000, 0xf, 0x85, 0x7, 0x5, 0x7, 0x1, 0x1, 0x81, 0xff, 0x70}, {0x100000, 0x6000, 0xf, 0x5, 0x0, 0x7, 0x1, 0x34, 0x2, 0x3, 0xb0, 0x9}, {0x8000000, 0x1}, {0x4, 0x7}, 0x80000031, 0x0, 0xdddd1000, 0x2010, 0x3, 0x2001, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) 5.061912357s ago: executing program 7 (id=1308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x1}) 4.939045834s ago: executing program 5 (id=1309): r0 = syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) tkill(r0, 0x12) tkill(r0, 0x12) 4.714510416s ago: executing program 7 (id=1313): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 4.626288853s ago: executing program 5 (id=1315): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x6) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x205e) 3.239595554s ago: executing program 6 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x4, @multicast1}}, 0xffff}, 0x90) 3.145873876s ago: executing program 5 (id=1320): socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b22, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0) 2.983110571s ago: executing program 8 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d06, 0x0, 0xb}]}) 2.799124521s ago: executing program 6 (id=1323): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000025c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x9, 0x20}, &(0x7f0000000180)=0xc) 2.773722515s ago: executing program 7 (id=1324): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="a400000013002f0a2bbd70000000000007006800", @ANYRES32=r1, @ANYBLOB="400900006522020084001a8009000100766c616e000000007400048070000580"], 0xa4}, 0x1, 0x0, 0x0, 0x40944}, 0x0) 2.578834057s ago: executing program 8 (id=1326): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000005d00)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 2.495105263s ago: executing program 6 (id=1327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x48100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x79) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x46) 2.417091962s ago: executing program 7 (id=1328): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) 2.316468587s ago: executing program 6 (id=1329): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000700)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001801000020207325000000000020"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.266635889s ago: executing program 8 (id=1330): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000004180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x100}}}}}}}, 0x0) 2.191044275s ago: executing program 7 (id=1331): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r2, 0x0, 0x1004000, 0x0, 0x0}) 2.181055384s ago: executing program 6 (id=1332): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018600000000008000000000000000f00950000000000000049cca1dfa899e4b592f251c8b91054d03562c077b06a60dbd4306f2810b1359acf2d037d45c4bc7cbdba06"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.014293526s ago: executing program 8 (id=1333): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8100) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) 1.968799372s ago: executing program 7 (id=1334): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1.714248834s ago: executing program 1 (id=1335): unshare(0x2040400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, 0x0, 0x0, 0x3, 0x0) 1.608263486s ago: executing program 1 (id=1336): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000040), 0x800000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.526625166s ago: executing program 1 (id=1337): write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0x1c2e, 0x10100}, &(0x7f0000000080), &(0x7f00000001c0)) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000015fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002be90103"], 0xa0}}, 0x0) 727.536084ms ago: executing program 1 (id=1338): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000000)=ANY=[], 0x30}], 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x40}}, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 650.064597ms ago: executing program 1 (id=1339): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d0493c2000000000001090224000100003000090400000503000000092100000801220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000480)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220c000000a98aab"], 0x0}, 0x0) 446.567098ms ago: executing program 8 (id=1340): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x14c, 0x0, &(0x7f0000000180)="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", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 202.9357ms ago: executing program 8 (id=1341): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018600000000008000000000000000f00950000000000000049cca1dfa899e4b592f251c8b91054d03562c077b06a60dbd4306f2810b1359acf2d037d45c4bc7cbdba06"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00'}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 136.131172ms ago: executing program 6 (id=1342): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r0, 0x30) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 0s ago: executing program 1 (id=1343): syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x81, 0xc9}}}, 0x6) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$MSR(&(0x7f0000001900), 0x57e, 0x0) kernel console output (not intermixed with test programs): =0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 562.251292][ T38] audit: type=1326 audit(1769649613.013:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8178 comm="syz.6.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 562.251579][ T38] audit: type=1326 audit(1769649613.013:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8178 comm="syz.6.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 562.252046][ T38] audit: type=1326 audit(1769649613.023:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8178 comm="syz.6.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 562.252373][ T38] audit: type=1326 audit(1769649613.023:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8178 comm="syz.6.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 564.436197][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 564.709032][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 568.219929][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.220007][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.499841][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.381'. [ 573.646961][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.665223][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.671177][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.675997][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 574.198040][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 575.638674][ T8242] ceph: No mds server is up or the cluster is laggy [ 575.715805][ T808] libceph: connect (1)[c::]:6789 error -101 [ 575.716020][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 576.296583][ T61] Bluetooth: hci4: command tx timeout [ 579.303237][ T61] Bluetooth: hci4: command tx timeout [ 581.326748][ T61] Bluetooth: hci4: command tx timeout [ 581.364122][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 583.949873][ T61] Bluetooth: hci4: command tx timeout [ 584.264610][ T7483] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 584.456468][ T7483] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 584.456529][ T7483] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 584.456554][ T7483] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 584.477401][ T7483] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 584.477434][ T7483] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 584.477456][ T7483] usb 7-1: Manufacturer: syz [ 584.490466][ T7483] usb 7-1: config 0 descriptor?? [ 584.539962][ T7483] smsusb:smsusb_probe: board id=9, interface number 0 [ 584.561443][ T7483] smsusb:smsusb_probe: Device initialized with return code -19 [ 584.634550][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.634762][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.635021][ T8059] bridge_slave_0: entered allmulticast mode [ 584.658890][ T8059] bridge_slave_0: entered promiscuous mode [ 584.692317][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.692493][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.724159][ T8059] bridge_slave_1: entered allmulticast mode [ 584.752332][ T8059] bridge_slave_1: entered promiscuous mode [ 584.870125][ T5859] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 584.936167][ T7483] usb 7-1: USB disconnect, device number 3 [ 585.035432][ T5859] usb 9-1: Using ep0 maxpacket: 8 [ 585.051080][ T5859] usb 9-1: config 53 has an invalid interface number: 101 but max is 0 [ 585.051111][ T5859] usb 9-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 585.051132][ T5859] usb 9-1: config 53 has no interface number 0 [ 585.051183][ T5859] usb 9-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 585.051217][ T5859] usb 9-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 585.051246][ T5859] usb 9-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 585.051273][ T5859] usb 9-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 585.051296][ T5859] usb 9-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 585.175881][ T5859] usb 9-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 585.175914][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.175936][ T5859] usb 9-1: Product: syz [ 585.175950][ T5859] usb 9-1: Manufacturer: syz [ 585.175965][ T5859] usb 9-1: SerialNumber: syz [ 585.235662][ T8305] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 585.392236][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.536796][ T5859] kvaser_usb 9-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 585.536823][ T5859] kvaser_usb 9-1:53.101: error -EMSGSIZE: Failed to initialize card [ 585.537144][ T5859] kvaser_usb 9-1:53.101: probe with driver kvaser_usb failed with error -90 [ 585.575845][ T5859] usb 9-1: USB disconnect, device number 3 [ 586.842419][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.843999][ T8226] chnl_net:caif_netlink_parms(): no params data found [ 586.889817][ T6027] bridge_slave_1: left allmulticast mode [ 586.889848][ T6027] bridge_slave_1: left promiscuous mode [ 586.892763][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.156839][ T6027] bridge_slave_0: left allmulticast mode [ 587.156871][ T6027] bridge_slave_0: left promiscuous mode [ 587.161373][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.489046][ T6027] bridge_slave_1: left allmulticast mode [ 587.489081][ T6027] bridge_slave_1: left promiscuous mode [ 587.494801][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.796693][ T6027] bridge_slave_0: left allmulticast mode [ 587.796726][ T6027] bridge_slave_0: left promiscuous mode [ 587.796948][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.025634][ T6027] bond0 (unregistering): Released all slaves [ 589.256063][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.138063][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.208027][ T6027] bond0 (unregistering): Released all slaves [ 591.476056][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.556074][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.619920][ T6027] bond0 (unregistering): Released all slaves [ 592.485797][ T38] audit: type=1326 audit(1769649643.233:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.486165][ T38] audit: type=1326 audit(1769649643.233:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.486580][ T38] audit: type=1326 audit(1769649643.243:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.486858][ T38] audit: type=1326 audit(1769649643.243:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.487181][ T38] audit: type=1326 audit(1769649643.243:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.487603][ T38] audit: type=1326 audit(1769649643.253:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.487887][ T38] audit: type=1326 audit(1769649643.263:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 592.488202][ T38] audit: type=1326 audit(1769649643.263:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 593.319024][ T8059] team0: Port device team_slave_0 added [ 594.512237][ T8059] team0: Port device team_slave_1 added [ 595.307535][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.307556][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.307585][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.344061][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.344080][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.344115][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.335428][ T8226] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.335577][ T8226] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.335828][ T8226] bridge_slave_0: entered allmulticast mode [ 598.417195][ T8226] bridge_slave_0: entered promiscuous mode [ 599.315674][ T8226] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.315804][ T8226] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.316380][ T8226] bridge_slave_1: entered allmulticast mode [ 599.319221][ T8226] bridge_slave_1: entered promiscuous mode [ 599.773521][ T6027] hsr_slave_0: left promiscuous mode [ 599.840110][ T6027] hsr_slave_1: left promiscuous mode [ 599.841218][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.898103][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.255376][ T6027] hsr_slave_0: left promiscuous mode [ 600.500801][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.532726][ T6027] hsr_slave_1: left promiscuous mode [ 600.533814][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.147315][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 601.151164][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 601.159610][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 601.160479][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 601.497802][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.168043][ T5803] Bluetooth: hci0: command tx timeout [ 603.216827][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 603.345983][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 604.896023][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 605.009317][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 605.245328][ T5803] Bluetooth: hci0: command tx timeout [ 605.818840][ T8226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.183465][ T8450] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.366415][ T5803] Bluetooth: hci0: command tx timeout [ 607.366710][ T5859] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 607.395012][ T8226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.537403][ T5859] usb 9-1: config 0 has an invalid interface number: 218 but max is 0 [ 607.537437][ T5859] usb 9-1: config 0 has no interface number 0 [ 607.537485][ T5859] usb 9-1: config 0 interface 218 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 607.537514][ T5859] usb 9-1: config 0 interface 218 has no altsetting 0 [ 607.542234][ T5859] usb 9-1: New USB device found, idVendor=093a, idProduct=2471, bcdDevice=fc.4b [ 607.542269][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.542290][ T5859] usb 9-1: Product: syz [ 607.542305][ T5859] usb 9-1: Manufacturer: syz [ 607.542319][ T5859] usb 9-1: SerialNumber: syz [ 607.548688][ T5859] usb 9-1: config 0 descriptor?? [ 607.554206][ T5859] gspca_main: pac207-2.14.0 probing 093a:2471 [ 607.673261][ T5859] gspca_pac207: Failed to read a register (index 0x0000, error -110) [ 607.839155][ T5859] usb 9-1: USB disconnect, device number 4 [ 607.852473][ T8226] team0: Port device team_slave_0 added [ 608.041162][ T8226] team0: Port device team_slave_1 added [ 608.310406][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.310425][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.310453][ T8226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.374421][ T8226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.374442][ T8226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.374472][ T8226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.980155][ T8226] hsr_slave_0: entered promiscuous mode [ 608.981142][ T8226] hsr_slave_1: entered promiscuous mode [ 609.095452][ T5859] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 609.258001][ T5859] usb 9-1: unable to get BOS descriptor or descriptor too short [ 609.258633][ T5859] usb 9-1: not running at top speed; connect to a high speed hub [ 609.261247][ T5859] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 609.271835][ T5859] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 609.271860][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.271874][ T5859] usb 9-1: Product: syz [ 609.271885][ T5859] usb 9-1: Manufacturer: syz [ 609.271896][ T5859] usb 9-1: SerialNumber: syz [ 609.433630][ T5803] Bluetooth: hci0: command tx timeout [ 609.797647][ T5859] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 609.874922][ T5859] usb 9-1: unit 51 not found! [ 609.893138][ T5859] usb 9-1: 5:0: cannot get min/max values for control 2 (id 5) [ 609.966395][ T5859] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 610.065690][ T5859] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 610.113211][ T5859] usb 9-1: USB disconnect, device number 5 [ 610.437606][ T8454] udevd[8454]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.958841][ T8409] chnl_net:caif_netlink_parms(): no params data found [ 611.945461][ T8409] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.945626][ T8409] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.945887][ T8409] bridge_slave_0: entered allmulticast mode [ 611.948843][ T8409] bridge_slave_0: entered promiscuous mode [ 612.240936][ T8409] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.241124][ T8409] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.241401][ T8409] bridge_slave_1: entered allmulticast mode [ 612.292157][ T8409] bridge_slave_1: entered promiscuous mode [ 613.334781][ T8226] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 613.546690][ T8226] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 615.278676][ T8409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.495575][ T8226] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 615.636810][ T8409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.637590][ T6027] bridge_slave_1: left allmulticast mode [ 615.637617][ T6027] bridge_slave_1: left promiscuous mode [ 615.637873][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.031083][ T6027] bridge_slave_0: left allmulticast mode [ 616.031116][ T6027] bridge_slave_0: left promiscuous mode [ 616.033714][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.104176][ T808] libceph: connect (1)[c::]:6789 error -101 [ 616.104380][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 616.355679][ T808] libceph: connect (1)[c::]:6789 error -101 [ 616.355827][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 616.554691][ T8531] ceph: No mds server is up or the cluster is laggy [ 618.133020][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.425342][ T5859] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 618.586059][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 618.589859][ T5859] usb 7-1: unable to get BOS descriptor or descriptor too short [ 618.591499][ T5859] usb 7-1: config 6 has an invalid interface number: 194 but max is 0 [ 618.591528][ T5859] usb 7-1: config 6 has no interface number 0 [ 618.591562][ T5859] usb 7-1: config 6 interface 194 has no altsetting 0 [ 618.594606][ T5859] usb 7-1: New USB device found, idVendor=0403, idProduct=d578, bcdDevice=32.00 [ 618.594638][ T5859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.594659][ T5859] usb 7-1: Product: syz [ 618.594675][ T5859] usb 7-1: Manufacturer: syz [ 618.594690][ T5859] usb 7-1: SerialNumber: syz [ 618.941942][ T5859] ftdi_sio 7-1:6.194: FTDI USB Serial Device converter detected [ 618.975879][ T5859] usb 7-1: Detected FT233HP [ 618.979705][ T5859] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 618.980370][ T5859] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 619.027406][ T5859] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.058398][ T5859] usb 7-1: USB disconnect, device number 4 [ 619.112741][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.236651][ T5859] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 619.237666][ T5859] ftdi_sio 7-1:6.194: device disconnected [ 619.389340][ T6027] bond0 (unregistering): Released all slaves [ 619.425882][ T8226] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 619.877636][ T8409] team0: Port device team_slave_0 added [ 619.904189][ T8409] team0: Port device team_slave_1 added [ 619.911864][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.996298][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.103035][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 622.103251][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 622.355720][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 622.355919][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 622.567265][ T8581] ceph: No mds server is up or the cluster is laggy [ 623.035788][ T808] libceph: connect (1)[c::]:6789 error -101 [ 623.035999][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 623.517704][ T6027] team0 (unregistering): Port device team_slave_1 removed [ 623.544737][ T8601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 624.536903][ T6027] team0 (unregistering): Port device team_slave_0 removed [ 627.641478][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.641499][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.641527][ T8409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.726807][ T8409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.726828][ T8409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.726858][ T8409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.411648][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 628.411882][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 628.511290][ T8409] hsr_slave_0: entered promiscuous mode [ 628.519755][ T8409] hsr_slave_1: entered promiscuous mode [ 628.543578][ T8409] debugfs: 'hsr0' already exists in 'hsr' [ 628.543612][ T8409] Cannot create hsr debugfs directory [ 628.675756][ T8621] libceph: connect (1)[c::]:6789 error -101 [ 628.675914][ T8621] libceph: mon0 (1)[c::]:6789 connect error [ 628.837130][ T8632] ceph: No mds server is up or the cluster is laggy [ 629.535364][ T808] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 629.654940][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.655022][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.690584][ T808] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.690632][ T808] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 629.690675][ T808] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 629.691876][ T808] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 629.691906][ T808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 629.691927][ T808] usb 9-1: SerialNumber: syz [ 629.769549][ T8226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.890632][ T808] usbtest 9-1:1.0: couldn't get endpoints, -22 [ 629.890724][ T808] usbtest 9-1:1.0: probe with driver usbtest failed with error -22 [ 630.063416][ T8226] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.114383][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.114532][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.133057][ T808] usb 9-1: USB disconnect, device number 6 [ 630.220923][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.221057][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.340361][ T8409] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 633.361599][ T8409] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 633.401346][ T8409] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 633.457174][ T8409] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 633.923452][ T8708] 9pnet_fd: p9_fd_create_tcp (8708): problem connecting socket to 127.0.0.1 [ 634.033760][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 634.065815][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 634.070036][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 634.073892][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 634.096681][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 635.755359][ T8296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 636.125846][ T8296] usb 7-1: Using ep0 maxpacket: 8 [ 636.133650][ T8296] usb 7-1: unable to get BOS descriptor or descriptor too short [ 636.137284][ T8296] usb 7-1: config 7 has an invalid interface number: 67 but max is 0 [ 636.137313][ T8296] usb 7-1: config 7 has no interface number 0 [ 636.157159][ T8296] usb 7-1: language id specifier not provided by device, defaulting to English [ 636.999526][ T8296] usb 7-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 636.999562][ T8296] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.999584][ T8296] usb 7-1: Product: syz [ 636.999599][ T8296] usb 7-1: SerialNumber: syz [ 637.175103][ T5803] Bluetooth: hci1: command tx timeout [ 637.486071][ T8296] usb 7-1: USB disconnect, device number 5 [ 638.734555][ T8621] libceph: connect (1)[c::]:6789 error -101 [ 638.734775][ T8621] libceph: mon0 (1)[c::]:6789 connect error [ 638.998559][ T8621] libceph: connect (1)[c::]:6789 error -101 [ 638.998799][ T8621] libceph: mon0 (1)[c::]:6789 connect error [ 639.180380][ T8768] ceph: No mds server is up or the cluster is laggy [ 640.326832][ T5803] Bluetooth: hci1: command tx timeout [ 640.357472][ T8621] libceph: connect (1)[c::]:6789 error -101 [ 640.357677][ T8621] libceph: mon0 (1)[c::]:6789 connect error [ 641.176557][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 641.176785][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 641.435726][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 641.436021][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 641.686680][ T8788] ceph: No mds server is up or the cluster is laggy [ 642.064235][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 642.178922][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 642.413642][ T5803] Bluetooth: hci1: command tx timeout [ 643.346356][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.8.502'. [ 644.445313][ T5803] Bluetooth: hci1: command tx timeout [ 644.628915][ T8621] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 644.649636][ T8409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.797760][ T8621] usb 9-1: unable to get BOS descriptor or descriptor too short [ 644.799498][ T8621] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 644.799526][ T8621] usb 9-1: config 1 has no interface number 1 [ 644.799582][ T8621] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 644.846267][ T8621] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 644.846308][ T8621] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.846330][ T8621] usb 9-1: Product: syz [ 644.846346][ T8621] usb 9-1: Manufacturer: syz [ 644.846362][ T8621] usb 9-1: SerialNumber: syz [ 645.143731][ T8409] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.144783][ T8711] chnl_net:caif_netlink_parms(): no params data found [ 645.200210][ T8621] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 645.296345][ T1160] bridge_slave_1: left allmulticast mode [ 645.296378][ T1160] bridge_slave_1: left promiscuous mode [ 645.296640][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.299582][ T8621] usb 9-1: USB disconnect, device number 7 [ 645.649379][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.976423][ T1160] bridge_slave_0: left allmulticast mode [ 645.976458][ T1160] bridge_slave_0: left promiscuous mode [ 645.976656][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.024455][ T8840] netlink: 16 bytes leftover after parsing attributes in process `syz.6.506'. [ 647.135481][ T8850] capability: warning: `syz.6.510' uses deprecated v2 capabilities in a way that may be insecure [ 647.156763][ T5880] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 647.542458][ T5880] usb 9-1: Using ep0 maxpacket: 32 [ 647.555495][ T5880] usb 9-1: config 0 has an invalid interface number: 80 but max is 0 [ 647.555527][ T5880] usb 9-1: config 0 has no interface number 0 [ 647.555562][ T5880] usb 9-1: config 0 interface 80 has no altsetting 0 [ 647.562260][ T5880] usb 9-1: New USB device found, idVendor=06e1, idProduct=a190, bcdDevice=3a.1a [ 647.562291][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.562311][ T5880] usb 9-1: Product: syz [ 647.562324][ T5880] usb 9-1: Manufacturer: syz [ 647.562339][ T5880] usb 9-1: SerialNumber: syz [ 647.585682][ T5880] usb 9-1: config 0 descriptor?? [ 647.912735][ T5880] gspca_main: spca506-2.14.0 probing 06e1:a190 [ 648.235725][ T5880] usb 9-1: USB disconnect, device number 8 [ 649.405803][ T8879] netlink: 'syz.1.523': attribute type 3 has an invalid length. [ 649.427464][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.469237][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.534683][ T1160] bond0 (unregistering): Released all slaves [ 649.630277][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.630417][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.105786][ T1160] hsr_slave_0: left promiscuous mode [ 650.147288][ T1160] hsr_slave_1: left promiscuous mode [ 650.148326][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.196003][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.805940][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 652.080918][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.536'. [ 652.190345][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 654.122847][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.123083][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.286416][ T8903] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 654.490252][ T8927] netlink: 16 bytes leftover after parsing attributes in process `syz.8.542'. [ 654.716232][ T38] audit: type=1326 audit(1769649705.503:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717647][ T38] audit: type=1326 audit(1769649705.503:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717705][ T38] audit: type=1326 audit(1769649705.503:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717761][ T38] audit: type=1326 audit(1769649705.503:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717806][ T38] audit: type=1326 audit(1769649705.503:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717852][ T38] audit: type=1326 audit(1769649705.503:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717898][ T38] audit: type=1326 audit(1769649705.503:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 654.717945][ T38] audit: type=1326 audit(1769649705.503:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8922 comm="syz.6.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 655.074521][ T8711] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.074713][ T8711] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.074924][ T8711] bridge_slave_0: entered allmulticast mode [ 655.200288][ T8711] bridge_slave_0: entered promiscuous mode [ 655.217536][ T8711] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.217704][ T8711] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.218104][ T8711] bridge_slave_1: entered allmulticast mode [ 655.289673][ T8929] netlink: 'syz.1.541': attribute type 3 has an invalid length. [ 655.289700][ T8929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.541'. [ 655.350679][ T8711] bridge_slave_1: entered promiscuous mode [ 655.802127][ T8711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 655.868751][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.348139][ T8711] team0: Port device team_slave_0 added [ 656.464476][ T8711] team0: Port device team_slave_1 added [ 657.340821][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.547'. [ 657.702702][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.702722][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.702747][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.796246][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.796264][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.796292][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.994662][ T8711] hsr_slave_0: entered promiscuous mode [ 658.016412][ T8711] hsr_slave_1: entered promiscuous mode [ 658.168784][ T38] audit: type=1326 audit(1769649708.953:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8961 comm="syz.6.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 658.170300][ T38] audit: type=1326 audit(1769649708.953:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8961 comm="syz.6.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 659.168983][ T8981] netlink: 'syz.8.555': attribute type 3 has an invalid length. [ 659.169013][ T8981] netlink: 20 bytes leftover after parsing attributes in process `syz.8.555'. [ 659.583862][ T8409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.960262][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 659.960283][ T38] audit: type=1326 audit(1769649710.743:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.962719][ T38] audit: type=1326 audit(1769649710.743:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.962776][ T38] audit: type=1326 audit(1769649710.743:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.962826][ T38] audit: type=1326 audit(1769649710.743:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.962872][ T38] audit: type=1326 audit(1769649710.743:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.962920][ T38] audit: type=1326 audit(1769649710.743:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.962967][ T38] audit: type=1326 audit(1769649710.743:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 659.963014][ T38] audit: type=1326 audit(1769649710.743:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.8.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 660.321457][ T9002] netlink: 'syz.8.563': attribute type 10 has an invalid length. [ 660.340199][ T9002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.360477][ T9002] team0: Port device bond0 added [ 661.095443][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.6.558'. [ 661.898048][ T8711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 661.934713][ T8711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 662.020135][ T8711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 662.059637][ T8711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 662.387495][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 662.394247][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 662.415696][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 662.422984][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 662.424957][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 662.587007][ T9024] hub 8-0:1.0: USB hub found [ 662.589257][ T9024] hub 8-0:1.0: 1 port detected [ 663.935658][ T38] audit: type=1326 audit(1769649714.713:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.8.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 663.935720][ T38] audit: type=1326 audit(1769649714.713:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9034 comm="syz.8.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 664.103176][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.353605][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.6.567'. [ 665.140191][ T5803] Bluetooth: hci4: command tx timeout [ 665.209775][ T9057] hub 8-0:1.0: USB hub found [ 665.211671][ T9057] hub 8-0:1.0: 1 port detected [ 666.281017][ T9061] netlink: 'syz.8.581': attribute type 4 has an invalid length. [ 666.284729][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 666.284761][ T38] audit: type=1326 audit(1769649717.063:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.326840][ T38] audit: type=1326 audit(1769649717.103:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.338574][ T38] audit: type=1326 audit(1769649717.123:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.339066][ T38] audit: type=1326 audit(1769649717.123:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.407928][ T38] audit: type=1326 audit(1769649717.183:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.407988][ T38] audit: type=1326 audit(1769649717.183:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.466138][ T38] audit: type=1326 audit(1769649717.193:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.1.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 666.743989][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.165339][ T5803] Bluetooth: hci4: command tx timeout [ 669.236330][ T9067] netlink: 32 bytes leftover after parsing attributes in process `syz.8.583'. [ 669.245260][ T5803] Bluetooth: hci4: command tx timeout [ 669.364928][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.381332][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.632580][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.633633][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.138180][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 670.334071][ T9077] ceph: No mds server is up or the cluster is laggy [ 670.348880][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 671.346820][ T5803] Bluetooth: hci4: command tx timeout [ 672.033645][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.592'. [ 672.929784][ T9018] chnl_net:caif_netlink_parms(): no params data found [ 673.365767][ T9107] hub 8-0:1.0: USB hub found [ 673.374848][ T9107] hub 8-0:1.0: 1 port detected [ 674.196648][ T1160] bridge_slave_1: left allmulticast mode [ 674.196682][ T1160] bridge_slave_1: left promiscuous mode [ 674.196951][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.352751][ T1160] bridge_slave_0: left allmulticast mode [ 674.352784][ T1160] bridge_slave_0: left promiscuous mode [ 674.353067][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.133161][ T5837] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 675.330155][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 675.330362][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 675.330905][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 675.331090][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 675.425666][ T5837] usb 9-1: Using ep0 maxpacket: 32 [ 675.597139][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 675.597353][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 675.718916][ T5837] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 675.718941][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.718958][ T5837] usb 9-1: Product: syz [ 675.718969][ T5837] usb 9-1: Manufacturer: syz [ 675.718979][ T5837] usb 9-1: SerialNumber: syz [ 675.776284][ T5837] usb 9-1: config 0 descriptor?? [ 675.878350][ T9125] ceph: No mds server is up or the cluster is laggy [ 676.985930][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.066974][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.093646][ T1160] bond0 (unregistering): Released all slaves [ 677.202119][ T9116] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 677.557219][ T5837] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 677.557258][ T5837] peak_usb 9-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 679.039992][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.055242][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.055542][ T9018] bridge_slave_0: entered allmulticast mode [ 679.058512][ T9018] bridge_slave_0: entered promiscuous mode [ 679.105969][ T5880] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 679.155716][ T5837] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 679.190995][ T5837] usb 9-1: USB disconnect, device number 9 [ 679.207992][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.611'. [ 679.271606][ T5880] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 679.271672][ T5880] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 679.271697][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.311480][ T5880] usb 7-1: config 0 descriptor?? [ 679.345963][ T1160] hsr_slave_0: left promiscuous mode [ 679.435275][ T1160] hsr_slave_1: left promiscuous mode [ 679.437342][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.496633][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.758153][ T5859] usb 7-1: USB disconnect, device number 6 [ 680.902488][ T38] audit: type=1326 audit(1769649731.613:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902552][ T38] audit: type=1326 audit(1769649731.623:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902601][ T38] audit: type=1326 audit(1769649731.623:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902649][ T38] audit: type=1326 audit(1769649731.623:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902697][ T38] audit: type=1326 audit(1769649731.623:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902745][ T38] audit: type=1326 audit(1769649731.623:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902794][ T38] audit: type=1326 audit(1769649731.623:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 680.902842][ T38] audit: type=1326 audit(1769649731.623:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9173 comm="syz.6.618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 682.719233][ T9208] hub 8-0:1.0: USB hub found [ 682.721163][ T9208] hub 8-0:1.0: 1 port detected [ 683.771323][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.8.631'. [ 684.165809][ T38] audit: type=1326 audit(1769649734.953:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9210 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 684.167340][ T38] audit: type=1326 audit(1769649734.953:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9210 comm="syz.6.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228615][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 686.228636][ T38] audit: type=1326 audit(1769649737.003:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228697][ T38] audit: type=1326 audit(1769649737.013:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228744][ T38] audit: type=1326 audit(1769649737.013:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228793][ T38] audit: type=1326 audit(1769649737.013:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228839][ T38] audit: type=1326 audit(1769649737.013:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228886][ T38] audit: type=1326 audit(1769649737.013:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.228934][ T38] audit: type=1326 audit(1769649737.013:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.229054][ T38] audit: type=1326 audit(1769649737.013:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.6.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 686.819300][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 687.327341][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 687.674821][ T5880] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 688.361487][ T5880] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 688.361525][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0 [ 688.361557][ T5880] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 688.361574][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.383362][ T5880] usb 7-1: config 0 descriptor?? [ 688.592127][ T5880] usbhid 7-1:0.0: can't add hid device: -71 [ 688.592242][ T5880] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 688.622336][ T5880] usb 7-1: USB disconnect, device number 7 [ 691.120657][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.120762][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.918201][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 692.918405][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 692.985787][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 692.986027][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 693.257281][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 693.257441][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 693.353963][ T9250] ceph: No mds server is up or the cluster is laggy [ 694.028475][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.028689][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.028952][ T9018] bridge_slave_1: entered allmulticast mode [ 694.031290][ T9018] bridge_slave_1: entered promiscuous mode [ 694.033024][ T9227] netlink: 136 bytes leftover after parsing attributes in process `syz.1.638'. [ 694.033045][ T9227] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 694.312658][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.334659][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.398596][ T9018] team0: Port device team_slave_0 added [ 694.401519][ T9018] team0: Port device team_slave_1 added [ 694.493391][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 694.493411][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.493440][ T9018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 694.498301][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 694.498344][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 694.498441][ T9018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 694.682543][ T9018] hsr_slave_0: entered promiscuous mode [ 694.683627][ T9018] hsr_slave_1: entered promiscuous mode [ 694.684315][ T9018] debugfs: 'hsr0' already exists in 'hsr' [ 694.684334][ T9018] Cannot create hsr debugfs directory [ 695.409836][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 695.428104][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 695.445750][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 695.461784][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 695.466788][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 697.635379][ T5803] Bluetooth: hci0: command tx timeout [ 698.132542][ T8296] libceph: connect (1)[c::]:6789 error -101 [ 698.132772][ T8296] libceph: mon0 (1)[c::]:6789 connect error [ 698.186006][ T8296] libceph: connect (1)[c::]:6789 error -101 [ 698.186222][ T8296] libceph: mon0 (1)[c::]:6789 connect error [ 698.186306][ T9279] ceph: No mds server is up or the cluster is laggy [ 699.551537][ T8296] libceph: connect (1)[c::]:6789 error -101 [ 699.551752][ T8296] libceph: mon0 (1)[c::]:6789 connect error [ 699.655449][ T5803] Bluetooth: hci0: command tx timeout [ 699.806038][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 699.806262][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 700.107057][ T9294] ceph: No mds server is up or the cluster is laggy [ 701.636775][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 701.643213][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 702.012116][ T9323] ceph: No mds server is up or the cluster is laggy [ 702.030234][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 702.030416][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 702.385436][ T5803] Bluetooth: hci0: command tx timeout [ 704.457871][ T5803] Bluetooth: hci0: command tx timeout [ 705.521395][ T9335] netlink: 24 bytes leftover after parsing attributes in process `syz.6.674'. [ 705.943667][ T9] libceph: connect (1)[c::]:6789 error -101 [ 705.943893][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 706.191631][ T9264] chnl_net:caif_netlink_parms(): no params data found [ 706.203124][ T9] libceph: connect (1)[c::]:6789 error -101 [ 706.203350][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 706.253390][ T9018] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 706.441660][ T9357] ceph: No mds server is up or the cluster is laggy [ 706.695441][ T9018] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 706.915882][ T9018] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 707.064711][ T9018] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 708.337137][ T9398] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 708.658570][ T9264] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.658778][ T9264] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.659025][ T9264] bridge_slave_0: entered allmulticast mode [ 708.663111][ T9264] bridge_slave_0: entered promiscuous mode [ 708.755898][ T1160] bridge_slave_1: left allmulticast mode [ 708.755930][ T1160] bridge_slave_1: left promiscuous mode [ 708.756184][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.997835][ T1160] bridge_slave_0: left allmulticast mode [ 708.997869][ T1160] bridge_slave_0: left promiscuous mode [ 708.998140][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.235690][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 709.235899][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 709.507603][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 709.507850][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 709.624146][ T9412] ceph: No mds server is up or the cluster is laggy [ 711.246167][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.326273][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.348972][ T1160] bond0 (unregistering): Released all slaves [ 711.388548][ T9264] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.388694][ T9264] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.388963][ T9264] bridge_slave_1: entered allmulticast mode [ 711.390940][ T9264] bridge_slave_1: entered promiscuous mode [ 711.801547][ T9436] hub 8-0:1.0: USB hub found [ 711.804144][ T9436] hub 8-0:1.0: 1 port detected [ 712.607457][ T9264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.709215][ T9264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.514148][ T9] libceph: connect (1)[c::]:6789 error -101 [ 714.514368][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 714.652597][ T9475] netlink: 12 bytes leftover after parsing attributes in process `syz.8.708'. [ 714.765687][ T9] libceph: connect (1)[c::]:6789 error -101 [ 714.765907][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 714.941481][ T9466] ceph: No mds server is up or the cluster is laggy [ 715.275524][ T1160] hsr_slave_0: left promiscuous mode [ 715.395277][ T1160] hsr_slave_1: left promiscuous mode [ 715.396083][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.463860][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.955370][ T9523] netlink: 'syz.8.720': attribute type 11 has an invalid length. [ 716.955398][ T9523] netlink: 132 bytes leftover after parsing attributes in process `syz.8.720'. [ 717.616766][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.715'. [ 717.634933][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 717.926201][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 718.531331][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 718.531613][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 718.532462][ T5859] libceph: connect (1)[c::]:6789 error -101 [ 718.532636][ T5859] libceph: mon0 (1)[c::]:6789 connect error [ 718.785743][ T9] libceph: connect (1)[c::]:6789 error -101 [ 718.785962][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 718.868872][ T9531] ceph: No mds server is up or the cluster is laggy [ 720.261566][ T9264] team0: Port device team_slave_0 added [ 720.461637][ T9264] team0: Port device team_slave_1 added [ 720.588158][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.728'. [ 720.987042][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.987063][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.987093][ T9264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.998945][ T9264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.999012][ T9264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.999110][ T9264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.194756][ T9264] hsr_slave_0: entered promiscuous mode [ 722.216709][ T9264] hsr_slave_1: entered promiscuous mode [ 722.616068][ T9573] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 723.339687][ T9591] hub 8-0:1.0: USB hub found [ 723.340105][ T9591] hub 8-0:1.0: 1 port detected [ 724.070606][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.090571][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.098489][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.135062][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.165918][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.285502][ T5803] Bluetooth: hci1: command tx timeout [ 728.369271][ T5803] Bluetooth: hci1: command tx timeout [ 728.440388][ T9594] chnl_net:caif_netlink_parms(): no params data found [ 728.652296][ T9264] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.820908][ T9264] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 728.964817][ T9264] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 729.056522][ T9264] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.094334][ T9696] netlink: 'syz.8.754': attribute type 1 has an invalid length. [ 729.094360][ T9696] netlink: 224 bytes leftover after parsing attributes in process `syz.8.754'. [ 729.836070][ T9712] hub 8-0:1.0: USB hub found [ 729.836538][ T9712] hub 8-0:1.0: 1 port detected [ 730.168434][ T9594] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.168564][ T9594] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.168850][ T9594] bridge_slave_0: entered allmulticast mode [ 730.198969][ T9594] bridge_slave_0: entered promiscuous mode [ 730.390295][ T9594] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.405415][ T9594] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.405686][ T9594] bridge_slave_1: entered allmulticast mode [ 730.430785][ T9594] bridge_slave_1: entered promiscuous mode [ 730.445357][ T5803] Bluetooth: hci1: command tx timeout [ 730.645288][ T5879] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 730.706259][ T9594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.746326][ T9594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.748071][ T1160] bridge_slave_1: left allmulticast mode [ 730.748107][ T1160] bridge_slave_1: left promiscuous mode [ 730.748376][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.815352][ T5879] usb 9-1: Using ep0 maxpacket: 16 [ 730.830883][ T5879] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 730.830916][ T5879] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 730.830941][ T5879] usb 9-1: config 0 interface 0 has no altsetting 0 [ 730.833399][ T5879] usb 9-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 730.833429][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.833450][ T5879] usb 9-1: Product: syz [ 730.833464][ T5879] usb 9-1: Manufacturer: syz [ 730.833478][ T5879] usb 9-1: SerialNumber: syz [ 730.868053][ T5879] usb 9-1: config 0 descriptor?? [ 730.929726][ T1160] bridge_slave_0: left allmulticast mode [ 730.929756][ T1160] bridge_slave_0: left promiscuous mode [ 730.930000][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.299417][ T5859] usb 9-1: USB disconnect, device number 10 [ 731.900124][ T38] audit: type=1326 audit(1769649782.683:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 731.900185][ T38] audit: type=1326 audit(1769649782.683:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 731.900235][ T38] audit: type=1326 audit(1769649782.683:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 731.900283][ T38] audit: type=1326 audit(1769649782.683:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 731.900332][ T38] audit: type=1326 audit(1769649782.683:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 731.900382][ T38] audit: type=1326 audit(1769649782.683:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9743 comm="syz.1.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 732.271693][ T9751] tmpfs: Bad value for 'mpol' [ 732.525325][ T5803] Bluetooth: hci1: command tx timeout [ 732.993045][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.020822][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.101841][ T1160] bond0 (unregistering): Released all slaves [ 734.471269][ T9594] team0: Port device team_slave_0 added [ 734.503529][ T9594] team0: Port device team_slave_1 added [ 734.678981][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.679001][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.679028][ T9594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.885253][ T1160] hsr_slave_0: left promiscuous mode [ 734.905548][ T1160] hsr_slave_1: left promiscuous mode [ 734.906738][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.947721][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.405816][ T38] audit: type=1326 audit(1769649786.053:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.8.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 735.405879][ T38] audit: type=1326 audit(1769649786.053:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.8.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 735.405927][ T38] audit: type=1326 audit(1769649786.053:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.8.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 735.405977][ T38] audit: type=1326 audit(1769649786.053:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9795 comm="syz.8.787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 736.285354][ T5859] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 736.316950][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 736.445271][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 736.460986][ T5859] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 736.461018][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.461037][ T5859] usb 9-1: Product: syz [ 736.461052][ T5859] usb 9-1: Manufacturer: syz [ 736.461067][ T5859] usb 9-1: SerialNumber: syz [ 736.473445][ T5859] usb 9-1: config 0 descriptor?? [ 736.511914][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 736.721701][ T5859] speedtch 9-1:0.0: speedtch_bind: data interface not found! [ 736.721734][ T5859] speedtch 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 736.939912][ T5859] usb 9-1: USB disconnect, device number 11 [ 737.412406][ T9594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.412427][ T9594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.412450][ T9594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.475215][ T9790] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 737.629700][ T9804] comedi comedi0: Minor 3 specified more than once! [ 737.658696][ T9806] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 737.750495][ T9594] hsr_slave_0: entered promiscuous mode [ 737.751977][ T9594] hsr_slave_1: entered promiscuous mode [ 737.785906][ T9594] debugfs: 'hsr0' already exists in 'hsr' [ 737.785937][ T9594] Cannot create hsr debugfs directory [ 737.794507][ T9809] netlink: 'syz.8.791': attribute type 4 has an invalid length. [ 738.510334][ T9264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.838160][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 739.838179][ T38] audit: type=1326 audit(1769649790.623:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839641][ T38] audit: type=1326 audit(1769649790.623:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839700][ T38] audit: type=1326 audit(1769649790.623:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839752][ T38] audit: type=1326 audit(1769649790.623:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839796][ T38] audit: type=1326 audit(1769649790.623:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839842][ T38] audit: type=1326 audit(1769649790.623:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839887][ T38] audit: type=1326 audit(1769649790.623:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 739.839933][ T38] audit: type=1326 audit(1769649790.623:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9818 comm="syz.8.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 740.374558][ T9264] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.438811][ T38] audit: type=1326 audit(1769649791.223:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.6.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 740.438870][ T38] audit: type=1326 audit(1769649791.223:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9838 comm="syz.6.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 740.853221][ T2247] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.853382][ T2247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.111521][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.114767][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.698786][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.703484][ T9594] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 743.849456][ T9594] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 743.909916][ T9594] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 743.948831][ T9594] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 745.053850][ T9901] hub 8-0:1.0: USB hub found [ 745.056623][ T9901] hub 8-0:1.0: 1 port detected [ 745.093636][ T9594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.224670][ T9594] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.380387][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.386003][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.569070][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.569217][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.755440][ T9264] veth0_vlan: entered promiscuous mode [ 745.857037][ T9914] netlink: 8 bytes leftover after parsing attributes in process `syz.8.822'. [ 745.906416][ T9264] veth1_vlan: entered promiscuous mode [ 746.313738][ T9264] veth0_macvtap: entered promiscuous mode [ 746.361433][ T9264] veth1_macvtap: entered promiscuous mode [ 746.551112][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.616960][ T9264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.729880][ T6027] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.739394][ T6027] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.764766][ T6027] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.779435][ T6027] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.800380][ T9926] hub 8-0:1.0: USB hub found [ 746.810192][ T9926] hub 8-0:1.0: 1 port detected [ 747.458378][ T9594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.547370][ T6027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.547396][ T6027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.687239][ T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.687264][ T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.385371][ T38] kauditd_printk_skb: 8 callbacks suppressed [ 748.385396][ T38] audit: type=1326 audit(1769649799.003:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385453][ T38] audit: type=1326 audit(1769649799.003:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385503][ T38] audit: type=1326 audit(1769649799.003:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385552][ T38] audit: type=1326 audit(1769649799.003:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385602][ T38] audit: type=1326 audit(1769649799.003:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385653][ T38] audit: type=1326 audit(1769649799.003:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385703][ T38] audit: type=1326 audit(1769649799.003:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 748.385753][ T38] audit: type=1326 audit(1769649799.003:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9930 comm="syz.1.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 750.345631][ T5799] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 750.398339][ T9594] veth0_vlan: entered promiscuous mode [ 750.447422][ T9594] veth1_vlan: entered promiscuous mode [ 750.505248][ T5799] usb 6-1: Using ep0 maxpacket: 16 [ 750.522971][ T5799] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 750.523005][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.523029][ T5799] usb 6-1: Product: syz [ 750.523046][ T5799] usb 6-1: Manufacturer: syz [ 750.523058][ T5799] usb 6-1: SerialNumber: syz [ 751.366545][ T9971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.834'. [ 751.511248][ T5799] usb 6-1: config 0 descriptor?? [ 751.585521][ T5799] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 751.950320][ T9594] veth0_macvtap: entered promiscuous mode [ 752.026688][ T9594] veth1_macvtap: entered promiscuous mode [ 752.086212][ T5799] usb 6-1: clie_3_5_startup: get interface number failed: -71 [ 752.086399][ T5799] visor 6-1:0.0: probe with driver visor failed with error -71 [ 752.134932][ T5799] usb 6-1: USB disconnect, device number 2 [ 752.221843][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 752.376269][ T9594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 752.432884][ T1272] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.433112][ T1272] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.433183][ T1272] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.517028][ T1272] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.541664][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.541746][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.845266][ T38] audit: type=1326 audit(1769649803.623:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.8.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 752.845329][ T38] audit: type=1326 audit(1769649803.623:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9965 comm="syz.8.836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 753.475957][ T2247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.475980][ T2247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.707787][ T2247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 753.707811][ T2247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.207820][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 754.207870][ T38] audit: type=1326 audit(1769649804.953:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.208229][ T38] audit: type=1326 audit(1769649804.953:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.208529][ T38] audit: type=1326 audit(1769649804.953:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.208761][ T38] audit: type=1326 audit(1769649804.953:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.208991][ T38] audit: type=1326 audit(1769649804.953:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.209206][ T38] audit: type=1326 audit(1769649804.953:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.209435][ T38] audit: type=1326 audit(1769649804.953:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.209767][ T38] audit: type=1326 audit(1769649804.953:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9977 comm="syz.6.838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 754.814903][T10011] hub 8-0:1.0: USB hub found [ 754.815587][T10011] hub 8-0:1.0: 1 port detected [ 755.880533][ T5879] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 756.026641][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 756.029159][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 756.029194][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 756.029219][ T5879] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 756.029263][ T5879] usb 7-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 756.029289][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.115481][ T5879] usb 7-1: config 0 descriptor?? [ 757.624476][ T5879] logitech 0003:046D:C293.0001: bogus close delimiter [ 757.624500][ T5879] logitech 0003:046D:C293.0001: item 0 1 2 10 parsing failed [ 757.639881][ T5879] logitech 0003:046D:C293.0001: parse failed [ 757.640010][ T5879] logitech 0003:046D:C293.0001: probe with driver logitech failed with error -22 [ 757.715471][T10049] netlink: 32 bytes leftover after parsing attributes in process `syz.8.855'. [ 758.003144][ T5879] usb 7-1: USB disconnect, device number 8 [ 758.728186][T10061] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 758.728186][T10061] The task syz.6.858 (10061) triggered the difference, watch for misbehavior. [ 759.081087][ T38] audit: type=1326 audit(1769649809.863:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 759.081150][ T38] audit: type=1326 audit(1769649809.863:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.1.857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 760.992853][T10088] bridge0: entered promiscuous mode [ 762.415468][T10098] netlink: 32 bytes leftover after parsing attributes in process `syz.6.866'. [ 762.911754][T10104] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 763.195405][ T49] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 763.410088][ T49] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 763.410144][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 763.410190][ T49] usb 6-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 763.410215][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.430097][ T49] usb 6-1: config 0 descriptor?? [ 763.929112][ T49] thrustmaster 0003:044F:B320.0002: unknown main item tag 0x0 [ 763.929156][ T49] thrustmaster 0003:044F:B320.0002: item fetching failed at offset 3/7 [ 763.929939][ T49] thrustmaster 0003:044F:B320.0002: parse failed [ 763.930017][ T49] thrustmaster 0003:044F:B320.0002: probe with driver thrustmaster failed with error -22 [ 764.094359][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 764.141833][ T49] usb 6-1: USB disconnect, device number 3 [ 766.257326][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 766.513587][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.513623][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 766.513669][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 766.513694][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.691534][ T9] usb 9-1: config 0 descriptor?? [ 767.206563][ T9] kovaplus 0003:1E7D:2D50.0003: item fetching failed at offset 1/5 [ 767.207357][ T9] kovaplus 0003:1E7D:2D50.0003: parse failed [ 767.207432][ T9] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -22 [ 768.495300][ T9] usb 9-1: USB disconnect, device number 12 [ 769.711322][T10188] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 770.624571][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.900'. [ 771.614892][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 771.614940][ T38] audit: type=1326 audit(1769649822.373:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.615859][ T38] audit: type=1326 audit(1769649822.373:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.616122][ T38] audit: type=1326 audit(1769649822.383:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.616332][ T38] audit: type=1326 audit(1769649822.383:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.616575][ T38] audit: type=1326 audit(1769649822.383:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.616925][ T38] audit: type=1326 audit(1769649822.393:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.617164][ T38] audit: type=1326 audit(1769649822.393:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 771.617398][ T38] audit: type=1326 audit(1769649822.393:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10210 comm="syz.5.903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 772.465323][ T5837] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 772.568630][ T5799] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 772.615245][ T5837] usb 7-1: Using ep0 maxpacket: 16 [ 772.624712][ T5837] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 772.624739][ T5837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 772.658358][ T5837] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 772.658390][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.658412][ T5837] usb 7-1: Product: syz [ 772.658427][ T5837] usb 7-1: Manufacturer: syz [ 772.658442][ T5837] usb 7-1: SerialNumber: syz [ 772.669002][ T5837] usb 7-1: config 0 descriptor?? [ 772.720163][ T5837] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 772.744501][ T5799] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.744531][ T5799] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 772.763558][ T5799] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 772.763681][ T5799] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 772.763768][ T5799] usb 8-1: SerialNumber: syz [ 773.071943][ T5799] usb 8-1: 0:1 : does not exist [ 773.071972][ T5799] usb 8-1: 0:11 : does not exist [ 773.071990][ T5799] usb 8-1: 0:181 : does not exist [ 773.181531][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 773.216728][ T5799] usb 8-1: USB disconnect, device number 2 [ 773.341063][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 773.341095][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 773.341116][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 773.341170][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.341197][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.343418][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 773.343450][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 773.343473][ T9] usb 9-1: Product: syz [ 773.343488][ T9] usb 9-1: Manufacturer: syz [ 773.424773][ T8534] udevd[8534]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 773.517082][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 773.517107][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 773.619791][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 773.619832][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 773.732121][ T5879] usb 9-1: USB disconnect, device number 13 [ 774.145246][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 775.365803][T10243] netlink: 32 bytes leftover after parsing attributes in process `syz.5.917'. [ 776.049454][ T5890] usb 7-1: USB disconnect, device number 9 [ 776.085206][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 776.099747][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.099880][ T9] usb 8-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 776.099951][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.251744][ T9] usb 8-1: config 0 descriptor?? [ 778.983983][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 778.995743][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 779.081046][ T9] usb 8-1: USB disconnect, device number 3 [ 780.455249][ T9] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 780.607819][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 780.607880][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 780.607910][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.607938][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 780.607966][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 780.609395][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 780.609451][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 780.609488][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.609515][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 780.609543][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 780.802716][ T9] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 780.802765][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 780.802785][ T9] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 780.802804][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 780.802823][ T9] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 780.865901][ T9] usb 8-1: string descriptor 0 read error: -22 [ 780.866038][ T9] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 780.866057][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.982328][ T9] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 781.170858][ T5837] usb 8-1: USB disconnect, device number 4 [ 782.886738][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.933'. [ 784.765736][T10339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 785.437811][T10338] hub 8-0:1.0: USB hub found [ 785.444193][T10338] hub 8-0:1.0: 1 port detected [ 785.657781][ T5890] IPVS: starting estimator thread 0... [ 785.786793][T10348] IPVS: using max 8 ests per chain, 19200 per kthread [ 786.347941][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.957'. [ 787.220405][ T49] libceph: connect (1)[c::]:6789 error -101 [ 787.229171][ T49] libceph: mon0 (1)[c::]:6789 connect error [ 787.331527][T10367] ceph: No mds server is up or the cluster is laggy [ 787.598118][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 787.598327][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 787.965245][ T5890] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 788.341394][T10381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 788.360107][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.360146][ T5890] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.360170][ T5890] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.360215][ T5890] usb 8-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 788.360240][ T5890] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.425227][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 788.452892][ T5890] usb 8-1: config 0 descriptor?? [ 788.578947][ T9] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 788.579035][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.579058][ T9] usb 6-1: config 0 has no interface number 0 [ 788.579110][ T9] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 788.579188][ T9] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 788.584327][ T9] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 788.584416][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.584439][ T9] usb 6-1: Product: syz [ 788.584455][ T9] usb 6-1: Manufacturer: syz [ 788.584470][ T9] usb 6-1: SerialNumber: syz [ 788.784510][ T9] usb 6-1: config 0 descriptor?? [ 789.098210][ T5890] saitek 0003:06A3:0621.0004: item fetching failed at offset 0/3 [ 789.099023][ T5890] saitek 0003:06A3:0621.0004: parse failed [ 789.099145][ T5890] saitek 0003:06A3:0621.0004: probe with driver saitek failed with error -22 [ 789.235259][ T5890] usb 8-1: USB disconnect, device number 5 [ 789.376607][T10387] lo: entered promiscuous mode [ 789.376831][T10387] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 789.513907][ T5890] usb 6-1: USB disconnect, device number 4 [ 790.232167][ T38] audit: type=1326 audit(1769649841.003:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232230][ T38] audit: type=1326 audit(1769649841.003:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232278][ T38] audit: type=1326 audit(1769649841.003:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232325][ T38] audit: type=1326 audit(1769649841.003:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232372][ T38] audit: type=1326 audit(1769649841.003:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232420][ T38] audit: type=1326 audit(1769649841.003:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232470][ T38] audit: type=1326 audit(1769649841.003:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 790.232517][ T38] audit: type=1326 audit(1769649841.003:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10392 comm="syz.8.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852b31aeb9 code=0x7ffc0000 [ 791.040865][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 791.054349][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 791.306733][T10405] ceph: No mds server is up or the cluster is laggy [ 791.405715][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 791.405937][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 791.599939][T10414] netlink: 40 bytes leftover after parsing attributes in process `syz.8.982'. [ 792.846145][ T38] audit: type=1326 audit(1769649843.603:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10409 comm="syz.6.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7fc00000 [ 793.120283][T10436] netlink: 60 bytes leftover after parsing attributes in process `syz.8.985'. [ 793.121716][T10436] netlink: 60 bytes leftover after parsing attributes in process `syz.8.985'. [ 793.226750][T10442] ucma_write: process 102 (syz.5.984) changed security contexts after opening file descriptor, this is not allowed. [ 793.455344][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.7.988'. [ 793.952077][T10467] netlink: 32 bytes leftover after parsing attributes in process `syz.7.996'. [ 793.952106][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.7.996'. [ 794.157543][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.999'. [ 794.157577][T10475] block nbd0: Unsupported socket: should be TCP or UNIX. [ 795.639832][ T38] audit: type=1326 audit(1769649846.383:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.640182][ T38] audit: type=1326 audit(1769649846.383:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.640472][ T38] audit: type=1326 audit(1769649846.393:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.640938][ T38] audit: type=1326 audit(1769649846.393:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.641199][ T38] audit: type=1326 audit(1769649846.393:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.641529][ T38] audit: type=1326 audit(1769649846.403:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.641958][ T38] audit: type=1326 audit(1769649846.403:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 795.642189][ T38] audit: type=1326 audit(1769649846.403:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10509 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 796.972681][ T38] audit: type=1326 audit(1769649847.713:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10521 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 796.973244][ T38] audit: type=1326 audit(1769649847.713:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10521 comm="syz.5.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 797.823616][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1023'. [ 798.703386][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1038'. [ 799.414487][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 799.414669][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 799.415694][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 799.415903][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 799.728059][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 799.731525][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 800.046024][T10575] ceph: No mds server is up or the cluster is laggy [ 800.354433][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 800.355314][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 802.751347][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 802.751369][ T38] audit: type=1326 audit(1769649853.533:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10611 comm="syz.1.1050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77e0f5aeb9 code=0x0 [ 803.482508][ T38] audit: type=1326 audit(1769649854.263:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.482706][ T38] audit: type=1326 audit(1769649854.263:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.483819][ T38] audit: type=1326 audit(1769649854.263:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.489017][ T38] audit: type=1326 audit(1769649854.263:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.522007][ T38] audit: type=1326 audit(1769649854.303:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.625209][ T38] audit: type=1326 audit(1769649854.313:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.625276][ T38] audit: type=1326 audit(1769649854.363:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.625325][ T38] audit: type=1326 audit(1769649854.403:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 803.625372][ T38] audit: type=1326 audit(1769649854.403:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10618 comm="syz.6.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe4dbe2aeb9 code=0x7ffc0000 [ 805.305875][ T5803] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 805.305914][ T5803] Bluetooth: hci0: Malformed LE Event: 0x0d [ 808.441144][T10679] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1076'. [ 811.491695][T10715] hub 8-0:1.0: USB hub found [ 811.509880][T10715] hub 8-0:1.0: 1 port detected [ 813.977773][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.977849][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.796772][ T808] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 815.966190][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.966228][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.966277][ T808] usb 7-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 815.966301][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.017531][ T808] usb 7-1: config 0 descriptor?? [ 817.672403][ T808] uclogic 0003:5543:0042.0005: unbalanced delimiter at end of report description [ 817.678096][ T808] uclogic 0003:5543:0042.0005: parse failed [ 817.678221][ T808] uclogic 0003:5543:0042.0005: probe with driver uclogic failed with error -22 [ 817.880455][ T808] usb 7-1: USB disconnect, device number 10 [ 819.861202][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1126'. [ 821.627948][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 823.943322][ T38] audit: type=1326 audit(1769649874.723:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.943388][ T38] audit: type=1326 audit(1769649874.723:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.943441][ T38] audit: type=1326 audit(1769649874.723:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.943709][ T38] audit: type=1326 audit(1769649874.723:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.943851][ T38] audit: type=1326 audit(1769649874.723:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.944020][ T38] audit: type=1326 audit(1769649874.723:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.944765][ T38] audit: type=1326 audit(1769649874.723:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.944817][ T38] audit: type=1326 audit(1769649874.723:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10830 comm="syz.5.1139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83c3b6aeb9 code=0x7ffc0000 [ 823.975231][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 824.165204][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 824.177951][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.178014][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.178043][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 824.178067][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 824.178091][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 824.180779][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 824.180809][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 824.180830][ T9] usb 8-1: Manufacturer: syz [ 824.280642][ T9] usb 8-1: config 0 descriptor?? [ 824.575161][ T9] rc_core: IR keymap rc-hauppauge not found [ 824.575183][ T9] Registered IR keymap rc-empty [ 824.597959][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.617935][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.639715][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 824.661444][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input11 [ 824.713570][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.736323][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.768896][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.795376][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.815286][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.845636][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.875492][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 824.895264][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 826.114005][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 826.276914][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1148'. [ 826.785746][T10864] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 826.802972][ T9] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 826.882493][ T9] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 826.882524][ T9] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 827.082168][ T9] usb 8-1: USB disconnect, device number 6 [ 828.755288][T10878] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 829.245216][T10885] netlink: 'syz.1.1155': attribute type 1 has an invalid length. [ 829.245245][T10885] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1155'. [ 829.245278][T10885] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1155'. [ 829.396462][T10891] hub 8-0:1.0: USB hub found [ 829.397057][T10891] hub 8-0:1.0: 1 port detected [ 830.035961][T10902] netlink: 'syz.1.1162': attribute type 4 has an invalid length. [ 830.035987][T10902] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1162'. [ 830.846562][T10914] program syz.6.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 831.685275][T10903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1161'. [ 832.522280][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1174'. [ 833.081825][T10938] hub 8-0:1.0: USB hub found [ 833.084098][T10938] hub 8-0:1.0: 1 port detected [ 834.600660][T10948] syz_tun: entered allmulticast mode [ 834.603910][T10947] syz_tun: left allmulticast mode [ 834.647712][ T945] kernel write not supported for file /uinput (pid: 945 comm: kworker/0:2) [ 834.940056][ T945] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 835.089845][ T945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 835.089878][ T945] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 835.089918][ T945] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 835.089944][ T945] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.119875][ T945] usb 8-1: config 0 descriptor?? [ 835.568437][ T5879] usb 8-1: USB disconnect, device number 7 [ 835.620229][T10958] pim6reg: entered allmulticast mode [ 835.635585][T10958] pim6reg: left allmulticast mode [ 836.768564][T10951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1182'. [ 837.399787][T10972] hub 8-0:1.0: USB hub found [ 837.400187][T10972] hub 8-0:1.0: 1 port detected [ 837.822360][T10978] Bluetooth: MGMT ver 1.23 [ 838.059223][T10982] hub 8-0:1.0: USB hub found [ 838.059701][T10982] hub 8-0:1.0: 1 port detected [ 838.862317][T10986] netlink: 212368 bytes leftover after parsing attributes in process `syz.7.1198'. [ 839.781817][T11003] hub 8-0:1.0: USB hub found [ 839.782068][T11003] hub 8-0:1.0: 1 port detected [ 840.763619][T11008] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 842.376256][T11014] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1199'. [ 842.572780][ T945] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 842.739524][ T945] usb 7-1: config 0 has an invalid interface number: 117 but max is 0 [ 842.739555][ T945] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 842.739576][ T945] usb 7-1: config 0 has no interface number 0 [ 842.739624][ T945] usb 7-1: config 0 interface 117 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 842.739653][ T945] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 842.739680][ T945] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 842.739708][ T945] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.744380][ T945] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 842.744412][ T945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.744434][ T945] usb 7-1: Product: syz [ 842.744449][ T945] usb 7-1: Manufacturer: syz [ 842.744463][ T945] usb 7-1: SerialNumber: syz [ 842.838262][ T945] usb 7-1: config 0 descriptor?? [ 842.859277][T11016] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 843.100665][ T945] usbtouchscreen 7-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 843.124091][ T945] usb 7-1: USB disconnect, device number 11 [ 843.159744][T10723] udevd[10723]: setting owner of /dev/bus/usb/007/011 to uid=0, gid=0 failed: No such file or directory [ 844.505260][T11045] hub 8-0:1.0: USB hub found [ 844.505815][T11045] hub 8-0:1.0: 1 port detected [ 845.194066][T11047] ceph: No mds server is up or the cluster is laggy [ 845.195744][ T49] libceph: connect (1)[c::]:6789 error -101 [ 845.195959][ T49] libceph: mon0 (1)[c::]:6789 connect error [ 845.764975][T10819] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 845.876456][ T49] libceph: connect (1)[c::]:6789 error -101 [ 845.876636][ T49] libceph: mon0 (1)[c::]:6789 connect error [ 845.994192][T11053] ceph: No mds server is up or the cluster is laggy [ 846.023485][ T5799] libceph: connect (1)[c::]:6789 error -101 [ 846.023705][ T5799] libceph: mon0 (1)[c::]:6789 connect error [ 846.099668][T11058] ceph: No mds server is up or the cluster is laggy [ 846.210796][T11058] syz.1.1213 (11058) used greatest stack depth: 18400 bytes left [ 846.346953][T11052] syz.8.1216 (11052) used greatest stack depth: 18080 bytes left [ 846.997521][T11079] hub 8-0:1.0: USB hub found [ 846.997938][T11079] hub 8-0:1.0: 1 port detected [ 847.085878][T10819] Bluetooth: hci1: command 0x0406 tx timeout [ 847.885228][ T38] audit: type=1326 audit(1769649898.663:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1512aeb9 code=0x7ffc0000 [ 847.925182][ T5799] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 847.932259][ T38] audit: type=1326 audit(1769649898.693:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1512aeb9 code=0x7ffc0000 [ 847.932320][ T38] audit: type=1326 audit(1769649898.713:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.7.1226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fec1512aeb9 code=0x7ffc0000 [ 847.932392][ T38] audit: type=1326 audit(1769649898.713:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11086 comm="syz.7.1226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec1512aeb9 code=0x0 [ 848.089701][ T5799] usb 6-1: Using ep0 maxpacket: 32 [ 848.099317][ T5799] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 848.099395][ T5799] usb 6-1: config 0 has no interface number 0 [ 848.124215][ T5799] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 848.124248][ T5799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.124269][ T5799] usb 6-1: Product: syz [ 848.124286][ T5799] usb 6-1: Manufacturer: syz [ 848.124301][ T5799] usb 6-1: SerialNumber: syz [ 848.237322][ T5799] usb 6-1: config 0 descriptor?? [ 848.292062][ T5799] smsc95xx v2.0.0 [ 849.199419][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 849.557782][T11092] ceph: No mds server is up or the cluster is laggy [ 849.563542][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 849.563761][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 849.858172][T11098] hub 8-0:1.0: USB hub found [ 849.859225][T11098] hub 8-0:1.0: 1 port detected [ 849.884571][ T5799] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 849.884615][ T5799] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 849.889410][ T5799] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 849.890066][ T5799] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 849.988921][ T5799] usb 6-1: USB disconnect, device number 5 [ 852.717769][T11129] ceph: No mds server is up or the cluster is laggy [ 852.718117][T11131] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 852.735717][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 852.735993][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 852.999353][ T49] libceph: connect (1)[c::]:6789 error -101 [ 852.999564][ T49] libceph: mon0 (1)[c::]:6789 connect error [ 853.403609][T11153] hub 8-0:1.0: USB hub found [ 853.404009][T11153] hub 8-0:1.0: 1 port detected [ 855.097288][T11187] ceph: No mds server is up or the cluster is laggy [ 855.101483][ T808] libceph: connect (1)[c::]:6789 error -101 [ 855.101693][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 856.511474][T11213] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1265'. [ 856.626097][ T5803] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 856.630043][ T5803] Bluetooth: hci1: unexpected event for opcode 0x203e [ 857.024806][ T38] audit: type=1326 audit(1769649907.803:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.024868][ T38] audit: type=1326 audit(1769649907.803:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.024916][ T38] audit: type=1326 audit(1769649907.803:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.024973][ T38] audit: type=1326 audit(1769649907.803:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.025024][ T38] audit: type=1326 audit(1769649907.803:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.026213][ T38] audit: type=1326 audit(1769649907.803:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.026263][ T38] audit: type=1326 audit(1769649907.803:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.026311][ T38] audit: type=1326 audit(1769649907.803:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11220 comm="syz.1.1268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e0f5aeb9 code=0x7ffc0000 [ 857.370017][T11236] hub 8-0:1.0: USB hub found [ 857.370378][T11236] hub 8-0:1.0: 1 port detected [ 857.595213][ T7483] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 857.746893][ T7483] usb 6-1: Using ep0 maxpacket: 16 [ 857.753695][ T7483] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 857.753730][ T7483] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.753751][ T7483] usb 6-1: Product: syz [ 857.753765][ T7483] usb 6-1: Manufacturer: syz [ 857.753781][ T7483] usb 6-1: SerialNumber: syz [ 857.804350][ T7483] usb 6-1: config 0 descriptor?? [ 858.383993][ T7483] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 859.088214][T11254] ceph: No mds server is up or the cluster is laggy [ 859.145439][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 859.145662][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 859.225179][ T7483] usb 6-1: USB disconnect, device number 6 [ 859.802768][T11269] bridge0: entered promiscuous mode [ 859.803040][T11269] macvlan2: entered promiscuous mode [ 860.655819][ T808] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 860.689875][T10819] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 860.802049][T10819] Bluetooth: hci1: Injecting HCI hardware error event [ 861.581141][ T808] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 861.581173][ T808] usb 7-1: config 0 has no interface number 0 [ 861.584216][ T808] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 861.584248][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.584270][ T808] usb 7-1: Product: syz [ 861.584285][ T808] usb 7-1: Manufacturer: syz [ 861.584301][ T808] usb 7-1: SerialNumber: syz [ 861.605746][ T808] usb 7-1: config 0 descriptor?? [ 862.088269][T11310] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1302'. [ 862.174062][T11316] netlink: 'syz.8.1304': attribute type 1 has an invalid length. [ 862.174090][T11316] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1304'. [ 862.174107][T11316] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1304'. [ 862.174123][T11316] netlink: 'syz.8.1304': attribute type 1 has an invalid length. [ 862.174140][T11316] netlink: 'syz.8.1304': attribute type 8 has an invalid length. [ 862.174155][T11316] netlink: 582 bytes leftover after parsing attributes in process `syz.8.1304'. [ 862.265433][T10819] Bluetooth: hci1: command 0x0406 tx timeout [ 862.272676][ T808] usb 7-1: Firmware: major: 12, minor: 114, hardware type: UNKNOWN (13) [ 862.317305][ T5803] Bluetooth: hci1: hardware error 0x00 [ 862.963481][T11319] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 863.158421][ T808] usb 7-1: failed to fetch extended address, random address set [ 863.158460][ T808] usb 7-1: atusb_probe: initialization failed, error = -524 [ 863.293074][ T808] atusb 7-1:0.128: probe with driver atusb failed with error -524 [ 863.340327][ T808] usb 7-1: USB disconnect, device number 12 [ 863.742570][T11341] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 864.686596][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 864.966215][T11354] ceph: No mds server is up or the cluster is laggy [ 864.972286][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 865.491992][ T5803] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 865.806065][T11374] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1324'. [ 866.231244][T11387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.356604][T11391] hub 8-0:1.0: USB hub found [ 866.357920][T11391] hub 8-0:1.0: 1 port detected [ 866.447607][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1320'. [ 866.774951][T11400] 9p: Bad value for 'rfdno' [ 867.535919][T11404] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 867.665246][ T5890] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 867.825647][ T5890] usb 8-1: Using ep0 maxpacket: 32 [ 867.828570][ T5890] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 867.828599][ T5890] usb 8-1: config 0 has no interface number 0 [ 867.832425][ T5890] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 867.832458][ T5890] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.832478][ T5890] usb 8-1: Product: syz [ 867.832494][ T5890] usb 8-1: Manufacturer: syz [ 867.832510][ T5890] usb 8-1: SerialNumber: syz [ 867.925540][ T5890] usb 8-1: config 0 descriptor?? [ 867.931480][ T5890] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 868.035846][T11412] program syz.8.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.149265][ T5890] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 868.157682][ T5890] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 868.430094][T11418] usb 8-1: USB disconnect, device number 8 [ 868.718883][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 868.746594][T11418] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 868.754806][T11418] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 868.755959][T11418] quatech2 8-1:0.51: device disconnected [ 868.773651][T11421] hub 8-0:1.0: USB hub found [ 868.774013][T11421] hub 8-0:1.0: 1 port detected [ 868.802574][ T5799] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] SMP KASAN PTI [ 868.802610][ T5799] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 868.802650][ T5799] CPU: 0 UID: 0 PID: 5799 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 868.802690][ T5799] Tainted: [L]=SOFTLOCKUP [ 868.802698][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 868.802714][ T5799] Workqueue: usb_hub_wq hub_event [ 868.802750][ T5799] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 868.802781][ T5799] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 4e 95 ce fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6b f9 32 fb 4d 8b 1e 48 89 df 2e e8 [ 868.802803][ T5799] RSP: 0018:ffffc90004eaf288 EFLAGS: 00010202 [ 868.802822][ T5799] RAX: 0000000000000008 RBX: ffff888144318c40 RCX: dffffc0000000000 [ 868.802839][ T5799] RDX: ffffc9001a974000 RSI: 00000000000002f2 RDI: 00000000000002f3 [ 868.802855][ T5799] RBP: ffff888040f5d46c R08: ffffffff8f47de77 R09: 1ffffffff1e8fbce [ 868.802872][ T5799] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffff888144318c40 [ 868.802889][ T5799] R13: 1ffff110050944a1 R14: 0000000000000040 R15: 1ffff11028863187 [ 868.802906][ T5799] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 868.802924][ T5799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.802939][ T5799] CR2: 00007fe4da064ff8 CR3: 0000000030ff4000 CR4: 00000000003526f0 [ 868.802959][ T5799] Call Trace: [ 868.802967][ T5799] [ 868.802982][ T5799] set_link_state+0x80b/0x1220 [ 868.803014][ T5799] dummy_hub_control+0xa09/0x1a00 [ 868.803040][ T5799] ? usb_hcd_submit_urb+0x786/0x1b50 [ 868.803070][ T5799] usb_hcd_submit_urb+0xdbe/0x1b50 [ 868.803104][ T5799] usb_start_wait_urb+0x12b/0x510 [ 868.803141][ T5799] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 868.803186][ T5799] usb_control_msg+0x232/0x3e0 [ 868.803222][ T5799] hub_port_reset+0x3c7/0x1820 [ 868.803257][ T5799] hub_port_init+0x299/0x28c0 [ 868.803289][ T5799] hub_event+0x25d3/0x4f60 [ 868.803337][ T5799] ? __pfx_hub_event+0x10/0x10 [ 868.803359][ T5799] ? process_scheduled_works+0xa0f/0x17a0 [ 868.803400][ T5799] ? process_scheduled_works+0xa0f/0x17a0 [ 868.803435][ T5799] ? process_scheduled_works+0xa0f/0x17a0 [ 868.803478][ T5799] process_scheduled_works+0xaec/0x17a0 [ 868.803531][ T5799] ? __pfx_process_scheduled_works+0x10/0x10 [ 868.803566][ T5799] ? do_raw_spin_lock+0x12b/0x2f0 [ 868.803603][ T5799] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 868.803643][ T5799] ? schedule+0x90/0x360 [ 868.803682][ T5799] worker_thread+0xda6/0x1360 [ 868.803721][ T5799] ? __kthread_parkme+0x19c/0x1f0 [ 868.803748][ T5799] kthread+0x726/0x8b0 [ 868.803777][ T5799] ? __pfx_worker_thread+0x10/0x10 [ 868.803803][ T5799] ? __pfx_kthread+0x10/0x10 [ 868.803829][ T5799] ? rt_spin_unlock+0x14f/0x200 [ 868.803855][ T5799] ? rt_spin_unlock+0x160/0x200 [ 868.803876][ T5799] ? __pfx_kthread+0x10/0x10 [ 868.803904][ T5799] ret_from_fork+0x51b/0xa40 [ 868.803928][ T5799] ? __pfx_ret_from_fork+0x10/0x10 [ 868.803950][ T5799] ? __switch_to+0xc82/0x1410 [ 868.803986][ T5799] ? __pfx_kthread+0x10/0x10 [ 868.804013][ T5799] ret_from_fork_asm+0x1a/0x30 [ 868.804057][ T5799] [ 868.804071][ T5799] Modules linked in: [ 868.804111][ T5799] ---[ end trace 0000000000000000 ]--- [ 868.804160][ T5799] RIP: 0010:usb_gadget_udc_reset+0x27/0x60 [ 868.804190][ T5799] Code: 90 90 90 f3 0f 1e fa 41 56 53 49 89 f6 48 89 fb e8 4e 95 ce fa 49 83 c6 40 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 6b f9 32 fb 4d 8b 1e 48 89 df 2e e8 [ 868.804211][ T5799] RSP: 0018:ffffc90004eaf288 EFLAGS: 00010202 [ 868.804231][ T5799] RAX: 0000000000000008 RBX: ffff888144318c40 RCX: dffffc0000000000 [ 868.804248][ T5799] RDX: ffffc9001a974000 RSI: 00000000000002f2 RDI: 00000000000002f3 [ 868.804264][ T5799] RBP: ffff888040f5d46c R08: ffffffff8f47de77 R09: 1ffffffff1e8fbce [ 868.804283][ T5799] R10: dffffc0000000000 R11: fffffbfff1e8fbcf R12: ffff888144318c40 [ 868.804301][ T5799] R13: 1ffff110050944a1 R14: 0000000000000040 R15: 1ffff11028863187 [ 868.804317][ T5799] FS: 0000000000000000(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 868.804336][ T5799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.804352][ T5799] CR2: 00007fe4da064ff8 CR3: 0000000030ff4000 CR4: 00000000003526f0 [ 868.804379][ T5799] Kernel panic - not syncing: Fatal exception [ 868.804983][ T5799] Kernel Offset: disabled