last executing test programs: 5m33.826095559s ago: executing program 3 (id=561): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) creat(&(0x7f0000000380)='./file0\x00', 0xecf86c37d5304961) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x20010}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(&(0x7f0000000040)='./file0\x00', 0x20000, 0x41) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$9p_fd(0x0, 0x0, 0x0, 0x4080, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000000", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2, @ANYBLOB], 0x3c, 0x0) 5m33.001522072s ago: executing program 3 (id=564): mkdir(0x0, 0x54) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x315b83, 0x0) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x15, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xf8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) fsetxattr$security_ima(r0, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) syz_usb_connect(0x3, 0x664, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xee, 0xce, 0x10, 0x9022, 0xd630, 0x97a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x652, 0x4, 0x6, 0x0, 0xc0, 0xc, [{{0x9, 0x4, 0x1c, 0x0, 0x6, 0x35, 0xc2, 0x69, 0x63, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc023, 0x6, 0xa0}, @as_header={0x7, 0x24, 0x1, 0x0, 0x5, 0x3}]}, @generic={0xa2, 0xe, "a6e0c681e2bd48ae3570ecb50c35ce2ab4aa725178620c5f1fd5585aab6b36057de3b4390b0bdcddf156a60b66351f38515f727b4e8bab6b2777d73bc5c583afffc684f75f4edf92372389c58b3344e528ab51b3f38a71004b9c779be9d16c0ef65f6b6865236fe976e264f06245de006ca85968cd5399573b0e1b4125dc7335caf225bbd0c703502da0f4af943e50eda75cca641236138d923f6cb429e46c8c"}], [{{0x9, 0x5, 0x5, 0x0, 0x8, 0x10, 0xec, 0x3, [@generic={0x92, 0x21, "c7eb06d07b34fd13ec1fd90497fae21be7cf1d9b7a3eb7ae400a5b3cb1a683b262f98d0bd54405b35dde8b03aa5f5ab3ee13f3f5bffa90420da408bba71dad2d25264c83ea250b780666dfe8bda405d09922e30f28cee0efe8be542d2f11e04ae534475eae5920be0ba9f723892aa8154fbbd16ce82ee776def83ef09efac7a379b032bf4f873fa3d004ae48abbf630f"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x3, 0x3, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x10, 0x9}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x0, 0x6, 0x6, [@generic={0xf5, 0x23, "bae690d72f3c6488768865ba63c31a3899b8d8e0c13622063faeed6816d437249ee42ad10b28a6e4e3e754dd142f055a9dcdc28c3a6f4ff46c50b0ba14d575582dedd7d79047ad72a5bfb7b57fe85a803219b24868c1c35bd8acbb0e11a63b554f1189f504054ca283e7a81540ed7f6e6892034bdfb3c203991c58691cd8df1d9b49519ea4b10e58e58396869006f36e9880a2b85a90b98fa0cb659487a91f336d0333aac92b374e723456fe5ef723d95869c7b47a042d51ba4d0837cfd2a274e26fa4ba6ba0b717588ede1df2cc7e58404c1686318ecdce29585a246a366573adea3f76f3b70c82bcfe824db7f7c040dfdfee"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x628, 0x9, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}]}}, {{0x9, 0x4, 0x4, 0x5, 0x1, 0x84, 0xa0, 0x9a, 0x6, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "79ca75"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0xb73, 0x3ff, 0x7}, [@dmm={0x7, 0x24, 0x14, 0xf5fc, 0x80}, @obex={0x5}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0xd, 0x7}, @mdlm_detail={0x5f, 0x24, 0x13, 0x8, "c4988a6a19a24b9158224cf65a1c2b798888a03828133b349da8eba330b38cf8d5c99946ee93a26409f2e05ae75c3d27c9b1308d0e439a72719679efc26c67a1373f85934dfc0800773dac5d2481516f93b35fd46189f3bde48515"}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x8, 0x9, 0x7}]}], [{{0x9, 0x5, 0x6, 0x0, 0x200, 0x19, 0x4, 0xa4}}]}}, {{0x9, 0x4, 0x56, 0x9, 0xa, 0xff, 0x96, 0x46, 0xf8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "e6b8"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5cae, 0x1, 0x5}, {0x6, 0x24, 0x1a, 0x3, 0x30}, [@dmm={0x7, 0x24, 0x14, 0xa5, 0x6}, @obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x5, 0x8d}, @dmm={0x7, 0x24, 0x14, 0x400, 0x8}, @dmm={0x7, 0x24, 0x14, 0x7}]}], [{{0x9, 0x5, 0x5, 0x2, 0x440, 0x6, 0x40, 0x9, [@generic={0x16, 0x23, "6689eaf6943f05ae1bc3619df05b8f68c5a60fd9"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x7, 0x27}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0x1, 0x4, 0x8, [@generic={0xfc, 0xd, "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"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x9}, @generic={0xb9, 0x3, "883cc6f6d4c4918c1872d889b6039339738e118cc3c2dcb97dba1d85b4760abb43914c32f14d34e4c1152265c5b9785fe2863dd781a1bd28d2e40df4c576ae3c302d32aaa3b84883e76d275b0f2e10bbe02b93443bc232758fa0adfb01e80f93b28adf3bd2b44f5b3d3df619526aa1ee1d6da1a183ee57410e07e9a25266ae4f824ae8dc43a08d289f2a411f2c8e4cdce1d58f56102afe5aff46f90390d5767a452f6ba724d7a9f7c33f9f211abda94007ef43d34dd59a"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x0, 0xff, 0x7, 0x69}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0xe, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x6, 0x3, 0x1}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x1, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7b, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x2}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x80, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x28, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0xc, 0x40, 0x4, 0x86, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x70, 0x1}]}}]}}, {{0x9, 0x4, 0xbf, 0x7, 0x2, 0xe0, 0xaa, 0x5e, 0xfb, [@generic={0x2, 0x24}, @uac_as={[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x3, "241e9158494c5a"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x3, 0x6, 0x2, "9d58cc"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x200, 0xa, 0x3, 0x69, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x9, 0xf, 0xe, [@generic={0x36, 0xe, "a2abdde1729358e3b3ebeddf97f74295e373f958589f3fff2bb4084aa9c341b279eeea145be0f0c53c401b83551e9320ce1d283a"}]}}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xa2, 0x1, 0x9, 0xff, 0xbe}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x480a}}]}) 5m29.353995509s ago: executing program 3 (id=565): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x10, 0xb, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc0dd99ed1c3c609a49cc151", 0xc4}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb", 0x44}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd8", 0x32}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000980)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8", 0xab}], 0x1}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m28.992339405s ago: executing program 3 (id=568): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 5m26.189782639s ago: executing program 3 (id=571): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x44, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x4001) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x240048c5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') write$USERIO_CMD_REGISTER(r5, 0x0, 0x0) 5m24.332445269s ago: executing program 3 (id=576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9, 0x8, 0x3}, &(0x7f0000000280), &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 5m8.123274175s ago: executing program 32 (id=576): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x19, "90f50180e64f61909103f1fbbc2b81c9f144d76e44c700100000e52829e7cb8393"}}) syz_io_uring_setup(0x318b, &(0x7f00000003c0)={0x0, 0xfec9, 0x8, 0x3}, &(0x7f0000000280), &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 20.109143373s ago: executing program 1 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x10000, &(0x7f0000000800)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x7a, &(0x7f0000000000)) r4 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) splice(r4, 0x0, r5, 0x0, 0x2000, 0x8) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x400, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) socket$inet_mptcp(0x2, 0x1, 0x106) 17.841619829s ago: executing program 5 (id=1169): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17.13825116s ago: executing program 5 (id=1172): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x62081, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004) mknod$loop(0x0, 0x6000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 16.936152913s ago: executing program 0 (id=1173): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 14.370965314s ago: executing program 1 (id=1178): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r4) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 13.140146103s ago: executing program 0 (id=1180): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d"], 0x3c}}, 0x0) 11.106391405s ago: executing program 0 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.025652617s ago: executing program 0 (id=1184): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioperm(0x2, 0x7, 0x13) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000700)=""/200, 0xc8, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000040)=""/58, 0x0, 0xeeee8000}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) 10.302076018s ago: executing program 2 (id=1186): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000004000008000000080ff951f8d2c1ba870c50d384ba7d4d9000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/27], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3010, 0x0, 0x0, 0x4}) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000004180)={0x2020}, 0x2020) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b40000000040900"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = open(&(0x7f0000000840)='./file1\x00', 0x2800, 0x71) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 10.16537994s ago: executing program 1 (id=1187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') 10.138580851s ago: executing program 4 (id=1188): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000043c0)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00') r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SG_IO(r4, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffd, 0x6, 0x68, @buffer={0xfb, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x10010, 0x4, 0x0}) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x4008000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500ffffffff000000002100000008000300", @ANYRES32=r2, @ANYBLOB="38002d800a00000002020202020202020200000a0000000101010000000000000004000a0000000202020202020000"], 0x54}}, 0x0) 9.452421212s ago: executing program 2 (id=1189): open(0x0, 0x108843, 0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) 8.176336801s ago: executing program 2 (id=1190): socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x1c6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f0000000300)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma,p']) 8.109990013s ago: executing program 4 (id=1191): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 7.972428175s ago: executing program 5 (id=1192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) close(r4) getpid() r5 = syz_usb_connect$hid(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "be181d82"}]}}, 0x0}, 0x0) 5.875428248s ago: executing program 4 (id=1193): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d"], 0x3c}}, 0x0) 4.871729623s ago: executing program 5 (id=1194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) userfaultfd(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4084004}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x24044004) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="12f0dda7f17f60", 0x7, 0x800, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') ioctl$TIOCSETD(r1, 0x5423, 0x0) 4.752965776s ago: executing program 4 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @initr0]}, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000340)={0xf8, 0x1}) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.684565126s ago: executing program 1 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xd2, &(0x7f0000000540)={@local, @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x6, 0x6, "184194", 0x9c, 0x6, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x5e, 0xa, 0x4, 0x5, 0x4a, 0x48, 0xd6b, [@empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}, @dstopts={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x2, 0x2, 0x7, 0x0, 0x3, 0x9, 0x3, 0x1, 0x3, 0x9, 0x3, 0x4e20, 0x4e20}, 0x3, 0x4}, 0x2}, 0x4}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x4001) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x6}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x90a3abbff9043444, 0x0, 0xffffffffffffffff}, @alu={0x0, 0x0, 0x4}, @exit={0x95, 0x0, 0x7b00}]}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000000)={&(0x7f00000000c0), 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfd}]}, 0x1c}}, 0x240048c5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x4, 0xa}]}]}]}]}, 0x2c}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/disk', 0x169a82, 0x18c) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(r6, 0x2285, 0x0) set_mempolicy(0x6, &(0x7f0000000040)=0x2003c, 0x5) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) socket$inet6(0xa, 0x3, 0x8000000003c) 4.095688336s ago: executing program 0 (id=1197): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2663}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000540)={0x11, 0x1, 0xc, 0x8001, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) ptrace(0x11, r4) accept4$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffd75, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfa}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) 3.860629009s ago: executing program 4 (id=1198): writev(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x4000032f}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 3.590357834s ago: executing program 5 (id=1199): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.15436682s ago: executing program 4 (id=1200): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x1, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00', 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) ustat(0x801, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 3.003713103s ago: executing program 1 (id=1201): open(0x0, 0x108843, 0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x28880, 0x8c) 2.603776209s ago: executing program 2 (id=1202): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x62081, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) 1.87387963s ago: executing program 5 (id=1203): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 1.819189431s ago: executing program 1 (id=1204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000240)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000003c0)='(\x00', &(0x7f0000000440)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000a00)='wsync', &(0x7f0000000b40)="b2", 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000840)='\x00\x9b~\xd7\xde\x91d\r\xa3e\xec=Z\xce\xb0\xdfr\xbfQ\x85n4\xf5T\xc2\x86;\x03K\x80pF\xeaK\xb4t\xef\'\n\x05\xc9\xcfc\x92\bE\xf9\xf9\xcf\x96\x99\xde\x1e3\xcdA\xf9\x1bj\xc3\x8b\xbe\xee\xb3e\xd8Mk\xf1+\xbf\xd5\x98\x8c\x13\xdc\x85\x17\xcd\xf8\xf5\a\xde9\xd1\x8b\xf0&P\x92\x99u8\xb6,#\x0f\x89\xd9ic\xb5\xba\xe7\x03\x8d-\v\xd3S\x98\x89@\x8aWLU\xb1\xc4i6\xa5\xb7\x1d\xf3s\xaf\x7f\xb16\xa2\xbe\xfa\xfa~2\x1d\xeb\xd0G\xdc\a\xa3\x93n\x82\xa7h\xd7\x83N\x8aW\xaa\xc1\xc7\xec\xea\x13\xbe\xf3fQ\xfa\x8cP\xa7\xc1O,\x83\xec\xa9\xeb\xb2 u\x15A\xde\f8T\x81\xccces\xfa\xef\xf4 =z\xfc\xef]~tY \xef8\r,x~\xa0,\xc7@\xc0\xef\xc1`\xec}\xa2\x8d\x95\xff0c\xcd\x02~\xb7\x1a\x93\xff\xcd\xadB7\x13\x84BPC\xa4\xa2O\xf0\xdd\xde\xc5H.y\xfc\xe9$\xf6\xa6t\xa3\xdbr\x00+\x01{\xfb-\x1f\x1b\xeb\xd9b\xf0\n\x99\x0f4\xfa_\x10\xd0%\xe7o\xc9\bO\xfe\xfb\xca\xf8\x9d]\xa1\x98(Nw\x87\xd15', &(0x7f0000000100)="8d", 0x1) close(r4) getpid() r5 = syz_usb_connect$hid(0x5, 0x62, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3232, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "be181d82"}]}}, 0x0}, 0x0) 1.403598448s ago: executing program 2 (id=1205): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setpgid(r2, r2) setpgid(0x0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) fspick(r4, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c001600421bff9d727dc600fedbdf250500000007fff70005b578516d171e9ff3598a3fe6824d27119527c0143da4a8ebad19600293e09e11b940217c9ee230701b8e8788ee3baea35fe1ca6ffbe99dff53eb7895003ef638fe394d023f117a39566e2398a0c0a39d891f1a4277d69aa0eae233116ad74fe7d4c13880560c19b7559b", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) 656.64324ms ago: executing program 0 (id=1206): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0xc000000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e20, 0x3, 'lc\x00', 0x2, 0x3, 0x4e}, {@private=0xa010102, 0x4e20, 0x2, 0xa, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'sed\x00', 0x6, 0x3, 0x1815}, {@private=0xa010102, 0xce20, 0x4, 0xa, 0x80812f58, 0x12d5c}}, 0x44) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCOUTQ(r5, 0x5411, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d79"], 0x3c}}, 0x0) 0s ago: executing program 2 (id=1207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) rmdir(&(0x7f0000000180)='./file1\x00') kernel console output (not intermixed with test programs): r on device batadv0 [ 78.744493][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 78.753495][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.763935][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.773686][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.786954][ T4265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.796998][ T4265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.806402][ T4265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.815609][ T4265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914097][ T4266] device veth0_vlan entered promiscuous mode [ 78.942070][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.950132][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.957871][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.971476][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.989288][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.998632][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.009207][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.020623][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.029307][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.037856][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.056184][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.288550][ T4266] device veth1_vlan entered promiscuous mode [ 79.462333][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.890981][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.929855][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.939551][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.949834][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.969307][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.979276][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.996805][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.029185][ T4266] device veth0_macvtap entered promiscuous mode [ 80.045934][ T4269] device veth0_vlan entered promiscuous mode [ 80.058342][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.068847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.086716][ T4266] device veth1_macvtap entered promiscuous mode [ 80.102153][ T4269] device veth1_vlan entered promiscuous mode [ 80.114260][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.116172][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.130695][ T4276] Bluetooth: hci2: command 0x0419 tx timeout [ 80.140462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.140841][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.161313][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.201237][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 80.202023][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 80.207323][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 80.214429][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 80.302813][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.316811][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.325805][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.335315][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.350361][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.363823][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.389654][ T4388] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 80.398180][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.420200][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.434908][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.871172][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.990980][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.078239][ T4269] device veth0_macvtap entered promiscuous mode [ 81.101425][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.121486][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.136085][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.332897][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.359133][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.435170][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.446323][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.456681][ T4266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.467349][ T4266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.479898][ T4266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.493758][ T4269] device veth1_macvtap entered promiscuous mode [ 81.511103][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.517230][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.534957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 81.547775][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.800163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.064593][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.078438][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.151722][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.195418][ T4266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.221012][ T4266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.266160][ T4266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.336139][ T4266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.392524][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.441751][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.470792][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.521149][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.580796][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.603255][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.623696][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.649318][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.671960][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.943902][ T4405] process 'syz.2.9' launched './file0' with NULL argv: empty string added [ 83.461074][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.469988][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.487307][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.506377][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.551615][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.563002][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.588498][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.610821][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.630756][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.650717][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.672485][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.710234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.755532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.783267][ T4269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.812809][ T4269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.835292][ T4269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.852279][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.858974][ T4269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 84.071003][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 84.083379][ T32] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 84.100991][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.110706][ T32] usb 3-1: Product: syz [ 84.114922][ T32] usb 3-1: Manufacturer: syz [ 84.119657][ T32] usb 3-1: SerialNumber: syz [ 84.131074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.140903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.141815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.149292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.157640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 84.165791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 84.174221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 84.324659][ T32] usb 3-1: config 0 descriptor?? [ 84.364449][ T32] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 84.513355][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.647628][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.727547][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.779082][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.794949][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.808212][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.651331][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.661194][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.680696][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.780830][ T4352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.796212][ T4352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.889307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.897941][ T32] gspca_stk1135: reg_w 0xd err -71 [ 85.910495][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 85.960929][ T32] gspca_stk1135: Sensor write failed [ 85.978666][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 85.995849][ T32] gspca_stk1135: Sensor write failed [ 86.016719][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 86.074191][ T4432] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.083263][ T32] gspca_stk1135: Sensor read failed [ 86.190810][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 86.200495][ T32] gspca_stk1135: Sensor read failed [ 86.210705][ T32] gspca_stk1135: Detected sensor type unknown (0x0) [ 86.250772][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 86.270744][ T32] gspca_stk1135: Sensor read failed [ 86.282950][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 86.290737][ T32] gspca_stk1135: Sensor read failed [ 86.350772][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 86.370700][ T32] gspca_stk1135: Sensor write failed [ 86.410809][ T32] gspca_stk1135: serial bus timeout: status=0x00 [ 86.450735][ T32] gspca_stk1135: Sensor write failed [ 86.490868][ T32] stk1135: probe of 3-1:0.0 failed with error -71 [ 86.611562][ T4432] F2FS-fs (loop7): Unable to read 1th superblock [ 86.620240][ T4432] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.651502][ T32] usb 3-1: USB disconnect, device number 2 [ 86.670813][ T4432] F2FS-fs (loop7): Unable to read 2th superblock [ 86.693642][ T951] cfg80211: failed to load regulatory.db [ 87.000789][ T4281] Bluetooth: hci4: command 0x0405 tx timeout [ 87.550798][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.154964][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.211263][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.240810][ T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 88.304831][ T32] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 88.583683][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.719998][ T32] usb 1-1: config 0 descriptor?? [ 89.927966][ T32] ryos 0003:1E7D:3232.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 90.378047][ T4463] fido_id (4463) used greatest stack depth: 20768 bytes left [ 90.515198][ T4469] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 90.532344][ T4469] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 90.590525][ T4469] netlink: 'syz.1.20': attribute type 3 has an invalid length. [ 90.598626][ T4469] netlink: 44 bytes leftover after parsing attributes in process `syz.1.20'. [ 90.801665][ T4449] syz.2.16 (4449) used greatest stack depth: 20336 bytes left [ 91.200913][ T4310] usb 1-1: USB disconnect, device number 2 [ 92.377125][ T4484] syz.0.23 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.232929][ T4507] Zero length message leads to an empty skb [ 94.317987][ T4509] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.120851][ T7] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 95.452973][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.231601][ T7] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 96.244596][ T7] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 96.258270][ T4526] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 96.267544][ T4526] F2FS-fs (loop7): Unable to read 1th superblock [ 96.274054][ T4526] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 96.284711][ T4526] F2FS-fs (loop7): Unable to read 2th superblock [ 96.293337][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.303916][ T7] usb 3-1: config 0 descriptor?? [ 98.574003][ T4549] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 98.766879][ T4539] syz.2.30 (4539) used greatest stack depth: 17448 bytes left [ 98.859513][ T4270] usb 3-1: USB disconnect, device number 3 [ 100.362637][ T4567] tmpfs: Unknown parameter 'quota' [ 100.383686][ T4567] netlink: 830 bytes leftover after parsing attributes in process `syz.4.41'. [ 101.348521][ T4564] Bluetooth: MGMT ver 1.22 [ 102.067456][ T4575] vivid-000: ================= START STATUS ================= [ 102.075547][ T4575] vivid-000: Radio HW Seek Mode: Bounded [ 102.082327][ T4575] vivid-000: Radio Programmable HW Seek: false [ 102.088698][ T4575] vivid-000: RDS Rx I/O Mode: Block I/O [ 102.094559][ T4575] vivid-000: Generate RBDS Instead of RDS: false [ 102.102061][ T4575] vivid-000: RDS Reception: true [ 102.107294][ T4575] vivid-000: RDS Program Type: 0 inactive [ 102.113244][ T4575] vivid-000: RDS PS Name: inactive [ 102.118673][ T4575] vivid-000: RDS Radio Text: inactive [ 102.124417][ T4575] vivid-000: RDS Traffic Announcement: false inactive [ 102.131444][ T4575] vivid-000: RDS Traffic Program: false inactive [ 102.138058][ T4575] vivid-000: RDS Music: false inactive [ 102.143794][ T4575] vivid-000: ================== END STATUS ================== [ 102.845775][ T4579] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 102.855259][ T4579] F2FS-fs (loop9): Unable to read 1th superblock [ 102.861782][ T4579] I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 102.871034][ T4579] F2FS-fs (loop9): Unable to read 2th superblock [ 103.189600][ T4588] netlink: 6 bytes leftover after parsing attributes in process `syz.2.46'. [ 103.198904][ T4588] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 103.230456][ T4588] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.034318][ T4594] netlink: 'syz.3.50': attribute type 20 has an invalid length. [ 105.033502][ T4593] netlink: 24 bytes leftover after parsing attributes in process `syz.3.50'. [ 106.159545][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.56'. [ 106.177229][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 106.674014][ T4620] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.683169][ T4620] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.691935][ T4620] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.700686][ T4620] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.717276][ T4638] fuse: Bad value for 'fd' [ 107.747573][ T4638] batman_adv: batadv0: Adding interface: dummy0 [ 107.754097][ T4638] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.779552][ T4638] batman_adv: batadv0: Interface activated: dummy0 [ 108.485258][ T4632] sctp: failed to load transform for md5: -2 [ 110.425396][ T4659] netlink: 6 bytes leftover after parsing attributes in process `syz.3.66'. [ 110.481782][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 110.533823][ T4659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.749262][ T4676] netlink: 'syz.1.69': attribute type 20 has an invalid length. [ 112.645723][ T4679] 9pnet_fd: Insufficient options for proto=fd [ 112.868579][ T4664] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 113.006193][ T4690] fuse: Bad value for 'fd' [ 113.023719][ T4690] batman_adv: batadv0: Adding interface: dummy0 [ 113.030162][ T4690] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.056295][ T4690] batman_adv: batadv0: Interface activated: dummy0 [ 113.210757][ T4270] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 114.850899][ T4270] usb 5-1: Using ep0 maxpacket: 16 [ 114.896757][ T4270] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 114.973907][ T4270] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 115.045150][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.962912][ T4270] usb 5-1: Product: syz [ 115.997681][ T4270] usb 5-1: Manufacturer: syz [ 116.027971][ T4270] usb 5-1: SerialNumber: syz [ 116.100617][ T4710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 116.136788][ T4710] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.145807][ T4710] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.154759][ T4710] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.163736][ T4710] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.281448][ T4270] usb 5-1: config 0 descriptor?? [ 116.404730][ T4270] usb 5-1: can't set config #0, error -71 [ 116.449044][ T4270] usb 5-1: USB disconnect, device number 2 [ 117.106596][ T4716] netlink: 32 bytes leftover after parsing attributes in process `syz.4.78'. [ 118.879535][ T4734] netlink: 'syz.2.82': attribute type 21 has an invalid length. [ 118.887649][ T4734] netlink: 'syz.2.82': attribute type 6 has an invalid length. [ 118.895511][ T4734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.82'. [ 119.679631][ T4740] tipc: Started in network mode [ 119.715646][ T4740] tipc: Node identity 4291a6d5eb84, cluster identity 4711 [ 119.855139][ T4740] tipc: Enabled bearer , priority 0 [ 119.888560][ T4744] device syzkaller0 entered promiscuous mode [ 120.887663][ T4740] tipc: Resetting bearer [ 120.911756][ T4332] tipc: Node number set to 2836768469 [ 121.252339][ T4739] tipc: Resetting bearer [ 121.389383][ T4739] tipc: Disabling bearer [ 122.480894][ T14] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 122.672496][ T14] usb 2-1: not running at top speed; connect to a high speed hub [ 122.712710][ T14] usb 2-1: config index 0 descriptor too short (expected 2322, got 18) [ 122.789454][ T14] usb 2-1: config 95 has an invalid interface number: 1 but max is 0 [ 122.852752][ T14] usb 2-1: config 95 has no interface number 0 [ 122.881961][ T14] usb 2-1: config 95 interface 1 has no altsetting 0 [ 122.901455][ T14] usb 2-1: language id specifier not provided by device, defaulting to English [ 122.989180][ T14] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 123.008040][ T4772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 123.029362][ T4772] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.038277][ T4772] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.047175][ T4772] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.056175][ T4772] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.089027][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.098923][ T14] usb 2-1: Product: syz [ 123.433182][ T14] usb 2-1: Manufacturer: syz [ 123.456072][ T14] usb 2-1: SerialNumber: syz [ 124.687248][ T14] usb 2-1: USB disconnect, device number 2 [ 124.894392][ T4785] autofs4:pid:4785:autofs_fill_super: called with bogus options [ 125.300313][ T4257] udevd[4257]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.395634][ T4800] device syzkaller0 entered promiscuous mode [ 127.442307][ T4800] tipc: Started in network mode [ 127.467885][ T4800] tipc: Node identity ae25d0aedfb6, cluster identity 4711 [ 127.481230][ T4800] tipc: Enabled bearer , priority 0 [ 127.520367][ T4799] tipc: Resetting bearer [ 127.748499][ T4799] tipc: Disabling bearer [ 128.229734][ T4810] Device name cannot be null; rc = [-22] [ 131.891060][ T951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.090992][ T951] usb 5-1: Using ep0 maxpacket: 16 [ 132.098013][ T951] usb 5-1: config 6 has an invalid interface number: 28 but max is 3 [ 132.111832][ T951] usb 5-1: config 6 has an invalid interface number: 4 but max is 3 [ 132.140875][ T951] usb 5-1: config 6 has an invalid interface number: 86 but max is 3 [ 132.188939][ T951] usb 5-1: config 6 has an invalid interface number: 191 but max is 3 [ 132.210855][ T951] usb 5-1: config 6 has no interface number 0 [ 132.299320][ T951] usb 5-1: config 6 has no interface number 1 [ 132.315990][ T951] usb 5-1: config 6 has no interface number 2 [ 132.323898][ T951] usb 5-1: config 6 has no interface number 3 [ 132.431031][ T951] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 132.763288][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.763650][ T951] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 132.769648][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.781297][ T951] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 132.798230][ T951] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 132.808982][ T951] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 132.835701][ T4416] sl0: compressed packet ignored [ 132.841285][ T951] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 132.860981][ T951] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 132.887086][ T951] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 132.957976][ T951] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 133.009412][ T951] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 133.030328][ T951] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 133.110700][ T951] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 133.137167][ T951] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 133.264744][ T951] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 133.290744][ T951] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 133.301808][ T951] usb 5-1: config 6 interface 4 has no altsetting 0 [ 133.309245][ T951] usb 5-1: config 6 interface 86 has no altsetting 0 [ 133.316086][ T951] usb 5-1: config 6 interface 191 has no altsetting 0 [ 133.327128][ T951] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 133.336543][ T951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.576035][ T951] usb 5-1: Product: syz [ 133.580875][ T951] usb 5-1: Manufacturer: syz [ 133.586206][ T951] usb 5-1: SerialNumber: syz [ 133.610575][ T951] usb 5-1: can't set config #6, error -71 [ 133.628925][ T951] usb 5-1: USB disconnect, device number 3 [ 133.947971][ T4849] tipc: Enabled bearer , priority 0 [ 133.977707][ T4851] ======================================================= [ 133.977707][ T4851] WARNING: The mand mount option has been deprecated and [ 133.977707][ T4851] and is ignored by this kernel. Remove the mand [ 133.977707][ T4851] option from the mount to silence this warning. [ 133.977707][ T4851] ======================================================= [ 133.979346][ T4849] device syzkaller0 entered promiscuous mode [ 134.108127][ T4853] tipc: Resetting bearer [ 134.336291][ T4847] tipc: Resetting bearer [ 134.421211][ T4847] tipc: Disabling bearer [ 139.073628][ T4310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 141.212907][ T4310] usb 3-1: device not accepting address 4, error -71 [ 143.604156][ T4915] Device name cannot be null; rc = [-22] [ 144.374747][ T4920] netlink: 'syz.4.131': attribute type 20 has an invalid length. [ 146.146426][ T4920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 147.701174][ T4949] Device name cannot be null; rc = [-22] [ 149.647897][ T4976] Device name cannot be null; rc = [-22] [ 151.390735][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.334040][ T7] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 152.348521][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.386009][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 152.408556][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.449146][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 152.523257][ T7] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 152.552083][ T7] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 152.570534][ T7] usb 4-1: Product: syz [ 153.104209][ T7] usb 4-1: Manufacturer: syz [ 153.153004][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 153.240640][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20410 ms [ 153.249014][ C1] sl0: transmit timed out, driver error? [ 153.664249][ T7] cdc_wdm 4-1:1.0: skipping garbage [ 153.763914][ T7] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 153.806061][ T7] cdc_wdm 4-1:1.0: Unknown control protocol [ 155.035074][ T4309] usb 4-1: USB disconnect, device number 2 [ 156.178370][ T5021] Device name cannot be null; rc = [-22] [ 156.885212][ T5022] netlink: 56 bytes leftover after parsing attributes in process `syz.1.160'. [ 156.924844][ T5022] netlink: 24 bytes leftover after parsing attributes in process `syz.1.160'. [ 161.030923][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.345822][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.377405][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.428703][ T7] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.519528][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.586668][ T7] usb 1-1: config 0 descriptor?? [ 162.750163][ T7] usb 1-1: language id specifier not provided by device, defaulting to English [ 162.971055][ T7] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 163.051224][ T7] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 163.220812][ T7] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 163.279156][ T7] usb 1-1: USB disconnect, device number 3 [ 166.738353][ T5093] netlink: 32 bytes leftover after parsing attributes in process `syz.1.180'. [ 166.890416][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 166.900375][ T5099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 174.247692][ T5168] tipc: Started in network mode [ 174.654758][ T5168] tipc: Node identity 7ad523b8d3d6, cluster identity 4711 [ 174.791755][ T5168] tipc: Enabled bearer , priority 0 [ 174.840004][ T5177] device syzkaller0 entered promiscuous mode [ 174.859082][ T5176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.208'. [ 174.923260][ T5166] tipc: Resetting bearer [ 175.911789][ T22] tipc: Node number set to 2835555256 [ 176.372180][ T5166] tipc: Disabling bearer [ 181.015960][ T5242] tipc: Started in network mode [ 181.971230][ T5242] tipc: Node identity 5a370926d835, cluster identity 4711 [ 181.978455][ T5242] tipc: Enabled bearer , priority 0 [ 182.011425][ T5242] device syzkaller0 entered promiscuous mode [ 182.104445][ T5241] tipc: Resetting bearer [ 182.239733][ T5241] tipc: Disabling bearer [ 184.196943][ T5263] netlink: 6 bytes leftover after parsing attributes in process `syz.1.228'. [ 184.208114][ T5263] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 184.240897][ T5263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.183195][ T5271] netlink: 'syz.4.230': attribute type 20 has an invalid length. [ 186.207431][ T5271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.230'. [ 187.362755][ T5296] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 187.413875][ T5296] netlink: 830 bytes leftover after parsing attributes in process `syz.3.235'. [ 188.146730][ T5298] tipc: Started in network mode [ 188.160798][ T5298] tipc: Node identity 3e50359fc6a7, cluster identity 4711 [ 188.228263][ T5298] tipc: Enabled bearer , priority 0 [ 188.282771][ T5301] device syzkaller0 entered promiscuous mode [ 188.386229][ T5297] tipc: Resetting bearer [ 188.444734][ T5297] tipc: Disabling bearer [ 190.126439][ T5316] Device name cannot be null; rc = [-22] [ 194.140529][ T5358] tipc: Enabled bearer , priority 0 [ 194.176350][ T5358] device syzkaller0 entered promiscuous mode [ 194.208152][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214558][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.227442][ T4774] sl0: compressed packet ignored [ 194.437614][ T5357] tipc: Resetting bearer [ 194.832099][ T5357] tipc: Disabling bearer [ 195.830257][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.250'. [ 195.890195][ T5369] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.899108][ T5369] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.907982][ T5369] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.916806][ T5369] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.291670][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 196.291721][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 196.292485][ T4271] Bluetooth: hci3: command 0x0406 tx timeout [ 196.292506][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 196.292542][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 197.041264][ T5383] netlink: 6 bytes leftover after parsing attributes in process `syz.0.253'. [ 197.050131][ T5383] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.058565][ T5383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.507137][ T5402] netlink: 'syz.1.257': attribute type 20 has an invalid length. [ 199.115088][ T5403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.257'. [ 202.289402][ T5447] Device name cannot be null; rc = [-22] [ 203.598813][ T5459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.271'. [ 210.155595][ T5522] vivid-002: ================= START STATUS ================= [ 210.207929][ T5522] vivid-002: Interlaced VBI Format: false [ 210.232050][ T5522] vivid-002: ================== END STATUS ================== [ 215.320705][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21100 ms [ 215.328810][ C1] sl0: transmit timed out, driver error? [ 215.334887][ T4297] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 215.346836][ T5565] tipc: Enabled bearer , priority 0 [ 215.643342][ T5567] tipc: Resetting bearer [ 215.723069][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.740688][ T4297] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.750810][ T4297] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.763824][ T4297] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 215.773189][ T4297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.795502][ T4297] usb 1-1: config 0 descriptor?? [ 215.844652][ T5564] tipc: Disabling bearer [ 216.231884][ T4297] ryos 0003:1E7D:3232.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 220.771006][ T4297] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 220.980744][ T4297] usb 2-1: Using ep0 maxpacket: 16 [ 220.987433][ T4297] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 220.996004][ T4297] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 221.292824][ T4297] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 221.301175][ T4297] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 221.309487][ T4297] usb 2-1: config 6 has no interface number 0 [ 221.315953][ T4297] usb 2-1: config 6 has no interface number 1 [ 221.347218][ T4297] usb 2-1: config 6 has no interface number 2 [ 221.414071][ T4297] usb 2-1: config 6 has no interface number 3 [ 221.420397][ T4297] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 221.479695][ T4297] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 221.680704][ T4297] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 221.960263][ T4297] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 221.960814][ T4310] usb 1-1: USB disconnect, device number 4 [ 222.255614][ T4297] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 222.411143][ T4297] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 222.424345][ T4297] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 222.436179][ T4297] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 222.446485][ T4297] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 222.457683][ T4297] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 222.485879][ T4297] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 222.591755][ T5645] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 222.638326][ T5645] netlink: 830 bytes leftover after parsing attributes in process `syz.2.314'. [ 223.013698][ T4297] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 223.034624][ T4297] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 223.050916][ T4297] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 223.151057][ T4297] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 223.238533][ T4297] usb 2-1: config 6 interface 4 has no altsetting 0 [ 223.273560][ T4297] usb 2-1: config 6 interface 86 has no altsetting 0 [ 223.789756][ T4297] usb 2-1: config 6 interface 191 has no altsetting 0 [ 225.369641][ T5673] netlink: 'syz.3.321': attribute type 20 has an invalid length. [ 225.405727][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.321'. [ 227.409903][ T4297] usb 2-1: string descriptor 0 read error: -71 [ 227.427714][ T4297] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 227.464814][ T4297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.663979][ T5688] device syzkaller0 entered promiscuous mode [ 227.670333][ T4297] usb 2-1: can't set config #6, error -71 [ 227.722233][ T5690] device vlan2 entered promiscuous mode [ 227.737011][ T4297] usb 2-1: USB disconnect, device number 3 [ 228.680532][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.327'. [ 233.365642][ T5740] netlink: 6 bytes leftover after parsing attributes in process `syz.2.338'. [ 233.376282][ T5740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 233.415004][ T5740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.200870][ T4310] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 235.380699][ T4310] usb 5-1: Using ep0 maxpacket: 16 [ 235.387565][ T4310] usb 5-1: config 6 has an invalid interface number: 28 but max is 3 [ 235.429251][ T4310] usb 5-1: config 6 has an invalid interface number: 4 but max is 3 [ 236.147795][ T4310] usb 5-1: config 6 has an invalid interface number: 86 but max is 3 [ 236.168541][ T4310] usb 5-1: config 6 has an invalid interface number: 191 but max is 3 [ 236.177428][ T4310] usb 5-1: config 6 has no interface number 0 [ 236.184131][ T4310] usb 5-1: config 6 has no interface number 1 [ 236.190461][ T4310] usb 5-1: config 6 has no interface number 2 [ 236.196982][ T4310] usb 5-1: config 6 has no interface number 3 [ 236.218316][ T4310] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 236.239813][ T4310] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 236.264670][ T4310] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 236.295686][ T4310] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 236.408531][ T4310] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 236.862307][ T4310] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 236.904179][ T4310] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 236.966279][ T4310] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 236.994224][ T4310] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 237.005387][ T4310] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 237.023563][ T4310] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 237.092952][ T4310] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 237.104943][ T4310] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 237.120701][ T4310] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 237.133831][ T4310] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 237.157385][ T4310] usb 5-1: config 6 interface 4 has no altsetting 0 [ 237.178002][ T4310] usb 5-1: config 6 interface 86 has no altsetting 0 [ 237.196943][ T4310] usb 5-1: config 6 interface 191 has no altsetting 0 [ 237.268122][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 239.168115][ T4310] usb 5-1: string descriptor 0 read error: -71 [ 239.177649][ T4310] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 239.187182][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.218549][ T4310] usb 5-1: can't set config #6, error -71 [ 239.287444][ T4310] usb 5-1: USB disconnect, device number 4 [ 239.977145][ T5790] netlink: 6 bytes leftover after parsing attributes in process `syz.4.352'. [ 239.986546][ T5790] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 240.004204][ T5790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.935342][ T5832] netlink: 'syz.3.360': attribute type 21 has an invalid length. [ 244.946782][ T5832] netlink: 'syz.3.360': attribute type 6 has an invalid length. [ 244.954780][ T5832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.360'. [ 248.901476][ T5867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.369'. [ 249.964753][ T5877] netlink: 'syz.3.374': attribute type 21 has an invalid length. [ 249.972959][ T5877] netlink: 'syz.3.374': attribute type 6 has an invalid length. [ 249.980863][ T5877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.374'. [ 250.698820][ T5888] Device name cannot be null; rc = [-22] [ 252.987095][ T5901] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 252.996395][ T5901] F2FS-fs (loop7): Unable to read 1th superblock [ 253.003013][ T5901] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 253.012224][ T5901] F2FS-fs (loop7): Unable to read 2th superblock [ 254.140754][ T4310] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 254.904495][ T4310] usb 5-1: config index 0 descriptor too short (expected 146, got 18) [ 254.927777][ T4310] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 254.944472][ T4310] usb 5-1: config 0 has no interface number 0 [ 255.482031][ T4310] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 255.506971][ T4310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.535429][ T4310] usb 5-1: Product: syz [ 255.539663][ T4310] usb 5-1: Manufacturer: syz [ 255.557598][ T4310] usb 5-1: SerialNumber: syz [ 255.579542][ T4310] usb 5-1: config 0 descriptor?? [ 255.600922][ T4310] sierra 5-1:0.153: Sierra USB modem converter detected [ 255.644144][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650964][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.659913][ T5675] sl0: compressed packet ignored [ 256.002676][ T4310] usb 5-1: USB disconnect, device number 5 [ 256.261194][ T4310] sierra 5-1:0.153: device disconnected [ 256.694053][ T5919] device syzkaller0 entered promiscuous mode [ 259.286141][ T5942] Device name cannot be null; rc = [-22] [ 261.816484][ T5958] netlink: 6 bytes leftover after parsing attributes in process `syz.0.393'. [ 261.825904][ T5958] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 261.842781][ T5958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.693703][ T5988] netlink: 'syz.4.403': attribute type 20 has an invalid length. [ 267.658226][ T5995] Device name cannot be null; rc = [-22] [ 267.785547][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.403'. [ 269.133215][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 270.560688][ T5116] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 271.621986][ T5116] usb 4-1: config index 0 descriptor too short (expected 146, got 18) [ 271.630218][ T5116] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 271.720673][ T5116] usb 4-1: config 0 has no interface number 0 [ 271.729226][ T5116] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 271.738486][ T5116] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.746579][ T5116] usb 4-1: Product: syz [ 271.751030][ T5116] usb 4-1: Manufacturer: syz [ 271.756280][ T5116] usb 4-1: SerialNumber: syz [ 271.801548][ T5116] usb 4-1: config 0 descriptor?? [ 271.832568][ T5116] sierra 4-1:0.153: Sierra USB modem converter detected [ 272.180369][ T5116] usb 4-1: USB disconnect, device number 3 [ 272.190377][ T5116] sierra 4-1:0.153: device disconnected [ 274.790544][ T6038] fuse: Unknown parameter 'fd0x000000000000000600000000000000000000' [ 276.120688][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20470 ms [ 276.128759][ C1] sl0: transmit timed out, driver error? [ 276.644016][ T6044] netlink: 'syz.1.415': attribute type 21 has an invalid length. [ 276.652789][ T6044] netlink: 'syz.1.415': attribute type 6 has an invalid length. [ 276.660748][ T6044] netlink: 132 bytes leftover after parsing attributes in process `syz.1.415'. [ 277.511044][ T6047] netlink: 'syz.3.417': attribute type 20 has an invalid length. [ 277.706649][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'. [ 281.015907][ T6085] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.025621][ T6085] F2FS-fs (loop3): Unable to read 1th superblock [ 281.037431][ T6085] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 281.047161][ T6085] F2FS-fs (loop3): Unable to read 2th superblock [ 281.863497][ T6095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 281.870344][ T6095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 281.879847][ T6095] vhci_hcd vhci_hcd.0: Device attached [ 281.954350][ T6096] vhci_hcd: connection closed [ 282.160704][ T7] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 282.424396][ T5675] vhci_hcd: stop threads [ 282.762814][ T5675] vhci_hcd: release socket [ 282.776224][ T5675] vhci_hcd: disconnect device [ 283.027138][ T6106] fuse: Unknown parameter 'fd0x000000000000000600000000000000000000' [ 283.048599][ T6106] batman_adv: batadv0: Adding interface: dummy0 [ 283.055079][ T6106] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.080790][ T6106] batman_adv: batadv0: Interface activated: dummy0 [ 286.166217][ T6120] tmpfs: Unknown parameter 'quota' [ 286.656997][ T6114] netlink: 'syz.0.433': attribute type 21 has an invalid length. [ 286.664891][ T6114] netlink: 'syz.0.433': attribute type 6 has an invalid length. [ 286.672588][ T6114] netlink: 132 bytes leftover after parsing attributes in process `syz.0.433'. [ 287.418764][ T6118] netlink: 830 bytes leftover after parsing attributes in process `syz.3.435'. [ 288.431793][ T7] vhci_hcd: vhci_device speed not set [ 288.920107][ T6148] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.930443][ T6148] F2FS-fs (loop3): Unable to read 1th superblock [ 288.938350][ T6148] I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 288.947762][ T6148] F2FS-fs (loop3): Unable to read 2th superblock [ 290.690541][ T6162] fuse: Unknown parameter 'fd0x000000000000000600000000000000000000' [ 290.714992][ T6162] batman_adv: batadv0: Adding interface: dummy0 [ 290.721587][ T6162] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.747280][ T6162] batman_adv: batadv0: Interface activated: dummy0 [ 292.300247][ T6163] netlink: 830 bytes leftover after parsing attributes in process `syz.1.446'. [ 293.027619][ T6165] tipc: Enabled bearer , priority 0 [ 293.099723][ T6169] netlink: 'syz.4.448': attribute type 21 has an invalid length. [ 293.109642][ T6169] netlink: 'syz.4.448': attribute type 6 has an invalid length. [ 293.119096][ T6169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.448'. [ 293.761426][ T6165] tipc: Resetting bearer [ 294.042421][ T4310] tipc: Node number set to 4176950687 [ 294.052094][ T6164] tipc: Disabling bearer [ 294.096143][ T4270] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 294.300678][ T4270] usb 2-1: Using ep0 maxpacket: 16 [ 294.329106][ T4270] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 294.396082][ T4270] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 294.539450][ T4270] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 294.742559][ T4270] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 294.766772][ T6181] tmpfs: Unknown parameter 'quota' [ 294.825943][ T4270] usb 2-1: config 6 has no interface number 0 [ 294.928154][ T4270] usb 2-1: config 6 has no interface number 1 [ 294.971714][ T4270] usb 2-1: config 6 has no interface number 2 [ 295.059600][ T4270] usb 2-1: config 6 has no interface number 3 [ 295.124492][ T4270] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 295.233814][ T4270] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 295.246466][ T4270] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 295.260390][ T4270] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 295.271580][ T4270] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 295.284831][ T4270] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 295.592504][ T4270] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 295.826211][ T4270] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 295.829228][ T6175] netlink: 830 bytes leftover after parsing attributes in process `syz.4.450'. [ 295.898809][ T4270] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 295.910805][ T4270] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 295.922231][ T4270] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 295.933130][ T4270] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 295.944282][ T4270] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 295.956537][ T4270] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 295.969521][ T4270] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 295.984981][ T4270] usb 2-1: config 6 interface 4 has no altsetting 0 [ 295.995254][ T4270] usb 2-1: config 6 interface 86 has no altsetting 0 [ 296.147255][ T4270] usb 2-1: config 6 interface 191 has no altsetting 0 [ 296.186815][ T4270] usb 2-1: string descriptor 0 read error: -71 [ 296.194847][ T4270] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 296.206366][ T4270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.255537][ T4270] usb 2-1: can't set config #6, error -71 [ 296.816616][ T4270] usb 2-1: USB disconnect, device number 4 [ 297.048741][ T4310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 298.059287][ T6209] netlink: 830 bytes leftover after parsing attributes in process `syz.4.459'. [ 299.638167][ T6215] netlink: 'syz.4.461': attribute type 21 has an invalid length. [ 299.646667][ T6215] netlink: 'syz.4.461': attribute type 6 has an invalid length. [ 299.654541][ T6215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.461'. [ 300.245661][ T6218] tipc: Enabled bearer , priority 0 [ 300.281319][ T6218] tipc: Resetting bearer [ 300.457888][ T6217] tipc: Disabling bearer [ 301.426106][ T6229] tmpfs: Unknown parameter 'quota' [ 301.460849][ T6229] netlink: 830 bytes leftover after parsing attributes in process `syz.0.465'. [ 302.016162][ T6235] netlink: 'syz.4.466': attribute type 20 has an invalid length. [ 302.614310][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.466'. [ 303.180732][ T4310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 303.858891][ T6246] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 303.865489][ T6246] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 303.873435][ T6246] vhci_hcd vhci_hcd.0: Device attached [ 303.883805][ T6247] vhci_hcd: connection closed [ 303.887264][ T4590] vhci_hcd: stop threads [ 304.377649][ T4310] usb 3-1: config index 0 descriptor too short (expected 146, got 18) [ 304.391524][ T4590] vhci_hcd: release socket [ 304.404362][ T4310] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 304.887956][ T4590] vhci_hcd: disconnect device [ 304.920785][ T4310] usb 3-1: config 0 has no interface number 0 [ 305.568284][ T6260] netlink: 'syz.1.473': attribute type 21 has an invalid length. [ 305.576681][ T6260] netlink: 'syz.1.473': attribute type 6 has an invalid length. [ 305.584560][ T6260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.473'. [ 306.160280][ T4310] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 306.201216][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.267023][ T4310] usb 3-1: config 0 descriptor?? [ 306.296509][ T4310] usb 3-1: can't set config #0, error -71 [ 306.312493][ T4310] usb 3-1: USB disconnect, device number 6 [ 308.218473][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 308.252693][ T6280] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.261623][ T6280] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.270401][ T6280] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.279323][ T6280] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.296369][ T6280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.478'. [ 309.068282][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.481'. [ 314.314112][ T6336] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 314.324842][ T6336] F2FS-fs (loop7): Unable to read 1th superblock [ 314.340874][ T6336] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 314.350302][ T6336] F2FS-fs (loop7): Unable to read 2th superblock [ 314.968772][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 314.978229][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 315.960831][ T6340] netlink: 32 bytes leftover after parsing attributes in process `syz.3.495'. [ 316.404743][ T6353] netlink: 'syz.3.499': attribute type 20 has an invalid length. [ 316.522760][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.499'. [ 317.083054][ T6349] netlink: 830 bytes leftover after parsing attributes in process `syz.4.497'. [ 317.096792][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.103856][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.116575][ T4774] sl0: compressed packet ignored [ 318.142416][ T4310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 318.602554][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.630309][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.644382][ T4310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.664299][ T4310] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 318.673912][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.687983][ T6369] netlink: 56 bytes leftover after parsing attributes in process `syz.4.500'. [ 318.738397][ T4310] usb 2-1: config 0 descriptor?? [ 318.769087][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 319.843675][ T4310] ryos 0003:1E7D:3232.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 320.864512][ T4780] usb 2-1: USB disconnect, device number 5 [ 322.429434][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 322.474282][ T6397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 324.213282][ T6416] netlink: 'syz.2.513': attribute type 20 has an invalid length. [ 325.590356][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 325.627673][ T6409] netlink: 830 bytes leftover after parsing attributes in process `syz.4.511'. [ 328.002286][ T6436] tipc: Enabled bearer , priority 0 [ 328.020670][ T4310] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 328.162440][ T6436] tipc: Resetting bearer [ 328.212672][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.244300][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.330304][ T6434] tipc: Disabling bearer [ 328.346523][ T4310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.448044][ T4310] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 328.531044][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.626739][ T4310] usb 2-1: config 0 descriptor?? [ 329.267713][ T4310] ryos 0003:1E7D:3232.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 330.479087][ T6446] netlink: 56 bytes leftover after parsing attributes in process `syz.0.520'. [ 330.599255][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.520'. [ 330.696031][ T4270] usb 2-1: USB disconnect, device number 6 [ 330.808856][ T6445] fido_id[6445]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 332.910461][ T6470] netlink: 'syz.3.525': attribute type 20 has an invalid length. [ 332.926227][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.525'. [ 334.464130][ T6480] tipc: Enabling of bearer rejected, failed to enable media [ 337.185433][ T6500] netlink: 32 bytes leftover after parsing attributes in process `syz.2.533'. [ 338.200648][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21090 ms [ 338.208720][ C1] sl0: transmit timed out, driver error? [ 338.451463][ T6525] fuse: Bad value for 'fd' [ 340.890740][ T6530] netlink: 56 bytes leftover after parsing attributes in process `syz.4.541'. [ 340.908898][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 342.475510][ T6548] netlink: 'syz.3.545': attribute type 20 has an invalid length. [ 342.630676][ T6548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.545'. [ 345.849666][ T6578] fuse: Bad value for 'fd' [ 349.061436][ T6604] netlink: 'syz.1.562': attribute type 20 has an invalid length. [ 350.330615][ T4270] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 352.167261][ T6609] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 352.691336][ T6605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 353.972831][ T6620] fuse: Bad value for 'fd' [ 356.935854][ T6633] netlink: 'syz.4.572': attribute type 20 has an invalid length. [ 357.509707][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.572'. [ 361.490628][ T4310] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 363.228632][ T6663] tmpfs: Unknown parameter 'quota' [ 363.662721][ T6666] fuse: Bad value for 'fd' [ 369.420661][ T5116] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 370.295071][ T6703] netlink: 'syz.0.592': attribute type 20 has an invalid length. [ 370.300736][ T5116] usb 5-1: Using ep0 maxpacket: 16 [ 370.313334][ T5116] usb 5-1: config 6 has an invalid interface number: 28 but max is 3 [ 370.322172][ T5116] usb 5-1: config 6 has an invalid interface number: 4 but max is 3 [ 370.332938][ T5116] usb 5-1: config 6 has an invalid interface number: 86 but max is 3 [ 370.343779][ T5116] usb 5-1: config 6 has an invalid interface number: 191 but max is 3 [ 370.381505][ T5116] usb 5-1: config 6 has no interface number 0 [ 370.387817][ T5116] usb 5-1: config 6 has no interface number 1 [ 370.394295][ T5116] usb 5-1: config 6 has no interface number 2 [ 370.406190][ T5116] usb 5-1: config 6 has no interface number 3 [ 370.412654][ T5116] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 370.466256][ T5116] usb 5-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 370.531381][ T5116] usb 5-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 370.544315][ T5116] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 370.559755][ T5116] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 370.573168][ T5116] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 370.586379][ T5116] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 370.599921][ T5116] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 370.628419][ T5116] usb 5-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 370.773688][ T5116] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 370.801363][ T5116] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 370.841007][ T5116] usb 5-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 370.852507][ T5116] usb 5-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 370.863485][ T5116] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 370.874870][ T5116] usb 5-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 370.930772][ T5116] usb 5-1: config 6 interface 4 has no altsetting 0 [ 370.937983][ T5116] usb 5-1: config 6 interface 86 has no altsetting 0 [ 370.944955][ T5116] usb 5-1: config 6 interface 191 has no altsetting 0 [ 370.971062][ T5116] usb 5-1: string descriptor 0 read error: -71 [ 370.994943][ T5116] usb 5-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 371.004327][ T5116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.099944][ T5116] usb 5-1: can't set config #6, error -71 [ 371.114084][ T5116] usb 5-1: USB disconnect, device number 6 [ 372.127233][ T6714] fuse: Bad value for 'fd' [ 373.977672][ T6707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.592'. [ 375.015959][ T4279] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 375.054641][ T4279] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 375.064089][ T4279] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 375.075189][ T4279] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 375.082858][ T4279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 375.091057][ T4279] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 375.366553][ T6735] netlink: 56 bytes leftover after parsing attributes in process `syz.0.600'. [ 375.377417][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 376.233997][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.245234][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.386867][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.397490][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.495726][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.577523][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.882727][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.989467][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.160757][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 378.343131][ T75] tipc: Left network mode [ 378.385045][ T6730] chnl_net:caif_netlink_parms(): no params data found [ 378.472372][ T6767] fuse: Bad value for 'fd' [ 378.532810][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.541903][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.250664][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 380.017296][ T6186] sl0: compressed packet ignored [ 381.321064][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 381.367844][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.434765][ T6730] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.473618][ T6730] device bridge_slave_0 entered promiscuous mode [ 382.088708][ T6730] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.118386][ T6730] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.253106][ T6730] device bridge_slave_1 entered promiscuous mode [ 382.495669][ T6791] netlink: 830 bytes leftover after parsing attributes in process `syz.1.612'. [ 382.842674][ T6730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.853064][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 384.304895][ T6730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.507123][ T6807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.615'. [ 385.140969][ T6821] fuse: Bad value for 'fd' [ 386.725280][ T6730] team0: Port device team_slave_0 added [ 386.888836][ T6821] batman_adv: batadv0: Adding interface: dummy0 [ 386.911875][ T6821] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.988519][ T6821] batman_adv: batadv0: Interface activated: dummy0 [ 387.013723][ T6730] team0: Port device team_slave_1 added [ 388.400575][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.407708][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.905040][ T6730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.917637][ T6841] netlink: 830 bytes leftover after parsing attributes in process `syz.2.625'. [ 388.943369][ T6730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.955738][ T6730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.123373][ T6730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.058618][ T6730] device hsr_slave_0 entered promiscuous mode [ 390.085778][ T6730] device hsr_slave_1 entered promiscuous mode [ 390.175713][ T6730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.195397][ T6730] Cannot create hsr debugfs directory [ 390.345608][ T75] device hsr_slave_0 left promiscuous mode [ 390.427964][ T75] device hsr_slave_1 left promiscuous mode [ 391.011189][ T75] batman_adv: batadv0: Interface deactivated: dummy0 [ 391.018494][ T75] batman_adv: batadv0: Removing interface: dummy0 [ 391.091963][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.119863][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.203097][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.264882][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.311559][ T75] device bridge_slave_1 left promiscuous mode [ 391.318588][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.582016][ T75] device bridge_slave_0 left promiscuous mode [ 391.629511][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.555844][ T75] device veth1_macvtap left promiscuous mode [ 392.572861][ T75] device veth0_macvtap left promiscuous mode [ 392.579037][ T75] device veth1_vlan left promiscuous mode [ 392.617865][ T75] device veth0_vlan left promiscuous mode [ 393.789641][ T75] team0 (unregistering): Port device team_slave_1 removed [ 393.842069][ T75] team0 (unregistering): Port device team_slave_0 removed [ 393.902466][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.943255][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.065120][ T75] bond0 (unregistering): Released all slaves [ 396.997681][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.638'. [ 397.827446][ T6730] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 397.851492][ T6730] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 397.896456][ T6730] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 398.137755][ T6730] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 398.555775][ T6730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.649730][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.661561][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.685119][ T6730] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.766118][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.791810][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 398.863281][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.870474][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.010706][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 399.018768][ C1] sl0: transmit timed out, driver error? [ 399.468778][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.582116][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.616399][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.671474][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.678614][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.741593][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.761458][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 399.805790][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 399.836712][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 399.885832][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 399.912402][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 399.937896][ T6730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 399.979616][ T6730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.001566][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 400.011174][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 400.038620][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 400.067152][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 400.085637][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 400.123185][ T5675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 401.013802][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 401.071598][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 401.086149][ T6730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.006030][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 406.015904][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 406.186284][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 406.231644][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 406.284071][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 406.331360][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 406.371088][ T6730] device veth0_vlan entered promiscuous mode [ 406.405299][ T6730] device veth1_vlan entered promiscuous mode [ 406.552901][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 406.581249][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 406.848870][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 406.914400][ T4774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 407.008240][ T6730] device veth0_macvtap entered promiscuous mode [ 407.214228][ T7030] netlink: 56 bytes leftover after parsing attributes in process `syz.2.657'. [ 407.225365][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'. [ 407.481846][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 407.697361][ T6730] device veth1_macvtap entered promiscuous mode [ 409.332598][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.390796][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.404731][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.417871][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.490419][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.501639][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.512244][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.523738][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.543132][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.556799][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.568330][ T4546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.579881][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.603415][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.614070][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.627177][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.644912][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.684993][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.720808][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.760203][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.802911][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.832895][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.867346][ T4454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 410.022865][ T6730] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.441726][ T6730] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.522523][ T6730] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.613263][ T6730] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.211204][ T7055] netlink: 6 bytes leftover after parsing attributes in process `syz.4.662'. [ 411.220061][ T7055] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 411.514994][ T7055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 411.698532][ T7058] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 411.710775][ T7058] F2FS-fs (loop1): Unable to read 1th superblock [ 411.721059][ T7058] I/O error, dev loop1, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 411.730373][ T7058] F2FS-fs (loop1): Unable to read 2th superblock [ 412.968221][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.985859][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.997845][ T4546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.014316][ T6651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 413.035745][ T4546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.053111][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 413.497703][ T7083] fuse: Bad value for 'fd' [ 415.628938][ T7084] tmpfs: Unknown parameter 'quota' [ 418.558648][ T7108] netlink: 56 bytes leftover after parsing attributes in process `syz.5.673'. [ 418.579160][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.673'. [ 421.141911][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 421.863261][ T7136] tmpfs: Unknown parameter 'quota' [ 422.325669][ T7147] fuse: Bad value for 'fd' [ 425.329873][ T7159] Device name cannot be null; rc = [-22] [ 427.301889][ T7171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.687'. [ 434.716192][ T7222] netlink: 'syz.1.701': attribute type 20 has an invalid length. [ 434.838425][ T7215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.700'. [ 435.566047][ T7222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.701'. [ 437.281693][ T4270] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 437.541611][ T4270] usb 1-1: Using ep0 maxpacket: 16 [ 437.568911][ T4270] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 437.606020][ T4270] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 437.644266][ T4270] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 437.682558][ T4270] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 437.721298][ T4270] usb 1-1: config 6 has no interface number 0 [ 437.753024][ T4270] usb 1-1: config 6 has no interface number 1 [ 438.214646][ T4270] usb 1-1: config 6 has no interface number 2 [ 438.227733][ T4270] usb 1-1: config 6 has no interface number 3 [ 438.240823][ T4270] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 438.270619][ T4270] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 438.373638][ T4270] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 438.578101][ T4270] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 439.590781][ T4270] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 439.602476][ T4270] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 439.613425][ T4270] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 439.625326][ T4270] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 439.665293][ T4270] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 439.950358][ T4270] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 440.209186][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.310200][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.327144][ T4490] sl0: compressed packet ignored [ 440.448774][ T4270] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 440.730342][ T4270] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 440.762966][ T4270] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 440.820691][ T4270] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 440.866346][ T4270] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 440.916654][ T4270] usb 1-1: config 6 interface 4 has no altsetting 0 [ 440.947579][ T4270] usb 1-1: config 6 interface 86 has no altsetting 0 [ 440.957812][ T4270] usb 1-1: config 6 interface 191 has no altsetting 0 [ 441.015372][ T4270] usb 1-1: string descriptor 0 read error: -71 [ 441.070419][ T4270] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 441.130762][ T4270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.206969][ T4270] usb 1-1: can't set config #6, error -71 [ 441.266540][ T4270] usb 1-1: USB disconnect, device number 7 [ 441.637408][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 441.652576][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 442.367358][ T7291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.715'. [ 442.857007][ T7298] fuse: Bad value for 'fd' [ 444.836947][ T7305] netlink: 'syz.2.719': attribute type 20 has an invalid length. [ 447.341800][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.719'. [ 448.285320][ T7310] netlink: 'syz.4.720': attribute type 20 has an invalid length. [ 451.501400][ T7357] netlink: 56 bytes leftover after parsing attributes in process `syz.2.730'. [ 451.693074][ T7367] fuse: Bad value for 'fd' [ 454.361685][ T7357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.730'. [ 456.058237][ T7388] netlink: 'syz.4.737': attribute type 20 has an invalid length. [ 457.479926][ T7389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.737'. [ 460.792749][ T7427] fuse: Bad value for 'fd' [ 461.080522][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20760 ms [ 461.088691][ C1] sl0: transmit timed out, driver error? [ 464.668743][ T7455] netlink: 6 bytes leftover after parsing attributes in process `syz.4.751'. [ 464.688006][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 465.088255][ T7464] Device name cannot be null; rc = [-22] [ 465.849582][ T7455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.077281][ T7476] netlink: 56 bytes leftover after parsing attributes in process `syz.5.757'. [ 466.142642][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.757'. [ 466.165398][ T7480] netlink: 'syz.2.755': attribute type 20 has an invalid length. [ 466.180629][ T4374] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 467.100558][ T4374] usb 2-1: Using ep0 maxpacket: 32 [ 467.155585][ T4374] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 467.230638][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.428101][ T4374] usb 2-1: config 0 descriptor?? [ 468.194067][ T4374] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 468.283089][ T7482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.755'. [ 469.429838][ T7496] device syzkaller0 entered promiscuous mode [ 469.604211][ T4374] gspca_vc032x: reg_w err -71 [ 469.609925][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 469.673746][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 469.714476][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 469.812492][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 470.746320][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 470.794044][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 470.800052][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 470.890573][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 470.895934][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 470.998439][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.040569][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.063420][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.094420][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.118528][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.136681][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.158410][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.200565][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.278838][ T4374] gspca_vc032x: I2c Bus Busy Wait 00 [ 471.310368][ T4374] gspca_vc032x: Unknown sensor... [ 471.365467][ T4374] vc032x: probe of 2-1:0.0 failed with error -22 [ 471.454611][ T4374] usb 2-1: USB disconnect, device number 7 [ 472.702150][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 472.711599][ T7527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 475.494015][ T7550] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 476.601935][ T7561] Device name cannot be null; rc = [-22] [ 482.669112][ T7607] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 482.711022][ T7606] netlink: 56 bytes leftover after parsing attributes in process `syz.4.783'. [ 482.721778][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 484.000795][ T7620] netlink: 32 bytes leftover after parsing attributes in process `syz.0.787'. [ 484.820668][ T5116] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 485.492672][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.530950][ T5116] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.549251][ T5116] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.566238][ T5116] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 485.711053][ T5116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.737772][ T5116] usb 1-1: config 0 descriptor?? [ 486.519168][ T5116] ryos 0003:1E7D:3232.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 486.784988][ T7632] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 487.251679][ T7660] fuse: Bad value for 'fd' [ 487.266772][ T7660] batman_adv: batadv0: Interface deactivated: dummy0 [ 487.273861][ T7660] batman_adv: batadv0: Removing interface: dummy0 [ 488.865666][ T4270] usb 1-1: USB disconnect, device number 8 [ 491.633718][ T7680] netlink: 32 bytes leftover after parsing attributes in process `syz.0.799'. [ 493.338258][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 493.348089][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.801'. [ 498.441344][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 501.442299][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449261][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.092024][ T4352] sl0: compressed packet ignored [ 502.881423][ T7800] netlink: 32 bytes leftover after parsing attributes in process `syz.0.827'. [ 505.708506][ T951] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 506.330546][ T951] usb 3-1: Using ep0 maxpacket: 16 [ 506.337411][ T951] usb 3-1: config 6 has an invalid interface number: 28 but max is 3 [ 506.346217][ T951] usb 3-1: config 6 has an invalid interface number: 4 but max is 3 [ 506.355282][ T951] usb 3-1: config 6 has an invalid interface number: 86 but max is 3 [ 507.110728][ T951] usb 3-1: config 6 has an invalid interface number: 191 but max is 3 [ 507.128378][ T951] usb 3-1: config 6 has no interface number 0 [ 507.134725][ T951] usb 3-1: config 6 has no interface number 1 [ 507.143412][ T951] usb 3-1: config 6 has no interface number 2 [ 507.150100][ T951] usb 3-1: config 6 has no interface number 3 [ 507.880693][ T7833] nvme_fabrics: missing parameter 'transport=%s' [ 507.887993][ T7833] nvme_fabrics: missing parameter 'nqn=%s' [ 508.390959][ T951] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 508.454845][ T951] usb 3-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 508.596309][ T7850] netlink: 32 bytes leftover after parsing attributes in process `syz.0.838'. [ 509.014509][ T951] usb 3-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 509.538799][ T951] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 509.549836][ T951] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 509.561031][ T951] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 509.572827][ T951] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 509.584088][ T951] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 509.783862][ T951] usb 3-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 509.860712][ T951] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 509.888177][ T951] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 509.971240][ T951] usb 3-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 511.071113][ T7865] netlink: 'syz.5.842': attribute type 21 has an invalid length. [ 511.079316][ T7865] netlink: 'syz.5.842': attribute type 6 has an invalid length. [ 511.087227][ T7865] netlink: 132 bytes leftover after parsing attributes in process `syz.5.842'. [ 511.610651][ T951] usb 3-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 511.780835][ T951] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 511.799483][ T951] usb 3-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 511.810434][ T951] usb 3-1: config 6 interface 4 has no altsetting 0 [ 511.817143][ T951] usb 3-1: config 6 interface 86 has no altsetting 0 [ 511.830139][ T951] usb 3-1: config 6 interface 191 has no altsetting 0 [ 511.874521][ T951] usb 3-1: string descriptor 0 read error: -71 [ 511.889183][ T951] usb 3-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 513.379408][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.402451][ T951] usb 3-1: can't set config #6, error -71 [ 513.412661][ T951] usb 3-1: USB disconnect, device number 7 [ 514.539970][ T7893] netlink: 6 bytes leftover after parsing attributes in process `syz.4.849'. [ 514.549121][ T7893] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 514.570742][ T7893] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.825555][ T7911] autofs4:pid:7911:autofs_fill_super: called with bogus options [ 517.407587][ T7913] netlink: 32 bytes leftover after parsing attributes in process `syz.5.852'. [ 518.352420][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 518.370346][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 521.881185][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20430 ms [ 521.889263][ C1] sl0: transmit timed out, driver error? [ 522.062031][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 522.290890][ T22] usb 6-1: Using ep0 maxpacket: 16 [ 522.300054][ T22] usb 6-1: config 6 has an invalid interface number: 28 but max is 3 [ 522.339558][ T22] usb 6-1: config 6 has an invalid interface number: 4 but max is 3 [ 522.405667][ T22] usb 6-1: config 6 has an invalid interface number: 86 but max is 3 [ 522.422743][ T22] usb 6-1: config 6 has an invalid interface number: 191 but max is 3 [ 522.455488][ T22] usb 6-1: config 6 has no interface number 0 [ 522.491087][ T22] usb 6-1: config 6 has no interface number 1 [ 522.521516][ T22] usb 6-1: config 6 has no interface number 2 [ 522.527888][ T22] usb 6-1: config 6 has no interface number 3 [ 522.542918][ T22] usb 6-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 522.556851][ T22] usb 6-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 522.590669][ T22] usb 6-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 522.604437][ T22] usb 6-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 522.622818][ T22] usb 6-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 522.636695][ T22] usb 6-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 522.650518][ T22] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 522.662787][ T22] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 522.690606][ T22] usb 6-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 522.720528][ T22] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 522.750650][ T22] usb 6-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 522.860669][ T22] usb 6-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 522.873863][ T22] usb 6-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 522.888052][ T22] usb 6-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 522.900582][ T22] usb 6-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 522.912188][ T22] usb 6-1: config 6 interface 4 has no altsetting 0 [ 522.919053][ T22] usb 6-1: config 6 interface 86 has no altsetting 0 [ 522.926715][ T22] usb 6-1: config 6 interface 191 has no altsetting 0 [ 522.952700][ T22] usb 6-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 522.962446][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.971126][ T22] usb 6-1: Product: syz [ 522.978643][ T22] usb 6-1: Manufacturer: syz [ 522.983450][ T22] usb 6-1: SerialNumber: syz [ 523.787570][ T7970] netlink: 32 bytes leftover after parsing attributes in process `syz.0.868'. [ 524.319483][ T22] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 524.338608][ T22] usb 6-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 524.350696][ T22] usb 6-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 526.476482][ T7999] netlink: 'syz.2.875': attribute type 20 has an invalid length. [ 527.780758][ T7999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.875'. [ 531.088338][ T8041] netlink: 44 bytes leftover after parsing attributes in process `syz.4.885'. [ 531.490828][ T5116] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 531.887890][ T5116] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=9c.25 [ 531.922412][ T5116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.940634][ T5116] usb 5-1: Product: syz [ 531.961106][ T5116] usb 5-1: Manufacturer: syz [ 532.002495][ T5116] usb 5-1: SerialNumber: syz [ 532.255087][ T8048] Device name cannot be null; rc = [-22] [ 532.279354][ T5116] usb 5-1: config 0 descriptor?? [ 533.047059][ T5116] gspca_main: spca501-2.14.0 probing 0000:0000 [ 533.515147][ T4780] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 535.581045][ T5116] gspca_spca501: reg write: error -110 [ 535.654756][ T5116] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 535.688364][ T5116] spca501: probe of 5-1:0.0 failed with error -22 [ 535.736506][ T5116] usb 5-1: Found UVC 0.00 device syz (0000:0000) [ 535.850754][ T5116] usb 5-1: No valid video chain found. [ 535.859396][ T5116] usb 5-1: USB disconnect, device number 7 [ 536.346673][ T4780] usb 1-1: unable to read config index 0 descriptor/all [ 536.372688][ T4780] usb 1-1: can't read configurations, error -71 [ 536.541064][ T8086] fuse: Unknown parameter 'f€ 0xffffffffffffffff1844674407370955161500000000000000000000ÿÿÿÿ00000000000000000000' [ 536.562643][ T8086] fuse: Bad value for 'fd' [ 538.110498][ T8109] Device name cannot be null; rc = [-22] [ 538.995924][ T8122] netlink: 'syz.4.901': attribute type 20 has an invalid length. [ 539.565862][ T8124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.901'. [ 539.651648][ T8130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.669168][ T8130] device batadv_slave_1 entered promiscuous mode [ 539.884918][ T8130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.781064][ T5116] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 542.990753][ T5116] usb 1-1: Using ep0 maxpacket: 16 [ 543.222198][ T5116] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 543.260730][ T5116] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 543.270868][ T5116] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 543.279100][ T5116] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 543.443914][ T5116] usb 1-1: config 6 has no interface number 0 [ 543.460538][ T5116] usb 1-1: config 6 has no interface number 1 [ 543.466980][ T5116] usb 1-1: config 6 has no interface number 2 [ 543.475841][ T5116] usb 1-1: config 6 has no interface number 3 [ 543.483774][ T5116] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 544.287114][ T5116] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 544.298109][ T5116] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 544.310944][ T5116] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 544.323584][ T5116] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 544.430647][ T5116] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 544.444016][ T5116] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 544.460701][ T5116] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 544.514108][ T5116] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 544.535270][ T5116] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 544.550629][ T5116] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 544.616082][ T5116] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 544.664298][ T5116] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 544.681560][ T5116] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 544.891354][ T5116] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 544.911660][ T5116] usb 1-1: config 6 interface 4 has no altsetting 0 [ 544.918310][ T5116] usb 1-1: config 6 interface 86 has no altsetting 0 [ 544.925438][ T5116] usb 1-1: config 6 interface 191 has no altsetting 0 [ 545.103057][ T5116] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 545.112870][ T8170] Device name cannot be null; rc = [-22] [ 546.140184][ T5116] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.249015][ T5116] usb 1-1: Product: syz [ 546.255335][ T5116] usb 1-1: Manufacturer: syz [ 546.260035][ T5116] usb 1-1: SerialNumber: syz [ 546.272938][ T5116] usb 1-1: can't set config #6, error -71 [ 546.291357][ T5116] usb 1-1: USB disconnect, device number 11 [ 546.551159][ T8182] usb usb8: usbfs: process 8182 (syz.0.915) did not claim interface 0 before use [ 546.930088][ T8194] netlink: 32 bytes leftover after parsing attributes in process `syz.4.918'. [ 548.679187][ T8212] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 549.607643][ T8209] netlink: 'syz.4.924': attribute type 20 has an invalid length. [ 549.867461][ T8214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 550.138529][ T8219] overlayfs: failed to resolve './file0': -2 [ 552.007889][ T4375] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 552.210869][ T4375] usb 2-1: Using ep0 maxpacket: 16 [ 552.213245][ T8235] netlink: 32 bytes leftover after parsing attributes in process `syz.5.929'. [ 552.218590][ T4375] usb 2-1: config 6 has an invalid interface number: 28 but max is 3 [ 552.234464][ T4375] usb 2-1: config 6 has an invalid interface number: 4 but max is 3 [ 552.242708][ T4375] usb 2-1: config 6 has an invalid interface number: 86 but max is 3 [ 552.251466][ T4375] usb 2-1: config 6 has an invalid interface number: 191 but max is 3 [ 552.260541][ T4375] usb 2-1: config 6 has no interface number 0 [ 552.267673][ T4375] usb 2-1: config 6 has no interface number 1 [ 552.274257][ T4375] usb 2-1: config 6 has no interface number 2 [ 552.281471][ T4375] usb 2-1: config 6 has no interface number 3 [ 552.289518][ T4375] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 552.300945][ T951] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 552.309460][ T4375] usb 2-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 552.321030][ T4375] usb 2-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 552.334416][ T4375] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 552.345928][ T4375] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 552.358310][ T4375] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 552.369815][ T4375] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 552.430706][ T4375] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 552.450647][ T4375] usb 2-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 552.467273][ T4375] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 552.478865][ T4375] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 552.492284][ T4375] usb 2-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 552.527121][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.612632][ T4375] usb 2-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 552.637037][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.651964][ T4375] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 552.663635][ T951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.690767][ T4375] usb 2-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 552.702265][ T951] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 552.737850][ T4375] usb 2-1: config 6 interface 4 has no altsetting 0 [ 552.760587][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.798054][ T4375] usb 2-1: config 6 interface 86 has no altsetting 0 [ 552.861671][ T4375] usb 2-1: config 6 interface 191 has no altsetting 0 [ 552.869676][ T951] usb 1-1: config 0 descriptor?? [ 552.884018][ T4375] usb 2-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 552.990610][ T4375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.998715][ T4375] usb 2-1: Product: syz [ 553.003715][ T4375] usb 2-1: Manufacturer: syz [ 553.008408][ T4375] usb 2-1: SerialNumber: syz [ 553.016563][ T4375] usb 2-1: can't set config #6, error -71 [ 553.025713][ T4375] usb 2-1: USB disconnect, device number 8 [ 553.339976][ T951] ryos 0003:1E7D:3232.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.0-1/input0 [ 554.583430][ T4310] usb 1-1: USB disconnect, device number 12 [ 555.329453][ T8264] tmpfs: Unknown parameter 'usrquota_block_hardlimit' [ 557.850375][ T4310] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 558.372007][ T8291] netlink: 6 bytes leftover after parsing attributes in process `syz.4.945'. [ 558.382163][ T8291] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 558.398556][ T8291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.080689][ T4310] usb 1-1: Using ep0 maxpacket: 16 [ 559.092556][ T4310] usb 1-1: config 6 has an invalid interface number: 28 but max is 3 [ 559.287064][ T4310] usb 1-1: config 6 has an invalid interface number: 4 but max is 3 [ 559.426126][ T4310] usb 1-1: config 6 has an invalid interface number: 86 but max is 3 [ 559.601937][ T4310] usb 1-1: config 6 has an invalid interface number: 191 but max is 3 [ 559.887955][ T4310] usb 1-1: config 6 has no interface number 0 [ 559.918999][ T4310] usb 1-1: config 6 has no interface number 1 [ 559.968694][ T4310] usb 1-1: config 6 has no interface number 2 [ 559.985267][ T4310] usb 1-1: config 6 has no interface number 3 [ 559.992263][ T4310] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 560.124671][ T4310] usb 1-1: config 6 interface 28 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 560.173163][ T4310] usb 1-1: config 6 interface 4 altsetting 5 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 560.193779][ T4310] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 560.324339][ T4310] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 560.358939][ T4310] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 560.505425][ T4310] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has an invalid bInterval 255, changing to 7 [ 560.586074][ T4310] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xD has invalid wMaxPacketSize 0 [ 560.627087][ T4310] usb 1-1: config 6 interface 86 altsetting 9 has a duplicate endpoint with address 0x9, skipping [ 560.706598][ T4310] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0xE has invalid wMaxPacketSize 0 [ 560.738305][ T4310] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 560.901982][ T4310] usb 1-1: config 6 interface 86 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 560.913635][ T4310] usb 1-1: config 6 interface 86 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 560.925346][ T4310] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 560.936999][ T4310] usb 1-1: config 6 interface 191 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 560.961842][ T4310] usb 1-1: config 6 interface 4 has no altsetting 0 [ 561.715048][ T4310] usb 1-1: config 6 interface 86 has no altsetting 0 [ 561.722260][ T4310] usb 1-1: config 6 interface 191 has no altsetting 0 [ 561.759306][ T4310] usb 1-1: string descriptor 0 read error: -71 [ 561.800224][ T4310] usb 1-1: New USB device found, idVendor=9022, idProduct=d630, bcdDevice=97.a9 [ 561.809332][ T4310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.374049][ T4310] usb 1-1: can't set config #6, error -71 [ 562.518480][ T4310] usb 1-1: USB disconnect, device number 13 [ 563.305532][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.313507][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.321745][ T4848] sl0: compressed packet ignored [ 569.192788][ T8365] netlink: 'syz.1.965': attribute type 20 has an invalid length. [ 569.285514][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.965'. [ 570.355991][ T8375] fuse: Bad value for 'fd' [ 573.465014][ T8404] nvme_fabrics: missing parameter 'transport=%s' [ 573.471584][ T8404] nvme_fabrics: missing parameter 'nqn=%s' [ 574.674614][ T8409] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 574.681206][ T8409] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 574.689693][ T8409] vhci_hcd vhci_hcd.0: Device attached [ 574.689792][ T8410] vhci_hcd: connection closed [ 574.700352][ T8169] vhci_hcd: stop threads [ 574.741315][ T8169] vhci_hcd: release socket [ 574.746504][ T8169] vhci_hcd: disconnect device [ 576.850097][ T8428] fuse: Bad value for 'fd' [ 578.991193][ T8430] netlink: 'syz.2.980': attribute type 20 has an invalid length. [ 579.423992][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.2.980'. [ 579.459125][ T8436] tmpfs: Unknown parameter 'quota' [ 581.090772][ T8457] device syzkaller0 entered promiscuous mode [ 583.686038][ T8470] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 583.692626][ T8470] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 583.700576][ T8470] vhci_hcd vhci_hcd.0: Device attached [ 583.707911][ T8471] vhci_hcd: connection closed [ 583.709865][ T4929] vhci_hcd: stop threads [ 583.862895][ T4929] vhci_hcd: release socket [ 583.867811][ T4929] vhci_hcd: disconnect device [ 583.958758][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20640 ms [ 583.966827][ C1] sl0: transmit timed out, driver error? [ 584.203662][ T8479] fuse: Bad value for 'fd' [ 584.619608][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 584.628551][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 584.640457][ T8486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 584.649451][ T8486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.993'. [ 585.221456][ T8488] netlink: 'syz.4.996': attribute type 20 has an invalid length. [ 585.300479][ T8492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'. [ 585.484684][ T8494] netlink: 'syz.0.998': attribute type 20 has an invalid length. [ 585.642707][ T8496] netlink: 132 bytes leftover after parsing attributes in process `syz.5.997'. [ 585.976550][ T8495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.998'. [ 587.342612][ T8513] autofs4:pid:8513:autofs_fill_super: called with bogus options [ 588.453170][ T22] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 589.760594][ T22] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 589.811135][ T22] usb 6-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 589.865162][ T22] usb 6-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 590.062586][ T8532] fuse: Bad value for 'fd' [ 591.735933][ T8545] netlink: 'syz.5.1011': attribute type 10 has an invalid length. [ 591.995968][ T8545] device hsr0 entered promiscuous mode [ 592.114515][ T8545] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 592.294491][ T8545] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 592.694074][ T8545] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 592.797142][ T8545] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 592.916288][ T8556] netlink: 'syz.4.1014': attribute type 20 has an invalid length. [ 592.983995][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1014'. [ 593.071060][ T8560] Device name cannot be null; rc = [-22] [ 594.738563][ T8567] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1017'. [ 596.414047][ T8573] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 596.420625][ T8573] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 596.428626][ T8573] vhci_hcd vhci_hcd.0: Device attached [ 596.439827][ T8574] vhci_hcd: connection closed [ 596.444337][ T4490] vhci_hcd: stop threads [ 596.708096][ T951] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 596.748380][ T4490] vhci_hcd: release socket [ 596.826657][ T8580] fuse: Bad value for 'fd' [ 596.840778][ T8580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1020'. [ 598.416379][ T4490] vhci_hcd: disconnect device [ 599.478267][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1024'. [ 599.884795][ T8600] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 603.268139][ T951] vhci_hcd: vhci_device speed not set [ 603.718055][ T3637] udevd[3637]: worker [4255] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time [ 603.975362][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1031'. [ 605.353951][ T8638] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1036'. [ 606.441204][ T8644] netlink: 'syz.5.1038': attribute type 21 has an invalid length. [ 606.450431][ T8644] netlink: 'syz.5.1038': attribute type 6 has an invalid length. [ 606.459926][ T8644] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1038'. [ 608.992596][ T8662] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1045'. [ 610.061173][ T8679] Device name cannot be null; rc = [-22] [ 613.674904][ T8704] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1056'. [ 613.689079][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 613.708510][ T8704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.011245][ T8708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'. [ 617.383464][ T8728] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1065'. [ 620.336889][ T8748] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1071'. [ 620.346264][ T8748] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 620.363751][ T8748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.635708][ T8780] Device name cannot be null; rc = [-22] [ 625.102337][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.108749][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.118691][ T4546] sl0: compressed packet ignored [ 629.616355][ T4310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 630.261928][ T8842] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1098'. [ 630.271340][ T8842] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.287354][ T8842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.897399][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.932675][ T4310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.953933][ T4310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 631.124347][ T4310] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 631.134243][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.145595][ T4310] usb 2-1: config 0 descriptor?? [ 631.170764][ T8850] Device name cannot be null; rc = [-22] [ 631.946855][ T4310] ryos 0003:1E7D:3232.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 633.084275][ T52] block nbd0: Attempted send on invalid socket [ 633.091260][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 633.231541][ T14] usb 2-1: USB disconnect, device number 9 [ 633.832068][ T8875] Device name cannot be null; rc = [-22] [ 639.273936][ T8914] usb usb8: usbfs: process 8914 (syz.4.1119) did not claim interface 0 before use [ 640.792941][ T8927] netlink: 'syz.1.1123': attribute type 21 has an invalid length. [ 644.535187][ T8939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1125'. [ 646.035355][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20920 ms [ 646.043410][ C1] sl0: transmit timed out, driver error? [ 646.115919][ T8955] device syzkaller0 entered promiscuous mode [ 647.635276][ T8972] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 647.643129][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1136'. [ 647.652127][ T8972] device dummy0 entered promiscuous mode [ 647.658314][ T8972] batman_adv: batadv0: Interface deactivated: dummy0 [ 647.665031][ T8972] batman_adv: batadv0: Removing interface: dummy0 [ 647.788087][ T8972] bridge0: port 3(dummy0) entered blocking state [ 647.794531][ T8972] bridge0: port 3(dummy0) entered disabled state [ 647.802225][ T8972] bridge0: port 3(dummy0) entered blocking state [ 647.809791][ T8972] bridge0: port 3(dummy0) entered forwarding state [ 648.309087][ T8984] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1138'. [ 648.318755][ T8984] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 648.338294][ T8984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.995919][ T22] dvb-usb: did not find the firmware file 'dvb-usb-s630.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 655.075291][ T9022] tipc: Enabling of bearer rejected, failed to enable media [ 655.076822][ T22] dvb-usb: found a 'TeVii S630 USB' in cold state, will try to load a firmware [ 655.155576][ T22] usb 6-1: Direct firmware load for dvb-usb-s630.fw failed with error -2 [ 655.164448][ T9024] device syzkaller0 entered promiscuous mode [ 655.195275][ T22] usb 6-1: Falling back to sysfs fallback for: dvb-usb-s630.fw [ 657.264559][ T9045] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1153'. [ 657.276099][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 657.403117][ T9045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.976148][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1158'. [ 659.272238][ T9059] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1157'. [ 659.324836][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1157'. [ 660.542147][ T9074] tipc: Enabling of bearer rejected, failed to enable media [ 660.608090][ T9078] device syzkaller0 entered promiscuous mode [ 663.056442][ T9103] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1167'. [ 663.065960][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 663.081976][ T9103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.470381][ T9137] tipc: Enabling of bearer rejected, failed to enable media [ 667.516814][ T9137] device syzkaller0 entered promiscuous mode [ 668.931120][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1178'. [ 669.038250][ T9153] fuse: Bad value for 'fd' [ 671.133286][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 671.142469][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'. [ 671.154367][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 671.163398][ T9167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1185'. [ 671.606640][ T9168] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1184'. [ 671.770081][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1184'. [ 671.925864][ T9173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1186'. [ 676.219474][ T9200] fuse: Bad value for 'fd' [ 678.608917][ T9211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1197'. [ 681.003424][ T8236] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 681.347664][ T8236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.374846][ T8236] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.400975][ T8236] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 681.423643][ T8236] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 681.433829][ T8236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.888739][ T8236] usb 2-1: config 0 descriptor?? [ 682.013153][ T9248] fuse: Bad value for 'fd' [ 682.513933][ T27] INFO: task udevd:4255 blocked for more than 143 seconds. [ 683.536272][ T27] Not tainted 6.1.146-syzkaller #0 [ 683.557141][ T8236] ryos 0003:1E7D:3232.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:3232] on usb-dummy_hcd.1-1/input0 [ 684.106680][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 684.269710][ T27] task:udevd state:D stack:26088 pid:4255 ppid:3637 flags:0x00004002 [ 684.293871][ T8236] usb 2-1: USB disconnect, device number 10 [ 684.413154][ T27] Call Trace: [ 684.484453][ T27] [ 684.540601][ T27] __schedule+0x10e9/0x40d0 [ 684.644030][ T27] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 684.771732][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 684.828296][ T27] schedule+0xb9/0x180 [ 684.832532][ T27] schedule_preempt_disabled+0xf/0x20 [ 684.838214][ T27] __mutex_lock+0x555/0xaf0 [ 684.842858][ T27] ? __mutex_lock+0x3a5/0xaf0 [ 684.847740][ T27] ? uevent_show+0x16c/0x320 [ 684.852486][ T27] ? mutex_lock_nested+0x10/0x10 [ 684.857597][ T27] uevent_show+0x16c/0x320 [ 684.862150][ T27] dev_attr_show+0x50/0xb0 [ 684.866848][ T27] sysfs_kf_seq_show+0x349/0x4b0 [ 684.873046][ T27] ? device_get_ownership+0xa0/0xa0 [ 684.878402][ T27] seq_read_iter+0x49b/0xd50 [ 684.895610][ T27] ? common_file_perm+0x171/0x1c0 [ 684.901061][ T27] vfs_read+0x434/0x920 [ 684.913115][ T27] ? kernel_read+0x1e0/0x1e0 [ 684.923992][ T27] ? __rseq_handle_notify_resume+0x392/0x1220 [ 684.940055][ T27] ? __fdget_pos+0x2b5/0x360 [ 684.944873][ T27] ksys_read+0x143/0x240 [ 684.950092][ T27] ? vfs_write+0x960/0x960 [ 684.954733][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 684.961263][ T27] do_syscall_64+0x4c/0xa0 [ 684.965885][ T27] ? clear_bhb_loop+0x60/0xb0 [ 684.970701][ T27] ? clear_bhb_loop+0x60/0xb0 [ 684.975567][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.981787][ T27] RIP: 0033:0x7f5fa64a7407 [ 684.986399][ T27] RSP: 002b:00007fff29d33220 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 684.995076][ T27] RAX: ffffffffffffffda RBX: 00007f5fa6b71880 RCX: 00007f5fa64a7407 [ 685.003608][ T27] RDX: 0000000000001000 RSI: 000056362a1e3a10 RDI: 0000000000000008 [ 685.011779][ T27] RBP: 00007f5fa65efff0 R08: 0000000000000000 R09: 0000000000000000 [ 685.033104][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 685.046950][ T27] R13: 00007f5fa65efea0 R14: 0000000000000000 R15: 000056362a1f5e30 [ 685.065299][ T27] [ 685.076832][ T27] [ 685.076832][ T27] Showing all locks held in the system: [ 685.116416][ T27] 1 lock held by rcu_tasks_kthre/12: [ 685.127410][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 685.149442][ T27] 1 lock held by rcu_tasks_trace/13: [ 685.161705][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 685.197236][ T9250] fido_id[9250]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 685.202739][ T27] 6 locks held by kworker/1:0/22: [ 685.252686][ T27] #0: ffff88801aeab938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 685.282725][ T27] #1: ffffc900001c7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 685.326638][ T27] #2: ffff88814572c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 685.351637][ T27] #3: ffff88801f395190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 685.373621][ T27] #4: ffff888055fc4118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 685.393119][ T27] #5: ffffffff8c9d79b0 (umhelper_sem){++++}-{3:3}, at: usermodehelper_read_trylock+0xec/0x2a0 [ 685.420718][ T27] 1 lock held by khungtaskd/27: [ 685.440202][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 685.467399][ T27] 2 locks held by getty/4030: [ 685.478830][ T27] #0: ffff888030cd6098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 685.503166][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 685.515611][ T27] 4 locks held by udevd/4255: [ 685.520407][ T27] #0: ffff88805d6fdd58 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 685.534535][ T27] #1: ffff888059875c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 685.548796][ T27] #2: ffff88805a15a660 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 685.560808][ T27] #3: ffff88801f395190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 685.585640][ T27] 1 lock held by syz.5.1203/9240: [ 685.593250][ T27] [ 685.595692][ T27] ============================================= [ 685.595692][ T27] [ 685.611915][ T27] NMI backtrace for cpu 0 [ 685.616317][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 685.624300][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 685.634442][ T27] Call Trace: [ 685.637722][ T27] [ 685.640654][ T27] dump_stack_lvl+0x168/0x22e [ 685.645349][ T27] ? irq_work_queue+0xb8/0x140 [ 685.650145][ T27] ? show_regs_print_info+0x12/0x12 [ 685.655349][ T27] ? load_image+0x3b0/0x3b0 [ 685.659859][ T27] ? vprintk_emit+0x571/0x680 [ 685.664551][ T27] ? printk_sprint+0x460/0x460 [ 685.669330][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 685.674277][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 685.680433][ T27] ? _printk+0xcc/0x110 [ 685.684598][ T27] ? load_image+0x3b0/0x3b0 [ 685.689109][ T27] ? load_image+0x3b0/0x3b0 [ 685.693620][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 685.699690][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 685.705680][ T27] watchdog+0xeee/0xf30 [ 685.709847][ T27] ? watchdog+0x1ed/0xf30 [ 685.714198][ T27] kthread+0x29d/0x330 [ 685.718303][ T27] ? hungtask_pm_notify+0x40/0x40 [ 685.723348][ T27] ? kthread_blkcg+0xd0/0xd0 [ 685.727969][ T27] ret_from_fork+0x1f/0x30 [ 685.732412][ T27] [ 685.736153][ T27] Sending NMI from CPU 0 to CPUs 1: [ 685.741409][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 685.742760][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.769368][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.778736][ T4452] sl0: compressed packet ignored [ 685.979663][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 685.986576][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.146-syzkaller #0 [ 685.994503][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 686.004598][ T27] Call Trace: [ 686.007905][ T27] [ 686.010877][ T27] dump_stack_lvl+0x168/0x22e [ 686.015607][ T27] ? memcpy+0x3c/0x60 [ 686.019645][ T27] ? show_regs_print_info+0x12/0x12 [ 686.024886][ T27] ? load_image+0x3b0/0x3b0 [ 686.029452][ T27] panic+0x2c9/0x710 [ 686.033377][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 686.039041][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 686.043577][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 686.049160][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 686.055337][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 686.061520][ T27] watchdog+0xf2d/0xf30 [ 686.065696][ T27] ? watchdog+0x1ed/0xf30 [ 686.070053][ T27] kthread+0x29d/0x330 [ 686.074135][ T27] ? hungtask_pm_notify+0x40/0x40 [ 686.079166][ T27] ? kthread_blkcg+0xd0/0xd0 [ 686.083769][ T27] ret_from_fork+0x1f/0x30 [ 686.088203][ T27] [ 686.091542][ T27] Kernel Offset: disabled [ 686.095872][ T27] Rebooting in 86400 seconds..