last executing test programs: 9m56.85445655s ago: executing program 1 (id=554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) shutdown(r0, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) userfaultfd(0x801) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 9m56.393325707s ago: executing program 1 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="ac0000000001050500000000000000000a0000003c0002802c00018014000300fe800000000000000000000000a9b6bb14000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001080007400000000018000d8014000400ff010000000000000000000000000001"], 0xac}}, 0x0) 9m55.785681923s ago: executing program 1 (id=559): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 9m55.666844709s ago: executing program 1 (id=560): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_open_procfs(0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000004540)="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", 0x3ac}, {&(0x7f0000000b00)="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", 0x179}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, &(0x7f0000000380)) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0xdc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010}, 0x18) 9m52.157631874s ago: executing program 1 (id=570): r0 = openat$userio(0xffffffffffffff9c, 0x0, 0x8900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x5, 0xd, 0x40}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r2, r3, 0xfffffffffffffc01, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) r5 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40400) r6 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x45c, 0x14, 0xf0b, 0x70bd2c, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xb}, {0x1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x1, 0x40f, 0x2, 0x3, 0x401}, {0x1, 0x2, 0xfffb, 0xff80, 0x3, 0x8}, 0x4, 0x5, 0x1a3f}}, @TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x80000001, 0x9d, 0x4, 0x1, 0x3, 0x2, 0x9f0, 0x1, 0xc15, 0xfffffff9, 0x5, 0x3, 0x0, 0x5f, 0x9, 0x1, 0xc57, 0x2, 0x7, 0x3, 0x1, 0x99, 0xfffffffd, 0x3, 0x101, 0x2, 0x100, 0x30, 0x5, 0x8000, 0xa1b, 0x2, 0x1, 0x10001, 0x1, 0x3, 0x653, 0x8, 0x7fff, 0x80, 0x2, 0x9, 0x9, 0x80000000, 0x2, 0xb752, 0x4, 0x2, 0x200, 0xe837, 0x1000, 0x21dd, 0x7, 0xce, 0x4, 0xfffffff9, 0x9655, 0x6, 0x1, 0x2, 0x0, 0xe6d, 0x3, 0x8, 0x3ff, 0x1, 0x101, 0x6, 0x8, 0x2, 0x0, 0x9, 0xd, 0x7, 0x2, 0x6, 0x8, 0xe97b, 0x9e, 0x2a, 0xb5c1, 0x5c1d, 0xffff0def, 0x2e, 0x1, 0x7, 0x7, 0x81, 0x72c, 0x4c0a, 0x7, 0x2, 0x7fff, 0x45, 0x6, 0xf4df, 0x2, 0x10001, 0x1ff, 0x7, 0x8000, 0x96cf, 0xa37e, 0x6, 0x6, 0x0, 0xfffffffc, 0xd, 0x8, 0xfffffbff, 0x1, 0x80000000, 0x2, 0x7c5, 0x0, 0x9, 0xcd5d, 0xfffff000, 0xfffffff9, 0x7, 0x6a6, 0x9, 0xffff0000, 0x0, 0x0, 0x6, 0xc, 0x80000001, 0x1, 0xe, 0x9, 0xc, 0x487, 0x8, 0x8001, 0x8, 0xbcb, 0x5, 0x4, 0xca71, 0xffffffff, 0x1, 0x5, 0x4, 0x0, 0x9, 0x6ad, 0xfffffffc, 0x2, 0x42e, 0x101, 0x7, 0x5, 0x0, 0x6, 0x95, 0x9, 0x7fa, 0xa23, 0x5, 0xb, 0x5, 0x2, 0x0, 0x65f, 0xfffffff8, 0x2, 0x1, 0x949, 0x5, 0x3, 0x9, 0x0, 0x6, 0x6, 0x100000, 0x274, 0x0, 0x1, 0x40, 0x6, 0x8, 0xffff, 0x81, 0x38e, 0x5, 0x10, 0x5, 0x0, 0x9, 0x400000, 0xffffffff, 0x9, 0xe, 0x3bf55028, 0xc9a, 0x62, 0x8, 0x598aa1b9, 0x1, 0x1000, 0x800, 0x748, 0xfffffff8, 0xfffffff0, 0x5, 0x0, 0x9, 0x9, 0x0, 0x3, 0x1, 0xff, 0x1, 0xfffffffa, 0x49, 0xe, 0x4, 0x7, 0x1e600000, 0x5, 0x0, 0x401, 0x96, 0x1ff, 0x4, 0x3, 0x7, 0x8, 0x3ad, 0x5, 0x10, 0x3, 0xaf8a, 0xfbc7, 0x0, 0x7, 0x4, 0x5, 0x4, 0x4, 0xf0, 0x0, 0xfffffffe, 0x101, 0x6, 0x3, 0x2, 0x3, 0x1ff, 0x9, 0x7, 0x5, 0x9, 0x100]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x400c5}, 0x8000) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000180)={0x8, @sliced={0x4, [0x7, 0x3, 0x3, 0x6, 0x7, 0x14fd, 0xa, 0xffff, 0x5, 0x2, 0x5, 0x6, 0xbe4, 0xfffa, 0x3, 0x7fff, 0x2, 0x2, 0xa, 0x0, 0x400, 0xb, 0x7, 0x3, 0x401, 0xa73, 0x400, 0x5, 0x1, 0x1ff, 0x9, 0x8, 0x0, 0x100, 0x0, 0x7, 0x901, 0x400, 0x8, 0x4, 0x4, 0x2, 0x5, 0x7, 0x7ff, 0x8001, 0x1, 0xf], 0x5}}) sendto$inet6(r4, &(0x7f0000000580)='\a', 0x1, 0x20000845, 0x0, 0x0) shutdown(r4, 0x1) 9m51.939178097s ago: executing program 1 (id=572): socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 9m36.486844657s ago: executing program 32 (id=572): socket$inet6_sctp(0xa, 0x1, 0x84) open(&(0x7f00000005c0)='./bus\x00', 0x64042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum64={0x6, 0x0, 0x0, 0x13, 0x0, 0x2}]}, {0x0, [0x6f, 0x2e, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x2b, 0x0, 0x1, 0x8000}, 0x28) ioctl$VIDIOC_DQEVENT(r0, 0x80785659, &(0x7f00000003c0)={0x0, @frame_sync}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 3m58.654665121s ago: executing program 0 (id=1566): r0 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0xa0000001}) epoll_wait(r5, &(0x7f0000000280)=[{}], 0x1, 0x4000005) close_range(r2, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m56.333208617s ago: executing program 0 (id=1575): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x1}, 0x14) shutdown(r0, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) syz_open_dev$dri(0x0, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) userfaultfd(0x801) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048019}, 0x20040840) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000040)={0x0, 0x0}) 3m52.829974691s ago: executing program 0 (id=1581): epoll_create1(0x80000) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x6}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3m50.853587155s ago: executing program 0 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, 0x0, 0x0) 3m49.833001255s ago: executing program 0 (id=1589): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m46.075160994s ago: executing program 0 (id=1605): syz_open_dev$dri(&(0x7f0000000440), 0xfffffffffffffffa, 0x20000) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 3m30.983337862s ago: executing program 33 (id=1605): syz_open_dev$dri(&(0x7f0000000440), 0xfffffffffffffffa, 0x20000) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fanotify_init(0xf00, 0x1) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 16.054889933s ago: executing program 6 (id=2199): prlimit64(0x0, 0xd, &(0x7f0000002100)={0x3c0, 0x88}, 0x0) io_setup(0x10000, &(0x7f0000000800)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, &(0x7f0000002080), &(0x7f0000002280)=ANY=[@ANYBLOB="00fb810053371d3801d2c1d77bd61a9060ee67b9cca461c451a7a6d244ccf4d51827bf970be4a74129328126f102cf3074f0bb64303cc0070ca4949dd24bbd617f7b41401449564dbeca03453f6155c45f0e050ab767990ca2aa46c03797f25ad133c9da4b566279c3286f0b9129e87a35960204a3094f27a02d28f21d958dbdaf"], 0x81, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fsopen(&(0x7f00000020c0)='ntfs3\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)=0x0) io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) symlink(&(0x7f0000000000)='./file0/file0/..\x00', 0x0) fcntl$setsig(r4, 0xa, 0x21) fcntl$setlease(r4, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close_range(r4, r5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2048) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x2000, 0x8) 14.116136346s ago: executing program 3 (id=2209): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404019957c201020301090210000904430002317d55002a05020200020200000905820200020000000000000000"], 0x0) syz_usb_ep_read(r3, 0x5, 0xb4, &(0x7f0000000200)=""/180) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x0, 0xd, 0x2, "dae5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002}, 0x24000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp], 0x1) 13.840626133s ago: executing program 6 (id=2210): socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1d, 0x2, 0x6) openat$cuse(0xffffff9c, &(0x7f0000000800), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, 0x0, 0x0, 0x0) 13.477999144s ago: executing program 4 (id=2212): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000016, 0x0) 10.326012857s ago: executing program 6 (id=2216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000002010101000002040002800c0019"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 9.2504584s ago: executing program 2 (id=2217): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 9.164113095s ago: executing program 6 (id=2219): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r3, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xa0580) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"045af386", 0xe, 0x1, 0x2, 0xfffff800, 0x3, "5f575ef2d49ffdff33fe17fcda8121", "b8ed9125", "1a301950", "5bca1449", ["da9c8c30826411e0324ad04e", "9fa7c843b42b8ca634d23b14", "5def75e98c5bca3b52cd553f", "7271df947889fb453e3694c8"]}) fcntl$setown(r3, 0x8, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000940)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000dc0)=ANY=[@ANYBLOB="04221d02aaaaaaaaaa12"], 0x20) 9.039329092s ago: executing program 3 (id=2220): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x0, 0x3, 0x6, &(0x7f0000000040)={0x15, "563e22ae3dae0e386cbc922dbb05a3ac0a0053b4b5e1aca49d7fdf999d13acc988"}}) mkdir(0x0, 0x0) 8.321853554s ago: executing program 2 (id=2222): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a9500000000000000"], &(0x7f0000000400)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(r6, 0x31d7, 0x72c4, 0x11, &(0x7f0000000280)={[0x8]}, 0x8) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nsfs\x00', 0x1828500, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, 0x0, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) 8.090349667s ago: executing program 5 (id=2224): r0 = io_uring_setup(0x3dff, 0x0) io_uring_register$IORING_REGISTER_CLOCK(r0, 0x1d, &(0x7f0000000000)={0x1}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) signalfd4(r1, &(0x7f00000000c0)={[0x103]}, 0x8, 0x80000) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x3231414b}}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000dffffffeff0000000008000a007300000014001f0000000000000000000000000000000000060002000000000006001b004e200000a502ba2cfd736d8e1971fddbc603ffda0f93bf3ebc1954048e6091ad3709533f1525b115b1b73611c0ad62e629babba7520fd3dd850262199dc89aa8ce897e8d169a3b44f696d249051be88c416af4c74090ecccd7ff01b5a331831d"], 0x64}, 0x1, 0x620b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@random="2f239d4f", 0x4, 0x1) r6 = fsmount(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r7 = openat$tun(0xffffff9c, &(0x7f0000000400), 0x243c2, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'netpci0\x00', 0x200}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(0xffffffffffffffff, 0x3518, 0xaddf, 0x2, 0x0, 0x1517f) socket$inet6_tcp(0xa, 0x1, 0x0) 7.036738399s ago: executing program 5 (id=2225): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x5) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8925, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r7, 0x6, 0x11, 0x0, &(0x7f0000000080)) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000, 0x1ff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r5 = syz_open_procfs(0x0, 0x0) lseek(r5, 0x289e0cb5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa0008004500002c00000000001190780000000000000000000017c1001890780400"/49], 0x0) 4.877190055s ago: executing program 2 (id=2228): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x3, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) modify_ldt$read(0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'ni_at_a2150\x00', [0x101, 0x80f, 0x6e6eda0d, 0x0, 0x0, 0xb, 0x8, 0x7, 0xa, 0xfc, 0x4, 0x2, 0x6849, 0x4, 0x6, 0x5, 0x3a37, 0x9, 0x3, 0xffff5794, 0x5c1, 0x2000002, 0xf27, 0x2, 0xb, 0xb, 0x5, 0x8, 0x4, 0x4, 0x6]}) 4.871371405s ago: executing program 6 (id=2229): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x670, 0x5, 0x450, 0x0, 0x210, 0xfeffffff, 0x0, 0x2e0, 0x3b8, 0x3b8, 0xffffffff, 0x3b8, 0x3b8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffff00, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x50, 0x0, 0x1, 0x1}}, @common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e22], [0x4e23, 0x4e23], 0x8, 0x80, 0x8, 0xe}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x2}}}, @common=@addrtype={{0x30}, {0x1, 0x522, 0x1, 0x1}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x2, @gre_key=0x8}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x6}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port=0xffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$update(0x2, r6, &(0x7f0000000140), 0x0) add_key$user(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000380)="35f9f7fd3ade877adc201ea6595baa51893b3d8d80454698572d70a1f5fc7b4a7472ced195919ee0199deb9e1ea0f9f78bc28927c5dca1de79aee8cda6d62da0d47bb58d6e4be0cb6538682d5822c957092a960a4d746882465f3df021a84b65", 0x60, r6) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x5, 0x1, {0xa, @pix_mp={0x9, 0x81, 0x0, 0x8, 0xa, [{0xd, 0x2}, {0x3, 0x8000}, {0xa64a80ed, 0x7fffffff}, {0x200, 0x3ff}, {0x5, 0x1}, {0x4ce, 0x8}, {0x7ff, 0x9}, {0x6, 0x1}], 0x7, 0xff, 0x6, 0x1, 0x5}}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1221}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.725734924s ago: executing program 4 (id=2230): ptrace(0x10, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x82, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x432dc09ca849eebb) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20) ioperm(0x284, 0x7f, 0xe3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0x60000000004, 0x5, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x200302}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.319233918s ago: executing program 4 (id=2231): syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000001280)=""/137) 4.248410331s ago: executing program 4 (id=2232): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCGPTPEER(r1, 0x5441, 0x6) 3.93170904s ago: executing program 3 (id=2233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080), 0x4) 3.93107278s ago: executing program 4 (id=2234): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtaction={0x18, 0x31, 0x103, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x20044004) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000140)) openat$mice(0xffffff9c, &(0x7f0000000100), 0x0) shutdown(0xffffffffffffffff, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0x6, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r5, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_STAT(0x0, 0xb, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0xfffffffffffffffd, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x7, 0x10, 0x80000002}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.849902065s ago: executing program 3 (id=2235): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0xfe, 0x6, @link_local}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) 3.849246385s ago: executing program 2 (id=2236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x28) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000180), &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a9500000000000000"], &(0x7f0000000400)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x10}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) io_uring_enter(r6, 0x31d7, 0x72c4, 0x11, &(0x7f0000000280)={[0x8]}, 0x8) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nsfs\x00', 0x1828500, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r11, 0x0, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='timerslack_ns\x00') read$msr(r12, &(0x7f0000002140)=""/207, 0xcf) 2.434046568s ago: executing program 3 (id=2237): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) write$ppp(r0, &(0x7f00000002c0)="d16d", 0x2) 2.350436112s ago: executing program 2 (id=2238): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000500)=@allocspi={0x100, 0x16, 0x501, 0x70bd2c, 0x25dfdbfe, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x27}, @in=@multicast2, 0x4e22, 0x6, 0x4e24, 0xfffa, 0x2, 0x80, 0x120, 0x88}, {@in=@dev={0xac, 0x14, 0x14, 0xa}, 0x4d5, 0x33}, @in6=@remote, {0x1ff, 0xa2, 0x7, 0xfffffffffffffffc, 0x0, 0x4, 0x7fff, 0x48fe}, {0x4, 0x9, 0x5fde, 0xffff}, {0x5, 0xfffffff8, 0x9}, 0x70bd26, 0x0, 0xa, 0x2, 0x7f, 0x1}, 0x3, 0xde}, [@tfcpad={0x8, 0x16, 0x80000000}]}, 0x100}, 0x1, 0x0, 0x0, 0x4075}, 0xc800) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) getpid() syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2.328503583s ago: executing program 4 (id=2239): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r3, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0xa0580) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000040)={"045af386", 0xe, 0x1, 0x2, 0xfffff800, 0x3, "5f575ef2d49ffdff33fe17fcda8121", "b8ed9125", "1a301950", "5bca1449", ["da9c8c30826411e0324ad04e", "9fa7c843b42b8ca634d23b14", "5def75e98c5bca3b52cd553f", "7271df947889fb453e3694c8"]}) fcntl$setown(r3, 0x8, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa0}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000940)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x84, 0x2, 0x2, 0x1, 0x0, [@empty]}]}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000dc0)=ANY=[@ANYBLOB="04221d02aaaaaaaaaa12"], 0x20) 2.184970852s ago: executing program 3 (id=2240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 1.029859909s ago: executing program 5 (id=2241): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x200008c0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) 79.732144ms ago: executing program 5 (id=2242): semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000001280)=""/137) 14.032908ms ago: executing program 6 (id=2243): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0xd48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x1, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x3, 0x2, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x80000000, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffff9, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 5 (id=2244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000004c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 137.628087][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.637079][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.677501][ T276] blkno = 1580, nblocks = 1 [ 137.682116][ T276] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 137.682116][ T276] [ 137.723677][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.730975][ T5264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.739639][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.746855][ T5264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.849011][ T5264] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.966821][ T4226] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.426631][ T4226] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.481392][ T4226] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 142.552288][ T4226] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 142.626261][ T4226] usb 3-1: config 220 has no interface number 2 [ 142.656350][ T4226] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.837148][ T4226] usb 3-1: config 220 interface 0 has no altsetting 0 [ 142.844476][ T4226] usb 3-1: config 220 interface 76 has no altsetting 0 [ 142.852247][ T4226] usb 3-1: config 220 interface 1 has no altsetting 0 [ 143.016469][ T4226] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 143.025554][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.058246][ T4226] usb 3-1: Product: syz [ 143.062447][ T4226] usb 3-1: Manufacturer: syz [ 143.083631][ T4226] usb 3-1: SerialNumber: syz [ 143.452666][ T5339] 9pnet_virtio: no channels available for device syz [ 143.496576][ T4226] usb 3-1: selecting invalid altsetting 0 [ 143.505079][ T4226] usb 3-1: selecting invalid altsetting 0 [ 143.516746][ T4226] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 143.528521][ T4226] usb 3-1: No valid video chain found. [ 143.627211][ T4226] usb 3-1: selecting invalid altsetting 0 [ 143.641774][ T4226] usbtest: probe of 3-1:220.1 failed with error -22 [ 143.691586][ T4226] usb 3-1: USB disconnect, device number 5 [ 143.909323][ T5338] vivid-002: disconnect [ 144.005992][ T5349] binder: BINDER_SET_CONTEXT_MGR already set [ 144.012509][ T5349] binder: 5342:5349 ioctl 4018620d 2000000002c0 returned -16 [ 144.707562][ T5337] vivid-002: reconnect [ 146.242147][ T4226] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 146.496386][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 146.667079][ T4226] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 146.732950][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 146.882352][ T4226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 147.135055][ T5380] sg_write: data in/out 226/14 bytes for SCSI command 0x2-- guessing data in; [ 147.135055][ T5380] program syz.2.302 not setting count and/or reply_len properly [ 147.256421][ T4226] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 147.272259][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.294365][ T4226] usb 5-1: Product: syz [ 147.306261][ T4226] usb 5-1: Manufacturer: syz [ 147.338476][ T4226] usb 5-1: SerialNumber: syz [ 147.366589][ T4226] usb 5-1: config 0 descriptor?? [ 148.219134][ T5397] overlayfs: missing 'lowerdir' [ 149.374264][ T4226] usb 5-1: USB disconnect, device number 6 [ 150.461099][ T5431] vivid-003: disconnect [ 151.364691][ T5416] vivid-003: reconnect [ 151.590506][ T5439] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 151.590506][ T5439] The task syz.3.321 (5439) triggered the difference, watch for misbehavior. [ 151.706273][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 152.596335][ T21] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 152.618223][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.638536][ T21] usb 2-1: Product: syz [ 152.648078][ T21] usb 2-1: Manufacturer: syz [ 152.660122][ T21] usb 2-1: SerialNumber: syz [ 152.708730][ T21] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 153.886345][ T21] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.319732][ T4173] usb 2-1: USB disconnect, device number 2 [ 155.006594][ T21] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 155.014115][ T21] ath9k_htc: Failed to initialize the device [ 155.063164][ T4173] usb 2-1: ath9k_htc: USB layer deinitialized [ 155.836992][ T5497] vivid-003: disconnect [ 156.259489][ T5490] vivid-003: reconnect [ 156.443736][ T5502] binder: 5501:5502 ioctl c0306201 0 returned -14 [ 158.559056][ T5527] loop3: detected capacity change from 0 to 32768 [ 160.145324][ T5527] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 160.145324][ T5527] [ 160.156846][ T5527] ERROR: (device loop3): remounting filesystem as read-only [ 160.165122][ T5527] attempt to access beyond end of device [ 160.165122][ T5527] loop3: rw=2049, want=44040, limit=32768 [ 160.453835][ T5543] vivid-003: disconnect [ 161.048704][ T5536] vivid-003: reconnect [ 161.178223][ T276] blkno = 1580, nblocks = 1 [ 161.182801][ T276] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map [ 161.182801][ T276] [ 161.224031][ T5546] binder: 5545:5546 ioctl c0306201 0 returned -14 [ 165.560312][ T5584] loop1: detected capacity change from 0 to 32768 [ 166.317790][ T4291] Bluetooth: hci4: command 0x0405 tx timeout [ 167.120600][ T26] audit: type=1800 audit(1770046207.437:14): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.363" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 167.905756][ T5611] binder: 5610:5611 ioctl c0306201 0 returned -14 [ 170.435490][ T5625] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 170.453702][ T5629] loop2: detected capacity change from 0 to 32768 [ 170.622783][ T5631] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 170.622783][ T5631] [ 170.635398][ T5631] ERROR: (device loop2): remounting filesystem as read-only [ 170.647471][ T5631] attempt to access beyond end of device [ 170.647471][ T5631] loop2: rw=2049, want=44040, limit=32768 [ 171.382280][ T5635] loop0: detected capacity change from 0 to 32768 [ 171.758749][ T26] audit: type=1800 audit(1770046212.737:15): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.379" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 171.792356][ T275] blkno = 1580, nblocks = 1 [ 171.815031][ T275] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 171.815031][ T275] [ 173.267409][ T5652] hub 8-0:1.0: USB hub found [ 173.298482][ T5652] hub 8-0:1.0: 1 port detected [ 174.167035][ T5665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'. [ 174.176403][ T5665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'. [ 174.193331][ T5665] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 174.871855][ T5665] NILFS (nullb0): couldn't find nilfs on the device [ 175.120203][ T5663] sched: RT throttling activated [ 176.485000][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 176.495016][ T4233] Bluetooth: hci3: command 0x0406 tx timeout [ 176.501510][ T4233] Bluetooth: hci1: command 0x0406 tx timeout [ 176.507897][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 176.514019][ T4233] Bluetooth: hci4: command 0x0406 tx timeout [ 176.575689][ T4291] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 176.898170][ T5685] loop3: detected capacity change from 0 to 32768 [ 176.966584][ T4291] usb 2-1: Using ep0 maxpacket: 16 [ 177.316295][ T4226] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 177.446458][ T4291] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.465124][ T26] audit: type=1800 audit(1770046218.347:16): pid=5688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.393" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 177.746245][ T4226] usb 5-1: Using ep0 maxpacket: 16 [ 177.918668][ T4291] usb 2-1: config 0 interface 0 has no altsetting 0 [ 178.044199][ T4226] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.075576][ T4226] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.388636][ T4291] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 178.446347][ T4226] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 178.516256][ T4291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.524442][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.695553][ T4291] usb 2-1: Product: syz [ 178.716234][ T4226] usb 5-1: Product: syz [ 178.766184][ T4291] usb 2-1: Manufacturer: syz [ 178.770879][ T4226] usb 5-1: Manufacturer: syz [ 178.798874][ T4226] usb 5-1: SerialNumber: syz [ 178.798922][ T4291] usb 2-1: SerialNumber: syz [ 178.817577][ T4291] usb 2-1: config 0 descriptor?? [ 178.846348][ T4291] usb 2-1: can't set config #0, error -71 [ 178.856228][ T4226] usb 5-1: config 0 descriptor?? [ 178.885061][ T4291] usb 2-1: USB disconnect, device number 3 [ 179.184582][ T4226] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 179.197000][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 179.289838][ T4226] imon:send_packet: packet tx failed (-71) [ 179.316260][ T4226] imon 5-1:0.0: panel buttons/knobs setup failed [ 179.426272][ T4226] rc_core: IR keymap rc-imon-pad not found [ 179.432156][ T4226] Registered IR keymap rc-empty [ 179.462540][ T4226] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 179.499204][ T4226] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 179.546281][ T4226] imon:send_packet: packet tx failed (-71) [ 179.575965][ T4226] imon 5-1:0.0: remote input dev register failed [ 179.601301][ T4226] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 179.860606][ T4226] imon 5-1:0.0: unable to initialize intf0, err 0 [ 179.867242][ T4226] imon:imon_probe: failed to initialize context! [ 179.873679][ T4226] imon 5-1:0.0: unable to register, err -19 [ 179.882787][ T4226] usb 5-1: USB disconnect, device number 7 [ 181.206223][ T4226] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 181.638381][ T5736] overlayfs: missing 'workdir' [ 182.095788][ T5750] loop3: detected capacity change from 0 to 32768 [ 182.294849][ T5758] 9pnet_virtio: no channels available for device syz [ 182.302510][ T5758] siw: device registration error -23 [ 183.980940][ T26] audit: type=1800 audit(1770046225.047:17): pid=5750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.407" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 187.637263][ T5792] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 188.706985][ T5805] gfs2: not a GFS2 filesystem [ 188.878619][ T5800] 9pnet_virtio: no channels available for device syz [ 188.886590][ T5800] siw: device registration error -23 [ 191.061581][ T5835] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 191.127520][ T5835] netlink: 152 bytes leftover after parsing attributes in process `syz.4.439'. [ 192.085703][ T4225] libceph: connect (1)[c::]:6789 error -101 [ 192.119826][ T5846] ceph: No mds server is up or the cluster is laggy [ 192.193080][ T4225] libceph: mon0 (1)[c::]:6789 connect error [ 192.733599][ T5869] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 193.897762][ T5877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'. [ 193.898004][ T5877] netlink: 48 bytes leftover after parsing attributes in process `syz.2.450'. [ 193.916224][ T5877] NILFS (nullb0): couldn't find nilfs on the device [ 194.541914][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606334][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.776277][ T5956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.476'. [ 202.785329][ T5956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.476'. [ 203.195849][ T5935] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 203.466309][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 203.630114][ T5935] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 204.161746][ T5972] syz.0.480 (5972): drop_caches: 2 [ 204.177271][ T5972] syz.0.480 (5972): drop_caches: 2 [ 204.537956][ T5935] usb 2-1: config 8 has no interface number 0 [ 204.555091][ T5935] usb 2-1: config 8 interface 249 has no altsetting 0 [ 204.766735][ T5935] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=f1.1b [ 205.295846][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.334127][ T5935] usb 2-1: Product: syz [ 205.462249][ T5935] usb 2-1: Manufacturer: syz [ 205.476007][ T5935] usb 2-1: SerialNumber: syz [ 206.492211][ T5935] usb 2-1: can't set config #8, error -71 [ 206.574166][ T5935] usb 2-1: USB disconnect, device number 4 [ 209.526405][ T6022] tipc: Started in network mode [ 209.640514][ T6024] loop4: detected capacity change from 0 to 32768 [ 209.771706][ T26] audit: type=1800 audit(1770046250.837:18): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.494" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 209.819438][ T6025] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 209.819438][ T6025] [ 209.833998][ T6025] ERROR: (device loop4): remounting filesystem as read-only [ 209.845394][ T6025] attempt to access beyond end of device [ 209.845394][ T6025] loop4: rw=2049, want=44040, limit=32768 [ 210.399921][ T6022] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 210.411013][ T6022] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 210.420017][ T6022] tipc: Enabled bearer , priority 10 [ 211.430043][ T276] blkno = 1580, nblocks = 1 [ 211.445237][ T276] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map [ 211.445237][ T276] [ 211.562192][ T4996] tipc: Node number set to 1 [ 215.895549][ T6076] loop3: detected capacity change from 0 to 32768 [ 217.707503][ T26] audit: type=1800 audit(1770046258.777:19): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.512" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 217.990827][ T6093] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 218.229690][ T6103] 9pnet_virtio: no channels available for device syz [ 218.237287][ T6103] siw: device registration error -23 [ 219.972600][ T6118] gfs2: not a GFS2 filesystem [ 220.327673][ T6129] hub 8-0:1.0: USB hub found [ 220.376235][ T6129] hub 8-0:1.0: 1 port detected [ 220.732590][ T6136] vivid-004: disconnect [ 220.913287][ T6119] vivid-004: reconnect [ 221.423114][ T6142] syz.1.529 (6142): drop_caches: 2 [ 221.455908][ T6142] syz.1.529 (6142): drop_caches: 2 [ 222.798838][ T6146] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 226.295106][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 226.343529][ T6191] hub 8-0:1.0: USB hub found [ 226.386493][ T6191] hub 8-0:1.0: 1 port detected [ 227.111081][ T6199] vivid-003: disconnect [ 227.259831][ T6177] vivid-003: reconnect [ 229.019539][ T6215] gfs2: not a GFS2 filesystem [ 230.186781][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 230.199709][ T6232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 231.815359][ T6263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 233.658368][ T6278] vivid-001: disconnect [ 233.801587][ T6264] vivid-001: reconnect [ 236.359774][ T6295] 9pnet_virtio: no channels available for device syz [ 237.838508][ T6315] hub 8-0:1.0: USB hub found [ 237.844118][ T6315] hub 8-0:1.0: 1 port detected [ 238.679159][ T6321] overlayfs: failed to resolve './file0': -2 [ 244.255452][ T6363] syz.4.591 (6363): drop_caches: 2 [ 244.945707][ T6363] syz.4.591 (6363): drop_caches: 2 [ 245.407369][ T26] audit: type=1804 audit(1770046286.467:20): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.594" name="file1" dev="ramfs" ino=37856 res=1 errno=0 [ 247.777039][ T6392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.599'. [ 247.786293][ T6392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.599'. [ 247.800780][ T6392] NILFS (nullb0): couldn't find nilfs on the device [ 251.630852][ T6437] kvm: pic: non byte read [ 251.655257][ T6437] kvm: pic: level sensitive irq not supported [ 251.655362][ T6437] kvm: pic: non byte read [ 251.716603][ T6437] kvm: pic: level sensitive irq not supported [ 251.716662][ T6437] kvm: pic: non byte read [ 251.794414][ T6437] kvm: pic: level sensitive irq not supported [ 251.794470][ T6437] kvm: pic: non byte read [ 251.832228][ T6437] kvm: pic: level sensitive irq not supported [ 251.832300][ T6437] kvm: pic: non byte read [ 251.845505][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 251.855355][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 251.899081][ T6437] kvm: pic: level sensitive irq not supported [ 251.899146][ T6437] kvm: pic: non byte read [ 251.932230][ T6437] kvm: pic: level sensitive irq not supported [ 251.932287][ T6437] kvm: pic: non byte read [ 251.963246][ T6437] kvm: pic: level sensitive irq not supported [ 251.963303][ T6437] kvm: pic: non byte read [ 252.045785][ T6437] kvm: pic: level sensitive irq not supported [ 252.045841][ T6437] kvm: pic: non byte read [ 252.184459][ T4309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.352945][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 252.447834][ T6449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.616'. [ 252.503293][ T6454] NILFS (nullb0): couldn't find nilfs on the device [ 252.578835][ T6449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.616'. [ 252.665415][ T4309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.762615][ T4173] Bluetooth: hci5: command 0x0409 tx timeout [ 252.850143][ T4309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.130234][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.137502][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.328348][ T6430] device bridge_slave_0 entered promiscuous mode [ 254.468766][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.555464][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.671048][ T6430] device bridge_slave_1 entered promiscuous mode [ 255.017093][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.055137][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.153360][ T6430] team0: Port device team_slave_0 added [ 255.161636][ T6430] team0: Port device team_slave_1 added [ 255.197725][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 255.499900][ T4309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.687608][ T6478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 255.725392][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.745931][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.874361][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.916048][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.919082][ T6470] Bluetooth: hci5: command 0x040f tx timeout [ 257.922527][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.949899][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.987092][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.013035][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.051322][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.135287][ T6430] device hsr_slave_0 entered promiscuous mode [ 259.150620][ T6430] device hsr_slave_1 entered promiscuous mode [ 259.162830][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.317503][ T6502] overlayfs: failed to resolve './file0': -2 [ 259.936216][ T6430] Cannot create hsr debugfs directory [ 261.043943][ T4173] Bluetooth: hci5: command 0x0419 tx timeout [ 261.707675][ T6507] ODEBUG: Out of memory. ODEBUG disabled [ 262.506559][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 263.146923][ T6470] Bluetooth: hci5: command 0x0405 tx timeout [ 263.640601][ T6430] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.688329][ T6430] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.830022][ T6430] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.904939][ T6430] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 264.899362][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.991663][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.006792][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.761098][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.832390][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.853187][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.882617][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.889787][ T4274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.007862][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 266.018560][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.027471][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.034579][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.376483][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.425633][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.481840][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.614488][ T6575] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 266.685203][ T6430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.736727][ T6430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.948544][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.003077][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.155758][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.360948][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.571709][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.622055][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.638804][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.647432][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.655890][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.663850][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.708758][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 267.737105][ T6587] bond0: option lp_interval: invalid value (18446744073709551612) [ 267.744965][ T6587] bond0: option lp_interval: allowed values 1 - 2147483647 [ 268.019166][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.056248][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.219812][ T4309] device hsr_slave_0 left promiscuous mode [ 268.256299][ T4309] device hsr_slave_1 left promiscuous mode [ 268.328768][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.370727][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 268.380751][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 268.540786][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.701785][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.954933][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.134908][ T4309] device bridge_slave_1 left promiscuous mode [ 270.147265][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.555259][ T4309] device bridge_slave_0 left promiscuous mode [ 271.582280][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.801419][ T4309] device veth1_macvtap left promiscuous mode [ 271.810740][ T4309] device veth0_macvtap left promiscuous mode [ 271.824489][ T4309] device veth1_vlan left promiscuous mode [ 271.837101][ T4309] device veth0_vlan left promiscuous mode [ 272.743082][ T6672] tipc: Can't bind to reserved service type 0 [ 274.856900][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 274.942151][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 275.039759][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.193314][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.809277][ T4309] bond0 (unregistering): Released all slaves [ 276.825559][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.283877][ T26] audit: type=1326 audit(1770046319.347:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 278.556939][ T4225] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.137854][ T26] audit: type=1326 audit(1770046319.347:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 279.161314][ T26] audit: type=1326 audit(1770046319.347:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 279.184458][ T26] audit: type=1326 audit(1770046319.347:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 279.207999][ T26] audit: type=1326 audit(1770046319.347:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 279.231721][ T26] audit: type=1326 audit(1770046319.347:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3537b1478e code=0x7ffc0000 [ 279.254114][ T26] audit: type=1326 audit(1770046319.347:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 279.277649][ T26] audit: type=1326 audit(1770046319.347:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3537b1478e code=0x7ffc0000 [ 279.404669][ T26] audit: type=1326 audit(1770046319.347:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3537b551d7 code=0x7ffc0000 [ 279.466291][ T4225] usb 3-1: Using ep0 maxpacket: 16 [ 279.513527][ T26] audit: type=1326 audit(1770046319.347:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz.2.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3537b53eb9 code=0x7ffc0000 [ 280.697487][ T4225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.716267][ T4225] usb 3-1: config 0 has no interfaces? [ 280.904778][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.924740][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.959590][ T4225] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 280.983807][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.006300][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.019595][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.031453][ T4225] usb 3-1: Product: syz [ 281.047848][ T4225] usb 3-1: Manufacturer: syz [ 281.055902][ T6430] device veth0_vlan entered promiscuous mode [ 281.068694][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 281.080476][ T4225] usb 3-1: SerialNumber: syz [ 281.094887][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 281.109788][ T4225] usb 3-1: config 0 descriptor?? [ 281.140521][ T6430] device veth1_vlan entered promiscuous mode [ 281.227661][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 281.260568][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 281.310688][ T1109] usb 3-1: USB disconnect, device number 6 [ 281.325279][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 281.382520][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.402451][ T6430] device veth0_macvtap entered promiscuous mode [ 282.542156][ T6430] device veth1_macvtap entered promiscuous mode [ 282.635330][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.648418][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.718374][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.877417][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.887442][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.898240][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.913878][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.924570][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.934577][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.956088][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.978021][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.017076][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 284.167989][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 284.189439][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.227167][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.238764][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.249513][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.259725][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.274563][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.289027][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.301623][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.333222][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.342764][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 284.453893][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 284.479386][ T6430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.493472][ T6430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.276864][ T6430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.285566][ T6430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.528637][ T5209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.561268][ T5209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.618537][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 286.699920][ T4752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.708626][ T4752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.754327][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 287.861951][ T6797] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 289.208992][ T6829] vivid-000: disconnect [ 290.166991][ T6811] vivid-000: reconnect [ 290.336633][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.709'. [ 290.345603][ T6839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.709'. [ 290.358657][ T6839] NILFS (nullb0): couldn't find nilfs on the device [ 294.419285][ T6894] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 294.788179][ T6904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'. [ 294.797270][ T6904] netlink: 48 bytes leftover after parsing attributes in process `syz.2.725'. [ 294.811001][ T6904] NILFS (nullb0): couldn't find nilfs on the device [ 294.886206][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 295.476601][ T21] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 295.789042][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.848138][ T21] usb 4-1: Product: syz [ 296.035809][ T21] usb 4-1: Manufacturer: syz [ 296.040578][ T21] usb 4-1: SerialNumber: syz [ 296.055295][ T21] usb 4-1: config 0 descriptor?? [ 296.965512][ T21] usb 4-1: USB disconnect, device number 4 [ 297.344486][ T6943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.738'. [ 297.353581][ T6943] netlink: 48 bytes leftover after parsing attributes in process `syz.4.738'. [ 297.366378][ T6943] NILFS (nullb0): couldn't find nilfs on the device [ 297.522920][ T6950] vivid-004: disconnect [ 298.500007][ T6938] vivid-004: reconnect [ 303.981263][ T7053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.759'. [ 304.391122][ T7053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.759'. [ 305.744702][ T7076] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 307.920881][ T7128] loop6: detected capacity change from 0 to 7 [ 308.011134][ T4176] Dev loop6: unable to read RDB block 7 [ 308.045078][ T4176] loop6: unable to read partition table [ 308.108521][ T4176] loop6: partition table beyond EOD, truncated [ 308.181074][ T7128] Dev loop6: unable to read RDB block 7 [ 308.224454][ T7128] loop6: unable to read partition table [ 308.293675][ T7128] loop6: partition table beyond EOD, truncated [ 308.390887][ T7128] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 308.604585][ T3560] Dev loop6: unable to read RDB block 7 [ 308.620513][ T3560] loop6: unable to read partition table [ 308.669344][ T3560] loop6: partition table beyond EOD, truncated [ 309.016473][ T7144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.781'. [ 310.409241][ T7144] netlink: 48 bytes leftover after parsing attributes in process `syz.2.781'. [ 311.737125][ T7179] hub 8-0:1.0: USB hub found [ 311.742621][ T7179] hub 8-0:1.0: 1 port detected [ 314.448543][ T7198] netlink: 'syz.5.796': attribute type 11 has an invalid length. [ 316.262082][ T4233] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 316.556241][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 317.076483][ T4233] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 317.090810][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.102833][ T4233] usb 6-1: Product: syz [ 317.111615][ T4233] usb 6-1: Manufacturer: syz [ 317.119356][ T4233] usb 6-1: SerialNumber: syz [ 317.135689][ T4233] usb 6-1: config 0 descriptor?? [ 317.209574][ T4233] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 319.897391][ T4233] gspca_ov534_9: reg_w failed -110 [ 320.546299][ T4233] gspca_ov534_9: Unknown sensor 0000 [ 320.546690][ T4233] ov534_9: probe of 6-1:0.0 failed with error -22 [ 320.818149][ T4233] usb 6-1: USB disconnect, device number 2 [ 321.836488][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 321.846208][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.813'. [ 322.486638][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.492959][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.276199][ T7352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.827'. [ 327.285149][ T7352] netlink: 48 bytes leftover after parsing attributes in process `syz.4.827'. [ 327.743984][ T7345] NILFS (nullb0): couldn't find nilfs on the device [ 328.087482][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.830'. [ 328.141163][ T7359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.830'. [ 328.207375][ T7359] netlink: 'syz.5.830': attribute type 12 has an invalid length. [ 328.367181][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 328.379950][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 333.436323][ T7437] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 333.467886][ T7437] overlayfs: overlapping lowerdir path [ 333.963274][ T7452] vivid-003: disconnect [ 334.704670][ T7450] vivid-003: reconnect [ 337.967663][ T7517] vivid-000: disconnect [ 338.073691][ T7506] vivid-000: reconnect [ 339.093223][ T7550] cgroup: subsys name conflicts with all [ 340.105310][ T26] kauditd_printk_skb: 52 callbacks suppressed [ 340.105324][ T26] audit: type=1326 audit(1770046381.167:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 340.323223][ T26] audit: type=1326 audit(1770046381.197:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 340.626297][ T7577] hub 8-0:1.0: USB hub found [ 340.631198][ T7577] hub 8-0:1.0: 1 port detected [ 340.675304][ T7576] vivid-001: disconnect [ 341.140478][ T7567] vivid-001: reconnect [ 341.519761][ T26] audit: type=1326 audit(1770046381.207:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3044c7f78e code=0x7ffc0000 [ 341.777779][ T26] audit: type=1326 audit(1770046381.207:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 341.846273][ T13] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 342.786117][ T26] audit: type=1326 audit(1770046381.207:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 342.906261][ T26] audit: type=1326 audit(1770046381.217:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 342.942191][ T26] audit: type=1326 audit(1770046381.217:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 343.042713][ T13] usb 4-1: config 0 has an invalid interface number: 170 but max is 0 [ 343.062808][ T13] usb 4-1: config 0 has no interface number 0 [ 343.076443][ T13] usb 4-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7 [ 343.095236][ T26] audit: type=1326 audit(1770046381.217:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.0.877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 343.587454][ T13] usb 4-1: config 0 interface 170 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 343.599394][ T13] usb 4-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6 [ 343.611855][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.637746][ T13] usb 4-1: config 0 descriptor?? [ 343.718216][ T13] HFC-S_USB: probe of 4-1:0.170 failed with error -5 [ 345.198332][ T4262] usb 4-1: USB disconnect, device number 5 [ 345.438751][ T7632] vivid-003: disconnect [ 345.472592][ T7633] hub 8-0:1.0: USB hub found [ 345.478340][ T7633] hub 8-0:1.0: 1 port detected [ 346.061970][ T7627] vivid-003: reconnect [ 348.925410][ T7681] hub 8-0:1.0: USB hub found [ 348.930776][ T7681] hub 8-0:1.0: 1 port detected [ 362.081709][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.941'. [ 364.442542][ T4233] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 365.616230][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 365.754986][ T4233] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 365.816176][ T4233] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 365.852276][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.869327][ T4233] usb 4-1: config 0 descriptor?? [ 365.923257][ T4233] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 366.650435][ T7840] crypto_alloc_aead failed rc=-4 [ 367.056008][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.956'. [ 367.957880][ T7872] program syz.0.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.136309][ T4233] usb 4-1: USB disconnect, device number 6 [ 368.238550][ T7879] binder: 7878:7879 ioctl c0306201 200000000680 returned -14 [ 369.583509][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.5.966'. [ 373.896962][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.980'. [ 373.905929][ T7953] netlink: 48 bytes leftover after parsing attributes in process `syz.0.980'. [ 375.986073][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 378.772935][ T8007] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 381.636162][ T4233] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 381.647733][ T8036] hub 8-0:1.0: USB hub found [ 381.652891][ T8036] hub 8-0:1.0: 1 port detected [ 382.196736][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 382.317223][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.328537][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.379266][ T4233] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 382.391884][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.402094][ T4233] usb 5-1: config 0 descriptor?? [ 382.459546][ T8050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1008'. [ 382.508309][ T8050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1008'. [ 382.951274][ T4233] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 383.003564][ T4233] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 383.066427][ T4233] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 383.145483][ T4233] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 383.237789][ T4233] gt683r_led 0003:1770:FF00.0001: unknown main item tag 0x0 [ 383.417207][ T4233] gt683r_led 0003:1770:FF00.0001: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.4-1/input0 [ 383.544583][ T4233] usb 5-1: USB disconnect, device number 9 [ 383.614995][ T1109] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 383.702732][ T8057] fido_id[8057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 383.928363][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.934780][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.399272][ T8086] hub 8-0:1.0: USB hub found [ 386.404454][ T8086] hub 8-0:1.0: 1 port detected [ 387.560781][ T8092] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1023'. [ 388.012669][ T8100] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.086941][ T8100] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.095899][ T8100] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.219448][ T8100] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 388.232136][ T8100] device geneve2 entered promiscuous mode [ 388.422897][ T8112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1029'. [ 390.227544][ T8139] hub 8-0:1.0: USB hub found [ 390.234101][ T8139] hub 8-0:1.0: 1 port detected [ 390.732513][ T8144] syz.3.1038 sent an empty control message without MSG_MORE. [ 391.890027][ T8160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 394.526263][ T8187] binder: 8183:8187 ioctl c0306201 0 returned -14 [ 394.820345][ T26] audit: type=1326 audit(1770046435.887:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 394.975266][ T26] audit: type=1326 audit(1770046435.917:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 395.041486][ T26] audit: type=1326 audit(1770046435.917:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 396.057646][ T26] audit: type=1326 audit(1770046435.917:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 396.764959][ T26] audit: type=1326 audit(1770046435.967:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3044c7f78e code=0x7ffc0000 [ 396.887471][ T26] audit: type=1326 audit(1770046435.967:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 396.940088][ T26] audit: type=1326 audit(1770046435.967:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 396.967888][ T26] audit: type=1326 audit(1770046435.967:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 397.070621][ T8213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1052'. [ 397.079796][ T8213] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1052'. [ 397.095188][ T8213] NILFS (nullb0): couldn't find nilfs on the device [ 397.251535][ T26] audit: type=1326 audit(1770046435.967:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 397.341977][ T26] audit: type=1326 audit(1770046435.967:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8189 comm="syz.0.1053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3044cbeeb9 code=0x7ffc0000 [ 397.441292][ T8217] tipc: Failed to obtain node identity [ 397.468621][ T8217] tipc: Enabling of bearer rejected, failed to enable media [ 397.488459][ T8219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 397.515987][ T8219] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1062'. [ 399.144303][ T8240] binder: 8233:8240 ioctl c0306201 0 returned -14 [ 401.523394][ T8261] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1075'. [ 404.089184][ T8285] binder: 8274:8285 ioctl c0306201 0 returned -14 [ 405.832460][ T8303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1086'. [ 408.930436][ T8340] device dummy0 entered promiscuous mode [ 408.979365][ T8340] device macsec1 entered promiscuous mode [ 409.011759][ T8347] hub 8-0:1.0: USB hub found [ 409.017999][ T8347] hub 8-0:1.0: 1 port detected [ 409.209577][ T8340] device dummy0 left promiscuous mode [ 413.133423][ T8392] hub 8-0:1.0: USB hub found [ 413.138873][ T8392] hub 8-0:1.0: 1 port detected [ 413.633533][ T8397] sp0: Synchronizing with TNC [ 413.665934][ T8396] [U] è [ 418.768334][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1126'. [ 427.780107][ T8526] syz.5.1150 (8526): drop_caches: 2 [ 430.475961][ T8555] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 434.336806][ T8580] binder: 8578:8580 ioctl c0306201 0 returned -14 [ 434.355618][ T8580] binder: 8578:8580 ioctl 4040aea0 0 returned -22 [ 434.475310][ T8590] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 438.223809][ T8629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1183'. [ 438.301149][ T8629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1183'. [ 439.151651][ T8629] NILFS (nullb0): couldn't find nilfs on the device [ 445.391330][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.397763][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.302400][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.311637][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.321321][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.330440][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.347761][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.356994][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.366095][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.375183][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1209'. [ 447.554337][ T8714] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1205'. [ 448.222533][ T8714] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1205'. [ 456.106644][ T8820] hub 8-0:1.0: USB hub found [ 456.112041][ T8820] hub 8-0:1.0: 1 port detected [ 456.817168][ T8833] __nla_validate_parse: 5 callbacks suppressed [ 456.817185][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 456.832665][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 456.847227][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 456.856416][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 459.644245][ T8863] hub 8-0:1.0: USB hub found [ 459.649681][ T8863] hub 8-0:1.0: 1 port detected [ 461.121913][ T8873] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 461.584490][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 461.593765][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 461.607352][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 461.616542][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 463.719491][ T8902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1253'. [ 464.586177][ T8902] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1253'. [ 465.627195][ T8908] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 474.794696][ T8996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1276'. [ 474.916491][ T8996] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1276'. [ 478.044403][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 478.057578][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'. [ 485.126245][ T9089] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 490.218242][ T9139] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 490.474883][ T9145] hub 8-0:1.0: USB hub found [ 490.480552][ T9145] hub 8-0:1.0: 1 port detected [ 495.950257][ T9191] hub 8-0:1.0: USB hub found [ 495.955719][ T9191] hub 8-0:1.0: 1 port detected [ 497.916427][ T9204] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 498.216408][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1341'. [ 501.491035][ T9233] hub 8-0:1.0: USB hub found [ 501.496561][ T9233] hub 8-0:1.0: 1 port detected [ 503.464412][ T9247] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 506.847515][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1357'. [ 506.857372][ T9272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1357'. [ 506.987953][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.994445][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.771388][ T9291] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 512.605569][ T9333] hub 8-0:1.0: USB hub found [ 512.611026][ T9333] hub 8-0:1.0: 1 port detected [ 520.722496][ T9393] hub 8-0:1.0: USB hub found [ 520.727933][ T9393] hub 8-0:1.0: 1 port detected [ 521.657526][ T9398] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 523.618626][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 529.796113][ T9460] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1414'. [ 529.805175][ T9460] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1414'. [ 535.549590][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 537.500611][ T9531] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 543.907877][ T9585] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 545.843347][ T9614] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1455'. [ 546.746613][ T9614] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1455'. [ 549.383852][ T9636] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 553.689334][ T9685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1474'. [ 553.713460][ T9685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1474'. [ 556.945653][ T9707] hub 8-0:1.0: USB hub found [ 556.951157][ T9707] hub 8-0:1.0: 1 port detected [ 562.402759][ T9739] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1492'. [ 562.411889][ T9739] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1492'. [ 562.422272][ T9739] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 562.443292][ T9739] NILFS (nullb0): couldn't find nilfs on the device [ 562.511145][ T9745] hub 8-0:1.0: USB hub found [ 562.516294][ T9745] hub 8-0:1.0: 1 port detected [ 568.241502][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.249825][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.260892][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1506'. [ 570.405096][ T9798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1504'. [ 570.414180][ T9798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1504'. [ 570.427989][ T9798] NILFS (nullb0): couldn't find nilfs on the device [ 574.369112][ T9819] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 575.717616][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1523'. [ 575.726788][ T9852] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1523'. [ 575.741073][ T9852] NILFS (nullb0): couldn't find nilfs on the device [ 579.368880][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1529'. [ 583.838027][ T9934] capability: warning: `syz.5.1546' uses 32-bit capabilities (legacy support in use) [ 585.066416][ T9949] IPv6: NLM_F_REPLACE set, but no existing node found! [ 585.516181][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'. [ 585.802685][ T9958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1552'. [ 585.811811][ T9958] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1552'. [ 585.825678][ T9958] NILFS (nullb0): couldn't find nilfs on the device [ 587.906480][ T9980] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1559'. [ 589.694653][T10013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 590.977045][T10025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1577'. [ 590.986484][T10025] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1577'. [ 592.193392][T10025] NILFS (nullb0): couldn't find nilfs on the device [ 594.788299][T10032] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1578'. [ 594.851133][T10042] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 597.197240][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1590'. [ 597.206941][T10073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1590'. [ 597.253882][T10073] NILFS (nullb0): couldn't find nilfs on the device [ 599.399397][T10090] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 600.742889][T10114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1604'. [ 600.752073][T10114] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1604'. [ 600.767017][T10114] NILFS (nullb0): couldn't find nilfs on the device [ 604.687369][ T1109] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 607.046129][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.096174][ T1109] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 607.310712][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.329490][ T1109] usb 5-1: config 0 descriptor?? [ 608.070301][ T1109] usbhid 5-1:0.0: can't add hid device: -71 [ 608.094273][ T1109] usbhid: probe of 5-1:0.0 failed with error -71 [ 608.126866][ T1109] usb 5-1: USB disconnect, device number 10 [ 612.606219][ T6470] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 612.709448][T10243] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1646'. [ 612.854099][T10242] autofs4:pid:10242:autofs_fill_super: called with bogus options [ 612.976144][ T6470] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 612.984671][ T6470] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.015733][T10245] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 613.106304][ T6470] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 613.122131][ T6470] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 613.136261][ T6470] usb 6-1: Manufacturer: syz [ 613.162809][ T6470] usb 6-1: config 0 descriptor?? [ 613.249150][T10255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 613.316021][ T6470] rc_core: IR keymap rc-hauppauge not found [ 613.322040][ T6470] Registered IR keymap rc-empty [ 613.332267][ T6470] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 613.347012][ T6470] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7 [ 614.816203][ T6470] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 615.076121][ T6470] usb 3-1: Using ep0 maxpacket: 8 [ 615.213865][ T5935] usb 6-1: USB disconnect, device number 3 [ 615.416578][ T6470] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 615.429256][ T6470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.441743][ T6470] usb 3-1: Product: syz [ 615.446196][ T6470] usb 3-1: Manufacturer: syz [ 615.450866][ T6470] usb 3-1: SerialNumber: syz [ 615.485024][ T6470] usb 3-1: config 0 descriptor?? [ 615.511487][T10274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1659'. [ 615.767936][ T6470] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 615.786185][ T6470] gspca_sunplus: reg_w_riv err -71 [ 615.791904][ T6470] sunplus: probe of 3-1:0.0 failed with error -71 [ 615.808842][ T6470] usb 3-1: USB disconnect, device number 7 [ 616.602870][T10287] chnl_net:caif_netlink_parms(): no params data found [ 616.727478][T10296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 617.524996][ T4275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.572774][T10287] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.639447][T10287] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.665814][T10287] device bridge_slave_0 entered promiscuous mode [ 617.727167][T10287] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.754636][T10287] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.682322][T10287] device bridge_slave_1 entered promiscuous mode [ 618.934768][ T4262] Bluetooth: hci1: command 0x0409 tx timeout [ 619.050600][ T4275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.101598][T10287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 619.130451][T10287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.183667][ T4275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.233976][T10287] team0: Port device team_slave_0 added [ 619.256168][ T6470] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 619.278636][T10287] team0: Port device team_slave_1 added [ 619.313477][T10287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.320750][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.403060][T10287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.458811][ T4275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.496211][ T6470] usb 3-1: Using ep0 maxpacket: 32 [ 619.511514][T10287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.523112][T10287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.612141][T10287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.670949][ T6470] usb 3-1: unable to get BOS descriptor or descriptor too short [ 619.766217][ T6470] usb 3-1: config 225 has an invalid descriptor of length 0, skipping remainder of the config [ 619.768670][T10287] device hsr_slave_0 entered promiscuous mode [ 619.789444][ T6470] usb 3-1: config 225 has 1 interface, different from the descriptor's value: 2 [ 619.801202][T10287] device hsr_slave_1 entered promiscuous mode [ 619.827515][ T6470] usb 3-1: config 225 has no interface number 0 [ 619.834016][T10287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.842562][ T6470] usb 3-1: too many endpoints for config 225 interface 1 altsetting 104: 242, using maximum allowed: 30 [ 619.854388][ T6470] usb 3-1: config 225 interface 1 altsetting 104 has 0 endpoint descriptors, different from the interface descriptor's value: 242 [ 619.856006][T10287] Cannot create hsr debugfs directory [ 619.868132][ T6470] usb 3-1: config 225 interface 1 has no altsetting 0 [ 620.106754][ T6470] usb 3-1: New USB device found, idVendor=05c6, idProduct=7002, bcdDevice=d2.98 [ 620.179173][T10333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1675'. [ 620.190271][ T6470] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.240199][ T6470] usb 3-1: Product: syz [ 620.247574][ T6470] usb 3-1: Manufacturer: syz [ 620.261188][ T6470] usb 3-1: SerialNumber: syz [ 620.839931][T10308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.897192][ T6470] qmi_wwan: probe of 3-1:225.1 failed with error -22 [ 620.915781][ T6470] usb 3-1: USB disconnect, device number 8 [ 620.956434][ T1109] Bluetooth: hci1: command 0x041b tx timeout [ 622.105886][T10287] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 622.316832][T10287] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 622.327381][T10287] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 622.373307][T10287] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.031244][T10287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.038555][ T9015] Bluetooth: hci1: command 0x040f tx timeout [ 623.056147][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.114274][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.173593][T10287] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.194290][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.237019][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.275402][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.282652][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.359445][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.399582][T10376] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1683'. [ 623.432606][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.448612][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.455842][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.593950][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.619056][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.673443][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.702431][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.729813][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.752094][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.767666][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.782386][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.799116][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.813691][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.832531][T10287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.862560][T10287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.892369][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.927049][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.126514][ T8442] Bluetooth: hci1: command 0x0419 tx timeout [ 625.843755][ T4275] device hsr_slave_0 left promiscuous mode [ 626.355178][ T4275] device hsr_slave_1 left promiscuous mode [ 626.578628][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.315484][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.369757][ T4275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.407994][ T4275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.426711][ T4275] device bridge_slave_1 left promiscuous mode [ 627.436514][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.460041][ T4275] device bridge_slave_0 left promiscuous mode [ 627.480935][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.550444][ T4275] device veth1_macvtap left promiscuous mode [ 627.566226][ T4275] device veth0_macvtap left promiscuous mode [ 627.572410][ T4275] device veth1_vlan left promiscuous mode [ 627.579626][ T4275] device veth0_vlan left promiscuous mode [ 627.837313][ T4275] team0 (unregistering): Port device team_slave_1 removed [ 627.857657][ T4275] team0 (unregistering): Port device team_slave_0 removed [ 627.883089][ T4275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.899951][ T4275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.998766][ T4275] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 628.007971][ T4275] bond0 (unregistering): Released all slaves [ 628.084031][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1689'. [ 628.107146][T10406] device bpq0 entered promiscuous mode [ 628.125882][T10287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.158509][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 628.179601][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 628.193429][T10433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 628.821957][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.680724][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.688397][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.202086][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.206510][T10453] binder: 10451:10453 ioctl c0306201 0 returned -14 [ 630.235519][T10453] binder: 10451:10453 ioctl 4040aea0 0 returned -22 [ 630.256100][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.269910][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.316120][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.332317][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.356031][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.377837][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.419183][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.449459][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.468900][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.506043][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.513480][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.536139][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.543575][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.586187][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.606151][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.633538][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.673253][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.700029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 630.713591][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.734365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 630.742924][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.770899][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.796819][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.804749][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.820777][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.833979][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.848883][T10287] device veth0_vlan entered promiscuous mode [ 630.858580][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.867829][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.883056][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.887362][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.920465][T10287] device veth1_vlan entered promiscuous mode [ 630.932962][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.961577][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.971624][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 630.987082][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 630.988250][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 631.009155][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 631.031006][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.034553][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 631.054882][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.065162][T10287] device veth0_macvtap entered promiscuous mode [ 631.081735][T10287] device veth1_macvtap entered promiscuous mode [ 631.102866][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.122192][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.135348][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.143219][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.162181][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.170503][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.189979][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.189981][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.221112][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.364817][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.372316][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.382134][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 631.399924][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.030080][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.037570][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.044961][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.052394][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.060468][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.067916][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.075300][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.082760][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.090791][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.098228][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.105623][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.113078][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.121137][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.129292][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.136804][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.146093][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.148825][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.153504][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.153533][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.153558][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.186800][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.195110][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.195129][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.202564][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202590][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202610][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202629][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202649][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202670][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202691][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202712][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202734][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.202754][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.292701][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.297340][T10287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.300469][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.328720][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.344674][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.352463][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.360184][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.360237][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 632.367919][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.415904][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.416641][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 632.431319][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.441945][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 632.457407][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 632.465702][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.474601][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.483740][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.492788][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.516443][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.535697][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.559912][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.567651][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.586029][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.603610][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.611157][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.627240][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.634756][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.644643][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.652491][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.654284][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.660927][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.688903][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.701290][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.701303][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.701331][T10287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 632.710218][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.750394][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.758021][T10287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.764388][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.785665][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.789565][T10287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.806041][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.813552][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.817730][T10287] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.831960][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.834835][T10287] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.850054][T10287] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.856010][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.859045][T10287] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.872214][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 632.883712][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 632.899005][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 632.910411][ T4262] hid-generic 0000:0000:0004.0002: unknown main item tag 0x0 [ 633.013449][ T4262] hid-generic 0000:0000:0004.0002: hidraw0: HID v0.03 Device [syz1] on syz0 [ 633.146609][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1709'. [ 633.160785][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1709'. [ 633.759020][ T8442] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 633.807285][T10501] fuse: Bad value for 'group_id' [ 635.092419][ T4752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.144886][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.147262][ T4752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.240158][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.296256][ T8442] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 635.307972][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 635.324066][T10517] fido_id[10517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 635.332004][ T8442] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.457345][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 635.803733][ T8442] usb 4-1: Product: syz [ 635.834417][ T8442] usb 4-1: Manufacturer: syz [ 635.853134][ T8442] usb 4-1: SerialNumber: syz [ 635.907834][ T8442] usb 4-1: config 0 descriptor?? [ 635.940922][ T8442] usb 4-1: can't set config #0, error -71 [ 636.767069][ T8442] usb 4-1: USB disconnect, device number 7 [ 639.377097][T10584] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1731'. [ 639.517165][T10589] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1733'. [ 639.625949][T10589] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1733'. [ 642.066104][ T4262] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 642.329419][T10637] input: syz1 as /devices/virtual/input/input8 [ 642.336277][ T4262] usb 3-1: Using ep0 maxpacket: 8 [ 642.457458][ T4262] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 642.636177][ T4262] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 642.659913][T10644] device bpq0 left promiscuous mode [ 642.669641][ T4262] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 642.681168][T10644] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 642.693822][ T4262] usb 3-1: Product: syz [ 642.701168][ T4262] usb 3-1: Manufacturer: syz [ 642.711405][ T4262] usb 3-1: SerialNumber: syz [ 642.720871][T10644] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 643.041049][ T4262] usb 3-1: Invalid connection information received from device [ 643.217741][ T4173] usb 3-1: USB disconnect, device number 9 [ 646.256208][ T4291] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 646.656342][ T4291] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.803797][ T4291] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.823596][ T26] audit: type=1326 audit(2000000047.889:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 646.883248][ T26] audit: type=1326 audit(2000000047.899:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 646.972248][ T4291] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 646.986010][ T26] audit: type=1326 audit(2000000047.899:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 647.014442][ T4291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 648.477112][ T4291] usb 4-1: SerialNumber: syz [ 648.569462][ T26] audit: type=1326 audit(2000000047.899:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.595537][ T26] audit: type=1326 audit(2000000047.899:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.620973][ T26] audit: type=1326 audit(2000000047.899:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.643606][ T26] audit: type=1326 audit(2000000047.899:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.666717][ T26] audit: type=1326 audit(2000000047.899:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.689447][ T26] audit: type=1326 audit(2000000047.899:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.712211][ T26] audit: type=1326 audit(2000000047.899:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.6.1761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 648.880574][ T4291] usb 4-1: 0:2 : does not exist [ 648.983094][ T4291] usb 4-1: USB disconnect, device number 8 [ 649.341749][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 651.830340][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'. [ 651.841210][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1770'. [ 654.666107][T10034] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 655.221768][T10034] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 655.298004][T10034] usb 3-1: config 0 has no interface number 0 [ 655.377027][T10034] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 655.487110][T10034] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.836130][T10034] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 656.168282][T10034] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.176503][T10034] usb 3-1: Product: syz [ 656.180804][T10034] usb 3-1: Manufacturer: syz [ 656.185524][T10034] usb 3-1: SerialNumber: syz [ 656.194175][T10034] usb 3-1: config 0 descriptor?? [ 656.227525][T10786] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 656.653392][T10034] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 656.740806][T10034] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 658.391760][T10835] 9pnet_virtio: no channels available for device syz [ 658.519513][T10034] usb 3-1: USB disconnect, device number 10 [ 658.629121][T10034] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 658.642466][T10034] cyberjack 3-1:0.69: device disconnected [ 658.703481][T10842] 9pnet_virtio: no channels available for device syz [ 661.699321][T10875] af_packet: tpacket_rcv: packet too big, clamped from 7336 to 3952. macoff=96 [ 661.884899][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1798'. [ 661.898769][T10877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1798'. [ 663.660984][T10887] 9pnet_virtio: no channels available for device syz [ 669.365096][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 669.365112][ T26] audit: type=1800 audit(2000000070.429:125): pid=10959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1814" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 669.630486][T10966] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1818'. [ 669.743167][T10968] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.856582][T10968] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.937442][T10968] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.056470][T10968] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.521215][T10968] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.311332][T10968] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.325386][T10968] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.424602][T10968] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.136351][T11018] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1833'. [ 673.185552][T11018] device geneve2 entered promiscuous mode [ 678.478536][T11085] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 0, id = 0 [ 678.641584][T11091] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1848'. [ 680.217531][T11114] overlayfs: missing 'lowerdir' [ 681.146950][T11124] 9pnet_virtio: no channels available for device syz [ 684.535764][ T26] audit: type=1326 audit(2000000085.559:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.075185][ T26] audit: type=1326 audit(2000000085.559:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.190555][T11150] 9pnet_virtio: no channels available for device syz [ 685.216095][ T26] audit: type=1326 audit(2000000085.559:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.309977][ T26] audit: type=1326 audit(2000000085.569:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.468901][ T26] audit: type=1326 audit(2000000085.569:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.506641][ T26] audit: type=1326 audit(2000000085.569:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.604952][ T26] audit: type=1326 audit(2000000085.569:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.664258][ T26] audit: type=1326 audit(2000000085.569:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.696724][ T26] audit: type=1326 audit(2000000085.569:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 685.719309][ T26] audit: type=1326 audit(2000000085.569:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11139 comm="syz.4.1862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f4ae71eb9 code=0x7ffc0000 [ 687.226181][T11189] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1872'. [ 687.516366][T11183] NILFS (nullb0): couldn't find nilfs on the device [ 687.539174][ C0] vcan0: j1939_tp_rxtimer: 0xffff888024c6d400: rx timeout, send abort [ 687.550366][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888024c6d400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 687.802094][T11199] 9pnet: Insufficient options for proto=fd [ 687.882347][T11201] 9pnet_virtio: no channels available for device syz [ 691.820424][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.827500][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.835834][T11237] NILFS (nullb0): couldn't find nilfs on the device [ 693.485180][ T9015] Bluetooth: hci1: command 0x0405 tx timeout [ 694.703933][T11267] loop5: detected capacity change from 0 to 7 [ 694.732598][T11267] Dev loop5: unable to read RDB block 7 [ 694.745754][T11267] loop5: unable to read partition table [ 694.770819][T11267] loop5: partition table beyond EOD, truncated [ 694.802643][T11267] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 697.429453][T11302] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 697.481729][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.588659][T11302] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 697.729936][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 697.729946][ T26] audit: type=1326 audit(2000000098.799:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11281 comm="syz.2.1898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3537b53eb9 code=0x0 [ 701.029308][ T1106] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 701.396156][ T1106] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 701.412542][ T1106] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 701.586079][ T1106] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 701.591133][T11375] block device autoloading is deprecated and will be removed. [ 701.602955][ T1106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.622033][ T1106] usb 3-1: Product: syz [ 701.626709][ T1106] usb 3-1: Manufacturer: syz [ 701.635533][ T1106] usb 3-1: SerialNumber: syz [ 701.698203][ T1106] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 701.916248][ T3545] bcm5974 3-1:1.0: could not read from device [ 701.956242][ T1106] bcm5974 3-1:1.0: could not read from device [ 702.026017][ T3545] bcm5974 3-1:1.0: could not read from device [ 702.133283][ T1106] input: failed to attach handler mousedev to device input10, error: -5 [ 702.154761][ T1106] usb 3-1: USB disconnect, device number 11 [ 702.176477][ T3545] bcm5974 3-1:1.0: could not read from device [ 705.235029][T11422] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.455005][T11440] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1937'. [ 706.603267][T11442] 9pnet_virtio: no channels available for device syz [ 709.604888][T11455] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 710.855999][ T4262] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 711.116356][ T4262] usb 3-1: Using ep0 maxpacket: 32 [ 711.907560][ T4262] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 711.926049][ T4262] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 711.937491][ T4262] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 712.146172][ T4262] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 712.157556][ T4262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.166088][ T4262] usb 3-1: Product: syz [ 712.170279][ T4262] usb 3-1: Manufacturer: syz [ 712.174933][ T4262] usb 3-1: SerialNumber: syz [ 712.218743][ T4262] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 712.239683][ T4262] imon 3-1:155.0: unable to initialize intf0, err -19 [ 712.276375][ T4262] imon:imon_probe: failed to initialize context! [ 712.286039][ T4262] imon 3-1:155.0: unable to register, err -19 [ 712.489308][T11484] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1950'. [ 713.583033][ T5935] usb 3-1: USB disconnect, device number 12 [ 718.610053][T11536] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 718.647469][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1969'. [ 721.099092][T11572] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 722.140914][T11589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1984'. [ 722.685162][T11594] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1985'. [ 725.545965][ T4248] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 726.246530][ T4248] usb 3-1: Using ep0 maxpacket: 16 [ 727.826054][ T4248] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 727.833772][ T4248] usb 3-1: can't read configurations, error -71 [ 727.954574][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 728.734470][T11664] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1999'. [ 728.812640][T10034] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 729.646055][T10034] usb 5-1: Using ep0 maxpacket: 8 [ 729.806404][T10034] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 729.815765][T10034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.950989][T10034] pvrusb2: Hardware description: Terratec Grabster AV400 [ 729.976057][T10034] pvrusb2: ********** [ 729.980301][T10034] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 729.990822][T10034] pvrusb2: Important functionality might not be entirely working. [ 730.023762][T10034] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 730.153638][T10034] pvrusb2: ********** [ 730.218322][ T2421] pvrusb2: Invalid write control endpoint [ 730.323012][T11682] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 731.089483][ T8333] usb 5-1: USB disconnect, device number 11 [ 731.214109][ T2421] pvrusb2: Invalid write control endpoint [ 731.232450][T11651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1990'. [ 731.324096][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 731.417283][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 732.885170][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 733.099743][ T2421] pvrusb2: Device being rendered inoperable [ 733.455407][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 733.507463][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 733.535511][ T26] audit: type=1326 audit(2000000134.599:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 733.554555][ T2421] pvrusb2: Attached sub-driver cx25840 [ 733.588481][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 733.665946][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 733.720869][ T26] audit: type=1326 audit(2000000134.599:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 733.856369][ T26] audit: type=1326 audit(2000000134.599:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 733.881440][ T26] audit: type=1326 audit(2000000134.599:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 733.916593][ T26] audit: type=1326 audit(2000000134.599:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 734.014719][ T26] audit: type=1326 audit(2000000134.599:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 734.118283][ T26] audit: type=1326 audit(2000000134.599:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 734.355338][ T26] audit: type=1326 audit(2000000134.599:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 734.844055][ T26] audit: type=1326 audit(2000000134.599:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 735.141855][T11733] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 735.645956][ T26] audit: type=1326 audit(2000000134.599:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11698 comm="syz.6.2007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 738.191894][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 738.204841][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 739.276125][ T5935] Bluetooth: hci1: command 0x0406 tx timeout [ 740.783732][T11810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2032'. [ 742.681221][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2037'. [ 742.684259][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2037'. [ 746.115574][T11863] kernel read not supported for file /묥 (pid: 11863 comm: syz.2.2043) [ 746.131708][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 746.131724][ T26] audit: type=1800 audit(2000000147.199:170): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2043" name=EBACA503 dev="mqueue" ino=57777 res=0 errno=0 [ 746.385592][T11871] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2045'. [ 752.676289][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.684088][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.138237][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060b53c00: rx timeout, send abort [ 757.638310][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060b53800: rx timeout, send abort [ 757.646838][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060b53c00: abort rx timeout. Force session deactivation [ 758.146609][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060b53800: abort rx timeout. Force session deactivation [ 759.602955][ T4225] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 760.042750][ T4225] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 760.067843][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.129913][ T4225] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.161017][ T4225] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 760.446317][ T4225] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 760.469384][ T4225] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 760.526629][ T4225] usb 3-1: Manufacturer: syz [ 760.556851][ T4225] usb 3-1: config 0 descriptor?? [ 762.205389][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 762.237915][ T4225] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 762.251787][ T4225] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 762.313182][ T4225] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 763.668843][T12028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 763.707306][T12028] NILFS (nullb0): couldn't find nilfs on the device [ 764.393489][T10034] usb 3-1: reset high-speed USB device number 15 using dummy_hcd [ 765.691101][T11931] usb 3-1: USB disconnect, device number 15 [ 768.251445][T12074] NILFS (nullb0): couldn't find nilfs on the device [ 769.509039][ T26] audit: type=1326 audit(2000000170.579:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12065 comm="syz.6.2098" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897f1b8eb9 code=0x0 [ 769.988705][T12078] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2102'. [ 770.205457][T12091] netlink: 'syz.6.2098': attribute type 10 has an invalid length. [ 771.166986][T12091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2098'. [ 771.203130][T12091] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 773.516244][ T4225] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 774.575947][ T4225] usb 4-1: Using ep0 maxpacket: 8 [ 774.706188][ T4225] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 774.721253][ T4225] usb 4-1: config 179 has no interface number 0 [ 774.742668][ T4225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 774.786756][ T4225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 774.831760][ T4225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 774.872217][ T4225] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 774.911937][ T4225] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 774.942886][ T4225] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 774.966518][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.029321][T12125] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 775.330535][T12144] ALSA: mixer_oss: invalid OSS volume '' [ 775.388428][ T4225] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input18 [ 775.486004][T12144] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 775.492889][T12144] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 775.602234][ T13] usb 4-1: USB disconnect, device number 9 [ 775.608122][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 775.608149][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 775.639522][T12144] vhci_hcd vhci_hcd.0: Device attached [ 775.776018][ T1106] vhci_hcd: vhci_device speed not set [ 775.783020][ T13] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 775.925065][ T1106] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 777.732405][ T5935] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 778.625932][ T5935] usb 4-1: Using ep0 maxpacket: 8 [ 778.637217][T10034] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 778.653357][T10034] Bluetooth: hci4: Injecting HCI hardware error event [ 778.668965][ T4199] Bluetooth: hci4: hardware error 0x00 [ 778.756226][ T5935] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 779.545992][ T5935] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.605975][ T5935] usb 4-1: can't set config #252, error -71 [ 780.894459][ T5935] usb 4-1: USB disconnect, device number 10 [ 785.094181][T12209] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2136'. [ 785.169456][T12209] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2136'. [ 785.205986][ T4240] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 785.587367][ T4240] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 786.285185][ T4240] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 786.366845][T12145] vhci_hcd: connection reset by peer [ 786.376891][ T144] vhci_hcd: stop threads [ 786.381289][ T4240] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 786.394266][ T144] vhci_hcd: release socket [ 786.429338][ T144] vhci_hcd: disconnect device [ 786.451757][ T4240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.506157][ T1106] vhci_hcd: vhci_device speed not set [ 786.516474][T12207] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 786.951148][ T4240] usb 7-1: USB disconnect, device number 2 [ 790.527140][T12231] NILFS (nullb0): couldn't find nilfs on the device [ 790.695178][T12237] input: syz1 as /devices/virtual/input/input21 [ 795.781597][T12283] NILFS (nullb0): couldn't find nilfs on the device [ 796.923969][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2166'. [ 796.933705][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2166'. [ 799.050904][T12310] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 800.210463][ T26] audit: type=1326 audit(2000000200.769:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.464323][ T26] audit: type=1326 audit(2000000200.769:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.487199][ T26] audit: type=1326 audit(2000000200.919:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.510101][ T26] audit: type=1326 audit(2000000200.919:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.533077][ T26] audit: type=1326 audit(2000000200.919:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.615986][ T26] audit: type=1326 audit(2000000201.029:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.642758][ T26] audit: type=1326 audit(2000000201.029:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 800.665115][ C1] vkms_vblank_simulate: vblank timer overrun [ 801.211786][ T26] audit: type=1326 audit(2000000201.029:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 801.238696][ T26] audit: type=1326 audit(2000000201.189:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 802.101468][T12331] NILFS (nullb0): couldn't find nilfs on the device [ 802.111468][ T26] audit: type=1326 audit(2000000201.189:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.6.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897f1b8eb9 code=0x7ffc0000 [ 802.589447][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2179'. [ 802.591977][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2179'. [ 805.865966][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 805.865984][ T26] audit: type=1326 audit(2000000206.919:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 806.562048][T12367] overlayfs: unrecognized mount option "uuid=auto" or missing value [ 807.285117][T12380] NILFS (nullb0): couldn't find nilfs on the device [ 807.961046][ T26] audit: type=1326 audit(2000000206.919:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 807.986958][ T26] audit: type=1326 audit(2000000207.079:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 808.082833][ T26] audit: type=1326 audit(2000000207.079:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 808.233495][ T26] audit: type=1326 audit(2000000207.079:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 808.545520][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 808.556484][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 808.829278][ T26] audit: type=1326 audit(2000000207.219:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 810.677588][ T26] audit: type=1326 audit(2000000207.219:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 810.700161][ T26] audit: type=1326 audit(2000000207.219:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 810.726686][ T26] audit: type=1326 audit(2000000207.409:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 810.755982][ T26] audit: type=1326 audit(2000000207.409:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12358 comm="syz.3.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f387b360eb9 code=0x7ffc0000 [ 810.960792][T12382] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 812.926028][ T4248] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 813.116266][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.176084][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 813.296447][ T4248] usb 4-1: config 4 has an invalid descriptor of length 49, skipping remainder of the config [ 813.439709][ T4248] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 813.731956][ T4248] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 813.998241][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.004823][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.156255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.196133][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.415969][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.527739][ T4248] usb 4-1: Product: syz [ 815.532908][ T4248] usb 4-1: Manufacturer: syz [ 815.543968][ T4248] usb 4-1: SerialNumber: syz [ 815.906738][T11931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.236166][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.295099][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.260446][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.276193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.332088][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2216'. [ 817.463230][T12454] Can't find ip_set type hash [ 817.573981][ T4248] usb 4-1: USB disconnect, device number 11 [ 818.316118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.401037][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.602900][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 818.628903][T12483] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2223'. [ 818.796038][ T4248] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 819.356153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.396539][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.681035][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.956474][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 820.020407][T12493] mkiss: ax0: crc mode is auto. [ 820.396177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.990918][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.026013][ T4248] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 821.044337][ T4248] usb 4-1: config 0 has no interface number 0 [ 821.206027][ T4248] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 821.225464][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.255969][ T4248] usb 4-1: Product: syz [ 821.260231][ T4248] usb 4-1: Manufacturer: syz [ 821.436150][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.933249][ T4248] usb 4-1: SerialNumber: syz [ 821.961037][ T4248] usb 4-1: config 0 descriptor?? [ 822.009946][T11931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.049718][ T4248] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 822.122332][T12505] xt_TCPMSS: Only works on TCP SYN packets [ 822.129636][ T4248] usb 4-1: selecting invalid altsetting 1 [ 822.150333][ T4248] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 822.267494][ T4248] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 822.306359][ T4248] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 822.337454][ T4248] usb 4-1: media controller created [ 822.367491][ T4248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 822.456034][ T4248] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 822.466368][ T4248] zl10353_read_register: readreg error (reg=127, ret==-71) [ 822.476157][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.515978][ T4248] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 822.558233][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 822.558247][ T26] audit: type=1800 audit(2000000223.629:203): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2227" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 822.596107][ T4248] usb 4-1: USB disconnect, device number 12 [ 823.357284][ T4226] net_ratelimit: 1 callbacks suppressed [ 823.357298][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.516087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.298211][T12527] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2236'. [ 824.399505][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.566139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.615362][T12540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.427225][T12540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.446288][ T4226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.516163][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.579949][T12540] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.596120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.858773][T12551] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2241'. [ 826.761146][T12556] input: syz0 as /devices/virtual/input/input26 [ 826.773670][ T4262] [ 826.776014][ T4262] ====================================================== [ 826.783014][ T4262] WARNING: possible circular locking dependency detected [ 826.790043][ T4262] syzkaller #0 Not tainted [ 826.794455][ T4262] ------------------------------------------------------ [ 826.801453][ T4262] kworker/0:7/4262 is trying to acquire lock: [ 826.807496][ T4262] ffff8880791d0c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210 [ 826.818521][ T4262] [ 826.818521][ T4262] but task is already holding lock: [ 826.825881][ T4262] ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 826.834924][ T4262] [ 826.834924][ T4262] which lock already depends on the new lock. [ 826.834924][ T4262] [ 826.845326][ T4262] [ 826.845326][ T4262] the existing dependency chain (in reverse order) is: [ 826.854433][ T4262] [ 826.854433][ T4262] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 826.862411][ T4262] __mutex_lock_common+0x1e3/0x2400 [ 826.868128][ T4262] mutex_lock_nested+0x17/0x20 [ 826.873433][ T4262] rfkill_register+0x33/0x8a0 [ 826.878639][ T4262] hci_register_dev+0x452/0x970 [ 826.884026][ T4262] vhci_create_device+0x32c/0x5c0 [ 826.889592][ T4262] vhci_write+0x391/0x450 [ 826.894463][ T4262] vfs_write+0x745/0xd60 [ 826.899223][ T4262] ksys_write+0x152/0x260 [ 826.904075][ T4262] do_syscall_64+0x4c/0xa0 [ 826.909014][ T4262] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 826.915423][ T4262] [ 826.915423][ T4262] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 826.923245][ T4262] __mutex_lock_common+0x1e3/0x2400 [ 826.928967][ T4262] mutex_lock_nested+0x17/0x20 [ 826.934272][ T4262] vhci_send_frame+0x88/0x100 [ 826.939460][ T4262] hci_send_frame+0x1a9/0x2e0 [ 826.944643][ T4262] hci_tx_work+0x9f9/0x1710 [ 826.949655][ T4262] process_one_work+0x85f/0x1010 [ 826.955098][ T4262] worker_thread+0xaa6/0x1290 [ 826.960287][ T4262] kthread+0x436/0x520 [ 826.964858][ T4262] ret_from_fork+0x1f/0x30 [ 826.969775][ T4262] [ 826.969775][ T4262] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 826.978958][ T4262] __flush_work+0x116/0x210 [ 826.983964][ T4262] hci_dev_do_close+0x1e7/0x1030 [ 826.989403][ T4262] hci_unregister_dev+0x2d7/0x580 [ 826.994938][ T4262] vhci_release+0x73/0xc0 [ 826.999779][ T4262] __fput+0x234/0x930 [ 827.004264][ T4262] task_work_run+0x125/0x1a0 [ 827.009357][ T4262] do_exit+0x626/0x20c0 [ 827.014013][ T4262] do_group_exit+0x12e/0x300 [ 827.019107][ T4262] get_signal+0x6ca/0x12c0 [ 827.024024][ T4262] arch_do_signal_or_restart+0xe7/0x12c0 [ 827.030167][ T4262] exit_to_user_mode_loop+0x9e/0x130 [ 827.035955][ T4262] exit_to_user_mode_prepare+0xee/0x180 [ 827.042007][ T4262] syscall_exit_to_user_mode+0x16/0x40 [ 827.047971][ T4262] do_syscall_64+0x58/0xa0 [ 827.052890][ T4262] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 827.059290][ T4262] [ 827.059290][ T4262] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 827.066914][ T4262] __mutex_lock_common+0x1e3/0x2400 [ 827.072622][ T4262] mutex_lock_nested+0x17/0x20 [ 827.077888][ T4262] bg_scan_update+0x44/0x3b0 [ 827.082982][ T4262] process_one_work+0x85f/0x1010 [ 827.088423][ T4262] worker_thread+0xaa6/0x1290 [ 827.093602][ T4262] kthread+0x436/0x520 [ 827.098178][ T4262] ret_from_fork+0x1f/0x30 [ 827.103100][ T4262] [ 827.103100][ T4262] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 827.112892][ T4262] __lock_acquire+0x2c42/0x7d10 [ 827.118251][ T4262] lock_acquire+0x19e/0x400 [ 827.123256][ T4262] __flush_work+0x116/0x210 [ 827.128287][ T4262] __cancel_work_timer+0x3f4/0x560 [ 827.133900][ T4262] hci_request_cancel_all+0xcc/0x300 [ 827.139698][ T4262] hci_dev_do_close+0x4e/0x1030 [ 827.145054][ T4262] hci_rfkill_set_block+0x10a/0x190 [ 827.150765][ T4262] rfkill_set_block+0x1c6/0x420 [ 827.156126][ T4262] rfkill_epo+0x75/0x170 [ 827.160874][ T4262] rfkill_op_handler+0x76/0x220 [ 827.166229][ T4262] process_one_work+0x85f/0x1010 [ 827.171674][ T4262] worker_thread+0xaa6/0x1290 [ 827.176860][ T4262] kthread+0x436/0x520 [ 827.181439][ T4262] ret_from_fork+0x1f/0x30 [ 827.186359][ T4262] [ 827.186359][ T4262] other info that might help us debug this: [ 827.186359][ T4262] [ 827.196566][ T4262] Chain exists of: [ 827.196566][ T4262] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 827.196566][ T4262] [ 827.212276][ T4262] Possible unsafe locking scenario: [ 827.212276][ T4262] [ 827.219708][ T4262] CPU0 CPU1 [ 827.225058][ T4262] ---- ---- [ 827.230409][ T4262] lock(rfkill_global_mutex); [ 827.235155][ T4262] lock(&data->open_mutex); [ 827.242248][ T4262] lock(rfkill_global_mutex); [ 827.249513][ T4262] lock((work_completion)(&hdev->bg_scan_update)); [ 827.256087][ T4262] [ 827.256087][ T4262] *** DEADLOCK *** [ 827.256087][ T4262] [ 827.264212][ T4262] 3 locks held by kworker/0:7/4262: [ 827.269386][ T4262] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 827.279726][ T4262] #1: ffffc9000334fd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 827.290060][ T4262] #2: ffffffff8d6c47c8 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170 [ 827.299530][ T4262] [ 827.299530][ T4262] stack backtrace: [ 827.305418][ T4262] CPU: 0 PID: 4262 Comm: kworker/0:7 Not tainted syzkaller #0 [ 827.312860][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.322905][ T4262] Workqueue: events rfkill_op_handler [ 827.328283][ T4262] Call Trace: [ 827.331550][ T4262] [ 827.334464][ T4262] dump_stack_lvl+0x188/0x250 [ 827.339129][ T4262] ? load_image+0x400/0x400 [ 827.343619][ T4262] ? show_regs_print_info+0x20/0x20 [ 827.348805][ T4262] ? print_circular_bug+0x12b/0x1a0 [ 827.353988][ T4262] check_noncircular+0x296/0x330 [ 827.358910][ T4262] ? add_chain_block+0x940/0x940 [ 827.363829][ T4262] ? lockdep_lock+0xf1/0x1f0 [ 827.368406][ T4262] ? __lock_acquire+0x12e8/0x7d10 [ 827.373424][ T4262] ? mark_lock+0x94/0x320 [ 827.377738][ T4262] __lock_acquire+0x2c42/0x7d10 [ 827.382581][ T4262] ? check_noncircular+0x189/0x330 [ 827.387680][ T4262] ? verify_lock_unused+0x140/0x140 [ 827.392867][ T4262] ? lockdep_lock+0xf1/0x1f0 [ 827.397444][ T4262] ? lockdep_unlock+0x143/0x2e0 [ 827.402310][ T4262] lock_acquire+0x19e/0x400 [ 827.406802][ T4262] ? __flush_work+0xfa/0x210 [ 827.411375][ T4262] ? __lock_acquire+0x7d10/0x7d10 [ 827.416386][ T4262] ? read_lock_is_recursive+0x10/0x10 [ 827.421741][ T4262] ? start_flush_work+0x776/0x820 [ 827.426753][ T4262] __flush_work+0x116/0x210 [ 827.431239][ T4262] ? __flush_work+0xfa/0x210 [ 827.436243][ T4262] ? flush_work+0x20/0x20 [ 827.440555][ T4262] ? try_to_grab_pending+0xfa/0x7f0 [ 827.445736][ T4262] ? mark_lock+0x94/0x320 [ 827.450056][ T4262] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 827.456026][ T4262] ? lock_chain_count+0x20/0x20 [ 827.460861][ T4262] ? mark_lock+0x94/0x320 [ 827.465176][ T4262] ? __cancel_work_timer+0x36a/0x560 [ 827.470447][ T4262] __cancel_work_timer+0x3f4/0x560 [ 827.475543][ T4262] ? cancel_work_sync+0x20/0x20 [ 827.480376][ T4262] ? __cancel_work+0x1f9/0x2e0 [ 827.485125][ T4262] ? lockdep_hardirqs_on+0x94/0x140 [ 827.490307][ T4262] ? __cancel_work+0x27b/0x2e0 [ 827.495054][ T4262] ? cancel_work+0x20/0x20 [ 827.499457][ T4262] hci_request_cancel_all+0xcc/0x300 [ 827.504730][ T4262] hci_dev_do_close+0x4e/0x1030 [ 827.509564][ T4262] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 827.515450][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 827.520290][ T4262] hci_rfkill_set_block+0x10a/0x190 [ 827.525478][ T4262] ? rcu_lock_release+0x20/0x20 [ 827.530319][ T4262] rfkill_set_block+0x1c6/0x420 [ 827.535159][ T4262] rfkill_epo+0x75/0x170 [ 827.539542][ T4262] rfkill_op_handler+0x76/0x220 [ 827.544395][ T4262] process_one_work+0x85f/0x1010 [ 827.549338][ T4262] ? worker_detach_from_pool+0x240/0x240 [ 827.554960][ T4262] ? lockdep_hardirqs_off+0x70/0x100 [ 827.560231][ T4262] ? _raw_spin_lock_irq+0xb7/0xf0 [ 827.565239][ T4262] ? _raw_spin_lock_irqsave+0x100/0x100 [ 827.570772][ T4262] ? wq_worker_running+0x97/0x170 [ 827.575782][ T4262] worker_thread+0xaa6/0x1290 [ 827.580449][ T4262] ? lockdep_hardirqs_on+0x94/0x140 [ 827.585633][ T4262] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 827.591516][ T4262] kthread+0x436/0x520 [ 827.595568][ T4262] ? rcu_lock_release+0x20/0x20 [ 827.600404][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 827.604975][ T4262] ret_from_fork+0x1f/0x30 [ 827.609383][ T4262] [ 828.556053][ T8333] net_ratelimit: 7 callbacks suppressed [ 828.556065][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.716199][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.724604][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.756143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.764657][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.796228][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.804620][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.596060][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.846174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.854588][ T4248] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.916234][ C1] net_ratelimit: 2 callbacks suppressed [ 833.916256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.930286][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.636110][ T8333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.956139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 834.964481][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.996173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.004752][ T5935] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog