last executing test programs: 28m14.484249345s ago: executing program 0 (id=207): r0 = socket$l2tp(0x2, 0x2, 0x73) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x7, 0x106) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 28m12.118807257s ago: executing program 0 (id=211): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff91, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 28m11.95014216s ago: executing program 0 (id=215): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 28m10.636174709s ago: executing program 0 (id=218): r0 = socket$unix(0x1, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 28m7.923463609s ago: executing program 0 (id=222): openat$tun(0xffffffffffffff9c, 0x0, 0xaaf01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) 28m6.831745783s ago: executing program 0 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003ec0), 0x1ff, 0x42382) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000003f00)=ANY=[@ANYBLOB="00000000050000008f0093358a"]) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x1e, 0x0, 0x0}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) open$dir(0x0, 0x7e, 0x8a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x40084) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 27m51.739201563s ago: executing program 32 (id=224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003ec0), 0x1ff, 0x42382) ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000003f00)=ANY=[@ANYBLOB="00000000050000008f0093358a"]) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x1e, 0x0, 0x0}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0xc8, 0x111, 0x4b4, 0xc8, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ipv6={@loopback, @loopback, [0x0, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xff], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) open$dir(0x0, 0x7e, 0x8a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xf8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xf8}}, 0x40084) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 23m51.111973315s ago: executing program 4 (id=847): socket(0x40000000015, 0x5, 0x0) syz_open_dev$dvb_demux(0x0, 0xffff, 0x400002) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x3}}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0xfff3, 0xfff2}, {0x5, 0xfff3}, {0xc, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 23m49.240201836s ago: executing program 4 (id=863): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000340)='N', 0x1}], 0x1) 23m48.080137251s ago: executing program 4 (id=865): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100080200000018000066000000080003", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 23m46.533805185s ago: executing program 4 (id=868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 23m44.223310536s ago: executing program 4 (id=871): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000004b40)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/173, 0xad}, {&(0x7f0000000580)=""/110, 0x6e}, {&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/157, 0x9d}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/202, 0xca}], 0x7, &(0x7f00000018c0)=""/173, 0xad}, 0x76fc5092}, {{&(0x7f0000001980)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001a00)=""/144, 0x90}, {&(0x7f0000001ac0)=""/120, 0x78}], 0x2, &(0x7f0000001b80)=""/97, 0x61}, 0xdc0}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001c00)=""/166, 0xa6}, {&(0x7f0000001cc0)=""/248, 0xf8}, {&(0x7f0000001dc0)=""/205, 0xcd}, {&(0x7f0000001ec0)=""/222, 0xde}, {&(0x7f0000001fc0)=""/234, 0xea}, {&(0x7f00000020c0)=""/36, 0x24}], 0x6}}, {{&(0x7f0000002180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/168, 0xa8}], 0x2, &(0x7f0000004c80)=""/139, 0x8b}, 0x7}, {{&(0x7f00000033c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003440)=""/37, 0x25}, {&(0x7f0000003480)=""/138, 0x8a}, {&(0x7f0000003540)=""/120, 0x78}, {&(0x7f00000035c0)=""/134, 0x86}, {&(0x7f0000003680)=""/233, 0xe9}, {&(0x7f0000003780)=""/44, 0x2c}, {&(0x7f00000037c0)=""/223, 0xdf}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f00000048c0)=""/67, 0x43}, {&(0x7f0000004940)=""/37, 0x25}], 0xa, &(0x7f0000004a40)=""/244, 0xf4}, 0x6}], 0x5, 0x40000100, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 23m41.375071618s ago: executing program 4 (id=882): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4, 0xb}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x45) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x36}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00'}) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) ioctl$KVM_TDX_INIT_VM(r3, 0xc004aeba, &(0x7f0000000280)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/385]}) process_madvise(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x12, 0x0) 23m26.351237276s ago: executing program 33 (id=882): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4, 0xb}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000810) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x45) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_u8={{0x11, 0x29, 0x36}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'lo\x00'}) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5fe4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0) ioctl$KVM_TDX_INIT_VM(r3, 0xc004aeba, &(0x7f0000000280)={0x1, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/385]}) process_madvise(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="c7", 0x1}], 0x1, 0x12, 0x0) 8.136126203s ago: executing program 6 (id=4758): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180900"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.943014128s ago: executing program 6 (id=4760): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000081000/0x2000)=nil, 0x2000, 0x1000003) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x400, 0x2, 0x1, 0x0, 0xfe}) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000080)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x4, 0x2210, 0x0, 0x0}], 0x1}) 6.432035881s ago: executing program 1 (id=4772): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x80480, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x1, {0x2, 0x0, 0x2, 0x0, 0x203fff, 0x4, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x1, 0x8, 0x6000, 0x0, 0x0, r2, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x809000, 0x200, 0x2, 0x5, 0x3}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r3, 0x401070c9, 0x0) 6.268108134s ago: executing program 3 (id=4773): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000"], 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='P\x00\x00@', @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf25080000002500070073797374656d5f753a6f626a6563745f723a737368645f657865635f743a73300000000014000300fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000012ec0)=@newchain={0x34, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb18cdbefb10199fe, 0xf}, {0x10, 0xb}, {0xfff1}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x40c1) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}, 0xb}], 0x1, 0x10, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000408010200000000000000000a0000020900010073797a3000000000050003001100000006000200001c0004800800074000000001080008400000000608000540000000040600024000110000050003002f000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x9}, 0x45, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0xfffffffd, 0x100, 0xfe, 0x48, 0x7, 0x9, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x0, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x3, 0x6, 0x0, 0x2284919, 0x4, 0x7fffffff, 0xfbfeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed0, 0x80000001, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0xfff, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7b9, 0x100405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xf7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x1, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x1, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x10001, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb754, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000401, 0x9, 0x5, 0x0, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$kcm(0x2d, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000940)={0x0, 0x2f, 0x4, @thr={&(0x7f00000007c0)="2cbe6113bb24df299ff2ce6c7cb9469a25e808e39bfc69d8f272881fe43f325872f051def8da888f6d71537542802135a767831be36a9167f45949e299ef8174cd767cdea9e21bfb02f6642ba8a3550848e568c624ce33e9bb1149657307e061b05e3751f0c541c806d36ef5a2f9316448a3c2c1f93a3ba3d729ef8d8b22eae25e57e0f75a99b507a9ab8b7133f63e24f0a3b90e00f2bf38780b3ef9f459c855dc66a3542d1af592c220a84ba231538fba665b451dfa1d3ce99dfcfa87c40eafde92e43cdd97edac27", &(0x7f00000008c0)="3ce8c6905b15a4ac5975b1ce8e27365c6f6034a49beabe37fec490fbda6b80d8336154df350db973080f1b3f4c5886099039af4c7b46c171c39397d5d78cbcc7ee06143da921c56e891e7537af2ba0235dcbece12c3f693cad0385778ba4b79b5673ff016c"}}, &(0x7f0000000980)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c80)=[{}], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x1, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000e40)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r7, 0xeeeeeeee}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r8, 0x560e, &(0x7f0000000000)) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) 6.161960076s ago: executing program 1 (id=4774): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x80) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x14) 6.031025439s ago: executing program 6 (id=4775): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0x4}, 0x3}) 5.826881083s ago: executing program 3 (id=4776): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) fstatfs(0xffffffffffffffff, 0x0) capset(0x0, 0x0) 5.826308874s ago: executing program 6 (id=4777): socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) shmdt(0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) lchown(0x0, 0x0, 0x0) r5 = dup3(r4, r3, 0x0) read$FUSE(r5, 0x0, 0x0) unshare(0x2030b00) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) 5.668117367s ago: executing program 3 (id=4778): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) memfd_secret(0x0) semtimedop(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.875550174s ago: executing program 2 (id=4781): mkdir(&(0x7f0000000140)='./file0\x00', 0x63) socket$inet6(0xa, 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r2, r3, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0xee00, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000240)={0x0, 0xc}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0x7e59, 0x9, 0x9, 0x401, 0x3, 0x10, 0x2, r8}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) 4.656184429s ago: executing program 5 (id=4782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180900000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="e02739daf71a351238f6fbf7b9ba", 0x0, 0xe89f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.655862189s ago: executing program 3 (id=4783): mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5000006, 0x30, 0xffffffffffffffff, 0x32a57000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000680)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0xffffffff, 0x8000000000000000, 0xe, 0xfffd}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000001200), 0x0) syz_open_dev$sg(0x0, 0x0, 0x40100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000640)=""/13, 0x2}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081054e81f782db44b9040a1d080243000000040000a118000200fe80000000000e1208000f0100810401a80016eaa400064003033f0806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendto$inet(r2, &(0x7f00000000c0)="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", 0x501, 0x6000000000000000, 0x0, 0x0) 4.530383902s ago: executing program 5 (id=4784): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_emit_ethernet(0x146, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaa40ffffffffffff8100290086dd60000002010c3aff00000000000000000000000000000000ff0200000000000000000000000000018f009078ffff000202090007fc010000000000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001fc024c4ac4bcd5cb0000000000000000000000000001fc000000000000000000000000000001fc010000000000000000000000000001fc000000000000000000000000000000fe880000000000000000000101ffffff7f02000000030000000800000000100000fbffffff66000000ec7f0000000000001b0a0002ff020000000000000000000000000001fc010000000000000000000000000001ff020000000000000000000000000001000000000400000000080000066800000500000040000000020000000003000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[]) mkdir(&(0x7f0000000180)='./file1\x00', 0x13) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400", 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x8000) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0xb00}], 0x1, 0x0, 0x0, 0x0) write$dsp(r3, 0x0, 0x0) lstat(&(0x7f0000005740)='./bus\x00', &(0x7f0000005780)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x80000, &(0x7f0000005800)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@blksize}, {@max_read={'max_read', 0x3d, 0x62e}}, {@allow_other}], [{@uid_eq={'uid', 0x3d, r6}}]}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r7) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x4c}, 0x2, 0x34005}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701feff416ec366166e0314000004"], 0x458c}, 0x1, 0x0, 0x0, 0xc095}, 0xc810) 3.381603537s ago: executing program 2 (id=4785): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) read$usbmon(r0, &(0x7f0000000140)=""/142, 0x8e) 3.231010839s ago: executing program 5 (id=4786): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000"], 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='P\x00\x00@', @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf25080000002500070073797374656d5f753a6f626a6563745f723a737368645f657865635f743a73300000000014000300fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000012ec0)=@newchain={0x34, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb18cdbefb10199fe, 0xf}, {0x10, 0xb}, {0xfff1}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x40c1) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}, 0xb}], 0x1, 0x10, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000408010200000000000000000a0000020900010073797a3000000000050003001100000006000200001c0004800800074000000001080008400000000608000540000000040600024000110000050003002f000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x9}, 0x45, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0xfffffffd, 0x100, 0xfe, 0x48, 0x7, 0x9, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x0, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x3, 0x6, 0x0, 0x2284919, 0x4, 0x7fffffff, 0xfbfeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed0, 0x80000001, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0xfff, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7b9, 0x100405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xf7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x1, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x1, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x10001, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb754, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000401, 0x9, 0x5, 0x0, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$kcm(0x2d, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000b00)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c80)=[{}], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x1, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc01c64b9, &(0x7f0000000e40)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r8, 0xeeeeeeee}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) 3.190109291s ago: executing program 1 (id=4787): syz_open_procfs(0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000700)='0', 0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r1, 0x85f5, 0x4000000005, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, &(0x7f0000000400)) 2.821139599s ago: executing program 5 (id=4788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="99fb5e31c591", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9bc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf1}, 0x94) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540), 0x0, 0x41) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x34, 0x3e, 0x107, 0x3, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0xa, 0x1, 0x0, 0x0, @str='l2\b\x12\x12\x00'}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) mount$9p_virtio(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r9, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x19) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.749811182s ago: executing program 3 (id=4789): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000040)={'wlan1\x00', @local}) userfaultfd(0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x660cc1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r2], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) 1.700101113s ago: executing program 1 (id=4790): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) write(r1, &(0x7f0000000140)="4cace41cd4460c6defa021b4cb7799e9cc36158b79bb74d04b77af8cdc3260b4634199bd925a9fbc58f7a23a75f2a06181dc566e70e8abc2f6bae06c676433ec379b1340c0f3b1807b3d1ad4d25d43d6b6eaa03d88478f6e67b1caf7", 0x5c) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 1.682489023s ago: executing program 5 (id=4791): r0 = socket$netlink(0x10, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@getqdisc={0x28, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x10, 0xffff}, {0xa, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0xe, {0xab, 0x829, 0xfc8, 0xb}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlim']) chdir(&(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 1.682254223s ago: executing program 2 (id=4792): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x3, 0x6, @remote}, 0x14) 701.637575ms ago: executing program 6 (id=4793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x50040, &(0x7f0000000540)={0x11, 0x15, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 648.863616ms ago: executing program 5 (id=4794): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000880)={0xc, 0x8, 0x144, {0x0}}, 0x10) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fsopen(0x0, 0x1) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2100) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x800) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) syz_open_pts(r0, 0x290000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x86, 0x1c9}, &(0x7f0000000100)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) 396.968452ms ago: executing program 1 (id=4795): r0 = socket$netlink(0x10, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@getqdisc={0x28, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x10, 0xffff}, {0xa, 0x3}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0xe, {0xab, 0x829, 0xfc8, 0xb}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000002a000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000100)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlim']) chdir(&(0x7f0000000100)='./file0\x00') r4 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r4, 0xffffffff80000901, 0x0, &(0x7f0000000500)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) close_range(r0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) 332.208333ms ago: executing program 2 (id=4796): ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0x3, 0x0, 0x1, 0x0, 0x4}, 0x3}) 291.768464ms ago: executing program 3 (id=4797): r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x5, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x80) write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@mcast2}, &(0x7f0000000140)=0x14) 282.501094ms ago: executing program 2 (id=4798): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="008000"}) ioctl(r0, 0x8b2a, &(0x7f0000000040)) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf250600000914000200000000000000000000000000000000010f000700756e636f6e66696e6564000014000300ff010000"], 0x4c}, 0x2, 0x34005}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='P\x00\x00@', @ANYRES16=r5, @ANYBLOB="08002abd7000fedbdf25080000002500070073797374656d5f753a6f626a6563745f723a737368645f657865635f743a73300000000014000300fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x400c001}, 0x800) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000012ec0)=@newchain={0x34, 0x64, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb18cdbefb10199fe, 0xf}, {0x10, 0xb}, {0xfff1}}, [@f_tcindex={{0xc}, {0x4}}]}, 0x34}}, 0x40c1) recvmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000004c0)=""/15, 0xf}], 0x5}, 0xb}], 0x1, 0x10, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000000408010200000000000000000a0000020900010073797a3000000000050003001100000006000200001c0004800800074000000001080008400000000608000540000000040600024000110000050003002f000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x9}, 0x45, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0xfffffffd, 0x100, 0xfe, 0x48, 0x7, 0x9, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x0, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x3, 0x6, 0x0, 0x2284919, 0x4, 0x7fffffff, 0xfbfeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed0, 0x80000001, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0xfff, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7b9, 0x100405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xf7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x1, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x1, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x10001, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb754, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000401, 0x9, 0x5, 0x0, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$kcm(0x2d, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000b00)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000bc0)=[0x0], &(0x7f0000000c80)=[{}], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0], 0x1, 0x9, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc01c64b9, &(0x7f0000000e40)={&(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, r8, 0xeeeeeeee}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r9, 0x560e, &(0x7f0000000000)) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) 231.949405ms ago: executing program 6 (id=4799): socket$key(0xf, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x14a900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) syz_open_procfs(0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x109340) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000000)={0xa, 0x1, 0x4, {0x80000004, 0x1, 0x2, 0x8800001}}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8002000000000001, 0xe0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x3, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r8, 0x81044804, &(0x7f0000000400)={0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18}], 0x1, 0x800) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052409000105240000000d0b979d60a53067d50060200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b"], 0x0) ioctl$HIDIOCGUSAGES(r7, 0xd01c4813, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) writev(r4, &(0x7f00000007c0)=[{&(0x7f0000000100)='|', 0x1}, {&(0x7f0000000180)="1c850d9037cd9ca73307c6edc505bc28fdf4a7c84d5ddcf58640fdce67ea7ca9ddb897dff643433fcf21ab54e76577e36fc2cc6b2e0b20f4af341d6b4ea92d39fab21d378fa4c1f41c57f467cc265c57c075d81e1c1fd51c283596c4614fc0598a3ee8e878645fae5f8f5ae0b1ae493bcbbc210a46c2de18cbfa8ef128fce0c31ad0846461e574e7a20994cf86e59624f28db363984dac3db854fa85b6a4cd0a2f963d085862ea05a27c", 0xaa}, {&(0x7f0000000840)="18ae6da7ae600e7de4d4255f330f8ea17ef2c40d6d0f0ab661cbc715e5e1e5a4fa92bcd6302aeb4e683a4f7e881717652520be026b38ef3dea7ead9ce2ba86c9daeda700ad1326b05a28c264acfdb2abae2b844c06740c2faa3167d386db2b09c0b588d943b2496f553ccd5c4fa1279ebba9a85e873e49f01ebe1371b8f63830dcc9cbe1d379dec1b9f4d170d383165d5fd55e0f045dd83a0cfe54278fa163fe5e22ecf387d60244c539c559d0ddc758affbbe481ea2b093fadc5558b98e83ff7a52105cb99ecdf3a92829352d3dba51135214221c9ef077b99365e3dcf94c29", 0x2e}, {&(0x7f0000000600)="c4070bd9139b671c02b6d19db92f790c66cd4160793999a8392f04c7fb7cd97e8c603e9d2d3f3c41d72b3811da72f1118ae73df42617719e1328ecae52a596017778b4227a8bd8b35599bf1321ebb908158ca90759711c4c9db786338d87b65484b30d62d4d66c8d7a7b6f741bc8baf1ea4cb52ad81dff38736058c330c89937832c16391edb1348633dafce7acf0a20fd340fb997bc6ad3568eaed4dbfe341a43e9e2c05640e57f5cfa8cc5182958a23156a27df83481be2d1761d40136f34a6729e28a8b3fb12120ba88fab121", 0xfffffffffffffecc}, {&(0x7f0000000700)="f2f4e0537c73ca7f315e1420c28a474aa13ecb184c26440d3f7d0d2c2baede492dd9bd8a0d12ee5f3a316a3f9339b8d4cafc9825fa7164f73f00579fb4ec8353683c49b7face99e3517a19fa1187c0c73cf005d4304ef73ebd672bf1e6f017ebdec857068cd02d2511c45e56dec8cbd40d37e9bc4b9a6a6c8d01bdca56e37a6b08e48b47d73d4ee91503ebbc5ea0a16fe51197a839646acad1fdbd3a360ae81cc49ffe526db1ffb2d509245b2b71", 0xae}], 0x5) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000004c0)={0xa00000, 0x2, 0x4, r3, 0x0, &(0x7f0000000480)={0xa10a73, 0x8ecb21d2, '\x00', @p_u16=&(0x7f00000002c0)=0x8}}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8b32, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 167.874986ms ago: executing program 1 (id=4800): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_dev$sg(0x0, 0x0, 0x401) socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x40880) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) 0s ago: executing program 2 (id=4801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@random="99fb5e31c591", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xd, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9bc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf1}, 0x94) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540), 0x0, 0x41) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)={0x34, 0x3e, 0x107, 0x3, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x4, 0x142}, @typed={0xa, 0x1, 0x0, 0x0, @str='l2\b\x12\x12\x00'}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xa, 0x0, 0x0, @u64=0x1000}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000811}, 0x400c000) mount$9p_virtio(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r9, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x19) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) kernel console output (not intermixed with test programs): ort 6081 - 0 [ 1111.812987][T16944] overlayfs: unrecognized mount option "/" or missing value [ 1112.091018][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1112.705849][T16947] tmpfs: Unknown parameter 'quota' [ 1112.865975][T16936] netlink: 'syz.5.3138': attribute type 21 has an invalid length. [ 1112.967110][ T4687] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.972893][T16906] chnl_net:caif_netlink_parms(): no params data found [ 1114.019305][ T4687] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.334796][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1114.516728][T10354] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1114.600630][T10354] Bluetooth: hci5: Injecting HCI hardware error event [ 1114.610922][ T48] Bluetooth: hci5: hardware error 0x00 [ 1114.681489][ T14] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1114.774897][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.782684][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.791272][T16906] device bridge_slave_0 entered promiscuous mode [ 1114.803951][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.811277][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.819242][T16906] device bridge_slave_1 entered promiscuous mode [ 1114.896125][ T14] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1114.931876][ T14] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1114.983702][ T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1114.997638][T16906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.016931][ T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1115.020748][T16906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.068597][ T14] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1115.171970][ T14] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1115.283887][ T14] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1115.328693][ T14] usb 6-1: Product: syz [ 1115.369709][ T14] usb 6-1: Manufacturer: syz [ 1115.547828][ T14] cdc_wdm 6-1:1.0: skipping garbage [ 1115.594329][ T14] cdc_wdm 6-1:1.0: skipping garbage [ 1115.689840][ T14] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1115.798626][ T14] cdc_wdm 6-1:1.0: Unknown control protocol [ 1115.954452][ T14] usb 6-1: USB disconnect, device number 7 [ 1116.329170][T16906] team0: Port device team_slave_0 added [ 1116.337317][T16987] binder: 16985:16987 ioctl c0306201 200000000180 returned -14 [ 1116.352418][T16906] team0: Port device team_slave_1 added [ 1116.507129][T16991] overlayfs: unrecognized mount option "/" or missing value [ 1116.849029][T10354] Bluetooth: hci2: command 0x040f tx timeout [ 1116.946511][ T48] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1117.079057][T16906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.108399][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1118.649325][T16906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1118.775647][T17014] tmpfs: Unknown parameter 'quota' [ 1119.103047][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1119.579292][T17006] netlink: 'syz.2.3154': attribute type 21 has an invalid length. [ 1119.645809][T16906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.656093][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.229472][T16906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1121.615780][T17034] binder: 17031:17034 ioctl c0306201 200000000180 returned -14 [ 1122.878620][T16906] device hsr_slave_0 entered promiscuous mode [ 1122.956444][T16906] device hsr_slave_1 entered promiscuous mode [ 1123.121576][T17051] overlayfs: unrecognized mount option "/" or missing value [ 1124.149672][T17060] tmpfs: Unknown parameter 'quota' [ 1127.064279][T17074] fuse: Bad value for 'group_id' [ 1127.238890][T17076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3172'. [ 1132.646382][T17103] netlink: 'syz.2.3177': attribute type 21 has an invalid length. [ 1134.190684][ T4687] device hsr_slave_0 left promiscuous mode [ 1134.201498][ T4687] device hsr_slave_1 left promiscuous mode [ 1134.211195][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.306488][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.124659][ T4687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.140198][ T4687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.157519][ T4687] device bridge_slave_1 left promiscuous mode [ 1136.166819][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.175292][ T4687] device bridge_slave_0 left promiscuous mode [ 1136.181587][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.304055][T17133] siw: device registration error -23 [ 1136.320380][ T4687] device veth1_macvtap left promiscuous mode [ 1136.377894][ T4687] device veth0_macvtap left promiscuous mode [ 1136.435406][ T4687] device veth1_vlan left promiscuous mode [ 1136.491214][ T4687] device veth0_vlan left promiscuous mode [ 1137.241044][T17137] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3186'. [ 1138.226467][ T4687] bond5 (unregistering): Released all slaves [ 1138.260534][ T4687] bond4 (unregistering): Released all slaves [ 1138.303250][ T4687] bond3 (unregistering): Released all slaves [ 1139.286286][ T4687] bond2 (unregistering): Released all slaves [ 1139.308873][ T4687] bond1 (unregistering): Released all slaves [ 1140.587137][ T4687] team0 (unregistering): Port device team_slave_1 removed [ 1140.623824][ T4687] team0 (unregistering): Port device team_slave_0 removed [ 1140.662737][ T4687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.706104][ T4687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.715064][ T4320] infiniband syz1: ib_query_port failed (-19) [ 1140.977347][ T4687] bond0 (unregistering): Released all slaves [ 1141.063111][ T5851] bond0 speed is unknown, defaulting to 1000 [ 1141.435620][T17184] tmpfs: Unknown parameter 'quota' [ 1141.732212][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1141.740746][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 1141.750048][T10354] Bluetooth: hci1: hardware error 0x00 [ 1142.663776][T17190] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1144.506644][T10354] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1144.716850][T16906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1144.778551][T16906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1144.785990][T17204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1146.336408][T16906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1146.849139][T16906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1148.570619][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1149.517071][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1150.522581][T17235] tmpfs: Unknown parameter 'quota' [ 1150.684880][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1150.859007][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.718971][T17254] siw: device registration error -23 [ 1152.458919][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1153.242479][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.578445][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.585589][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.700624][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1153.770928][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1153.989431][T17264] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3213'. [ 1153.999045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1154.007903][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.015039][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.027862][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1154.041469][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1154.060743][T16906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1154.071841][T16906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1154.109190][T17267] netlink: 'syz.6.3210': attribute type 21 has an invalid length. [ 1154.138030][T17272] tmpfs: Unknown parameter 'quota' [ 1154.963979][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1155.079922][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1155.130417][T17276] siw: device registration error -23 [ 1155.261426][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.267806][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.481883][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1156.612243][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1156.697574][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1156.708794][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1156.721633][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1156.735949][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1156.770926][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1158.166970][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1158.986056][ T5851] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1159.236287][ T5851] usb 7-1: Using ep0 maxpacket: 32 [ 1159.245169][ T5851] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.328503][T17295] input: syz0 as /devices/virtual/input/input17 [ 1159.414438][ T5851] usb 7-1: config 0 has no interfaces? [ 1159.560493][ T5851] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1159.740346][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1159.865018][ T5851] usb 7-1: Product: syz [ 1159.926256][ T5851] usb 7-1: Manufacturer: syz [ 1159.984942][ T5851] usb 7-1: SerialNumber: syz [ 1160.099803][ T5851] usb 7-1: config 0 descriptor?? [ 1161.956274][ T5851] usb 7-1: can't set config #0, error -71 [ 1161.998382][ T5851] usb 7-1: USB disconnect, device number 7 [ 1162.316684][T17320] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3219'. [ 1162.385517][T17325] siw: device registration error -23 [ 1165.946474][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1165.953939][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1166.326330][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.334539][T17351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3226'. [ 1168.593055][T17350] netlink: 'syz.2.3225': attribute type 21 has an invalid length. [ 1168.769695][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1168.863280][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1169.336100][ T4263] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1169.518181][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1169.574414][ T4263] usb 7-1: Using ep0 maxpacket: 32 [ 1169.583053][ T4263] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.615742][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1169.757961][ T4263] usb 7-1: config 0 has no interfaces? [ 1169.773915][T16906] device veth0_vlan entered promiscuous mode [ 1169.835404][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1169.896171][ T4263] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1169.940548][T15714] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1170.008156][ T4263] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1170.752443][T16906] device veth1_vlan entered promiscuous mode [ 1170.906918][ T4263] usb 7-1: Product: syz [ 1170.911223][ T4263] usb 7-1: Manufacturer: syz [ 1170.915837][ T4263] usb 7-1: SerialNumber: syz [ 1170.929604][ T4263] usb 7-1: config 0 descriptor?? [ 1170.991657][T17381] input: syz0 as /devices/virtual/input/input18 [ 1171.244548][T17391] siw: device registration error -23 [ 1172.895326][ T4320] usb 7-1: USB disconnect, device number 8 [ 1173.147654][T17400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3233'. [ 1174.820885][T17422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1175.821443][T17429] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1175.831090][T17429] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1175.922476][T17430] input: syz0 as /devices/virtual/input/input19 [ 1175.961780][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1175.972889][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1175.992963][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1176.004903][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1176.017311][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1176.024686][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1177.669383][T17447] siw: device registration error -23 [ 1178.233738][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1179.603721][T17454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3247'. [ 1179.672136][T17458] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3248'. [ 1180.488001][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1180.942874][T17477] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1181.093549][T17477] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1182.753142][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1182.799797][T17494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3256'. [ 1183.709027][T17433] chnl_net:caif_netlink_parms(): no params data found [ 1183.878614][T17500] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.805592][T17517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3263'. [ 1184.897014][T17433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.996448][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1185.262260][T17433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.334395][T17433] device bridge_slave_0 entered promiscuous mode [ 1185.375452][T17433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.389453][T17531] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1185.433670][T17433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.441405][T17531] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1185.443723][T17433] device bridge_slave_1 entered promiscuous mode [ 1186.444104][T17534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3266'. [ 1187.506202][T17553] tmpfs: Unknown parameter 'quota' [ 1187.904899][T17556] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3270'. [ 1188.764286][T17433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.435514][T17433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.780195][T17392] device hsr_slave_0 left promiscuous mode [ 1190.816326][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1191.013367][T17580] tmpfs: Unknown parameter 'quota' [ 1191.694244][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 1192.696807][T17392] device hsr_slave_1 left promiscuous mode [ 1192.775378][T17392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.854758][ T14] usb 3-1: device descriptor read/all, error -71 [ 1192.868125][T17392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1192.922379][T17392] device bridge_slave_1 left promiscuous mode [ 1192.928613][T17392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.011656][T17606] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1193.038467][T17606] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1193.178403][T17392] device bridge_slave_0 left promiscuous mode [ 1193.220531][T17392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.173397][T17392] device veth1_vlan left promiscuous mode [ 1194.212955][T17392] device veth0_vlan left promiscuous mode [ 1194.314364][T17615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3279'. [ 1196.516548][T17392] team0 (unregistering): Port device team_slave_1 removed [ 1197.483804][T17392] team0 (unregistering): Port device team_slave_0 removed [ 1197.569148][T17392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1197.623061][T17392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1197.875546][T17632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3284'. [ 1198.639859][T17392] bond0 (unregistering): Released all slaves [ 1198.843317][T17635] siw: device registration error -23 [ 1199.759503][T17433] team0: Port device team_slave_0 added [ 1199.834838][T17433] team0: Port device team_slave_1 added [ 1199.898546][T17433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1199.921332][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.469429][T17433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.766331][ T126] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1201.810090][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3288'. [ 1201.968589][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 1201.975744][ T126] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.059659][T17433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.088528][T17433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.147429][ T126] usb 7-1: config 0 has no interfaces? [ 1202.237847][ T126] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1202.394392][ T126] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1202.503715][ T126] usb 7-1: Product: syz [ 1202.508672][T17433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1202.576476][ T126] usb 7-1: Manufacturer: syz [ 1202.636514][ T126] usb 7-1: SerialNumber: syz [ 1202.773505][ T126] usb 7-1: config 0 descriptor?? [ 1203.638079][ T7] usb 7-1: USB disconnect, device number 9 [ 1203.688111][T17433] device hsr_slave_0 entered promiscuous mode [ 1203.763565][T17433] device hsr_slave_1 entered promiscuous mode [ 1203.796093][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3290'. [ 1207.038018][T17704] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1207.119002][T17704] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1210.197114][T17729] siw: device registration error -23 [ 1211.085826][T17433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1211.132382][T17433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1211.218521][T17433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1212.944869][T17433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1213.239849][ T4263] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1213.467362][ T4263] usb 6-1: Using ep0 maxpacket: 32 [ 1213.481077][ T4263] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.765487][ T4263] usb 6-1: config 0 has no interfaces? [ 1213.929060][ T4263] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1214.103412][ T4263] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1214.211746][ T4263] usb 6-1: Product: syz [ 1214.258781][ T4263] usb 6-1: Manufacturer: syz [ 1214.303097][ T4263] usb 6-1: SerialNumber: syz [ 1214.421881][T17433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.426521][ T4263] usb 6-1: config 0 descriptor?? [ 1214.475834][T17753] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1215.218915][T17433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.624238][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1215.636365][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1215.659535][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1215.677303][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1215.694375][T16056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.701503][T16056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.710190][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1215.768314][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1215.794926][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1215.851744][T16056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.858858][T16056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1215.915693][T16056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1215.959717][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1216.000437][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1216.033399][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1216.067754][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1216.095772][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1216.134061][T17433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1216.158740][T17433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1216.195977][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1216.212924][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1216.234861][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1216.271823][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1217.207352][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1217.264378][ T4263] usb 6-1: USB disconnect, device number 8 [ 1217.319052][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1217.483456][T17786] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1217.505592][T17786] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1220.797537][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1220.807391][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1220.862812][T17433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.929299][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1220.951520][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1221.012461][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1221.032405][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1221.054022][T17829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3316'. [ 1221.088543][T17433] device veth0_vlan entered promiscuous mode [ 1221.095341][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1221.110496][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1221.847813][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1221.854175][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1221.949685][T17433] device veth1_vlan entered promiscuous mode [ 1223.303314][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1223.314029][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1223.334512][T17433] device veth0_macvtap entered promiscuous mode [ 1223.431725][T17433] device veth1_macvtap entered promiscuous mode [ 1224.574265][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1224.942780][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1224.990223][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.029616][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.041313][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.052575][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.135774][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.240837][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.355454][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.482650][T17433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.997189][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.074590][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.113732][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.180075][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.222807][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.253783][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.275924][T17433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1226.319839][T17433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.924704][T17433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.953012][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1227.979681][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1228.032692][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1228.987376][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1229.059629][T17433] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.080167][T17433] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.091700][T17433] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.114975][T17433] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.376388][T16132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.510433][T16132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.658448][ T4667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1229.702832][T16132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.759582][T16132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.880570][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1230.754834][T17915] tmpfs: Unknown parameter 'quota' [ 1235.160208][T10354] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1235.170086][T10354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1235.179518][T10354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1235.188308][T10354] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1235.197530][T10354] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1235.206479][T10354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1235.663149][T17952] input: syz0 as /devices/virtual/input/input20 [ 1237.451239][T10354] Bluetooth: hci3: command 0x0409 tx timeout [ 1237.653847][T17969] tmpfs: Unknown parameter 'quota' [ 1238.959712][T17946] chnl_net:caif_netlink_parms(): no params data found [ 1239.705515][T10354] Bluetooth: hci3: command 0x041b tx timeout [ 1241.959899][T10354] Bluetooth: hci3: command 0x040f tx timeout [ 1242.359649][T17946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.410267][T17946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.418612][T17946] device bridge_slave_0 entered promiscuous mode [ 1242.427167][T17946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.434350][T17946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.442404][T17946] device bridge_slave_1 entered promiscuous mode [ 1242.463683][T17946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1242.475107][T17946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1242.499479][T17946] team0: Port device team_slave_0 added [ 1242.507389][T17946] team0: Port device team_slave_1 added [ 1242.523867][T17946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.530937][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.564228][T17946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.859264][ T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1243.206205][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1243.214275][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1243.248433][ T7] usb 2-1: config 0 has no interfaces? [ 1243.721622][T18013] fuse: Bad value for 'user_id' [ 1243.946931][T17946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.956782][T17946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1244.110646][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1244.165088][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1244.214010][T10354] Bluetooth: hci3: command 0x0419 tx timeout [ 1244.223417][T17946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.241939][ T7] usb 2-1: Product: syz [ 1244.281604][ T7] usb 2-1: config 0 descriptor?? [ 1244.339355][ T7] usb 2-1: can't set config #0, error -71 [ 1244.433697][ T7] usb 2-1: USB disconnect, device number 15 [ 1244.534290][T17946] device hsr_slave_0 entered promiscuous mode [ 1244.569082][T18019] input: syz0 as /devices/virtual/input/input21 [ 1244.583667][T17946] device hsr_slave_1 entered promiscuous mode [ 1244.636672][T17946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1244.645049][T17946] Cannot create hsr debugfs directory [ 1244.828867][T18026] siw: device registration error -23 [ 1246.655846][T18030] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.832638][T17946] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.497635][T17946] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.281137][T17946] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.470567][ T4479] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1249.735711][ T4479] usb 4-1: Using ep0 maxpacket: 32 [ 1250.083157][ T4479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.184379][ T4479] usb 4-1: config 0 has no interfaces? [ 1250.263189][ T4479] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1250.326356][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1250.387028][ T4479] usb 4-1: Product: syz [ 1250.415973][ T4479] usb 4-1: Manufacturer: syz [ 1250.450696][ T4479] usb 4-1: SerialNumber: syz [ 1250.532811][ T4479] usb 4-1: config 0 descriptor?? [ 1250.700292][T17946] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.929012][T18075] input: syz0 as /devices/virtual/input/input22 [ 1252.207667][T17946] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1252.351265][T17946] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1252.468432][T17946] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1252.552346][T17946] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1254.500499][ T7] usb 4-1: USB disconnect, device number 10 [ 1254.638118][T17946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.677972][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1254.689956][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1254.710395][T17946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.734176][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1254.750038][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1254.758699][T17304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.765801][T17304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.870456][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1254.906176][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1255.018485][T18099] tmpfs: Unknown parameter 'quota' [ 1255.839675][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1255.848537][T17304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.855724][T17304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.867546][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1256.799339][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1256.855010][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1256.928802][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1256.968233][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1256.988505][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1257.010232][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1257.025842][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1257.045702][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1257.075852][T18110] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1257.118277][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1257.160162][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1257.242304][T17946] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1257.367807][T18116] fuse: Bad value for 'fd' [ 1257.812986][T17946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.591363][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1258.689718][T18129] siw: device registration error -23 [ 1260.648920][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1260.955685][T18137] comedi comedi2: Cannot bond this driver to itself! [ 1264.424238][T18166] siw: device registration error -23 [ 1265.965624][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1265.993816][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1266.060802][T15837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1266.083572][T15837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1266.112513][T15837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1266.134338][T15837] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1266.148806][T17946] device veth0_vlan entered promiscuous mode [ 1267.117129][T17946] device veth1_vlan entered promiscuous mode [ 1268.202987][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1268.248786][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1268.308455][T17946] device veth0_macvtap entered promiscuous mode [ 1268.340018][T17946] device veth1_macvtap entered promiscuous mode [ 1268.415785][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.465466][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.506879][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.629257][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.706565][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.799421][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1268.891194][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1268.975387][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.067982][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1269.465436][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.522501][T17946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.577158][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1269.607290][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1269.636762][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1269.669882][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.686342][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.711996][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.742308][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.804557][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.826071][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.846787][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.900824][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1269.940513][T17946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1269.969186][T17946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1270.015491][T17946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1270.039596][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1270.054020][ T4690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1270.091008][T17946] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.131555][T17946] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.192521][T17946] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1270.224663][T17946] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.198548][ T4695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.237306][ T4695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.306964][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1271.347295][ T4690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.361181][ T4690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.392815][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1271.456781][T18214] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1272.537167][T18221] siw: device registration error -23 [ 1272.851399][T18223] device syzkaller0 entered promiscuous mode [ 1277.406895][T18257] input: syz0 as /devices/virtual/input/input23 [ 1283.311543][T18313] input: syz0 as /devices/virtual/input/input24 [ 1283.585284][T18322] device syzkaller1 entered promiscuous mode [ 1283.711979][T18328] tmpfs: Unknown parameter 'quota' [ 1288.171957][ T4263] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1288.435186][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1288.441519][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1288.632617][T18364] netlink: 'syz.6.3443': attribute type 1 has an invalid length. [ 1288.640540][T18364] netlink: 'syz.6.3443': attribute type 2 has an invalid length. [ 1288.648430][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3443'. [ 1290.361134][ T4263] usb 2-1: Using ep0 maxpacket: 32 [ 1290.454028][ T4263] usb 2-1: device descriptor read/all, error -71 [ 1290.854261][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3447'. [ 1292.128556][T18397] tmpfs: Unknown parameter 'quota' [ 1293.039659][T18400] tmpfs: Unknown parameter 'quota' [ 1297.352905][T18433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3461'. [ 1298.229545][ T4263] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1298.564237][T18446] tmpfs: Unknown parameter 'quota' [ 1299.479684][T18456] tmpfs: Unknown parameter 'quota' [ 1300.574443][T18466] tmpfs: Unknown parameter 'quota' [ 1300.646432][ T14] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1300.901248][ T14] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1300.996733][ T14] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1301.150368][ T14] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1301.301656][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.468632][T18452] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1301.756181][ T14] usb 7-1: USB disconnect, device number 11 [ 1302.125846][T18480] udevd[18480]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1302.244415][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3475'. [ 1303.561973][T18490] device syzkaller0 entered promiscuous mode [ 1304.906467][T18509] tmpfs: Unknown parameter 'quota' [ 1307.318476][T18523] tmpfs: Unknown parameter 'quota' [ 1312.226903][T18559] tmpfs: Unknown parameter 'quota' [ 1312.882240][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1314.229890][T18571] tmpfs: Unknown parameter 'quota' [ 1317.665420][T18592] tmpfs: Unknown parameter 'quota' [ 1319.838495][T18618] lo speed is unknown, defaulting to 1000 [ 1319.844685][T18618] lo speed is unknown, defaulting to 1000 [ 1319.853401][T18618] lo speed is unknown, defaulting to 1000 [ 1319.890679][T18618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1319.984996][T18618] lo speed is unknown, defaulting to 1000 [ 1319.995418][T18618] lo speed is unknown, defaulting to 1000 [ 1320.015467][T18618] lo speed is unknown, defaulting to 1000 [ 1320.027513][T18618] lo speed is unknown, defaulting to 1000 [ 1320.037904][T18618] lo speed is unknown, defaulting to 1000 [ 1320.048399][T18618] lo speed is unknown, defaulting to 1000 [ 1321.111417][T18646] tmpfs: Unknown parameter 'quota' [ 1322.094266][T18648] device syzkaller0 entered promiscuous mode [ 1325.887593][ T4323] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1326.147513][ T4323] usb 6-1: Using ep0 maxpacket: 32 [ 1326.267074][ T4323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.288447][ T4323] usb 6-1: config 0 has no interfaces? [ 1326.305093][ T4323] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1326.326535][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1326.337167][ T4323] usb 6-1: Product: syz [ 1326.341359][ T4323] usb 6-1: Manufacturer: syz [ 1326.350754][ T4323] usb 6-1: SerialNumber: syz [ 1326.368683][ T4323] usb 6-1: config 0 descriptor?? [ 1326.622769][ T4323] usb 6-1: USB disconnect, device number 9 [ 1327.346259][T18701] input: syz0 as /devices/virtual/input/input27 [ 1327.522750][T18705] fuse: Unknown parameter '00000000000000000000' [ 1328.049109][T18708] siw: device registration error -23 [ 1329.964032][T18663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1330.541532][T18663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1335.814778][ T4324] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1336.042286][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 1336.051773][ T4324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1336.169450][T18755] fuse: Unknown parameter 'user00000000000000000000' [ 1336.191617][ T4324] usb 3-1: config 0 has no interfaces? [ 1336.342529][T18761] siw: device registration error -23 [ 1336.868852][ T4324] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1336.878997][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1336.887255][ T4324] usb 3-1: Product: syz [ 1336.892915][ T4324] usb 3-1: Manufacturer: syz [ 1336.897908][ T4324] usb 3-1: SerialNumber: syz [ 1336.927577][ T4324] usb 3-1: config 0 descriptor?? [ 1339.626871][ T4321] usb 3-1: USB disconnect, device number 15 [ 1340.846998][T18776] device syzkaller0 entered promiscuous mode [ 1341.977720][T18802] overlayfs: unrecognized mount option "/" or missing value [ 1342.742419][T18803] vivid-000: kernel_thread() failed [ 1343.647027][T18815] tmpfs: Unknown parameter 'quota' [ 1345.100607][T18817] tmpfs: Unknown parameter 'quota' [ 1349.867188][T18847] fuse: Bad value for 'fd' [ 1350.781765][T18354] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1351.692256][T18354] usb 3-1: Using ep0 maxpacket: 32 [ 1351.768375][T18354] usb 3-1: device descriptor read/all, error -71 [ 1354.750131][T18894] device syzkaller0 entered promiscuous mode [ 1355.022944][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.029828][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.448634][T18908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3571'. [ 1359.571282][T18932] device syzkaller0 entered promiscuous mode [ 1361.839383][T18951] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1362.365243][T18963] tmpfs: Unknown parameter 'quota' [ 1362.616578][ T4324] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1364.990128][ T4324] usb 7-1: Using ep0 maxpacket: 32 [ 1365.031018][ T4324] usb 7-1: device descriptor read/all, error -71 [ 1368.371550][T10354] Bluetooth: hci3: command 0x0406 tx timeout [ 1368.603610][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1369.857553][T19022] siw: device registration error -23 [ 1371.974110][T19010] device syzkaller0 entered promiscuous mode [ 1374.657363][ T5851] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1374.982497][ T5851] usb 3-1: Using ep0 maxpacket: 32 [ 1375.017225][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.056826][ T5851] usb 3-1: config 0 has no interfaces? [ 1379.599169][ C1] hrtimer: interrupt took 32082 ns [ 1380.455654][ T5851] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1380.464710][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1380.503507][ T5851] usb 3-1: config 0 descriptor?? [ 1380.521136][ T5851] usb 3-1: can't set config #0, error -71 [ 1380.531973][ T5851] usb 3-1: USB disconnect, device number 18 [ 1382.280524][T19091] fuse: Unknown parameter 'user_i00000000000000000000' [ 1382.502919][T19096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1385.837873][T19107] siw: device registration error -23 [ 1389.017410][ T4479] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1389.255721][ T4479] usb 4-1: Using ep0 maxpacket: 32 [ 1389.550068][ T4479] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1389.570018][ T4479] usb 4-1: config 0 has no interfaces? [ 1389.620704][ T4479] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1389.637018][ T4479] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1389.656225][ T4479] usb 4-1: Product: syz [ 1389.660492][ T4479] usb 4-1: Manufacturer: syz [ 1389.665098][ T4479] usb 4-1: SerialNumber: syz [ 1389.671502][ T4479] usb 4-1: config 0 descriptor?? [ 1389.702812][T19141] overlayfs: missing 'lowerdir' [ 1391.715117][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3622'. [ 1392.599594][ T22] usb 4-1: USB disconnect, device number 11 [ 1392.644978][T19163] fuse: Bad value for 'fd' [ 1392.713575][T19161] fuse: Unknown parameter 'user_i00000000000000000000' [ 1398.631691][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1399.458934][T19211] fuse: Bad value for 'fd' [ 1399.520133][T19213] fuse: Unknown parameter 'user_i00000000000000000000' [ 1399.685673][T19220] tmpfs: Unknown parameter 'quota' [ 1403.489010][T19246] siw: device registration error -23 [ 1405.929601][T19249] fuse: Bad value for 'fd' [ 1406.990836][T19259] tmpfs: Unknown parameter 'quota' [ 1407.248062][T19264] tmpfs: Unknown parameter 'quota' [ 1408.220958][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3653'. [ 1410.978667][T19300] tmpfs: Unknown parameter 'quota' [ 1411.312212][T19305] tmpfs: Unknown parameter 'quota' [ 1412.316312][T19311] siw: device registration error -23 [ 1415.125800][T19336] tmpfs: Unknown parameter 'quota' [ 1416.558774][T19351] tmpfs: Unknown parameter 'quota' [ 1417.577457][T19358] fuse: Bad value for 'fd' [ 1417.762249][T19359] siw: device registration error -23 [ 1421.609931][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1421.616328][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.027825][T19396] tmpfs: Unknown parameter 'quota' [ 1423.137342][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 1423.839879][T19402] device syzkaller0 entered promiscuous mode [ 1423.971848][T19415] sd 0:0:1:0: PR command failed: 1026 [ 1424.001023][T19415] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1424.030949][T19415] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1424.076276][T19424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3694'. [ 1429.555386][T19451] QŽ£\ÈÔßMzÑTÞ¾› õ§Å` t_‰Å@©È_2>utŸjoÁÓö–ÌMÕì—=89¾·/I¿FWè4ã/g4úÖŽ±GÐN¼Ý¡3 Y½î€Ò9ÞqûÅM÷.Yþ±ž¦óÄK‚ŒÆ 0á’îŒÔtrBù?±e‰¹Â38Ò jÔ’*¥iÕ&&kH¾iOT0¬Kô^ó¥ÐÖqàŸ‚:OQ…”ăƒQ©Ï‹@¾²o8 [ 1429.633835][T19458] tmpfs: Unknown parameter 'quota' [ 1430.572757][T19462] device syzkaller0 entered promiscuous mode [ 1430.814157][T19471] sd 0:0:1:0: PR command failed: 1026 [ 1431.707052][T19471] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1431.714112][T19471] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1431.826836][T19481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3708'. [ 1435.732615][T19503] overlayfs: unrecognized mount option "/" or missing value [ 1437.458934][T19510] device syzkaller0 entered promiscuous mode [ 1437.503271][T19508] QŽ£\ÈÔßMzÑTÞ¾› õ§Å` t_‰Å@©È_2>utŸjoÁÓö–ÌMÕì—=89¾·/I¿FWè4ã/g4úÖŽ±GÐN¼Ý¡3 Y½î€Ò9ÞqûÅM÷.Yþ±ž¦óÄK‚ŒÆ 0á’îŒÔtrBù?±e‰¹Â38Ò jÔ’*¥iÕ&&kH¾iOT0¬Kô^ó¥ÐÖqàŸ‚:OQ…”ăƒQ©Ï‹@¾²o8 [ 1437.721889][T19519] sd 0:0:1:0: PR command failed: 1026 [ 1437.777150][T19519] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1438.646304][T19519] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1438.711878][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3723'. [ 1442.440468][T19554] overlayfs: unrecognized mount option "/" or missing value [ 1445.062073][T19567] device syzkaller0 entered promiscuous mode [ 1445.246289][T19570] sd 0:0:1:0: PR command failed: 1026 [ 1445.251886][T19570] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1445.260032][T19570] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1446.067324][T15445] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1446.241952][T15445] usb 2-1: device descriptor read/64, error -71 [ 1446.776108][T15445] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1447.606290][T15445] usb 2-1: device descriptor read/64, error -71 [ 1449.119767][T19602] siw: device registration error -23 [ 1449.394792][T15445] usb usb2-port1: attempt power cycle [ 1449.449702][T19607] overlayfs: unrecognized mount option "/" or missing value [ 1451.256837][T19622] tmpfs: Unknown parameter 'quota' [ 1454.894025][T19655] overlayfs: unrecognized mount option "/" or missing value [ 1456.524470][T19668] siw: device registration error -23 [ 1457.308861][T19665] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1458.970515][T19665] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1461.936353][T19702] overlayfs: unrecognized mount option "/" or missing value [ 1462.974913][T19715] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1462.985630][T19715] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1463.116540][T19721] fuse: Bad value for 'fd' [ 1464.099345][T19717] lo speed is unknown, defaulting to 1000 [ 1466.989705][T19744] siw: device registration error -23 [ 1467.266505][T19752] overlayfs: unrecognized mount option "/" or missing value [ 1468.674032][T19750] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1468.740894][T19750] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1469.111014][T19757] tmpfs: Unknown parameter 'quota' [ 1473.439986][T19764] 9pnet_virtio: no channels available for device syz [ 1473.488159][ T126] libceph: connect (1)[c::]:6789 error -101 [ 1473.494594][ T126] libceph: mon0 (1)[c::]:6789 connect error [ 1473.644086][T19786] ceph: No mds server is up or the cluster is laggy [ 1475.057142][T18910] libceph: connect (1)[c::]:6789 error -101 [ 1475.078075][T18910] libceph: mon0 (1)[c::]:6789 connect error [ 1475.086477][T19798] overlayfs: unrecognized mount option "/" or missing value [ 1475.721117][ T4479] libceph: connect (1)[c::]:6789 error -101 [ 1475.727149][ T4479] libceph: mon0 (1)[c::]:6789 connect error [ 1477.123896][T19800] tmpfs: Unknown parameter 'quota' [ 1478.884596][T19829] netlink: 'syz.3.3808': attribute type 21 has an invalid length. [ 1481.046054][T19846] siw: device registration error -23 [ 1481.218494][T19855] tmpfs: Unknown parameter 'quota' [ 1483.734181][T19864] random: crng reseeded on system resumption [ 1484.824521][T19872] fuse: Bad value for 'fd' [ 1486.805000][T19880] siw: device registration error -23 [ 1488.195638][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.201966][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.525288][T19894] tmpfs: Unknown parameter 'quota' [ 1491.310136][T19906] netlink: 'syz.3.3831': attribute type 10 has an invalid length. [ 1493.541312][T19906] team0: Port device macvlan1 added [ 1494.293682][T19932] fuse: Bad value for 'fd' [ 1495.861299][T19941] siw: device registration error -23 [ 1498.334104][T19947] tmpfs: Unknown parameter 'quota' [ 1498.502260][T19950] siw: device registration error -23 [ 1498.726681][T19959] netlink: 'syz.3.3847': attribute type 1 has an invalid length. [ 1498.827627][T19959] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1499.003167][T19966] bond2: (slave geneve2): making interface the new active one [ 1499.016317][T19966] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1499.026696][T17304] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1499.153309][T19970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1499.181950][T19970] device batadv_slave_1 entered promiscuous mode [ 1499.269532][T19973] ieee802154 phy0 wpan0: encryption failed: -22 [ 1499.614867][T19980] siw: device registration error -23 [ 1501.697302][T19987] siw: device registration error -23 [ 1504.589435][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1504.613906][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1504.621688][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1504.631335][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1504.639522][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1504.646788][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1504.770370][T20000] tmpfs: Unknown parameter 'quota' [ 1505.646985][T19995] lo speed is unknown, defaulting to 1000 [ 1506.176029][T20017] siw: device registration error -23 [ 1506.834977][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 1508.882899][ T4673] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.901762][T19995] chnl_net:caif_netlink_parms(): no params data found [ 1508.910274][T20031] siw: device registration error -23 [ 1508.986381][ T4673] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.089003][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 1509.110063][T20036] tmpfs: Unknown parameter 'quota' [ 1510.004170][ T4673] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.973099][T20038] siw: device registration error -23 [ 1510.991235][T19995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1511.010742][T19995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.019477][T19995] device bridge_slave_0 entered promiscuous mode [ 1511.035142][T19995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1511.044039][T19995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.057582][T19995] device bridge_slave_1 entered promiscuous mode [ 1511.129316][ T4673] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.220427][T20056] siw: device registration error -23 [ 1511.343277][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 1512.824128][T20055] random: crng reseeded on system resumption [ 1512.851612][T19995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1512.917061][T19995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.597486][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 1514.755011][T19995] team0: Port device team_slave_0 added [ 1514.864621][T19995] team0: Port device team_slave_1 added [ 1515.977966][T20084] random: crng reseeded on system resumption [ 1516.051093][T19995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1516.101955][T20085] tmpfs: Unknown parameter 'quota' [ 1516.943174][T19995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.103526][T19995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.295097][T20093] siw: device registration error -23 [ 1518.160004][T19995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1518.166994][T19995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1518.271188][T20097] siw: device registration error -23 [ 1519.795297][T19995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.008886][T20105] random: crng reseeded on system resumption [ 1521.985941][T19995] device hsr_slave_0 entered promiscuous mode [ 1522.043955][T19995] device hsr_slave_1 entered promiscuous mode [ 1522.057666][T19995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1522.111457][T19995] Cannot create hsr debugfs directory [ 1522.471510][T20136] tmpfs: Unknown parameter 'quota' [ 1523.477570][T20145] random: crng reseeded on system resumption [ 1523.621213][T20147] siw: device registration error -23 [ 1524.503867][T20151] siw: device registration error -23 [ 1526.388425][T20149] netlink: 756 bytes leftover after parsing attributes in process `syz.5.3894'. [ 1527.077067][ T4673] device hsr_slave_0 left promiscuous mode [ 1527.117509][ T4673] device hsr_slave_1 left promiscuous mode [ 1527.131842][T20169] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1527.171824][T20169] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1527.185990][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1527.203633][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.316279][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1527.356810][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.418651][ T4673] device bridge_slave_1 left promiscuous mode [ 1527.463875][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.485080][T20175] random: crng reseeded on system resumption [ 1527.524550][ T4673] device bridge_slave_0 left promiscuous mode [ 1529.165347][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.388100][ T4673] device veth1_macvtap left promiscuous mode [ 1529.395365][ T4673] device veth0_macvtap left promiscuous mode [ 1529.401649][ T4673] device veth1_vlan left promiscuous mode [ 1529.410019][ T4673] device veth0_vlan left promiscuous mode [ 1529.706610][ T4673] bond9 (unregistering): Released all slaves [ 1529.747035][ T4673] bond8 (unregistering): Released all slaves [ 1529.780757][ T4673] bond7 (unregistering): Released all slaves [ 1529.842737][ T4673] bond6 (unregistering): Released all slaves [ 1529.874532][ T4673] bond5 (unregistering): Released all slaves [ 1529.895540][ T4673] bond4 (unregistering): Released all slaves [ 1529.914958][ T4673] bond3 (unregistering): Released all slaves [ 1529.930960][ T4673] bond2 (unregistering): Released all slaves [ 1529.982732][ T4673] bond1 (unregistering): Released all slaves [ 1530.111250][T20193] tmpfs: Unknown parameter 'quota' [ 1531.131610][T20200] siw: device registration error -23 [ 1533.100555][T20212] random: crng reseeded on system resumption [ 1533.358817][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 1533.429661][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 1533.512434][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1533.579784][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1533.588788][T18354] infiniband syz1: ib_query_port failed (-19) [ 1535.030269][ T4673] bond0 (unregistering): Released all slaves [ 1535.406108][ T126] bond0 speed is unknown, defaulting to 1000 [ 1535.596583][T20228] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1535.617569][T20231] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1535.642622][T19995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1535.666755][T19995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1535.696574][T19995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1535.715960][T19995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1535.804765][T20241] siw: device registration error -23 [ 1539.366369][T19995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1539.384176][T19995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1539.391845][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1539.420821][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1539.453270][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1539.461759][T18683] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1539.544099][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1539.561938][T17392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.569209][T17392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.598678][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1539.610411][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1539.621653][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1539.630558][T17392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.637777][T17392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.658399][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1539.671346][T20271] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1539.681840][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1539.694854][T18683] usb 3-1: Using ep0 maxpacket: 32 [ 1539.703929][T20271] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1539.715780][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1539.731886][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1539.742113][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1539.758646][T18683] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.776248][T18683] usb 3-1: config 0 has no interfaces? [ 1539.778743][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1539.794924][T18683] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1539.810663][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1539.810855][T18683] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1539.825842][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1539.843548][T20277] random: crng reseeded on system resumption [ 1539.846307][T18683] usb 3-1: Product: syz [ 1539.854907][T18683] usb 3-1: Manufacturer: syz [ 1539.858557][T19995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1539.882021][T18683] usb 3-1: SerialNumber: syz [ 1539.890642][T19995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1539.903629][T18683] usb 3-1: config 0 descriptor?? [ 1539.917729][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1539.933833][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1539.953460][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1540.137371][ T22] usb 3-1: USB disconnect, device number 19 [ 1540.445921][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1540.455270][T17392] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1540.468286][T19995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1540.750818][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1540.759872][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1540.789594][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1540.810181][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1540.823236][T19995] device veth0_vlan entered promiscuous mode [ 1540.830503][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1540.839095][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1540.859036][T19995] device veth1_vlan entered promiscuous mode [ 1540.890693][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1540.899827][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1540.908039][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1540.917365][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1540.928544][T19995] device veth0_macvtap entered promiscuous mode [ 1540.949814][T19995] device veth1_macvtap entered promiscuous mode [ 1541.003578][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.020328][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.034354][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.050848][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.067034][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.089491][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.100916][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.111900][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.122322][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1541.133608][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.145952][T19995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1541.157217][T18664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1541.172844][T18664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1541.184950][T18664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1541.200150][T18664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1541.215146][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.225949][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.236042][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.246594][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.256464][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.267368][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.277928][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1541.288623][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1541.300757][T19995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1541.311081][T19836] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1541.320680][T19836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1541.353721][T19995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.362633][T19995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.371690][T19995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.380762][T19995] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.457463][T17392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.477619][T17392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.506233][T18664] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1541.542838][T18664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.551262][T18664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.564957][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1542.714492][T20319] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1542.724314][T20319] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1545.319821][T20328] device syzkaller0 entered promiscuous mode [ 1545.460341][T18910] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1545.677187][T18910] usb 3-1: Using ep0 maxpacket: 32 [ 1545.686151][T18910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.826092][T18910] usb 3-1: config 0 has no interfaces? [ 1545.909637][T18910] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1546.036597][T18910] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1546.249606][T18910] usb 3-1: Product: syz [ 1546.331579][T18910] usb 3-1: Manufacturer: syz [ 1546.382454][T18910] usb 3-1: SerialNumber: syz [ 1546.490412][T18910] usb 3-1: config 0 descriptor?? [ 1547.499825][T20347] fuse: blksize only supported for fuseblk [ 1547.951635][T20362] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1547.987462][T20362] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1549.033237][T20371] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1550.666251][T19045] usb 3-1: USB disconnect, device number 20 [ 1550.836775][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3955'. [ 1550.845765][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3955'. [ 1550.875094][T20377] netlink: 'syz.6.3955': attribute type 12 has an invalid length. [ 1550.957597][T20377] netlink: 'syz.6.3955': attribute type 17 has an invalid length. [ 1550.973525][T20377] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3955'. [ 1550.994299][T20377] netlink: 'syz.6.3955': attribute type 21 has an invalid length. [ 1551.135908][T20393] fuse: Bad value for 'group_id' [ 1552.322528][T20403] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1552.341075][T20407] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1552.418731][T20408] IPVS: stopping master sync thread 20407 ... [ 1552.434446][T20403] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1553.426622][T20420] device syzkaller1 entered promiscuous mode [ 1553.752342][T20430] siw: device registration error -23 [ 1554.788112][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1554.794665][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.180688][T20434] fuse: Bad value for 'group_id' [ 1555.323929][T20443] siw: device registration error -23 [ 1556.525401][T20448] Bluetooth: MGMT ver 1.22 [ 1556.615669][T20455] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1556.670151][T20455] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1556.684407][T20447] Process accounting resumed [ 1557.107106][T20473] siw: device registration error -23 [ 1558.672322][T20476] fuse: Bad value for 'group_id' [ 1560.050240][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1560.062847][T20500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1560.270836][T20498] Process accounting resumed [ 1560.357469][T20503] fuse: Bad value for 'user_id' [ 1560.833694][T20511] random: crng reseeded on system resumption [ 1561.310222][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3999'. [ 1563.393081][T20534] netlink: 'syz.1.4004': attribute type 21 has an invalid length. [ 1563.521573][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1564.359767][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4010'. [ 1564.422068][T20555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4010'. [ 1565.565472][T20570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1566.360137][T20575] random: crng reseeded on system resumption [ 1566.423390][T20564] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1566.449454][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.479468][T20564] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1567.548759][T20580] syz.3.4015 sent an empty control message without MSG_MORE. [ 1569.156746][T20609] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1569.167607][T20609] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1570.395927][T20632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1571.960875][T20675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4047'. [ 1572.896944][T20680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1572.971760][T20679] Process accounting resumed [ 1573.203507][T20688] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1573.239613][T20688] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1575.026053][T20717] Process accounting resumed [ 1575.334493][T20734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4066'. [ 1576.354144][T20745] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1576.408710][T20745] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1576.630562][T20749] random: crng reseeded on system resumption [ 1577.743250][T20765] Process accounting resumed [ 1578.830961][T20783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 1579.106170][T20797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1581.392528][T20819] random: crng reseeded on system resumption [ 1581.520804][T20829] netlink: 'syz.1.4098': attribute type 5 has an invalid length. [ 1581.551806][T20821] siw: device registration error -23 [ 1581.579982][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1581.608147][T20830] netlink: 'syz.1.4098': attribute type 5 has an invalid length. [ 1581.616747][T20810] netlink: 756 bytes leftover after parsing attributes in process `syz.6.4086'. [ 1581.665007][T20830] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1581.868436][T20839] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4099'. [ 1585.016302][T20858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4104'. [ 1585.467555][T20873] netlink: 'syz.1.4112': attribute type 5 has an invalid length. [ 1585.476847][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1585.517739][T20873] netlink: 'syz.1.4112': attribute type 5 has an invalid length. [ 1585.894388][T20884] random: crng reseeded on system resumption [ 1585.998639][T20873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1587.629135][T20894] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4120'. [ 1588.290046][T20907] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1588.317085][T20907] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1588.335034][T20909] fuse: Unknown parameter 'grou00000000000000000000' [ 1588.359542][T20913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1588.375391][T20913] device batadv_slave_1 entered promiscuous mode [ 1588.464993][T20915] netlink: 'syz.5.4129': attribute type 5 has an invalid length. [ 1588.472773][T20915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1588.537368][T20921] netlink: 'syz.5.4129': attribute type 5 has an invalid length. [ 1588.551584][T20921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1588.798745][T20922] tmpfs: Unknown parameter 'quota' [ 1590.011286][T20934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1590.906719][T20936] random: crng reseeded on system resumption [ 1591.431725][T20952] overlayfs: failed to clone upperpath [ 1591.576523][T20955] fuse: Bad value for 'fd' [ 1593.300328][T20961] tmpfs: Unknown parameter 'quota' [ 1594.035410][ T4263] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1594.263061][ T4263] usb 2-1: Using ep0 maxpacket: 32 [ 1594.271897][ T4263] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1594.403222][ T4263] usb 2-1: config 0 has no interfaces? [ 1594.503560][ T4263] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1594.625453][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1594.732313][ T4263] usb 2-1: Product: syz [ 1594.788837][ T4263] usb 2-1: Manufacturer: syz [ 1594.844432][ T4263] usb 2-1: SerialNumber: syz [ 1594.941549][T20986] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4150'. [ 1595.064528][ T4263] usb 2-1: config 0 descriptor?? [ 1595.140293][T20993] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1595.151467][T20993] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1595.942825][T21003] fuse: Unknown parameter 'grou00000000000000000000' [ 1595.949650][T20999] random: crng reseeded on system resumption [ 1597.656930][T21006] random: crng reseeded on system resumption [ 1597.953217][T21012] tmpfs: Unknown parameter 'quota' [ 1597.978743][T12167] usb 2-1: USB disconnect, device number 21 [ 1598.302674][T21025] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1598.319365][T21025] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1598.353592][T21030] fuse: Bad value for 'fd' [ 1598.573733][T21034] fuse: Unknown parameter 'group_i00000000000000000000' [ 1598.598696][T21033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4167'. [ 1601.316353][T21045] random: crng reseeded on system resumption [ 1605.021239][T21079] tmpfs: Unknown parameter 'quota' [ 1606.063057][T21090] fuse: Unknown parameter 'group_i00000000000000000000' [ 1606.086157][T21088] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1606.105333][T21088] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1607.234738][T21093] random: crng reseeded on system resumption [ 1607.340325][T21102] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4184'. [ 1608.394379][T21109] Set syz1 is full, maxelem 0 reached [ 1609.904208][T21128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1609.941009][T21128] device batadv_slave_1 entered promiscuous mode [ 1610.153298][T21134] tmpfs: Unknown parameter 'quota' [ 1611.174044][T21139] overlayfs: failed to clone upperpath [ 1611.178458][T21140] fuse: Unknown parameter 'group_i00000000000000000000' [ 1612.197697][T21145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4199'. [ 1612.275607][T21152] tmpfs: Unknown parameter 'quota' [ 1612.336508][T21154] random: crng reseeded on system resumption [ 1614.465024][T21174] fuse: Bad value for 'fd' [ 1615.138856][T21179] tmpfs: Unknown parameter 'quota' [ 1615.783984][T21185] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1615.845670][T21185] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1615.887340][ T22] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1615.998399][T21198] tmpfs: Unknown parameter 'quota' [ 1616.155002][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 1616.887540][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.897888][T21200] fuse: Unknown parameter 'group_id00000000000000000000' [ 1616.924640][ T22] usb 2-1: config 0 has no interfaces? [ 1616.940688][ T22] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1616.955078][ T22] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1616.970380][ T22] usb 2-1: Product: syz [ 1616.974638][ T22] usb 2-1: Manufacturer: syz [ 1616.979430][ T22] usb 2-1: SerialNumber: syz [ 1617.001593][ T22] usb 2-1: config 0 descriptor?? [ 1617.021370][T21203] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4216'. [ 1618.058851][T15445] usb 2-1: USB disconnect, device number 22 [ 1618.155656][T21222] tmpfs: Unknown parameter 'quota' [ 1619.201152][T21226] random: crng reseeded on system resumption [ 1620.244780][T21236] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1620.314224][T21236] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1620.425626][T21241] tmpfs: Unknown parameter 'quota' [ 1621.363850][T21244] fuse: Unknown parameter 'group_id00000000000000000000' [ 1621.375417][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1621.381757][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1621.699404][T21251] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4231'. [ 1623.947461][ T22] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1624.240073][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 1624.249972][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.471341][ T22] usb 2-1: config 0 has no interfaces? [ 1624.619578][ T22] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1624.791612][ T22] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1624.922913][ T22] usb 2-1: Product: syz [ 1624.927126][ T22] usb 2-1: Manufacturer: syz [ 1624.931734][ T22] usb 2-1: SerialNumber: syz [ 1625.031291][T21279] tmpfs: Unknown parameter 'quota' [ 1625.071022][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4237'. [ 1625.237792][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4237'. [ 1625.894858][ T22] usb 2-1: config 0 descriptor?? [ 1626.445510][T21291] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1626.457712][T21291] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1626.676136][T21298] tmpfs: Unknown parameter 'quota' [ 1627.588107][T15445] usb 2-1: USB disconnect, device number 23 [ 1627.640081][T21302] fuse: Unknown parameter 'group_id00000000000000000000' [ 1628.055156][ T14] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1628.308096][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 1628.601889][ T14] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1628.659551][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1628.711754][ T14] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1628.754089][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.843294][ T14] usb 3-1: config 0 descriptor?? [ 1629.110523][ T14] usbhid 3-1:0.0: can't add hid device: -71 [ 1629.122861][ T14] usbhid: probe of 3-1:0.0 failed with error -71 [ 1629.164581][ T14] usb 3-1: USB disconnect, device number 21 [ 1629.227874][T21326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4251'. [ 1629.261113][T21326] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4251'. [ 1629.300739][T21328] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1629.350889][T21328] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1629.667708][T21333] tmpfs: Unknown parameter 'quota' [ 1629.783874][T21337] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4256'. [ 1632.842484][T21359] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4261'. [ 1632.891579][T21361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1632.931358][T21361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4263'. [ 1632.962616][T21366] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1632.972481][T21366] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1633.213860][T12167] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1633.225963][T21381] tmpfs: Unknown parameter 'quota' [ 1634.162894][T21385] fuse: Unknown parameter 'user_id00000000000000000000' [ 1634.286911][T12167] usb 7-1: Using ep0 maxpacket: 32 [ 1634.297043][T21393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1634.319316][T12167] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1634.368723][T12167] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.355867][T12167] usb 7-1: config 0 descriptor?? [ 1635.426967][T21400] random: crng reseeded on system resumption [ 1635.620957][T12167] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1635.792140][T12167] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1635.841945][T12167] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1635.895361][T12167] usb 7-1: media controller created [ 1635.937717][T21409] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.947266][T21409] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.956104][T21409] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1635.964805][T21409] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1636.054381][T12167] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1636.193869][T21409] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.202963][T21409] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.212793][T21409] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.222001][T21409] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1636.755491][T21414] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1636.768146][T21414] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1637.036626][T21420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4279'. [ 1637.041808][T12167] az6027: usb out operation failed. (-71) [ 1637.089837][T12167] az6027: usb out operation failed. (-71) [ 1637.104898][T21424] fuse: Bad value for 'user_id' [ 1637.109895][T12167] stb0899_attach: Driver disabled by Kconfig [ 1637.126027][T12167] az6027: no front-end attached [ 1637.126027][T12167] [ 1637.139161][T12167] az6027: usb out operation failed. (-71) [ 1637.145164][T21425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4279'. [ 1637.158127][T12167] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1637.177371][T12167] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 1637.232795][T12167] dvb-usb: schedule remote query interval to 400 msecs. [ 1637.262981][T12167] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1637.265841][T21428] fuse: Unknown parameter 'user_id00000000000000000000' [ 1637.299148][T12167] usb 7-1: USB disconnect, device number 14 [ 1637.376958][T21436] tmpfs: Unknown parameter 'quota' [ 1639.694426][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4284'. [ 1639.937831][T12167] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1640.269142][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1640.516491][T21453] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4286'. [ 1642.108903][T21464] overlayfs: failed to clone upperpath [ 1642.122512][ T4263] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1642.373308][T21474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4292'. [ 1642.389149][T21477] fuse: Bad value for 'user_id' [ 1642.404889][ T4263] usb 6-1: Using ep0 maxpacket: 32 [ 1642.494061][ T4263] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.522188][ T4263] usb 6-1: config 0 has no interfaces? [ 1642.645606][ T4263] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1642.665733][ T4263] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1642.688021][T21483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4295'. [ 1642.698101][ T4263] usb 6-1: Product: syz [ 1642.702787][ T4263] usb 6-1: Manufacturer: syz [ 1642.708014][ T4263] usb 6-1: SerialNumber: syz [ 1642.718569][ T4479] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1642.732077][T21483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4295'. [ 1642.747310][ T4263] usb 6-1: config 0 descriptor?? [ 1642.956998][ T4479] usb 2-1: Using ep0 maxpacket: 32 [ 1642.964524][ T4479] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xC4, skipping [ 1643.026158][ T4479] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 1643.070684][ T4479] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 1643.111346][ T4479] usb 2-1: Product: syz [ 1643.124212][ T4479] usb 2-1: Manufacturer: syz [ 1643.142152][ T4479] usb 2-1: SerialNumber: syz [ 1643.169938][ T4479] usb 2-1: config 0 descriptor?? [ 1643.255850][ T4479] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1643.535481][T21500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4298'. [ 1644.356438][T16056] usb 2-1: Failed to submit usb control message: -110 [ 1644.378467][T16056] usb 2-1: unable to send the bmi data to the device: -110 [ 1644.401839][T21474] vivid-002: disconnect [ 1644.469648][T21473] vivid-002: reconnect [ 1644.476845][T16056] usb 2-1: unable to get target info from device [ 1644.483223][T16056] usb 2-1: could not get target info (-110) [ 1644.532041][T16334] usb 2-1: USB disconnect, device number 24 [ 1644.567868][T16056] usb 2-1: could not probe fw (-110) [ 1644.634709][ T4479] usb 6-1: USB disconnect, device number 10 [ 1645.043971][T21506] fuse: Unknown parameter 'user_id00000000000000000000' [ 1645.460378][ T4321] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1646.479828][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 1646.490434][ T4321] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1647.447322][ T4321] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1647.488854][ T4321] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1647.563070][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.577332][T21531] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1647.633276][ T4321] usb 3-1: config 0 descriptor?? [ 1647.646156][T21534] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4306'. [ 1647.932636][ T4321] usbhid 3-1:0.0: can't add hid device: -71 [ 1647.938664][ T4321] usbhid: probe of 3-1:0.0 failed with error -71 [ 1648.147779][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 1648.875057][ T4321] usb 3-1: USB disconnect, device number 22 [ 1649.108862][T21553] fuse: Bad value for 'fd' [ 1652.158344][ T4479] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1653.159426][T21580] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4315'. [ 1653.348431][T21589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1653.395024][T21589] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1653.865277][T21602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4322'. [ 1654.884573][T21610] fuse: Bad value for 'fd' [ 1655.127596][T19045] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1656.093879][T19045] usb 7-1: Using ep0 maxpacket: 16 [ 1657.300968][T19045] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1657.483512][T19045] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1657.568226][T19045] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1657.671157][T19045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.792589][T19045] usb 7-1: config 0 descriptor?? [ 1658.221477][T21635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1658.230825][ T4263] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1658.414919][T21635] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4332'. [ 1658.476755][ T4263] usb 3-1: Using ep0 maxpacket: 32 [ 1658.536972][ T4263] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.587656][T19045] usbhid 7-1:0.0: can't add hid device: -71 [ 1658.619489][T19045] usbhid: probe of 7-1:0.0 failed with error -71 [ 1658.711947][ T4263] usb 3-1: config 0 has no interfaces? [ 1658.786064][T19045] usb 7-1: USB disconnect, device number 15 [ 1658.825902][ T4263] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1658.987789][ T4263] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1659.097320][ T4263] usb 3-1: Product: syz [ 1659.151548][ T4263] usb 3-1: Manufacturer: syz [ 1659.218387][ T4263] usb 3-1: SerialNumber: syz [ 1659.329684][ T4263] usb 3-1: config 0 descriptor?? [ 1659.828238][T21650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1660.769585][T21657] fuse: Bad value for 'fd' [ 1663.262544][ T4321] usb 3-1: USB disconnect, device number 23 [ 1663.274953][T21677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4345'. [ 1663.348192][T21677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4345'. [ 1663.656942][ T4323] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1663.760780][T21693] fuse: Bad value for 'fd' [ 1663.873642][ T4323] usb 7-1: Using ep0 maxpacket: 16 [ 1663.881893][ T4323] usb 7-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1663.893932][ T4323] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1663.901916][ T4323] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1663.924914][ T4323] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.953380][ T4323] usb 7-1: config 0 descriptor?? [ 1664.186001][ T4323] usbhid 7-1:0.0: can't add hid device: -71 [ 1664.199076][ T4323] usbhid: probe of 7-1:0.0 failed with error -71 [ 1664.229086][ T4323] usb 7-1: USB disconnect, device number 16 [ 1664.269997][T21697] fuse: Unknown parameter '0x0000000000000003' [ 1664.368806][T21687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1664.418702][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4349'. [ 1664.434680][T21687] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1664.683683][T21687] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1664.786094][T21687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1664.863830][T21687] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1664.984295][T21687] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1665.054310][T21687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1665.133598][T21687] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1665.193390][T21687] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 1665.760499][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 1666.973254][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 1667.229318][T21726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4357'. [ 1667.233365][ T48] Bluetooth: hci4: command 0x0c1a tx timeout [ 1667.321505][T21726] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4357'. [ 1667.600326][T21734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4359'. [ 1668.013655][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1669.235473][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1669.487658][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 1669.582290][T21747] binder: 21739:21747 ioctl c0306201 0 returned -14 [ 1670.443290][T21742] device syzkaller0 entered promiscuous mode [ 1670.482346][T21747] netlink: 'syz.6.4360': attribute type 21 has an invalid length. [ 1670.706008][T21753] Process accounting resumed [ 1670.868430][T21758] siw: device registration error -23 [ 1672.297303][T21769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4364'. [ 1673.130360][T21780] tmpfs: Unknown parameter 'quota' [ 1674.966055][T21791] fuse: Bad value for 'fd' [ 1675.123872][T21795] binder: 21793:21795 ioctl c0306201 0 returned -14 [ 1677.453932][ T129] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1677.659463][ T129] usb 7-1: Using ep0 maxpacket: 32 [ 1677.667803][ T129] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1677.747333][ T129] usb 7-1: config 0 has no interfaces? [ 1677.837007][ T129] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1677.882496][ T129] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1677.928353][ T129] usb 7-1: Product: syz [ 1677.952673][ T129] usb 7-1: Manufacturer: syz [ 1677.977563][ T129] usb 7-1: SerialNumber: syz [ 1678.069950][ T129] usb 7-1: config 0 descriptor?? [ 1680.283522][ T4479] usb 7-1: USB disconnect, device number 17 [ 1681.074814][T21820] siw: device registration error -23 [ 1681.269566][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4370'. [ 1681.300984][T21788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4372'. [ 1681.342163][T21797] netlink: 'syz.5.4374': attribute type 21 has an invalid length. [ 1682.077477][T21828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1682.969482][T21828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4378'. [ 1683.998024][T21836] tmpfs: Unknown parameter 'quota' [ 1684.895969][T21838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4383'. [ 1684.965439][T21843] fuse: Invalid rootmode [ 1686.706731][T21864] fuse: Unknown parameter '0x0000000000000004' [ 1687.194938][T21866] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4395'. [ 1687.249380][T21869] random: crng reseeded on system resumption [ 1687.278705][T21874] overlayfs: failed to clone upperpath [ 1687.670832][T21877] tmpfs: Unknown parameter 'quota' [ 1687.970735][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1687.980011][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1690.567158][T18354] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1690.794690][T18354] usb 2-1: Using ep0 maxpacket: 32 [ 1690.803625][T18354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.961001][T18354] usb 2-1: config 0 has no interfaces? [ 1691.028179][T18354] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1691.154697][T18354] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1691.257940][T21906] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4402'. [ 1691.394697][T21910] binder: 21905:21910 ioctl c0306201 0 returned -14 [ 1691.728396][T18354] usb 2-1: Product: syz [ 1692.114082][T18354] usb 2-1: Manufacturer: syz [ 1692.157717][T18354] usb 2-1: SerialNumber: syz [ 1692.171731][T18354] usb 2-1: config 0 descriptor?? [ 1692.298791][T21910] netlink: 'syz.6.4404': attribute type 21 has an invalid length. [ 1693.700256][T16334] usb 2-1: USB disconnect, device number 26 [ 1696.112283][T21939] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1696.132551][T21939] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1696.212655][T21942] tmpfs: Unknown parameter 'quota' [ 1697.266331][T21949] siw: device registration error -23 [ 1697.507621][T21946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4410'. [ 1697.539002][T21947] tmpfs: Unknown parameter 'quota' [ 1697.672130][T21956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1697.883972][T21963] netlink: 'syz.5.4417': attribute type 21 has an invalid length. [ 1701.437569][ T4263] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1701.864303][ T4263] usb 7-1: Using ep0 maxpacket: 32 [ 1702.607564][ T4263] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1702.615275][ T4263] usb 7-1: can't read configurations, error -71 [ 1702.704509][T22009] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1702.787275][T22013] tmpfs: Unknown parameter 'quota' [ 1702.805033][T22009] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1702.982890][T22016] siw: device registration error -23 [ 1703.811720][T22019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4429'. [ 1703.841725][T22023] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4431'. [ 1704.766804][T22021] tmpfs: Unknown parameter 'quota' [ 1705.000092][T22039] netlink: 'syz.2.4433': attribute type 21 has an invalid length. [ 1707.701787][ T126] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1709.095834][T22073] siw: device registration error -23 [ 1709.277006][T22056] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1709.286686][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 1709.296229][ T126] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.242464][ T126] usb 7-1: config 0 has no interfaces? [ 1710.264132][T22056] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1710.403084][T22077] tmpfs: Unknown parameter 'quota' [ 1710.745540][ T126] usb 7-1: string descriptor 0 read error: -71 [ 1710.754283][ T126] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1710.866276][ T126] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1710.942634][ T126] usb 7-1: config 0 descriptor?? [ 1710.971462][ T126] usb 7-1: can't set config #0, error -71 [ 1711.013636][ T126] usb 7-1: USB disconnect, device number 20 [ 1711.138330][T22093] tmpfs: Unknown parameter 'quota' [ 1711.993145][T22091] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4446'. [ 1712.450777][T22099] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4447'. [ 1713.374924][T22112] netlink: 'syz.2.4449': attribute type 21 has an invalid length. [ 1714.818765][T22128] siw: device registration error -23 [ 1716.254366][T22130] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1717.225552][T22130] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1717.455609][ T126] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1717.683159][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 1717.692119][ T126] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1717.861051][ T126] usb 7-1: config 0 has no interfaces? [ 1717.982904][ T126] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1718.096745][ T126] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1718.173889][ T126] usb 7-1: Product: syz [ 1718.211372][ T126] usb 7-1: Manufacturer: syz [ 1718.256520][ T126] usb 7-1: SerialNumber: syz [ 1718.343149][ T126] usb 7-1: config 0 descriptor?? [ 1718.560655][T22159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4461'. [ 1720.294461][T22173] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1721.909230][ T4320] usb 7-1: USB disconnect, device number 21 [ 1723.516731][T22194] overlayfs: failed to clone upperpath [ 1723.554356][T22197] siw: device registration error -23 [ 1724.738927][T22205] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4473'. [ 1725.645281][T22212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1725.663897][T22212] device batadv_slave_1 entered promiscuous mode [ 1725.698280][T22215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4477'. [ 1725.787421][T22219] fuse: Unknown parameter 'use00000000000000000000' [ 1726.837613][T22217] tmpfs: Unknown parameter 'quota' [ 1729.451971][T22236] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1729.537128][T22236] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1730.878099][T22258] siw: device registration error -23 [ 1731.227001][T22266] fuse: Unknown parameter 'use00000000000000000000' [ 1731.278023][T22268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4491'. [ 1732.409266][T22275] tmpfs: Unknown parameter 'quota' [ 1732.599548][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4495'. [ 1734.146912][T22291] overlayfs: failed to clone upperpath [ 1734.633679][ T4323] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1734.871890][ T4323] usb 6-1: Using ep0 maxpacket: 32 [ 1734.880944][ T4323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.997216][ T4323] usb 6-1: config 0 has no interfaces? [ 1735.100523][ T4323] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1735.217457][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1735.306932][ T4323] usb 6-1: Product: syz [ 1735.374334][ T4323] usb 6-1: Manufacturer: syz [ 1735.417077][ T4323] usb 6-1: SerialNumber: syz [ 1735.480243][ T4323] usb 6-1: config 0 descriptor?? [ 1736.437961][T22313] siw: device registration error -23 [ 1737.222907][T22314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4505'. [ 1737.721725][T15445] usb 6-1: USB disconnect, device number 11 [ 1737.813764][T22322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1737.872008][T22322] device batadv_slave_1 entered promiscuous mode [ 1737.929507][T22323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1738.071705][T22330] tmpfs: Unknown parameter 'quota' [ 1739.548718][T22342] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1739.794565][T22351] siw: device registration error -23 [ 1739.865264][T22345] netlink: 'syz.2.4514': attribute type 21 has an invalid length. [ 1740.216764][T22342] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1740.364298][T22356] Set syz1 is full, maxelem 0 reached [ 1742.794753][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4521'. [ 1743.900156][ T4321] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1744.149097][ T4321] usb 7-1: Using ep0 maxpacket: 32 [ 1744.157707][ T4321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.279359][ T4321] usb 7-1: config 0 has no interfaces? [ 1744.366617][ T4321] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1744.485455][ T4321] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1744.599691][ T4321] usb 7-1: Product: syz [ 1744.626128][ T4321] usb 7-1: Manufacturer: syz [ 1744.703302][ T4321] usb 7-1: SerialNumber: syz [ 1745.457849][ T4321] usb 7-1: config 0 descriptor?? [ 1745.604458][ T4321] usb 7-1: can't set config #0, error -71 [ 1745.635641][ T4321] usb 7-1: USB disconnect, device number 22 [ 1745.715637][T22393] tmpfs: Unknown parameter 'quota' [ 1746.721798][T22399] siw: device registration error -23 [ 1746.789578][T22405] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1746.804599][T22405] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 1746.919971][T22408] netlink: 'syz.3.4531': attribute type 21 has an invalid length. [ 1748.014988][T22421] fuse: Unknown parameter 'user_i00000000000000000000' [ 1749.025668][ T4322] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1749.597849][T22432] netlink: 756 bytes leftover after parsing attributes in process `syz.6.4535'. [ 1749.646968][ T4322] usb 3-1: Using ep0 maxpacket: 32 [ 1749.683406][ T4322] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.822018][ T4322] usb 3-1: config 0 has no interfaces? [ 1750.055785][ T4322] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1750.430555][T22436] tmpfs: Unknown parameter 'quota' [ 1750.957969][ T4322] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1751.015560][ T4322] usb 3-1: Product: syz [ 1751.079730][ T4322] usb 3-1: Manufacturer: syz [ 1751.146548][ T4322] usb 3-1: SerialNumber: syz [ 1751.277426][ T4322] usb 3-1: config 0 descriptor?? [ 1752.368201][ T4322] usb 3-1: can't set config #0, error -71 [ 1752.390650][ T4322] usb 3-1: USB disconnect, device number 24 [ 1752.715381][T22458] siw: device registration error -23 [ 1753.791579][T22469] netlink: 'syz.5.4545': attribute type 21 has an invalid length. [ 1754.506992][T22477] fuse: Unknown parameter 'user_id00000000000000000000' [ 1754.557741][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1754.565332][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1755.534766][T22491] tmpfs: Unknown parameter 'quota' [ 1758.075713][T18354] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1758.389839][T18354] usb 6-1: Using ep0 maxpacket: 32 [ 1758.402395][T18354] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.570951][T18354] usb 6-1: config 0 has no interfaces? [ 1759.530649][T18354] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1759.545144][T18354] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1759.554265][T18354] usb 6-1: Product: syz [ 1759.558496][T18354] usb 6-1: Manufacturer: syz [ 1759.564095][T18354] usb 6-1: SerialNumber: syz [ 1759.590612][T18354] usb 6-1: config 0 descriptor?? [ 1760.460921][T22526] fuse: Unknown parameter 'user_id00000000000000000000' [ 1760.894325][T22532] netlink: 'syz.1.4563': attribute type 21 has an invalid length. [ 1760.992775][T22536] tmpfs: Unknown parameter 'quota' [ 1761.956119][ T4263] usb 6-1: USB disconnect, device number 12 [ 1762.299361][T22551] siw: device registration error -23 [ 1763.156495][T22559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4568'. [ 1764.263440][T22578] fuse: Unknown parameter 'user_id00000000000000000000' [ 1764.411217][T22582] tmpfs: Unknown parameter 'quota' [ 1765.483216][T22586] netlink: 'syz.3.4578': attribute type 21 has an invalid length. [ 1769.364884][T22623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4584'. [ 1770.502999][T22638] tmpfs: Unknown parameter 'quota' [ 1772.076514][T22667] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4590'. [ 1772.334010][T22663] Process accounting resumed [ 1773.765756][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4598'. [ 1774.376202][ T4263] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1774.624786][ T4263] usb 7-1: Using ep0 maxpacket: 32 [ 1774.633453][ T4263] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.912190][ T4263] usb 7-1: config 0 has no interfaces? [ 1775.098436][ T4263] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1775.310044][ T4263] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1775.476525][ T4263] usb 7-1: Product: syz [ 1775.571062][ T4263] usb 7-1: Manufacturer: syz [ 1775.653139][ T4263] usb 7-1: SerialNumber: syz [ 1775.807401][ T4263] usb 7-1: config 0 descriptor?? [ 1775.893659][T22699] overlayfs: failed to clone upperpath [ 1776.070816][T22702] tmpfs: Unknown parameter 'quota' [ 1778.037586][T18354] usb 7-1: USB disconnect, device number 23 [ 1779.384433][T22727] Process accounting resumed [ 1780.619733][T22754] Set syz1 is full, maxelem 0 reached [ 1784.021188][T16851] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1784.302941][T16851] usb 2-1: Using ep0 maxpacket: 32 [ 1785.471817][T16851] usb 2-1: device descriptor read/all, error -71 [ 1787.999439][T22809] fuse: Unknown parameter '0x0000000000000003' [ 1789.290394][T22820] netlink: 'syz.2.4635': attribute type 21 has an invalid length. [ 1789.387512][T22817] tmpfs: Unknown parameter 'quota' [ 1792.951442][T18354] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1793.208493][T18354] usb 2-1: Using ep0 maxpacket: 32 [ 1793.533098][T18354] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1793.862067][T18354] usb 2-1: config 0 has no interfaces? [ 1793.900389][T18354] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1793.952245][T18354] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1793.967076][T22839] Process accounting resumed [ 1793.991391][T18354] usb 2-1: Product: syz [ 1794.020758][T18354] usb 2-1: Manufacturer: syz [ 1794.050780][T18354] usb 2-1: SerialNumber: syz [ 1794.076913][T18354] usb 2-1: config 0 descriptor?? [ 1794.293418][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4643'. [ 1795.573349][T22865] fuse: Unknown parameter '0x0000000000000003' [ 1795.968979][T22872] tmpfs: Unknown parameter 'quota' [ 1796.234247][ T4322] usb 2-1: USB disconnect, device number 29 [ 1796.348963][T22880] netlink: 756 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1796.509850][T22884] siw: device registration error -23 [ 1798.648894][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4656'. [ 1798.821067][T22906] fuse: Unknown parameter '0x0000000000000003' [ 1800.437441][T22912] tmpfs: Unknown parameter 'quota' [ 1800.493239][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4660'. [ 1800.895782][ T4479] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1801.155820][ T4479] usb 3-1: Using ep0 maxpacket: 32 [ 1801.185327][ T4479] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.415667][ T4479] usb 3-1: config 0 has no interfaces? [ 1802.333246][ T4479] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1802.349486][ T4479] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1802.365474][ T4479] usb 3-1: config 0 descriptor?? [ 1802.371172][ T4479] usb 3-1: can't set config #0, error -71 [ 1802.387094][ T4479] usb 3-1: USB disconnect, device number 25 [ 1802.424690][T22940] siw: device registration error -23 [ 1803.911976][T22959] fuse: Unknown parameter '0x0000000000000003' [ 1804.127656][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4670'. [ 1805.155742][T22979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4674'. [ 1805.915303][T22972] tmpfs: Unknown parameter 'quota' [ 1807.784885][T22983] fuse: Bad value for 'fd' [ 1808.275972][T18354] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1810.772234][T23026] fuse: Unknown parameter '0x0000000000000003' [ 1811.211351][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4686'. [ 1812.562238][T23053] tmpfs: Unknown parameter 'quota' [ 1812.782203][T23057] siw: device registration error -23 [ 1812.820570][T18354] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1814.260866][T18354] usb 3-1: config 0 has an invalid interface number: 162 but max is 0 [ 1814.300915][T18354] usb 3-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1814.425595][T18354] usb 3-1: config 0 has no interface number 0 [ 1814.499994][T18354] usb 3-1: too many endpoints for config 0 interface 162 altsetting 241: 81, using maximum allowed: 30 [ 1814.625579][T18354] usb 3-1: config 0 interface 162 altsetting 241 has 0 endpoint descriptors, different from the interface descriptor's value: 81 [ 1814.777040][T18354] usb 3-1: config 0 interface 162 has no altsetting 0 [ 1814.897033][T18354] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1814.986253][T18354] usb 3-1: New USB device strings: Mfr=111, Product=0, SerialNumber=0 [ 1815.062950][T18354] usb 3-1: Manufacturer: syz [ 1815.122232][T18354] usb 3-1: config 0 descriptor?? [ 1815.494136][ T129] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1816.202851][T18354] usb 3-1: USB disconnect, device number 26 [ 1816.425008][T23087] fuse: Unknown parameter '0x0000000000000003' [ 1817.691458][T23101] tmpfs: Unknown parameter 'quota' [ 1817.983393][T23116] siw: device registration error -23 [ 1819.905190][T16334] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1820.114236][T23131] fuse: Unknown parameter 'fd0x0000000000000003' [ 1820.132498][T16334] usb 3-1: Using ep0 maxpacket: 32 [ 1820.140001][T16334] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1820.261659][T16334] usb 3-1: config 0 has no interfaces? [ 1820.349739][T16334] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1820.472634][T16334] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1820.584187][T16334] usb 3-1: Product: syz [ 1820.639627][T16334] usb 3-1: Manufacturer: syz [ 1820.701114][T16334] usb 3-1: SerialNumber: syz [ 1820.833184][T16334] usb 3-1: config 0 descriptor?? [ 1821.133335][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1821.139872][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1822.462827][T12167] usb 3-1: USB disconnect, device number 27 [ 1822.941306][T23162] tmpfs: Unknown parameter 'quota' [ 1824.478722][T23185] siw: device registration error -23 [ 1824.736949][T23187] fuse: Unknown parameter 'fd0x0000000000000003' [ 1826.171780][T23208] tmpfs: Unknown parameter 'quota' [ 1826.541893][T23225] fuse: Unknown parameter 'fd0x0000000000000003' [ 1826.678527][T23229] siw: device registration error -23 [ 1829.076958][T23252] tmpfs: Unknown parameter 'quota' [ 1829.491203][T23267] overlayfs: missing 'lowerdir' [ 1829.907907][T23277] siw: device registration error -23 [ 1830.790793][T23288] device syzkaller0 entered promiscuous mode [ 1830.955564][T23294] tmpfs: Unknown parameter 'quota' [ 1831.953276][T23321] tipc: Enabling of bearer rejected, failed to enable media [ 1831.986054][T18354] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1832.205700][T18354] usb 7-1: Using ep0 maxpacket: 8 [ 1832.212564][T18354] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1832.237319][T18354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.249147][ T4479] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1832.305213][T18354] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1832.312305][T18354] pvrusb2: ********** [ 1832.325542][T18354] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1832.335655][T18354] pvrusb2: Important functionality might not be entirely working. [ 1832.363994][T23335] tmpfs: Unknown parameter 'quota' [ 1832.379753][T18354] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1832.406837][T18354] pvrusb2: ********** [ 1832.467718][ T4479] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.492122][ T4479] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1832.507924][ T2312] pvrusb2: Invalid write control endpoint [ 1832.525050][ T4479] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 1832.554173][ T4479] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.584308][ T4479] usb 3-1: Product: syz [ 1832.606037][ T4479] usb 3-1: Manufacturer: syz [ 1832.618570][ T4479] usb 3-1: SerialNumber: syz [ 1832.773117][T23310] pvrusb2: Invalid write control endpoint [ 1832.793286][ T2312] pvrusb2: Invalid write control endpoint [ 1832.799347][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1832.845112][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1832.858011][T16334] usb 7-1: USB disconnect, device number 26 [ 1832.880464][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1832.911376][ T2312] pvrusb2: Device being rendered inoperable [ 1832.919639][T23322] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4763'. [ 1832.932392][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1832.954803][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1833.018539][ T2312] pvrusb2: Attached sub-driver cx25840 [ 1833.024510][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1833.094370][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1833.511038][ T4479] usb 3-1: unit 4 not found! [ 1833.560127][ T4479] usb 3-1: USB disconnect, device number 28 [ 1833.843490][T23218] udevd[23218]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1834.508675][T23380] tmpfs: Unknown parameter 'quota' [ 1837.041461][T23410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4788'. [ 1837.968542][T23416] tmpfs: Unknown parameter 'quota' [ 1838.865400][T23420] device syzkaller0 entered promiscuous mode [ 1838.975900][T23427] device bond_slave_0 entered promiscuous mode [ 1838.982639][T23427] device bond_slave_1 entered promiscuous mode [ 1839.028462][T23427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1839.129462][T23432] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1839.300418][T23436] tmpfs: Unknown parameter 'quota' [ 1839.672970][T16851] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1839.738019][ T4479] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1839.786893][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1840.641270][T23462] [ 1840.643642][T23462] ====================================================== [ 1840.650666][T23462] WARNING: possible circular locking dependency detected [ 1840.657709][T23462] syzkaller #0 Not tainted [ 1840.662133][T23462] ------------------------------------------------------ [ 1840.669156][T23462] syz.5.4794/23462 is trying to acquire lock: [ 1840.675233][T23462] ffff8880624faec0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 1840.686058][T23462] [ 1840.686058][T23462] but task is already holding lock: [ 1840.693410][T23462] ffff88807a33cc58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1840.703502][T23462] [ 1840.703502][T23462] which lock already depends on the new lock. [ 1840.703502][T23462] [ 1840.713891][T23462] [ 1840.713891][T23462] the existing dependency chain (in reverse order) is: [ 1840.722889][T23462] [ 1840.722889][T23462] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1840.730445][T23462] down_read_killable+0x4c/0x340 [ 1840.735977][T23462] mmap_read_lock_killable+0x1d/0x60 [ 1840.741779][T23462] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1840.747489][T23462] do_user_addr_fault+0x2e8/0xb20 [ 1840.753113][T23462] exc_page_fault+0x60/0x100 [ 1840.758249][T23462] asm_exc_page_fault+0x22/0x30 [ 1840.763633][T23462] fault_in_readable+0x13e/0x1f0 [ 1840.769132][T23462] fault_in_iov_iter_readable+0xbf/0x2f0 [ 1840.775289][T23462] generic_perform_write+0x1f1/0x5c0 [ 1840.781128][T23462] __generic_file_write_iter+0x148/0x2a0 [ 1840.787293][T23462] generic_file_write_iter+0xab/0x2e0 [ 1840.793189][T23462] vfs_write+0x482/0x9a0 [ 1840.798023][T23462] ksys_write+0x14d/0x260 [ 1840.802871][T23462] do_syscall_64+0x4c/0xa0 [ 1840.807823][T23462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.814235][T23462] [ 1840.814235][T23462] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1840.822946][T23462] __lock_acquire+0x2c92/0x7bd0 [ 1840.828377][T23462] lock_acquire+0x1bb/0x4a0 [ 1840.833395][T23462] down_write+0x36/0x60 [ 1840.838061][T23462] process_measurement+0x3af/0x1c40 [ 1840.843776][T23462] ima_file_mmap+0xe9/0x140 [ 1840.848791][T23462] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1840.854942][T23462] do_syscall_64+0x4c/0xa0 [ 1840.859873][T23462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1840.866281][T23462] [ 1840.866281][T23462] other info that might help us debug this: [ 1840.866281][T23462] [ 1840.876495][T23462] Possible unsafe locking scenario: [ 1840.876495][T23462] [ 1840.883928][T23462] CPU0 CPU1 [ 1840.889281][T23462] ---- ---- [ 1840.894629][T23462] lock(&mm->mmap_lock); [ 1840.898950][T23462] lock(&sb->s_type->i_mutex_key#13); [ 1840.906933][T23462] lock(&mm->mmap_lock); [ 1840.913769][T23462] lock(&sb->s_type->i_mutex_key#13); [ 1840.919224][T23462] [ 1840.919224][T23462] *** DEADLOCK *** [ 1840.919224][T23462] [ 1840.927351][T23462] 1 lock held by syz.5.4794/23462: [ 1840.932449][T23462] #0: ffff88807a33cc58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1840.942899][T23462] [ 1840.942899][T23462] stack backtrace: [ 1840.948784][T23462] CPU: 0 PID: 23462 Comm: syz.5.4794 Not tainted syzkaller #0 [ 1840.956232][T23462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1840.966280][T23462] Call Trace: [ 1840.969555][T23462] [ 1840.972570][T23462] dump_stack_lvl+0x188/0x24e [ 1840.977315][T23462] ? load_image+0x410/0x410 [ 1840.981830][T23462] ? show_regs_print_info+0x12/0x12 [ 1840.987030][T23462] ? print_circular_bug+0x12b/0x1a0 [ 1840.992231][T23462] check_noncircular+0x296/0x330 [ 1840.997176][T23462] ? look_up_lock_class+0x75/0x140 [ 1841.002278][T23462] ? add_chain_block+0x9b0/0x9b0 [ 1841.007212][T23462] ? lockdep_lock+0xf1/0x1f0 [ 1841.011800][T23462] ? _find_first_zero_bit+0xd2/0x100 [ 1841.017138][T23462] __lock_acquire+0x2c92/0x7bd0 [ 1841.021992][T23462] ? __lock_acquire+0x7bd0/0x7bd0 [ 1841.027011][T23462] ? verify_lock_unused+0x140/0x140 [ 1841.032210][T23462] ? ima_match_policy+0x10d/0x21b0 [ 1841.037323][T23462] ? ima_match_policy+0x211c/0x21b0 [ 1841.042523][T23462] lock_acquire+0x1bb/0x4a0 [ 1841.047028][T23462] ? process_measurement+0x3af/0x1c40 [ 1841.052400][T23462] ? __might_sleep+0xd0/0xd0 [ 1841.057033][T23462] ? read_lock_is_recursive+0x10/0x10 [ 1841.062412][T23462] ? ima_get_action+0x71/0xa0 [ 1841.067087][T23462] down_write+0x36/0x60 [ 1841.071233][T23462] ? process_measurement+0x3af/0x1c40 [ 1841.076843][T23462] process_measurement+0x3af/0x1c40 [ 1841.082042][T23462] ? ima_file_mmap+0x140/0x140 [ 1841.086803][T23462] ? aa_file_perm+0x112/0xf00 [ 1841.091541][T23462] ? mtree_load+0x100/0xa70 [ 1841.096053][T23462] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1841.102246][T23462] ima_file_mmap+0xe9/0x140 [ 1841.106745][T23462] ? ima_file_free+0x3e0/0x3e0 [ 1841.111504][T23462] ? common_file_perm+0x171/0x1c0 [ 1841.116539][T23462] ? bpf_lsm_mmap_file+0x5/0x10 [ 1841.121459][T23462] ? security_mmap_file+0x11b/0x180 [ 1841.126719][T23462] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1841.132350][T23462] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1841.138070][T23462] ? lock_chain_count+0x20/0x20 [ 1841.143007][T23462] ? lockdep_hardirqs_on+0x94/0x140 [ 1841.148197][T23462] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1841.153912][T23462] do_syscall_64+0x4c/0xa0 [ 1841.158325][T23462] ? clear_bhb_loop+0x60/0xb0 [ 1841.163000][T23462] ? clear_bhb_loop+0x60/0xb0 [ 1841.167675][T23462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1841.173593][T23462] RIP: 0033:0x7f1672b9de59 [ 1841.178062][T23462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.197689][T23462] RSP: 002b:00007f1673a8f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1841.206148][T23462] RAX: ffffffffffffffda RBX: 00007f1672e26180 RCX: 00007f1672b9de59 [ 1841.214117][T23462] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 1841.222083][T23462] RBP: 00007f1672c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1841.230050][T23462] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 1841.238019][T23462] R13: 00007f1672e26218 R14: 00007f1672e26180 R15: 00007fff5cc650c8 [ 1841.245992][T23462] [ 1841.287804][ T4479] usb 2-1: Using ep0 maxpacket: 16 [ 1841.294785][T16851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.306814][ T4479] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 1841.343907][T16851] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.360322][ T4479] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1841.370664][T16851] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1841.387187][ T4479] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1841.398769][ T4479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.408966][T16851] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1841.421339][ T4479] usb 2-1: config 0 descriptor?? [ 1841.426396][T16851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.437635][T16851] usb 7-1: config 0 descriptor?? [ 1841.657856][ T4479] usbhid 2-1:0.0: can't add hid device: -71 [ 1841.666905][ T4479] usbhid: probe of 2-1:0.0 failed with error -71 [ 1841.681602][ T4479] usb 2-1: USB disconnect, device number 30 [ 1841.884833][T16851] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 1841.894913][T16851] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1842.244983][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.253912][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.319832][ T4479] usb 7-1: USB disconnect, device number 27 [ 1842.322106][T23438] usb 7-1: string descriptor 0 read error: -71