last executing test programs: 17.871568368s ago: executing program 4 (id=277): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0600000024400000080000000800000000000000a10ed20224793331384de14023b569f2a71208d7c43bece5d2e9b4ee13db074ed8e946036ac8dc323405b68d77286dc8b9740d9be774840d34768d81f0e30a96d72e1937d3105e9c333004deee658b8c7473d541924570a60ab0db2c01c7116f6e98e215581345bd9410c3fd73ec7773475e610e38bcab3946a866459b0972d24703b914ca9843a51d63e36045bbdc4263df144c133b5439abb3519a6f608f89be56efb3cf81a5cb2ca9808eb0aba96b29dcdcce65933d5867db2a17fb692022c787ca836b777bc95619f6378470de36b9295b8d89ec8bf37a96", @ANYRES8=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES32, @ANYRES8], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000007000000b704000001000000850000001500000018010000716c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@private0, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xe8) mount$binder(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', &(0x7f0000000200), 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB='stats=global,max=00000000000000000003,mix=00000000000000000000,stats=global,max=00000000000000000000,fowner=', @ANYRES64, @ANYRES32=r1]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0xa, 0x42) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000140)={&(0x7f0000000000)=[{0x47, 0x0, 0xd, &(0x7f00000001c0)="536dad24e3f78f3dbfc2c3caad"}], 0x1}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000ffffffffffffff7f00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r6], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0900000004000000e27f000001000000000000000a86b009a46936520478de0f56afe853a93976ceec2bd6ce6d3c6273171d82af30e3b86194aadc173e7d375b6eb1b712355c83f35060f80b7061e042552dc23da62c60d102e2605059d3ad4e482d5652764dbf743fd2c787203020ddf7ff2e3ffaa840611cc87fc485724ae89d85ac69205068b77449ca8ef69cd477976475f0e3ab97d5a9d370db14aa8e", @ANYRES16=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=r7], 0x50) chdir(&(0x7f0000000140)='./bus\x00') r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000808000b40000000000900010073797a30000000002c000480280001800e000100636f6e6e6c696d6974000000140002800800014000000003080002403dff9897140000001100010000000000000000000000000a3d3ded6cf4fda18a4b3f0b"], 0xc8}}, 0x4008800) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect(0x6, 0x24, &(0x7f0000000d40)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r2, @ANYRESOCT, @ANYBLOB="af2d20cd715765e185d53306f4c719afa4c8296ecf34a146fe739c13fe16a329c5c68744a8f09457761fdb46944fee674a9f5011172d253d4badbf85bbc53ee5f1debb554f3227fda6fbab741ab4a07a8d965a965b4db527d03ad2b8b492230700b4425a8ec7240034f726ca2147493457c5d4a16c9b0da966cd2030d5b0b014dd5c365feea248f1e3c9d530bf30905e39fc36d673ffb18a854460da711d5886728375f6168d167de41f6423f1c51b538587ffe33f29f737cb9c5962158b3c1b56b9acc18ca08675919df8186ba8f72367cad6ce538d1affa86926b933c07e066000173cf7de1c3b", @ANYRESHEX=0x0], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 13.789496763s ago: executing program 4 (id=286): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x80000) read$rfkill(r2, &(0x7f00000000c0), 0x8) syz_usb_connect(0x2, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003a12591405e043f0490fc010203010902380001010090050904000004441b5c0009050000000000000009050402000000000009058802"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x337706, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1e) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4) fanotify_mark(0xffffffffffffffff, 0x22, 0x800101b, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb10485f3f4bafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x5, 0x1}, 0x0, 0x0, &(0x7f00000002c0)="3eb78449af1527ce98e39814cdc53e88edbebf4ca89ef1dd0b7e", 0x1a, 0x8, 0xffffffff, 0x0, 0x271d4000, 0x8001, &(0x7f0000000180)}) 13.678556988s ago: executing program 2 (id=288): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) eventfd2(0x8, 0x80001) epoll_create(0x10000) socket$kcm(0xa, 0x2, 0x73) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000040010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x4000) 13.515395859s ago: executing program 0 (id=290): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0x50) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "1865b1d2aef972b7f0337e07c42becb8fae07397fecbe4ef34075bc45b598132dceb2ad0082cfc3f3a226b911437e5414d67b7ff9e53e49d2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab94718a2ba6cd70a5249a21df3bd2000939592f9facf1ea09b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b585402f096aea1f7d31247a65805cb19bc874667"}}, {0x7a, &(0x7f0000000500)=@string={0x7a, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af1404183"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 13.390177187s ago: executing program 2 (id=291): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0x50) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109028600030109000702010209240323000303030b052405060109040100000102000009968095f1e9cecb8b04010101010200000724018008021009050109ff03ffc803072501410405000904020000010200000904020101010200000b24020106010b0100000007240101c0020009058209500005080f07250182fe070000000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "1865b1d2aef972b7f0337e07c42becb8fae07397fecbe4ef34075bc45b598132dceb2ad0082cfc3f3a226b911437e5414d67b7ff9e53e49d2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab94718a2ba6cd70a5249a21df3bd2000939592f9facf1ea09b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b585402f096aea1f7d31247a65805cb19bc874667"}}, {0x7d, &(0x7f0000000500)=@string={0x7d, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af14041833aa014"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 10.502916351s ago: executing program 4 (id=296): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000400)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYRES64=r1], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)={0x40, 0x15, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r2, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) 10.118635263s ago: executing program 3 (id=298): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x18420) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xac, 0xac, 0x7, [@union={0x0, 0x8, 0x0, 0x5, 0x1, 0x5, [{0x8, 0x2, 0x7}, {0x6, 0x1, 0xffffffff}, {0x0, 0x0, 0x7}, {0xb, 0x5, 0x1}, {0xf, 0x1, 0x4}, {0x10, 0x2, 0x2}, {0xc, 0x5, 0xe}, {0xa, 0x0, 0x6}]}, @var={0x5, 0x0, 0x0, 0xe, 0x3}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0xb, 0xea01}, {0x3, 0x3}, {0xf, 0x81}]}, @fwd={0x3}]}, {0x0, [0x0, 0x2ad258aabd54301b, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000001c0)=""/125, 0xcb, 0x7d, 0x1}, 0x28) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffffffff, '\x00', 0x0, r2, 0x0, 0x1, 0x4}, 0x50) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000340)={r4, 0xe}) r5 = open(&(0x7f0000000380)='./file0\x00', 0x2402, 0x14a) r6 = syz_io_uring_setup(0x49ba, &(0x7f00000003c0)={0x0, 0x4262, 0x2, 0x3, 0x1ae, 0x0, r5}, &(0x7f0000000440), &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x8, 0x6, 0x3c, @remote, @mcast1, 0x40, 0x8, 0x2, 0xe}}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000680)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x4e24, 0x3ff, 0x4e22, 0x0, 0xa, 0x20, 0x20, 0x89, r7, r8}, {0x3, 0x3, 0x9, 0x8, 0x9, 0x9, 0x0, 0x6}, {0xffffffffffffffff, 0x7, 0x1}, 0x9ee, 0x0, 0x2, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d6, 0x2b}, 0xa, @in=@multicast2, 0x3504, 0x1, 0x2, 0x1, 0x9dce, 0x1c0000, 0xf}}, 0xe8) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000880)={r5}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r5}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xe, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x19c7c65b, 0x0, 0x0, 0x0, 0x5}, [@exit, @map_idx={0x18, 0x9}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}, @ldst={0x1, 0x0, 0x0, 0x9, 0xb, 0x18, 0x1}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe}, @alu={0x7, 0x1, 0x0, 0x6, 0x8, 0xffffffffffffffc0, 0xffffffffffffffff}, @alu={0x4, 0x1, 0x9, 0x5, 0x2, 0x2, 0x8}, @exit]}, &(0x7f0000000840)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', r7, 0x25, r9, 0x8, &(0x7f00000008c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x0, 0x6, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a40)=[r10, r3, r5, r1, r11, 0x1, r1, r3, r5], &(0x7f0000000a80)=[{0x0, 0x1, 0xa, 0x2}, {0x3, 0x3, 0xc, 0x7}], 0x10, 0xb565}, 0x94) setsockopt$CAN_RAW_JOIN_FILTERS(r9, 0x65, 0x6, &(0x7f0000000b80), 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000bc0), &(0x7f0000000c00)=0xe) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r5, 0x84, 0x74, &(0x7f0000000c40)=""/96, &(0x7f0000000cc0)=0x60) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r13, 0x600, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000004) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000f80)={&(0x7f0000000e80), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x78, 0x1, 0x1, 0x401, 0x0, 0x0, {0x3}, [@CTA_LABELS_MASK={0x10, 0x17, [0x62c4, 0x7, 0x8000]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_LABELS_MASK={0x28, 0x17, [0x7fffffff, 0x13e, 0x8, 0x4, 0x800f, 0x6, 0xff, 0x200, 0x1]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x99}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'ip6_vti0\x00', &(0x7f0000000fc0)={'ip6_vti0\x00', r7, 0x2f, 0x5, 0x6, 0xffffffff, 0x48, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8, 0x20, 0x4, 0x300000}}) io_setup(0x4, &(0x7f0000001080)=0x0) io_submit(r16, 0x7, &(0x7f0000001540)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x8, 0xcc, r6, &(0x7f00000010c0)="e230dcc9f16a65ca97039190864cbfc8fb5b9a3c8bcb6ccb9f260e00", 0x1c, 0x80, 0x0, 0x2}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000001140)="0e9e0376ce6391a8161dd119b9ee032ec5d385755d0f76fbff18fb8e99de2f86521e405a2b5b704d9a", 0x29, 0x8}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x7, 0x2, r12, &(0x7f00000011c0)="f99d01d30feaa67b086472a3821913af7b96a29e7819c9fc9b1197aabd01e7e657b0a4b4e539db14939ae7325c11e8240d9c06f3e56d1d30a5a750912bbb8ae67c84628edb077906a59b74c013f6566a9a14681e2766d33501c9", 0x5a, 0x6bf, 0x0, 0x3, r5}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x7, r11, &(0x7f0000001280)="ab0199aca19bf5eada893360d408f7cab487260cae10aa4cff290e9588de36849b595a1a00d61a132723082b01e17f2e98a4ff91bb1a04c9d6e874aa42982720cd58e8c28cef51208a0f8b5e15702e0dacef6f30bcc5a3318973e090b4c2deb09fd20f67c0f1115819c637885f232a18", 0x70, 0x0, 0x0, 0x2, r11}, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x1, 0x100, r11, &(0x7f0000001340)="773f4eb526618fb7fe563fc37651ea02259b089d225140244da692bf2a60f3117050efe9ab44bde07ded30fcd190cbe69537288c35b423dff83b52fcf4ae3ba47a953dba5e9b59e4bc32c3c1fc916be60e99e31ae7ad6f3a9be093bc4a51a09ce0291fe965eeb6c51d", 0x69, 0x80000001, 0x0, 0x7, r9}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000001400)="b8a71a17b0bee88a8dab557c56fd3c7f2e141ae87fd37458952f90242e9cce903bc80ab2efec42fc23f6", 0x2a, 0x1, 0x0, 0x0, r5}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x6, 0x4, r0, &(0x7f0000001480)="0443763e87907d739cae552a517393b4082749b8c8cb18194d4f72926f3e096579e80daa5d688561a8a030c1fd6fddb8ec59535c4fc6d7f42c69c69e6f08e5af91d33923e07224c7df9302a1a893747f8f29d7a190f76bcce03f60c7f077d9043e3f8b6b79d92ac4825c171fd92da815", 0x70, 0x0, 0x0, 0x0, r5}]) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001580)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x9, '\x00', r15, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) sendmsg$NFT_MSG_GETGEN(r9, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}}, 0x20000001) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000001700)={@private=0xa010101, @local, 0xffffffffffffffff, "76a3d2b60662ea47d307df55462ef89f7d3c894527b362d06feb0d9b120bb3ce", 0xb, 0x10000, 0x9780}, 0x3c) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@bloom_filter={0x1e, 0x6, 0x40, 0x5, 0x2128, 0x1, 0x1ff, '\x00', r15, r9, 0x1, 0x0, 0x1, 0x7}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x7204, 0x0, r17, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) 10.007089568s ago: executing program 0 (id=299): mkdir(0x0, 0x0) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="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", 0xfc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*', 0x6e93ebbbcc0884f2, 0x19e, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_getsetattr(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x97, 0x406, 0x4, 0xffffffff, 0x25}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xc4, r5, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000040)={0x1, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)}) r10 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mq_notify(r10, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) 9.051613226s ago: executing program 2 (id=301): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) 8.982689705s ago: executing program 3 (id=302): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x40900) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 8.77722536s ago: executing program 3 (id=304): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x4000) close(r5) r6 = syz_usb_connect(0x4, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB="d01bfe11e420d81700f748d8cbc03e9d50bec23540c073c1a3f8cbd8a5a703e39551252ed2e4abc4fbe6ee6072fe3e1340929a1c6f3a03f324da71061ca99ce497596e5e147ceec0e81afdedbd7d95fdce3b3b28fb2a0514574fe167a2f68b3ce2bbbff396b2bdc1ae5892b05190188c9fbbd562311997c978257690cd3f6c9783d2e359ef94ad38672d47282f0d9b17de2e6b895e4a81a1115243ebc6e50e35a3df4e2ed52c5c4c9c3add53b7bf5e0bc450b84c42c638759e61771bda5583f0035e065b39ad630d94d19c29b6", @ANYRESHEX], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) unshare(0x20000400) syz_usb_control_io(r6, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f0000000080)) 7.990877436s ago: executing program 0 (id=305): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xf}, {0xb, 0x5}, {0x1, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_setup(0x987, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000300000002"], 0x0, 0x4e}, 0x20) r2 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f0000000300)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "90b26dcb343403dbcb229d7217e0218ac5f2802f48501336241b5a13aa6dcad41b399eba92a2906a8632153f2dd6621c88461c5be68e96bfa04e540ff462fc35", 0x3a}, 0x48, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$search(0xa, r3, &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000200)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000340)=0xe) writev(r6, &(0x7f000009de80)=[{&(0x7f0000002a80)="92601b126cd916238152311e05ee79b7129fcda028997dd43917ea01b906000000286d299a104d2d4a20d1fadfecd7687bfd3c54f8c62189c138c5c5ecd3ce6f2f1cdb482c4e8d547ca98c08e87f592e109e441fab677da071e7683f562eddb2888bee5e65daac845793ebfa0ecbc95c8a44ec908110dd9a9ae9b16301f3e59afcf93da032f2fde9dd86f1dafbb1e68e56611af12fa1380f73d38aeddbd74c68c29bfe35caf5328e85950dd5973469df4c000000", 0xb4}, {0x0}], 0x2) 7.81745915s ago: executing program 1 (id=306): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getitimer(0x1, &(0x7f00000001c0)) 6.124331709s ago: executing program 0 (id=307): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000feffffff00000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000037000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c000a1b37"], 0xec}}, 0x0) 5.950895927s ago: executing program 1 (id=308): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="00010000000000000000000000000000000000000000000000000000c9fb81b901adacda30827985178956fc32eef5127ffb07511a9b0e6f6543b055766331c3f434f227eaa24fb8768facd31c80a2a2443c6c521f1bf83e123abc532a84f3c1195a3ca76f3d500e34d8315aafe628275243b9aba5a9a3d2868214328418a2c24efca05e3fda347334"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/36, &(0x7f0000000200)=0x24) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000480), 0xa6024, &(0x7f0000000500)=ANY=[]) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4f23, 0x40000000, @local, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x20000001, &(0x7f0000000200)={0xa, 0x4e20, 0x20000, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a30000000"], 0x124}}, 0x0) 5.897542247s ago: executing program 0 (id=309): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, 0x0) r1 = syz_io_uring_setup(0x5ae3, &(0x7f00000000c0)={0x0, 0x5b4b, 0x80, 0x2, 0x34d}, &(0x7f0000000140), &(0x7f0000000300)) r2 = syz_io_uring_setup(0x2ec, &(0x7f0000000980)={0x0, 0x45885, 0x2000, 0x0, 0x8, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d480e8b089b3f350068090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e8040000005802b77f07227227b7fa67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e9871540000000000004ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e4843e2808d4743b95bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c6f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20e8911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab9d6203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edcad74b221cfec48000000000000000d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea50000000000000068987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c10900df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d8008d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c46bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78bb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bf340b17cfcfd9c52c9711937f79abb1a124f121fc65483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4f01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8650000878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95a498b562d71565f924779ca1f731b3346ff177050373d79ff7bc1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f79a598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015a08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b686081b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24ae918423922e4e0167584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f13a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307f561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe40}}, 0x1047) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a010100000000000000000200fffc0900010073797a300000000040000000030a010110b1c26c00000000020000000900010073797a30000006000900030073797a3200000000140004800800014000000000080002400000000014000000020a05000000000000000000000000001400000011000100000000"], 0x9c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r7, 0x0, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000040), 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.897197587s ago: executing program 2 (id=310): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="a1831c39f47a3d946469b159f64d0ba5", 0x10}], 0x1}], 0x1, 0x2004001) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) syz_usb_connect(0x5, 0x3f, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000067d06f20070a64006516fffff80109022d00210000000009046e00036f333a0009ffffffff9c00060f09050c000280052409050b03"], 0x0) 5.582119826s ago: executing program 3 (id=311): socket$inet6_udplite(0xa, 0x2, 0x88) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x103, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) 5.108316286s ago: executing program 1 (id=312): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109028600030109000702010209240323000303030b052405060109040100000102000009968095f1e9cecb8b04010101010200000724018008021009050109ff03ffc803072501410405000904020000010200000904020101010200000b24020106010b0100000007240101c0020009058209500005080f07250182fe070000000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "1865b1d2aef972b7f0337e07c42becb8fae07397fecbe4ef34075bc45b598132dceb2ad0082cfc3f3a226b911437e5414d67b7ff9e53e49d2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab94718a2ba6cd70a5249a21df3bd2000939592f9facf1ea09b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b585402f096aea1f7d31247a65805cb19bc874667"}}, {0x7d, &(0x7f0000000500)=@string={0x7d, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af14041833aa014"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 3.7294771s ago: executing program 3 (id=313): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x73}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() syz_open_dev$usbfs(&(0x7f00000001c0), 0x8, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xf, [0x2000f68f, 0x8, 0x9, 0x10001ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x203, 0x3d, 0x5e, 0x1000, 0x1, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x80000000, 0x1, 0xe9c4, 0xcd8, 0x6c, 0x6, 0x7, 0xd, 0x7, 0x81, 0x6, 0x6, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x800, 0xfffff801, 0x2b, 0xa, 0x0, 0x6, 0x8, 0x5, 0x0, 0x6, 0x8, 0x23, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x6000000, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x3ff, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x9, 0x80, 0x4, 0x2, 0x0, 0xd, 0x6, 0x3, 0x8, 0x10, 0x1, 0xfffffffc, 0x9, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x9, 0x4, 0x1, 0x9, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x401, 0x5, 0x7fff, 0x8, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0x50) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x11, &(0x7f0000000180)=@string={0x11, 0x3, "5be53b6b34edd09e786ae12e1303f7"}}, {0x1c, &(0x7f00000004c0)=@string={0x1c, 0x3, "3eef7959e340e424949e622d73cbc006bd00d94e5e9fe39fc7a2"}}, {0x5d, &(0x7f0000000440)=@string={0x5d, 0x3, "8254e8c6149498e77bc23809858e7c692a5bc9028b6d60992ec930d911cef6576e356b21ceed6783006f72bc7f069c873503466d0a8ca01c04ababc048ce1da80d44e6cbfb4d80821b1afa2c9d517eed973e0aecc7526782e6912e"}}, {0xc3, &(0x7f0000000800)=@string={0xc3, 0x3, "1865b1d2aef972b7f0337e07c42becb8fae07397fecbe4ef34075bc45b598132dceb2ad0082cfc3f3a226b911437e5414d67b7ff9e53e49d2b304269ac9be3c4d887f4e2fc82eeb5c8a48152055a9058b048eab94718a2ba6cd70a5249a21df3bd2000939592f9facf1ea09b0000000000000000000000f900007148172e3a43ddc0d0fb84608ba3cfeaa0570ac850af2f1837c99b9d4a03548b6263261aedcde3305e90158f44ebb02d84cd3b585402f096aea1f7d31247a65805cb19bc874667"}}, {0x7a, &(0x7f0000000500)=@string={0x7a, 0x3, "d46fd392fe0ed752e675cce0f8d96bffb938f047f5758b6bb907bb1cc438c94f9022c8bdebed309e8d30e7b79e941c7f54a33cc7da62733b9b60a516f0c27272fb11da0caabbba0cedb52e1112f530441d92abb890c09618446579c68d14087143a5ff350bb1a3cbdb8cb80c6cd43cb292a6c45af1404183"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}]}) 3.728993035s ago: executing program 4 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc4) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16=r4], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$nl_generic(r4, 0x0, 0x20004000) (async) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='k', 0x1, 0xfffffffffffffffb) keyctl$setperm(0x5, r6, 0x10) (async) keyctl$unlink(0x9, r6, 0xfffffffffffffffd) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x0, @broadcast, 'ip6gretap0\x00'}}, 0x1e) (async) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, 0x0, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) (async) r10 = socket(0x8, 0x1, 0x0) write(r10, &(0x7f0000000400)="24d327b34de7cb7b34bbf6b66a5ce04737bc43f8b875027debf4e7b266fe2177cd31db8b3ddcf815db82c92ab968beec2de50d602ae730b475a3952416b0dbfff93e9a265257e10b62ff933aef4ac0c51e57325d9149934e15a7616cd16fd0d23b60f421cb691bd7e6ae960497f5bb264cf7f8c1773cf4430800000000000000000000000000000020000000", 0x8c) (async) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000280)) 2.201379936s ago: executing program 0 (id=315): fsopen(0x0, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0xffffffffffffff51, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000300000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001581c2908570b2a85396d0102030109021b00010001000b0904c8020103010203090504"], 0x0) 2.080197467s ago: executing program 4 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) chroot(&(0x7f00000007c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100010027bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="c000000000140000140042"], 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.829761599s ago: executing program 4 (id=317): socket$inet(0xa, 0x801, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_create(0x7) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000000c0)=0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r5, 0x80184151, &(0x7f0000000340)={0x0, 0x0}) r6 = fanotify_init(0x40, 0x0) write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x001\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00'], 0x20) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r7, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x5, 0x1, [0x7fff]}, 0xa) 1.328188394s ago: executing program 2 (id=318): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) getitimer(0x1, &(0x7f00000001c0)) 1.188582621s ago: executing program 1 (id=319): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000980)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000000000feffffff00000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c0011000000003c000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000000000000fc0200000000000000000000000000003c000a1b37"], 0xec}}, 0x0) 933.3781ms ago: executing program 1 (id=320): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000540)=ANY=[], 0x30) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x32, &(0x7f0000000540)={@random="e904a200", @link_local, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe020, 0x0, 0x11, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x6, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) (async) socket(0x18, 0x2, 0x0) (async) r3 = semget(0x0, 0x1, 0x289) setuid(0xee01) (async) semctl$IPC_RMID(r3, 0x0, 0x0) (async) semctl$GETZCNT(r3, 0x0, 0x7, 0x0) (async) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) (async) sendto$inet(r2, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) (async) recvmmsg(r2, 0x0, 0x0, 0x40010040, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="c9f91400", @ANYRES16=r5, @ANYBLOB="07ef28bd7000fbdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) 859.62347ms ago: executing program 1 (id=321): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0xc048aec8, &(0x7f00000005c0)={0xffffffff}) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = gettid() sched_setscheduler(r5, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) clock_gettime(0x2, &(0x7f00000003c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="fdaf24fd7000000000000e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020025bd7000fcdbdf651000000008003a000500000008003a00050000008fe5f38a694af23fc427f28995af746e1f4faf4c4ddd6edbfa9bf9b453674b3d00808a1d9a81ac4732cc74f99d6705c69cab4662b1afd93718a7c67dee645dac8367f333662f2ecd2a8f8cc53bd7f3403d2fb7244cb58a5d24bd213c0f7dfc6bf26b25342c2e0382f6c0698bdb2162f302bac0b8ff9486e0776deb3523"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) epoll_create(0x3ff) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f0000000740)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x173}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4081, 0x564}, {&(0x7f0000000400)=""/106, 0x2f}, {&(0x7f00000006c0)=""/66, 0x12}, {&(0x7f0000000200)=""/77, 0x65f}, {&(0x7f0000000540)=""/166, 0x4a}, {&(0x7f0000000100)=""/10, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}, 0x1}], 0x4000000000003b4, 0x12022, &(0x7f0000000080)={0x77359400}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000380)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x8}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r9, 0x40047440, &(0x7f0000000240)=0x10001) write(r9, &(0x7f0000000280)="4591", 0x2) 82.717258ms ago: executing program 3 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x300, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x946, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd(0x1008c66) r2 = gettid() sched_setscheduler(r2, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}, 0x2}}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/392, @ANYRES16, @ANYBLOB="796104000000000000007e000000"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$set_timeout(0xf, 0x0, 0x1) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd3000000000000000000000014000780080011400000000005001500000000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e6574"], 0x64}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r1, 0x25, 0x4, @val=@iter={0x0}}, 0x20) 0s ago: executing program 2 (id=323): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000600)={@private1, 0x68}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)=0x3) r3 = socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000340)={0x1d, r9, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. [ 83.571028][ T5824] cgroup: Unknown subsys name 'net' [ 83.706716][ T5824] cgroup: Unknown subsys name 'cpuset' [ 83.716749][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.443676][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.060710][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.071151][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.080249][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.087867][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.095217][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.112631][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.121300][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.132967][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.154621][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.170837][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.179045][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.189131][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.196641][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.204485][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.207813][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.213479][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.219588][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.226867][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.244389][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.252420][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.307136][ T5155] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.317435][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.325344][ T5155] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.345258][ T5155] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.362441][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.951334][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 91.048509][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 91.114580][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 91.152410][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.359224][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.366782][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.375328][ T5841] bridge_slave_0: entered allmulticast mode [ 91.382814][ T5841] bridge_slave_0: entered promiscuous mode [ 91.421130][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.428388][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.435626][ T5848] bridge_slave_0: entered allmulticast mode [ 91.443124][ T5848] bridge_slave_0: entered promiscuous mode [ 91.451334][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.458566][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.465987][ T5841] bridge_slave_1: entered allmulticast mode [ 91.473476][ T5841] bridge_slave_1: entered promiscuous mode [ 91.480925][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 91.512510][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.519673][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.527251][ T5848] bridge_slave_1: entered allmulticast mode [ 91.534523][ T5848] bridge_slave_1: entered promiscuous mode [ 91.619115][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.645354][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.655451][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.663280][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.670474][ T5835] bridge_slave_0: entered allmulticast mode [ 91.678038][ T5835] bridge_slave_0: entered promiscuous mode [ 91.718509][ T10] cfg80211: failed to load regulatory.db [ 91.744997][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.752537][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.759795][ T5835] bridge_slave_1: entered allmulticast mode [ 91.768276][ T5835] bridge_slave_1: entered promiscuous mode [ 91.790763][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.825269][ T5841] team0: Port device team_slave_0 added [ 91.833749][ T5841] team0: Port device team_slave_1 added [ 91.865448][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.873562][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.880790][ T5838] bridge_slave_0: entered allmulticast mode [ 91.888222][ T5838] bridge_slave_0: entered promiscuous mode [ 91.898314][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.934763][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.947507][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.957197][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.964586][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.971788][ T5838] bridge_slave_1: entered allmulticast mode [ 91.979793][ T5838] bridge_slave_1: entered promiscuous mode [ 92.086153][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.093252][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.119541][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.161674][ T5848] team0: Port device team_slave_0 added [ 92.182042][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.189122][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.215226][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.229381][ T5835] team0: Port device team_slave_0 added [ 92.241532][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.254485][ T5848] team0: Port device team_slave_1 added [ 92.260626][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.268131][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.275830][ T5851] bridge_slave_0: entered allmulticast mode [ 92.283827][ T5851] bridge_slave_0: entered promiscuous mode [ 92.300406][ T5835] team0: Port device team_slave_1 added [ 92.321966][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.353123][ T51] Bluetooth: hci0: command tx timeout [ 92.362728][ T51] Bluetooth: hci2: command tx timeout [ 92.368423][ T51] Bluetooth: hci3: command tx timeout [ 92.374426][ T5155] Bluetooth: hci1: command tx timeout [ 92.386060][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.393388][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.400539][ T5851] bridge_slave_1: entered allmulticast mode [ 92.408194][ T5851] bridge_slave_1: entered promiscuous mode [ 92.432403][ T51] Bluetooth: hci4: command tx timeout [ 92.458630][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.471882][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.499539][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.556884][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.563968][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.590170][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.608162][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.617605][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.644017][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.658347][ T5838] team0: Port device team_slave_0 added [ 92.667413][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.674640][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.701159][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.717073][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.732120][ T5841] hsr_slave_0: entered promiscuous mode [ 92.739033][ T5841] hsr_slave_1: entered promiscuous mode [ 92.757425][ T5838] team0: Port device team_slave_1 added [ 92.772994][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.888251][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.895626][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.921801][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.934715][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.941710][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.967780][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.046435][ T5851] team0: Port device team_slave_0 added [ 93.056911][ T5851] team0: Port device team_slave_1 added [ 93.067714][ T5835] hsr_slave_0: entered promiscuous mode [ 93.074785][ T5835] hsr_slave_1: entered promiscuous mode [ 93.080983][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.088936][ T5835] Cannot create hsr debugfs directory [ 93.123721][ T5848] hsr_slave_0: entered promiscuous mode [ 93.130166][ T5848] hsr_slave_1: entered promiscuous mode [ 93.136651][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.144289][ T5848] Cannot create hsr debugfs directory [ 93.243295][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.250390][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.276876][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.329148][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.336228][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.362309][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.393811][ T5838] hsr_slave_0: entered promiscuous mode [ 93.400328][ T5838] hsr_slave_1: entered promiscuous mode [ 93.407117][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.415226][ T5838] Cannot create hsr debugfs directory [ 93.573367][ T5851] hsr_slave_0: entered promiscuous mode [ 93.579775][ T5851] hsr_slave_1: entered promiscuous mode [ 93.586738][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.594410][ T5851] Cannot create hsr debugfs directory [ 93.912571][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.927083][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.965693][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.000137][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.067371][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.087983][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.100806][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.112839][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.193976][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.214901][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.236898][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.250050][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.344794][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.370478][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.383112][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.395859][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.429117][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.435838][ T51] Bluetooth: hci2: command tx timeout [ 94.443169][ T5155] Bluetooth: hci1: command tx timeout [ 94.443178][ T5847] Bluetooth: hci0: command tx timeout [ 94.448655][ T51] Bluetooth: hci3: command tx timeout [ 94.513392][ T51] Bluetooth: hci4: command tx timeout [ 94.546492][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.557740][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.571824][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.602035][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.609526][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.645444][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.671207][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.678508][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.712200][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.719396][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.737198][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.770447][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.778162][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.794460][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.801622][ T3800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.933978][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.008851][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.056453][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.063658][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.108408][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.137441][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.144681][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.226042][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.256229][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.315479][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.350748][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.358028][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.416711][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.487748][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.494976][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.506565][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.513729][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.528620][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.535833][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.690302][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.751070][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.781344][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.934336][ T5835] veth0_vlan: entered promiscuous mode [ 96.019633][ T5835] veth1_vlan: entered promiscuous mode [ 96.034866][ T5848] veth0_vlan: entered promiscuous mode [ 96.098205][ T5848] veth1_vlan: entered promiscuous mode [ 96.189606][ T5835] veth0_macvtap: entered promiscuous mode [ 96.229158][ T5835] veth1_macvtap: entered promiscuous mode [ 96.257540][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.278199][ T5848] veth0_macvtap: entered promiscuous mode [ 96.304429][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.321240][ T5848] veth1_macvtap: entered promiscuous mode [ 96.357307][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.409354][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.418672][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.434213][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.446574][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.465545][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.478037][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.505796][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.513259][ T51] Bluetooth: hci0: command tx timeout [ 96.524173][ T51] Bluetooth: hci3: command tx timeout [ 96.524240][ T5847] Bluetooth: hci1: command tx timeout [ 96.529600][ T51] Bluetooth: hci2: command tx timeout [ 96.543817][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.552849][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.561580][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.570539][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.592763][ T51] Bluetooth: hci4: command tx timeout [ 96.710933][ T5841] veth0_vlan: entered promiscuous mode [ 96.772794][ T5838] veth0_vlan: entered promiscuous mode [ 96.780532][ T5841] veth1_vlan: entered promiscuous mode [ 96.803685][ T5851] veth0_vlan: entered promiscuous mode [ 96.843442][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.851871][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.860017][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.879803][ T5838] veth1_vlan: entered promiscuous mode [ 96.886577][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.907595][ T5851] veth1_vlan: entered promiscuous mode [ 96.918754][ T5841] veth0_macvtap: entered promiscuous mode [ 96.980918][ T5841] veth1_macvtap: entered promiscuous mode [ 96.995409][ T4534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.007921][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.028175][ T1863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.037989][ T1863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.056686][ T5851] veth0_macvtap: entered promiscuous mode [ 97.092147][ T5838] veth0_macvtap: entered promiscuous mode [ 97.114697][ T5838] veth1_macvtap: entered promiscuous mode [ 97.143223][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.161627][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.183668][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.205116][ T5851] veth1_macvtap: entered promiscuous mode [ 97.227718][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.252342][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.261183][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.283348][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.324453][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.401036][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.448749][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.660753][ T5838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.681708][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.874727][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.916080][ T5962] syz.2.6 uses obsolete (PF_INET,SOCK_PACKET) [ 97.922387][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.932608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.097201][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.158416][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.169727][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.178907][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.187904][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.212444][ T5939] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 98.276159][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.289490][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.379515][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.389059][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.428685][ T4534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.432508][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 98.449866][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.461794][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.475602][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.505116][ T1863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.508011][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.523013][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.531567][ T5939] usb 3-1: Product: syz [ 98.537065][ T5939] usb 3-1: Manufacturer: syz [ 98.543124][ T5939] usb 3-1: SerialNumber: syz [ 98.544391][ T1863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.594931][ T5155] Bluetooth: hci3: command tx timeout [ 98.600849][ T51] Bluetooth: hci1: command tx timeout [ 98.608457][ T5155] Bluetooth: hci2: command tx timeout [ 98.608469][ T5847] Bluetooth: hci0: command tx timeout [ 98.674766][ T5155] Bluetooth: hci4: command tx timeout [ 98.710902][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.729227][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.740491][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.777007][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.784506][ T5939] usb 3-1: 0:2 : does not exist [ 98.826034][ T5939] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 98.932066][ T5939] usb 3-1: USB disconnect, device number 2 [ 99.605926][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.519309][ T5924] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 100.678235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.876214][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.385451][ T5996] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 101.406621][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 101.466079][ T5924] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 101.513068][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.555581][ T5939] IPVS: starting estimator thread 0... [ 101.555581][ T5924] usb 3-1: config 0 descriptor?? [ 101.556466][ T5979] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.579549][ T5999] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 101.702479][ T6000] IPVS: using max 26 ests per chain, 62400 per kthread [ 101.962525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 102.032671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.110854][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 102.392374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.392422][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.392460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.392499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.392537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.392575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.723908][ T5924] glorious 0003:22D4:1503.0001: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.2-1/input0 [ 103.057172][ T5924] usb 3-1: USB disconnect, device number 3 [ 103.788864][ T6025] fido_id[6025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 104.167980][ T6036] ======================================================= [ 104.167980][ T6036] WARNING: The mand mount option has been deprecated and [ 104.167980][ T6036] and is ignored by this kernel. Remove the mand [ 104.167980][ T6036] option from the mount to silence this warning. [ 104.167980][ T6036] ======================================================= [ 104.336823][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.592482][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.998119][ T5924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.164084][ T5911] usb 3-1: New USB device found, idVendor=041e, idProduct=4053, bcdDevice=e6.56 [ 106.202527][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 106.232887][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.325810][ T5911] usb 3-1: config 0 descriptor?? [ 106.336334][ T5911] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 106.350612][ T5924] usb 4-1: no configurations [ 106.359963][ T5924] usb 4-1: can't read configurations, error -22 [ 106.596277][ T6043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.613640][ T6043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.643599][ T5924] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.904311][ T5911] gspca_zc3xx: reg_w_i err -110 [ 106.912827][ T5911] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 106.946516][ T5852] usb 3-1: USB disconnect, device number 4 [ 107.112538][ T5924] usb 4-1: Using ep0 maxpacket: 32 [ 107.154401][ T5924] usb 4-1: no configurations [ 107.164447][ T5924] usb 4-1: can't read configurations, error -22 [ 107.181590][ T5924] usb usb4-port1: attempt power cycle [ 108.157282][ T6072] loop2: detected capacity change from 0 to 7 [ 108.202463][ T6072] Dev loop2: unable to read RDB block 7 [ 108.208188][ T6072] loop2: AHDI p2 p3 [ 108.212145][ T6072] loop2: partition table partially beyond EOD, truncated [ 108.254761][ T6072] loop2: p3 start 335544320 is beyond EOD, truncated [ 108.425328][ T5911] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.363929][ T5911] usb 5-1: Using ep0 maxpacket: 16 [ 109.365228][ T6089] netlink: 292 bytes leftover after parsing attributes in process `syz.2.35'. [ 109.799350][ T5911] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 109.813712][ T6086] fuse: Bad value for 'group_id' [ 109.818704][ T6086] fuse: Bad value for 'group_id' [ 109.850531][ T5911] usb 5-1: config 0 has no interface number 0 [ 109.883490][ T5911] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 110.042390][ T6094] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.056118][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.069820][ T5911] usb 5-1: Product: syz [ 110.115734][ T6094] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.133723][ T5911] usb 5-1: Manufacturer: syz [ 110.183825][ T5911] usb 5-1: SerialNumber: syz [ 110.225815][ T5911] usb 5-1: config 0 descriptor?? [ 110.300870][ T5911] usb 5-1: can't set config #0, error -71 [ 110.388510][ T6100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.408955][ T5911] usb 5-1: USB disconnect, device number 2 [ 110.437059][ T6100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.552358][ T43] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 111.847454][ T6115] program syz.2.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.041160][ T5852] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.472478][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 112.478654][ T5852] usb 1-1: no configurations [ 112.483495][ T5852] usb 1-1: can't read configurations, error -22 [ 112.624590][ T5852] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.862838][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 112.876131][ T5852] usb 1-1: no configurations [ 112.885691][ T5852] usb 1-1: can't read configurations, error -22 [ 112.892995][ T5852] usb usb1-port1: attempt power cycle [ 113.912323][ T5852] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.002441][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 114.009271][ T5852] usb 1-1: no configurations [ 114.026902][ T5852] usb 1-1: can't read configurations, error -22 [ 114.172372][ T5852] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.208295][ T5852] usb 1-1: Using ep0 maxpacket: 32 [ 114.217777][ T5852] usb 1-1: no configurations [ 114.228686][ T5852] usb 1-1: can't read configurations, error -22 [ 114.273346][ T5852] usb usb1-port1: unable to enumerate USB device [ 115.679838][ T6157] overlay: Unknown parameter 'fowner>00000000000000000000' [ 117.995734][ T6174] vxfs: WRONG superblock magic 00000000 at 1 [ 118.003688][ T6174] vxfs: WRONG superblock magic 00000000 at 8 [ 118.009764][ T6174] vxfs: can't find superblock. [ 118.069494][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 118.141000][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 118.334967][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.485148][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 118.520370][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 118.774088][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 118.800074][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.811709][ T24] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 118.825016][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.834925][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.843392][ T24] usb 5-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 118.858978][ T24] usb 5-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 118.866928][ T24] usb 5-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 119.104919][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 119.116022][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 119.475617][ T5940] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.662487][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 119.691733][ T5940] usb 2-1: no configurations [ 119.719677][ T5940] usb 2-1: can't read configurations, error -22 [ 119.875314][ T5940] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.120438][ T6172] ceph: No mds server is up or the cluster is laggy [ 120.139667][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 120.224945][ T5940] usb 2-1: no configurations [ 120.583189][ T5940] usb 2-1: can't read configurations, error -22 [ 120.589598][ T24] usb 5-1: USB disconnect, device number 3 [ 120.601221][ T5940] usb usb2-port1: attempt power cycle [ 120.612426][ T5829] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.794138][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.823507][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 120.850620][ T5829] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 120.892311][ T977] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.911845][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.946842][ T5829] usb 3-1: config 0 descriptor?? [ 120.964362][ T5940] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.994939][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 121.059800][ T5940] usb 2-1: no configurations [ 121.096989][ T5940] usb 2-1: can't read configurations, error -22 [ 121.303256][ T5940] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.444728][ T5940] usb 2-1: Using ep0 maxpacket: 32 [ 121.672895][ T5940] usb 2-1: no configurations [ 121.852073][ T5940] usb 2-1: can't read configurations, error -22 [ 121.858749][ T5829] ath6kl: Failed to submit usb control message: -71 [ 121.872514][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 121.872606][ T5940] usb usb2-port1: unable to enumerate USB device [ 121.904082][ T5829] ath6kl: unable to send the bmi data to the device: -71 [ 121.911542][ T977] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 121.931693][ T5829] ath6kl: Unable to send get target info: -71 [ 121.941178][ T977] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 121.958512][ T5829] ath6kl: Failed to init ath6kl core: -71 [ 121.965065][ T977] usb 4-1: config 166 has no interface number 0 [ 121.972638][ T5829] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 121.981299][ T977] usb 4-1: config 166 has no interface number 1 [ 121.987789][ T977] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 122.004948][ T5829] usb 3-1: USB disconnect, device number 6 [ 122.011768][ T977] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 122.405522][ T977] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 122.450129][ T977] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 122.504960][ T977] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 122.516859][ T977] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 122.534473][ T977] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 122.545955][ T977] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 122.620938][ T977] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 122.944008][ T977] usb 4-1: config 166 interface 177 has no altsetting 0 [ 123.109850][ T977] usb 4-1: config 166 interface 34 has no altsetting 0 [ 123.151602][ T977] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 123.184809][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.212279][ T977] usb 4-1: Product: syz [ 123.222529][ T977] usb 4-1: Manufacturer: syz [ 123.237461][ T977] usb 4-1: SerialNumber: syz [ 123.471354][ T6251] binder: 6248:6251 ioctl 400c620e 200000000180 returned -22 [ 123.919389][ T6261] vxfs: WRONG superblock magic 00000000 at 1 [ 123.926663][ T6261] vxfs: WRONG superblock magic 00000000 at 8 [ 123.932878][ T6261] vxfs: can't find superblock. [ 124.060738][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 124.197618][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 124.395915][ T5911] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.579267][ T6253] ip6gretap0: entered promiscuous mode [ 124.613162][ T977] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 124.641316][ T6253] vlan2: entered promiscuous mode [ 124.714789][ T5911] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.726382][ T5911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.744861][ T5911] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 124.760804][ T5911] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.780306][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.824381][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 124.825722][ T977] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 124.830561][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 124.853577][ T5911] usb 1-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 125.116853][ T5911] usb 1-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 125.130792][ T5911] usb 1-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 125.854905][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 125.861043][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 125.908173][ T6279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.347640][ T6259] ceph: No mds server is up or the cluster is laggy [ 126.733679][ T6286] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.734955][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 126.760757][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 126.795045][ T977] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 127.432579][ T5911] usb 1-1: USB disconnect, device number 7 [ 127.544297][ T977] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 127.550792][ T977] usb 4-1: No valid video chain found. [ 127.823384][ T977] usb 4-1: USB disconnect, device number 5 [ 128.968148][ T6313] netlink: 'syz.3.94': attribute type 1 has an invalid length. [ 129.170413][ T6310] bridge1: entered promiscuous mode [ 129.176408][ T6309] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 129.715792][ T6323] capability: warning: `syz.2.95' uses 32-bit capabilities (legacy support in use) [ 131.002464][ T5898] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 131.123980][ T6335] loop2: detected capacity change from 0 to 7 [ 131.222916][ T6335] Dev loop2: unable to read RDB block 7 [ 131.255425][ T6335] loop2: AHDI p2 p3 [ 131.261939][ T6335] loop2: partition table partially beyond EOD, truncated [ 131.267411][ T5898] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 131.272756][ T6335] loop2: p3 start 335544320 is beyond EOD, truncated [ 131.363119][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 131.379420][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.445480][ T5898] usb 3-1: config 0 descriptor?? [ 131.469631][ T5898] gspca_main: spca508-2.14.0 probing 8086:0110 [ 132.291784][ T5898] gspca_spca508: reg_read err -110 [ 132.439293][ T5898] gspca_spca508: reg_read err -32 [ 132.445224][ T5898] gspca_spca508: reg_read err -32 [ 132.450757][ T5898] gspca_spca508: reg_read err -32 [ 132.457119][ T5898] gspca_spca508: reg write: error -32 [ 132.482362][ T5898] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 132.498665][ T6330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.582818][ T6330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.705149][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711747][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.714441][ T5898] usb 3-1: USB disconnect, device number 7 [ 132.792797][ T6354] tmpfs: Bad value for 'mpol' [ 133.122452][ T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 133.710877][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 133.782430][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 133.839522][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 133.868988][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.044530][ T10] usb 1-1: config 0 descriptor?? [ 134.053598][ T6357] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.709685][ T6373] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 134.903208][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 134.921087][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 134.941465][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 134.970806][ T6373] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.986716][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 135.460825][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 135.486921][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 135.506559][ T6377] bond1: (slave gretap1): making interface the new active one [ 135.511784][ T10] waltop 0003:172F:0500.0002: unknown main item tag 0x0 [ 135.527942][ T6377] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 135.612394][ T6383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 136.018869][ T10] waltop 0003:172F:0500.0002: hidraw0: USB HID vff.fa Device [HID 172f:0500] on usb-dummy_hcd.0-1/input0 [ 136.077483][ T6377] syz.4.110 (6377) used greatest stack depth: 20040 bytes left [ 136.254449][ T5940] usb 1-1: USB disconnect, device number 8 [ 137.396852][ T6391] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.272890][ T6388] tmpfs: Unknown parameter 'quta' [ 139.892335][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 140.691244][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 140.739345][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 140.833285][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 140.849713][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 141.262743][ T10] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 141.272062][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.281269][ T10] usb 4-1: Product: syz [ 141.286630][ T10] usb 4-1: Manufacturer: syz [ 141.291412][ T10] usb 4-1: SerialNumber: syz [ 141.485500][ T10] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 142.241741][ T10] usb 4-1: USB disconnect, device number 6 [ 142.433866][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 143.169388][ T6429] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 143.403914][ T6429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.487703][ T6439] vxfs: WRONG superblock magic 00000000 at 1 [ 143.495122][ T6439] vxfs: WRONG superblock magic 00000000 at 8 [ 143.501154][ T6439] vxfs: can't find superblock. [ 144.612387][ T5852] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 145.079760][ T6465] xt_nat: multiple ranges no longer supported [ 145.702824][ T5852] usb 3-1: Using ep0 maxpacket: 8 [ 145.744415][ T5852] usb 3-1: unable to get BOS descriptor or descriptor too short [ 145.759550][ T5852] usb 3-1: config 4 has an invalid interface number: 129 but max is 0 [ 145.901091][ T5852] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 145.920772][ T6472] loop2: detected capacity change from 0 to 7 [ 145.937897][ T6472] Dev loop2: unable to read RDB block 7 [ 145.945189][ T5852] usb 3-1: config 4 has no interface number 0 [ 146.089688][ T5852] usb 3-1: config 4 interface 129 altsetting 3 bulk endpoint 0xF has invalid maxpacket 1023 [ 146.100383][ T5852] usb 3-1: config 4 interface 129 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 146.111364][ T5852] usb 3-1: config 4 interface 129 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 146.124685][ T5852] usb 3-1: config 4 interface 129 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 146.135534][ T5852] usb 3-1: config 4 interface 129 has no altsetting 0 [ 146.142516][ T6472] loop2: AHDI p2 p3 [ 146.145191][ T5852] usb 3-1: New USB device found, idVendor=0424, idProduct=b832, bcdDevice=67.6d [ 146.146680][ T6472] loop2: partition table partially beyond EOD, truncated [ 146.802872][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.810940][ T5852] usb 3-1: Product: syz [ 146.818343][ T5852] usb 3-1: Manufacturer: ৃﺯ㑋쥿↧乮闏쏛苉ᰵ련嬖 [ 146.826791][ T5852] usb 3-1: SerialNumber: syz [ 146.837746][ T6472] loop2: p3 start 335544320 is beyond EOD, truncated [ 146.869867][ T6449] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.986804][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 147.438151][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 147.439987][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 147.491180][ T6484] vxfs: WRONG superblock magic 00000000 at 1 [ 147.498889][ T6484] vxfs: WRONG superblock magic 00000000 at 8 [ 147.505135][ T6484] vxfs: can't find superblock. [ 148.258692][ T5852] usb 3-1: USB disconnect, device number 8 [ 148.261897][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 148.311269][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 148.382446][ T5911] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 148.422639][ T6492] netlink: 'syz.3.144': attribute type 1 has an invalid length. [ 148.519127][ T6498] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.523999][ T6492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.546106][ T5911] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 148.557463][ T6496] bond1: (slave gretap1): making interface the new active one [ 148.565219][ T5911] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.578090][ T6496] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 148.587204][ T5911] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 148.602031][ T5911] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.612900][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.620962][ T5911] usb 2-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 148.653195][ T5911] usb 2-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 148.660943][ T5911] usb 2-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 148.726567][ T6501] capability: warning: `syz.3.147' uses deprecated v2 capabilities in a way that may be insecure [ 148.782727][ T5940] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.846029][ T43] libceph: connect (1)[c::]:6789 error -101 [ 149.008512][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 149.102288][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 149.109579][ T5940] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 149.123513][ T5940] usb 3-1: config 179 has no interface number 0 [ 149.199497][ T5940] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 149.288577][ T5940] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 149.545378][ T5940] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.569155][ T5940] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 149.645288][ T5940] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 150.152988][ T6481] ceph: No mds server is up or the cluster is laggy [ 150.243984][ T5940] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 150.253493][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.300901][ T6495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 150.427420][ T5911] usb 2-1: USB disconnect, device number 6 [ 150.524203][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.530077][ T6520] loop2: detected capacity change from 0 to 7 [ 150.550680][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.561486][ T6520] Dev loop2: unable to read RDB block 7 [ 150.570881][ T6520] loop2: AHDI p2 p3 [ 150.592011][ T6520] loop2: partition table partially beyond EOD, truncated [ 150.601549][ T6520] loop2: p3 start 335544320 is beyond EOD, truncated [ 150.701620][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 150.713630][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 150.773440][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 150.781945][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 150.808329][ T5911] usb 3-1: USB disconnect, device number 9 [ 151.652410][ T6534] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 152.193134][ T6534] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.210461][ T6539] bond1: (slave gretap1): making interface the new active one [ 152.484894][ T6539] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.497039][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 153.167249][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 153.176317][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 153.249266][ T6545] netlink: 9 bytes leftover after parsing attributes in process `syz.1.159'. [ 153.427035][ T6547] netlink: 5 bytes leftover after parsing attributes in process `syz.1.159'. [ 153.436595][ T6547] 0{X: renamed from gretap0 (while UP) [ 153.451319][ T6547] 0{X: entered allmulticast mode [ 153.467616][ T6547] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 154.245860][ T6545] 0{X: entered promiscuous mode [ 154.251704][ T6545] 0{X: left allmulticast mode [ 156.291672][ T6590] process 'syz.3.171' launched './file0' with NULL argv: empty string added [ 157.597264][ T6600] ALSA: mixer_oss: invalid index 40000 [ 158.152642][ T5852] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 158.886474][ T5852] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 158.898141][ T5852] usb 4-1: config 0 has no interface number 0 [ 158.923531][ T5852] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 158.969598][ T5852] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 159.027011][ T5852] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 159.058151][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.078439][ T5852] usb 4-1: Product: syz [ 159.082723][ T5852] usb 4-1: Manufacturer: syz [ 159.088514][ T5852] usb 4-1: SerialNumber: syz [ 159.205289][ T5852] usb 4-1: config 0 descriptor?? [ 159.259941][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.178'. [ 159.588835][ T6596] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.601345][ T5852] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 160.885161][ T10] usb 4-1: USB disconnect, device number 7 [ 160.913944][ T10] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 163.170268][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.4.188'. [ 163.303307][ T6649] netlink: 256 bytes leftover after parsing attributes in process `syz.4.188'. [ 164.225904][ T6656] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 164.232720][ T6656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.242773][ T6656] vhci_hcd vhci_hcd.0: Device attached [ 164.260164][ T6660] vhci_hcd: connection closed [ 164.265169][ T6257] vhci_hcd: stop threads [ 164.291981][ T6257] vhci_hcd: release socket [ 164.296584][ T6257] vhci_hcd: disconnect device [ 165.648595][ T6672] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 166.689381][ T6677] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 168.382460][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.692579][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 168.841697][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.856211][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.867089][ T5940] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 168.893458][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.972883][ T6695] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.999007][ T5940] usb 5-1: config 0 descriptor?? [ 169.815168][ T5940] usbhid 5-1:0.0: can't add hid device: -71 [ 169.840482][ T5940] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.902678][ T5940] usb 5-1: USB disconnect, device number 4 [ 170.465426][ T6700] netlink: 68 bytes leftover after parsing attributes in process `syz.4.204'. [ 170.608542][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 172.488042][ T6722] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 173.540816][ T6726] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 173.755576][ T6726] CIFS mount error: No usable UNC path provided in device string! [ 173.755576][ T6726] [ 173.778133][ T6726] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.481430][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 174.900492][ T6743] fuse: Unknown parameter '0x0000000000000006' [ 176.267222][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 177.318685][ T6765] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 178.124458][ T5898] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.642955][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 178.736615][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 178.788780][ T5898] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 178.800566][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.826130][ T5898] usb 5-1: config 0 descriptor?? [ 179.035132][ T5898] ath6kl: Failed to submit usb control message: -71 [ 179.117660][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 179.126654][ T5898] ath6kl: Unable to send get target info: -71 [ 179.136474][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 179.145375][ T5898] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 179.162479][ T5852] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.233759][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 179.729639][ T5898] usb 5-1: USB disconnect, device number 5 [ 179.872708][ T5852] usb 1-1: Using ep0 maxpacket: 8 [ 179.880101][ T5852] usb 1-1: unable to get BOS descriptor or descriptor too short [ 179.890281][ T5852] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 179.911426][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.932253][ T5852] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 179.942535][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 179.955392][ T5852] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.964648][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 179.976310][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.989980][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.002661][ T5852] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 180.013173][ T5852] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.023836][ T5852] usb 1-1: Product: syz [ 180.028378][ T5852] usb 1-1: Manufacturer: syz [ 180.039935][ T5852] usb 1-1: SerialNumber: syz [ 180.052381][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.061460][ T6789] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 180.076394][ T6789] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 180.084674][ T10] usb 4-1: config 0 descriptor?? [ 180.090570][ T6777] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 180.091491][ T30] audit: type=1326 audit(1755342891.370:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6790 comm="syz.4.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a9d98ebe9 code=0x0 [ 180.176370][ T5852] usb 1-1: 0:2 : does not exist [ 180.208614][ T5852] usb 1-1: USB disconnect, device number 9 [ 180.444810][ T6794] vxfs: WRONG superblock magic 00000000 at 1 [ 180.451412][ T6794] vxfs: WRONG superblock magic 00000000 at 8 [ 180.457474][ T6794] vxfs: can't find superblock. [ 180.692816][ T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 180.721025][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.746518][ T10] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 180.800435][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 180.825774][ T6804] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 180.856213][ T6804] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.032738][ T6808] vxfs: WRONG superblock magic 00000000 at 1 [ 181.039093][ T6808] vxfs: WRONG superblock magic 00000000 at 8 [ 181.045251][ T6808] vxfs: can't find superblock. [ 181.323529][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.506716][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 181.516279][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 181.541914][ T5940] usb 4-1: USB disconnect, device number 8 [ 181.549533][ T5852] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 181.584688][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 181.593647][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.604374][ T24] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 181.625970][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 181.636000][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.645210][ T24] usb 2-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 181.663843][ T24] usb 2-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 181.671885][ T24] usb 2-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 181.952912][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 182.285921][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 182.292251][ T5852] usb 1-1: Using ep0 maxpacket: 16 [ 182.313023][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.354897][ T5852] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.385501][ T5852] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 182.398291][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.413862][ T5852] usb 1-1: config 0 descriptor?? [ 182.442365][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 182.692524][ T5924] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 182.708618][ T5924] usb 3-1: config 0 has no interface number 0 [ 182.724900][ T5924] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 182.738403][ T5924] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.809339][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 182.818452][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 182.840348][ T5924] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 182.865832][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.038693][ T5924] usb 3-1: Product: syz [ 183.063185][ T5924] usb 3-1: Manufacturer: syz [ 183.157242][ T5852] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0004/input/input5 [ 183.170309][ T5924] usb 3-1: SerialNumber: syz [ 183.216142][ T5924] usb 3-1: config 0 descriptor?? [ 183.221997][ T6816] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 183.237403][ T5924] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 183.271947][ T5924] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 183.278904][ T6825] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 183.301853][ T6825] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 183.312988][ T5852] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 183.332415][ T5852] usb 1-1: USB disconnect, device number 10 [ 183.335515][ T6827] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 183.352101][ T6827] Cannot find set identified by id 0 to match [ 183.577584][ T6806] ceph: No mds server is up or the cluster is laggy [ 183.741363][ T5924] usb 3-1: USB disconnect, device number 10 [ 183.859152][ T24] usb 2-1: USB disconnect, device number 7 [ 184.116347][ T5924] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 184.305955][ T5924] cyberjack 3-1:0.69: device disconnected [ 185.311032][ T6847] vxfs: WRONG superblock magic 00000000 at 1 [ 185.317344][ T6847] vxfs: WRONG superblock magic 00000000 at 8 [ 185.323369][ T6847] vxfs: can't find superblock. [ 185.511867][ T6854] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 185.737077][ T6854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.698327][ T6879] vxfs: WRONG superblock magic 00000000 at 1 [ 187.710737][ T6879] vxfs: WRONG superblock magic 00000000 at 8 [ 187.717081][ T6879] vxfs: can't find superblock. [ 188.193488][ T24] libceph: connect (1)[c::]:6789 error -101 [ 188.212352][ T30] audit: type=1326 audit(1755342899.480:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 188.232523][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 188.332738][ T30] audit: type=1326 audit(1755342899.480:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 188.396366][ T30] audit: type=1326 audit(1755342899.480:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 188.422639][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 188.438448][ T30] audit: type=1326 audit(1755342899.480:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 188.464271][ T30] audit: type=1326 audit(1755342899.480:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 188.575569][ T30] audit: type=1326 audit(1755342899.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 188.652841][ T5940] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.664478][ T43] libceph: connect (1)[c::]:6789 error -101 [ 188.670677][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 188.918015][ T6894] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 188.994518][ T30] audit: type=1326 audit(1755342899.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 189.015815][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.107585][ T5940] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 189.525535][ T5940] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.537624][ T43] libceph: connect (1)[c::]:6789 error -101 [ 189.565536][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 189.602338][ T5940] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 189.645546][ T30] audit: type=1326 audit(1755342899.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 189.667094][ T30] audit: type=1326 audit(1755342899.480:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 189.689355][ T30] audit: type=1326 audit(1755342899.480:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6848 comm="syz.1.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7fc00000 [ 189.697664][ T5940] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.766081][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.812495][ T5940] usb 5-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 189.900647][ T6877] ceph: No mds server is up or the cluster is laggy [ 189.955314][ T5940] usb 5-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 190.526929][ T6913] vxfs: WRONG superblock magic 00000000 at 1 [ 190.534691][ T6913] vxfs: WRONG superblock magic 00000000 at 8 [ 190.540845][ T6913] vxfs: can't find superblock. [ 190.945323][ T5940] usb 5-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 190.970011][ T24] libceph: connect (1)[c::]:6789 error -101 [ 190.980776][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 191.184796][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 191.339484][ T24] libceph: connect (1)[c::]:6789 error -101 [ 191.352709][ T5940] usb 5-1: can't set config #1, error -71 [ 191.382545][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 191.403242][ T5940] usb 5-1: USB disconnect, device number 6 [ 191.641857][ T43] usb 1-1: device descriptor read/64, error -71 [ 192.489084][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.263'. [ 192.623397][ T24] libceph: connect (1)[c::]:6789 error -101 [ 192.648883][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 192.692379][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 192.886908][ T43] usb 1-1: device descriptor read/64, error -71 [ 193.106038][ T6912] ceph: No mds server is up or the cluster is laggy [ 193.132680][ T5829] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 193.254604][ T43] usb usb1-port1: attempt power cycle [ 193.294286][ T5829] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 193.511295][ T5829] usb 3-1: config 0 has no interface number 0 [ 193.765082][ T5829] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 193.860732][ T5829] usb 3-1: config 0 interface 200 has no altsetting 0 [ 193.870891][ T5829] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 194.192800][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.205346][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.211756][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.228462][ T5829] usb 3-1: Product: syz [ 194.241026][ T6936] netlink: 48 bytes leftover after parsing attributes in process `syz.1.267'. [ 194.880879][ T5829] usb 3-1: Manufacturer: syz [ 194.885594][ T5829] usb 3-1: SerialNumber: syz [ 194.902152][ T5829] usb 3-1: config 0 descriptor?? [ 194.907798][ T5829] usb 3-1: can't set config #0, error -71 [ 194.924051][ T5829] usb 3-1: USB disconnect, device number 11 [ 195.675830][ T6953] FAULT_INJECTION: forcing a failure. [ 195.675830][ T6953] name failslab, interval 1, probability 0, space 0, times 1 [ 195.688928][ T6953] CPU: 1 UID: 0 PID: 6953 Comm: syz.0.271 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 195.688956][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 195.688977][ T6953] Call Trace: [ 195.688990][ T6953] [ 195.688999][ T6953] dump_stack_lvl+0x189/0x250 [ 195.689040][ T6953] ? irqentry_exit+0x74/0x90 [ 195.689066][ T6953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.689112][ T6953] should_fail_ex+0x414/0x560 [ 195.689138][ T6953] should_failslab+0xa8/0x100 [ 195.689172][ T6953] __kmalloc_noprof+0xcb/0x4f0 [ 195.689191][ T6953] ? kfree+0x4d/0x440 [ 195.689221][ T6953] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.689256][ T6953] tomoyo_realpath_from_path+0xe3/0x5d0 [ 195.689288][ T6953] ? tomoyo_domain+0xda/0x130 [ 195.689323][ T6953] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 195.689347][ T6953] tomoyo_path_number_perm+0x1e8/0x5a0 [ 195.689374][ T6953] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.689417][ T6953] ? __lock_acquire+0xab9/0xd20 [ 195.689461][ T6953] ? __fget_files+0x2a/0x420 [ 195.689489][ T6953] ? __fget_files+0x2a/0x420 [ 195.689512][ T6953] ? __fget_files+0x3a0/0x420 [ 195.689535][ T6953] ? __fget_files+0x2a/0x420 [ 195.689565][ T6953] security_file_ioctl+0xcb/0x2d0 [ 195.689593][ T6953] __se_sys_ioctl+0x47/0x170 [ 195.689628][ T6953] do_syscall_64+0xfa/0x3b0 [ 195.689655][ T6953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.689676][ T6953] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 195.689697][ T6953] ? clear_bhb_loop+0x60/0xb0 [ 195.689724][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.689745][ T6953] RIP: 0033:0x7fb803b8ebe9 [ 195.689769][ T6953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.689791][ T6953] RSP: 002b:00007fb801df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.689821][ T6953] RAX: ffffffffffffffda RBX: 00007fb803db6180 RCX: 00007fb803b8ebe9 [ 195.689837][ T6953] RDX: 0000200000000500 RSI: 00000000400448e6 RDI: 000000000000000a [ 195.689868][ T6953] RBP: 00007fb801df6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.689887][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.689900][ T6953] R13: 00007fb803db6218 R14: 00007fb803db6180 R15: 00007ffdb6f595b8 [ 195.689935][ T6953] [ 195.689966][ T6953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 196.082329][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 196.082347][ T30] audit: type=1107 audit(1755342906.420:63): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='cjO &1LҼ' [ 196.344244][ T6959] netlink: 'syz.0.274': attribute type 1 has an invalid length. [ 196.575897][ T6966] vxfs: WRONG superblock magic 00000000 at 1 [ 196.583516][ T6966] vxfs: WRONG superblock magic 00000000 at 8 [ 196.589586][ T6966] vxfs: can't find superblock. [ 197.057324][ T43] libceph: connect (1)[c::]:6789 error -101 [ 197.147507][ T6959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 197.201606][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 197.410060][ T6974] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 198.289876][ T6979] vxfs: WRONG superblock magic 00000000 at 1 [ 198.291231][ T6979] vxfs: WRONG superblock magic 00000000 at 8 [ 198.291289][ T6979] vxfs: can't find superblock. [ 198.339577][ T5940] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 198.367864][ T43] libceph: connect (1)[c::]:6789 error -101 [ 198.368049][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 198.378461][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 198.383031][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 198.645372][ T43] libceph: connect (1)[c::]:6789 error -101 [ 198.645557][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 198.729365][ T5940] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 198.729393][ T5940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.729415][ T5940] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 198.747824][ T5940] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 198.747858][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.747880][ T5940] usb 2-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 198.747904][ T5940] usb 2-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 198.747923][ T5940] usb 2-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 198.793599][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.190510][ T6989] overlayfs: missing 'lowerdir' [ 199.596748][ T6983] vxfs: WRONG superblock magic 00000000 at 1 [ 199.597075][ T6983] vxfs: WRONG superblock magic 00000000 at 8 [ 199.597092][ T6983] vxfs: can't find superblock. [ 199.703198][ T43] libceph: connect (1)[c::]:6789 error -101 [ 199.752363][ T6981] libceph: connect (1)[c::]:6789 error -101 [ 199.758660][ T6981] libceph: mon0 (1)[c::]:6789 connect error [ 199.766166][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 199.802457][ T5911] usb 4-1: device descriptor read/64, error -71 [ 200.052431][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 200.060656][ T6976] ceph: No mds server is up or the cluster is laggy [ 200.085994][ T5924] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 200.173279][ T6965] ceph: No mds server is up or the cluster is laggy [ 200.297882][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 200.315966][ T5924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 200.340847][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.360276][ T5940] usb 2-1: USB disconnect, device number 8 [ 200.391384][ T5924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 200.410606][ T5924] pvrusb2: ********** [ 200.418170][ T5924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 200.434975][ T5924] pvrusb2: Important functionality might not be entirely working. [ 200.450890][ T5924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 200.657484][ T5924] pvrusb2: ********** [ 200.773008][ T2342] pvrusb2: Invalid write control endpoint [ 201.207284][ T6989] pvrusb2: Invalid write control endpoint [ 201.541459][ T43] usb 5-1: USB disconnect, device number 7 [ 202.575575][ T2342] pvrusb2: Invalid write control endpoint [ 202.643058][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 202.839637][ T7012] binder_alloc: binder_alloc_mmap_handler: 7010 200000ffd000-200001000000 already mapped failed -16 [ 202.859688][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 202.877044][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 202.912738][ T2342] pvrusb2: Device being rendered inoperable [ 202.929040][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 202.950664][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 202.977876][ T2342] pvrusb2: Attached sub-driver cx25840 [ 203.016861][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 203.054332][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.645525][ T7036] vxfs: WRONG superblock magic 00000000 at 1 [ 204.654428][ T7036] vxfs: WRONG superblock magic 00000000 at 8 [ 204.660504][ T7036] vxfs: can't find superblock. [ 204.762094][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 204.778854][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 204.832292][ T43] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 205.033819][ T7043] loop2: detected capacity change from 0 to 7 [ 205.044449][ T7043] Dev loop2: unable to read RDB block 7 [ 205.050070][ T7043] loop2: AHDI p2 p3 [ 205.056633][ T7043] loop2: partition table partially beyond EOD, truncated [ 205.066247][ T7043] loop2: p3 start 335544320 is beyond EOD, truncated [ 205.415066][ T7025] vxfs: WRONG superblock magic 00000000 at 1 [ 205.422459][ T7025] vxfs: WRONG superblock magic 00000000 at 8 [ 205.428526][ T7025] vxfs: can't find superblock. [ 205.520308][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 205.547317][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 205.583464][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.592806][ T5911] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 205.649670][ T43] usb 5-1: not running at top speed; connect to a high speed hub [ 205.689142][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.709379][ T7032] vxfs: WRONG superblock magic 00000000 at 1 [ 205.801620][ T7032] vxfs: WRONG superblock magic 00000000 at 8 [ 205.814418][ T43] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.848487][ T7032] vxfs: can't find superblock. [ 205.888525][ T5911] usb 1-1: device descriptor read/64, error -71 [ 205.906357][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 205.957915][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 205.978682][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 206.001397][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=043f, bcdDevice=fc.90 [ 206.018262][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 206.041349][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.052512][ T43] usb 5-1: Product: syz [ 206.056818][ T43] usb 5-1: Manufacturer: syz [ 206.061767][ T43] usb 5-1: SerialNumber: syz [ 206.162475][ T5911] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 206.170480][ T43] usb 5-1: can't set config #1, error -71 [ 206.206600][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 206.226229][ T43] usb 5-1: USB disconnect, device number 8 [ 206.245947][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.261782][ T24] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 206.276888][ T7054] veth1_to_bond: entered allmulticast mode [ 206.414760][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 206.421124][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 206.437944][ T7035] ceph: No mds server is up or the cluster is laggy [ 206.440584][ T7054] veth1_to_bond: entered promiscuous mode [ 206.470325][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.569709][ T5911] usb 1-1: device descriptor read/64, error -71 [ 206.680356][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.708372][ T24] usb 3-1: Product: 咂웨鐔쉻स躅楼嬪ˉ涋饠줮츑埶㕮Ⅻ荧漀뱲ٿ螜̵浆谊Რꬄ삫칈ꠝ䐍쯦䷻芀ᨛ⳺冝㺗勇艧釦 [ 206.729411][ T24] usb 3-1: Manufacturer: 她䃣ⓤ麔ⵢ쭳ۀ½仙齞鿣ꋇ [ 206.737757][ T24] usb 3-1: SerialNumber: 攘튱瑩띲㏰ݾ⯄룬靳쯾ܴ쑛奛㊁퀪Ⰸ㿼∺酫㜔䇥杍ﾷ厞鷤〫楂鮬쓣蟘苼뗮꓈劁娅墐䢰맪ᡇ몢희刊ꉉ₽錀銕﫹ỏ鮠 [ 206.804189][ T5911] usb usb1-port1: attempt power cycle [ 206.982659][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.164410][ T43] usb 5-1: device descriptor read/64, error -71 [ 207.413376][ T24] usb 3-1: can't set config #1, error -71 [ 207.460895][ T24] usb 3-1: USB disconnect, device number 12 [ 207.506775][ T43] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 207.601203][ T7061] netlink: 180 bytes leftover after parsing attributes in process `syz.0.299'. [ 207.653470][ T43] usb 5-1: device descriptor read/64, error -71 [ 207.826611][ T43] usb usb5-port1: attempt power cycle [ 207.944943][ T7079] veth0: entered promiscuous mode [ 208.062533][ T5829] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.182454][ T43] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 208.735214][ T7074] veth0: left promiscuous mode [ 208.751240][ T43] usb 5-1: device descriptor read/8, error -71 [ 208.784769][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 208.796273][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 208.806218][ T5829] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 208.815739][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.830072][ T5829] usb 3-1: config 0 descriptor?? [ 209.142847][ T5829] ath6kl: Failed to submit usb control message: -71 [ 209.150041][ T5829] ath6kl: unable to send the bmi data to the device: -71 [ 209.157338][ T5829] ath6kl: Unable to send get target info: -71 [ 210.119052][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 210.129552][ T5829] ath6kl: Failed to init ath6kl core: -71 [ 210.145443][ T5829] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 210.164410][ T43] usb 5-1: device descriptor read/8, error -71 [ 210.284431][ T43] usb usb5-port1: unable to enumerate USB device [ 210.540559][ T5829] usb 3-1: USB disconnect, device number 13 [ 211.099354][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 211.664295][ T7054] veth1_to_bond: left promiscuous mode [ 211.692248][ T5852] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 211.724880][ T7054] veth1_to_bond: left allmulticast mode [ 212.513545][ T5852] usb 3-1: Using ep0 maxpacket: 32 [ 212.531961][ T7111] vxfs: WRONG superblock magic 00000000 at 1 [ 212.539358][ T7111] vxfs: WRONG superblock magic 00000000 at 8 [ 212.545473][ T7111] vxfs: can't find superblock. [ 212.914962][ T24] libceph: connect (1)[c::]:6789 error -101 [ 212.922431][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 212.932390][ T5852] usb 3-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 213.186892][ T24] libceph: connect (1)[c::]:6789 error -101 [ 213.210145][ T5852] usb 3-1: config 0 has an invalid interface number: 110 but max is 32 [ 213.222487][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 213.247831][ T5852] usb 3-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 213.423491][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.442967][ T5852] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 213.452285][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 213.455623][ T5852] usb 3-1: config 0 has no interface number 0 [ 213.994775][ T7122] vxfs: WRONG superblock magic 00000000 at 1 [ 214.002331][ T7122] vxfs: WRONG superblock magic 00000000 at 8 [ 214.008803][ T7122] vxfs: can't find superblock. [ 214.402865][ T5852] usb 3-1: config 0 interface 110 altsetting 0 endpoint 0xC has invalid maxpacket 32770, setting to 64 [ 214.483748][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 214.502488][ T5852] usb 3-1: config 0 interface 110 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 214.507273][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 214.529053][ T43] libceph: connect (1)[c::]:6789 error -101 [ 214.542479][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 214.734675][ T7108] ceph: No mds server is up or the cluster is laggy [ 214.946086][ T7129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'. [ 215.215666][ T10] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 215.308312][ T5852] usb 3-1: string descriptor 0 read error: -71 [ 215.442475][ T5852] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=16.65 [ 215.486913][ T5852] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=248 [ 215.494986][ T24] usb 2-1: device descriptor read/all, error -71 [ 215.504384][ T43] libceph: connect (1)[c::]:6789 error -101 [ 215.510484][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 215.534549][ T10] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 215.553059][ T5852] usb 3-1: config 0 descriptor?? [ 215.565004][ T10] usb 1-1: config 0 has no interface number 0 [ 215.581053][ T5852] usb 3-1: can't set config #0, error -71 [ 215.587033][ T10] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 215.599169][ T5852] usb 3-1: USB disconnect, device number 14 [ 215.617825][ T10] usb 1-1: config 0 interface 200 has no altsetting 0 [ 215.636938][ T10] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 215.674224][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.695561][ T10] usb 1-1: Product: syz [ 215.699782][ T10] usb 1-1: Manufacturer: syz [ 215.722293][ T10] usb 1-1: SerialNumber: syz [ 215.739514][ T10] usb 1-1: config 0 descriptor?? [ 215.767723][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.913107][ T5940] usb 4-1: device descriptor read/64, error -71 [ 216.035134][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 216.103883][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 216.194026][ T5940] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.237626][ T7120] ceph: No mds server is up or the cluster is laggy [ 216.597672][ T7142] netlink: 'syz.1.321': attribute type 1 has an invalid length. [ 216.641819][ T30] audit: type=1326 audit(1755342927.930:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3431d8ebe9 code=0x7ffc0000 [ 216.668974][ T30] audit: type=1326 audit(1755342927.930:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3431d90b07 code=0x7ffc0000 [ 216.704310][ T30] audit: type=1326 audit(1755342927.930:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3431d90a7c code=0x7ffc0000 [ 216.734172][ T30] audit: type=1326 audit(1755342927.930:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3431d909b4 code=0x7ffc0000 [ 216.760705][ T30] audit: type=1326 audit(1755342927.930:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7141 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f3431d909b4 code=0x7ffc0000 [ 216.832359][ C0] ------------[ cut here ]------------ [ 216.838179][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci2 [ 216.845073][ C0] WARNING: CPU: 0 PID: 0 at kernel/workqueue.c:2258 __queue_work+0xd62/0xfe0 [ 216.853988][ C0] Modules linked in: [ 216.858146][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 216.867736][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.877833][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 216.883311][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 09 2c 95 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 e0 e8 89 8b 4c 89 fa e8 4f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 a0 44 35 00 90 0f 0b 90 e9 dd fc ff [ 216.902965][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 216.909089][ C0] RAX: e3b54c6a23827800 RBX: 0000000000000100 RCX: ffffffff8de95280 [ 216.917110][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 216.925118][ C0] RBP: 1ffff1102809b338 R08: 0000000000000003 R09: 0000000000000004 [ 216.933139][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dffffc0000000000 [ 216.941159][ C0] R13: ffff8880357f4988 R14: 0000000000000008 R15: ffff8881404d9978 [ 216.949221][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 216.958290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.964906][ C0] CR2: 0000001b30420000 CR3: 000000003375a000 CR4: 00000000003526f0 [ 216.972915][ C0] Call Trace: [ 216.976227][ C0] [ 216.979132][ C0] call_timer_fn+0x17b/0x5f0 [ 216.983764][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 216.989618][ C0] ? call_timer_fn+0xbe/0x5f0 [ 216.994339][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 216.999508][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 217.004761][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 217.010618][ C0] __run_timer_base+0x646/0x860 [ 217.015544][ C0] ? ktime_get+0x3e/0x1f0 [ 217.019934][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 217.025352][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 217.030640][ T5155] Bluetooth: hci4: command 0x0406 tx timeout [ 217.031631][ C0] run_timer_softirq+0xb7/0x180 [ 217.037679][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 217.042447][ C0] handle_softirqs+0x283/0x870 [ 217.042481][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 217.042512][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.042543][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 217.049692][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 217.053277][ C0] __irq_exit_rcu+0xca/0x1f0 [ 217.053307][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 217.058137][ T5155] Bluetooth: hci0: command 0x0406 tx timeout [ 217.063350][ C0] irq_exit_rcu+0x9/0x30 [ 217.094591][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 217.100235][ C0] [ 217.103172][ C0] [ 217.106110][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.112101][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 217.117827][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 217.137442][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 217.143520][ C0] RAX: e3b54c6a23827800 RBX: ffffffff81976918 RCX: e3b54c6a23827800 [ 217.151496][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 217.159470][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 217.167442][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 217.175415][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 217.183396][ C0] ? do_idle+0x1e8/0x510 [ 217.187654][ C0] default_idle+0x13/0x20 [ 217.192009][ C0] default_idle_call+0x74/0xb0 [ 217.196779][ C0] do_idle+0x1e8/0x510 [ 217.200871][ C0] ? __pfx_do_idle+0x10/0x10 [ 217.205573][ C0] cpu_startup_entry+0x44/0x60 [ 217.210389][ C0] rest_init+0x2de/0x300 [ 217.214660][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 217.220221][ C0] start_kernel+0x47d/0x500 [ 217.224754][ C0] x86_64_start_reservations+0x24/0x30 [ 217.230226][ C0] x86_64_start_kernel+0x143/0x1c0 [ 217.235354][ C0] common_startup_64+0x13e/0x147 [ 217.240318][ C0] [ 217.243353][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.250637][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 217.260200][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.270281][ C0] Call Trace: [ 217.273573][ C0] [ 217.276443][ C0] dump_stack_lvl+0x99/0x250 [ 217.281043][ C0] ? __asan_memcpy+0x40/0x70 [ 217.285644][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.290852][ C0] ? __pfx__printk+0x10/0x10 [ 217.295465][ C0] panic+0x2db/0x790 [ 217.299371][ C0] ? __pfx_panic+0x10/0x10 [ 217.303789][ C0] ? show_trace_log_lvl+0x4fb/0x550 [ 217.309001][ C0] ? common_startup_64+0x13e/0x147 [ 217.314148][ C0] __warn+0x31b/0x4b0 [ 217.318157][ C0] ? __queue_work+0xd62/0xfe0 [ 217.322897][ C0] ? __queue_work+0xd62/0xfe0 [ 217.327581][ C0] report_bug+0x2be/0x4f0 [ 217.331921][ C0] ? __queue_work+0xd62/0xfe0 [ 217.336606][ C0] ? __queue_work+0xd62/0xfe0 [ 217.341289][ C0] ? __queue_work+0xd64/0xfe0 [ 217.345997][ C0] handle_bug+0x84/0x160 [ 217.350252][ C0] exc_invalid_op+0x1a/0x50 [ 217.354768][ C0] asm_exc_invalid_op+0x1a/0x20 [ 217.359709][ C0] RIP: 0010:__queue_work+0xd62/0xfe0 [ 217.365002][ C0] Code: 42 80 3c 20 00 74 08 4c 89 ef e8 09 2c 95 00 49 8b 75 00 49 81 c7 78 01 00 00 48 c7 c7 e0 e8 89 8b 4c 89 fa e8 4f 34 f9 ff 90 <0f> 0b 90 90 e9 f1 f4 ff ff e8 a0 44 35 00 90 0f 0b 90 e9 dd fc ff [ 217.384640][ C0] RSP: 0018:ffffc90000007b08 EFLAGS: 00010046 [ 217.390744][ C0] RAX: e3b54c6a23827800 RBX: 0000000000000100 RCX: ffffffff8de95280 [ 217.398811][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 217.406789][ C0] RBP: 1ffff1102809b338 R08: 0000000000000003 R09: 0000000000000004 [ 217.414767][ C0] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dffffc0000000000 [ 217.422742][ C0] R13: ffff8880357f4988 R14: 0000000000000008 R15: ffff8881404d9978 [ 217.430761][ C0] ? __queue_work+0xd61/0xfe0 [ 217.435483][ C0] call_timer_fn+0x17b/0x5f0 [ 217.440080][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 217.445902][ C0] ? call_timer_fn+0xbe/0x5f0 [ 217.450584][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 217.455744][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 217.460956][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 217.466872][ C0] __run_timer_base+0x646/0x860 [ 217.471757][ C0] ? ktime_get+0x3e/0x1f0 [ 217.476112][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 217.481518][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 217.487788][ C0] run_timer_softirq+0xb7/0x180 [ 217.492693][ C0] handle_softirqs+0x283/0x870 [ 217.497494][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 217.502275][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 217.507569][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 217.512783][ C0] __irq_exit_rcu+0xca/0x1f0 [ 217.517375][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 217.522580][ C0] irq_exit_rcu+0x9/0x30 [ 217.526863][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 217.532501][ C0] [ 217.535456][ C0] [ 217.538390][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.544380][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 217.550127][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 217.569752][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 217.575865][ C0] RAX: e3b54c6a23827800 RBX: ffffffff81976918 RCX: e3b54c6a23827800 [ 217.583871][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 217.591975][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 217.599978][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 217.608053][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 217.616038][ C0] ? do_idle+0x1e8/0x510 [ 217.620306][ C0] default_idle+0x13/0x20 [ 217.624647][ C0] default_idle_call+0x74/0xb0 [ 217.629422][ C0] do_idle+0x1e8/0x510 [ 217.633506][ C0] ? __pfx_do_idle+0x10/0x10 [ 217.638128][ C0] cpu_startup_entry+0x44/0x60 [ 217.642919][ C0] rest_init+0x2de/0x300 [ 217.647207][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 217.652777][ C0] start_kernel+0x47d/0x500 [ 217.657293][ C0] x86_64_start_reservations+0x24/0x30 [ 217.662766][ C0] x86_64_start_kernel+0x143/0x1c0 [ 217.667890][ C0] common_startup_64+0x13e/0x147 [ 217.672858][ C0] [ 217.676230][ C0] Kernel Offset: disabled [ 217.680563][ C0] Rebooting in 86400 seconds..