last executing test programs: 16m2.784361852s ago: executing program 0 (id=2505): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00') writev(r0, &(0x7f0000000000)=[{&(0x7f0000001cc0)='U', 0x1}], 0x1) 16m2.600153178s ago: executing program 0 (id=2509): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000b00), 0x8002, 0x0) lseek(r0, 0x7, 0x2) read$FUSE(r0, 0x0, 0x0) 16m2.470370909s ago: executing program 0 (id=2513): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/reserved_size', 0x141a82, 0x4) write$vhost_msg(r0, &(0x7f0000000380)={0x1, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) 16m2.295504311s ago: executing program 0 (id=2517): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) close(r0) 16m2.12889279s ago: executing program 0 (id=2522): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 16m1.640151942s ago: executing program 0 (id=2534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 16m1.416210844s ago: executing program 32 (id=2534): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 10m23.797105173s ago: executing program 5 (id=4661): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 10m20.448270888s ago: executing program 5 (id=4672): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m18.121119755s ago: executing program 5 (id=4680): syz_open_dev$vim2m(&(0x7f00000085c0), 0x3, 0x2) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) 10m17.422031896s ago: executing program 5 (id=4685): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x224300d, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(0x0, 0x0, 0x0, 0x11080, 0x0) 10m17.335918305s ago: executing program 5 (id=4686): syz_open_dev$usbfs(0x0, 0x205, 0x2581) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0xa1b80e0ec192df95) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x100) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_ethernet(0x326, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 10m16.20001925s ago: executing program 5 (id=4689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) 10m15.943084605s ago: executing program 33 (id=4689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) 8m47.90409187s ago: executing program 4 (id=5085): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xa7ba) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20004000, &(0x7f00000001c0)={0xa, 0x4e22, 0x40000000, @empty, 0x1}, 0x1c) listen(r5, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 8m47.554303261s ago: executing program 4 (id=5087): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m46.678182894s ago: executing program 4 (id=5089): socket$kcm(0x2b, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$netrom(r4, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$mice(0xffffff9c, &(0x7f0000000180), 0x40000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) 8m44.066317868s ago: executing program 6 (id=5103): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x140e, 0x8, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1ff}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040) r4 = socket(0x1e, 0x805, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000460000006500000085000000071255ce865c114900000000a293d0b882409f441cfb7dfec1320d71937441560d2123fb9ee7"], &(0x7f0000000340)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000125c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0x70bd2b, 0x2ddfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x24040084) sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r9 = dup2(r8, r8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) 8m42.274228792s ago: executing program 4 (id=5104): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 8m42.170149023s ago: executing program 4 (id=5105): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001400)="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", 0x30b}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c000100000008"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, 0x0, 0x0, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m41.991727323s ago: executing program 6 (id=5106): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000506010100000000000000000a00000805000100070000000900030073797a30000a00000900030073797a32000000000900020073797a32000000000900020073797a3100"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 8m41.904355661s ago: executing program 4 (id=5107): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aea", 0x9}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c0001"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m41.621723203s ago: executing program 34 (id=5107): bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aea", 0x9}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000001d83000744d63c0001"], 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8m41.604684925s ago: executing program 6 (id=5109): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x18fab000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 8m39.615308869s ago: executing program 6 (id=5115): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 8m39.547023217s ago: executing program 6 (id=5116): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x183301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) 8m38.993493874s ago: executing program 6 (id=5119): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000480)="af493fd55dc7df1aca2175e961f8917f108896209ba78db0b91c0f7ceaabcf947eacf215d89ccb6eae5011239f4af5766645d7a42403568dc81fa12baab00a8fe7bf8ef43308291617dad9189e71a918fa6fd59c6a5b92531501d8145fef50969b098d07b7ea8c3821a97a521a684d8b187165e570b3d0b506c69d8a92f920aa9b0d90f01eee50f903ddeb8f3b2f838c8e17602e65fdac1569d58f75d470e5916cfd6c5205d9e67942f73c268c6ab9c827c1c98c9f4b1056767cac524e8575aab7db4206950508c2d509b9242bcec66d6fdf659a7bd2cdc827880f95a476b5c263477fd385bae33944624942f3ffff4eb48906aade35a3", 0x0, 0x4}, 0x5f) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) 8m38.726045616s ago: executing program 35 (id=5119): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x80705864, &(0x7f00000003c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f0000000480)="af493fd55dc7df1aca2175e961f8917f108896209ba78db0b91c0f7ceaabcf947eacf215d89ccb6eae5011239f4af5766645d7a42403568dc81fa12baab00a8fe7bf8ef43308291617dad9189e71a918fa6fd59c6a5b92531501d8145fef50969b098d07b7ea8c3821a97a521a684d8b187165e570b3d0b506c69d8a92f920aa9b0d90f01eee50f903ddeb8f3b2f838c8e17602e65fdac1569d58f75d470e5916cfd6c5205d9e67942f73c268c6ab9c827c1c98c9f4b1056767cac524e8575aab7db4206950508c2d509b9242bcec66d6fdf659a7bd2cdc827880f95a476b5c263477fd385bae33944624942f3ffff4eb48906aade35a3", 0x0, 0x4}, 0x5f) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) 5.489972393s ago: executing program 2 (id=7368): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xd86, &(0x7f0000000140)={0x0, 0x2c32, 0x400, 0x1, 0x89}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000380)='./cgroup\x00', 0x2, 0x298f82}) io_uring_enter(r2, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) 5.41685705s ago: executing program 1 (id=7369): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0xbc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 5.415820545s ago: executing program 3 (id=7370): socket$netlink(0x10, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x300000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xbdb, &(0x7f0000000040)={0x0, 0x5cd0, 0x400, 0x2, 0x1bc}, &(0x7f0000002180)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x1, &(0x7f0000000140)=[{0x0}], 0x1}) io_uring_enter(r0, 0x847b9, 0xebd0, 0xa, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) 4.945290108s ago: executing program 3 (id=7371): prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='\\\x00') r0 = syz_open_dev$dri(&(0x7f0000002d40), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000002e80)={0x0, 0x0, 0x4, 0xfff, 0x8000}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfe33) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000140)={0x0, 0x6, 0x4, {0x9, @win={{0xe, 0xfffffffa, 0xe, 0x975}, 0x7, 0xc53, 0x0, 0x5, 0x0, 0xff}}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x2000c88c) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90) timer_create(0x3, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_DELETE(r7, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2000000000f4, 0x1, 0x2, '\x00', 0x8}}, 0x2a) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r8, &(0x7f0000001300)={0x2020}, 0x2020) 4.360730253s ago: executing program 8 (id=7374): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7ffff, &(0x7f0000006680)) setfsgid(0xee00) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 3.541529155s ago: executing program 2 (id=7375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x541b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xffff7fffffffc059, 0x3fa7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 3.540386653s ago: executing program 7 (id=7376): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000), 0x6, 0x2802) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001940)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.257132231s ago: executing program 7 (id=7377): syz_open_dev$swradio(0x0, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) 2.915262791s ago: executing program 3 (id=7378): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0802000000000000340012800e00010069703665727370616e00000020000280060002003002"], 0x54}}, 0x4) 2.796254948s ago: executing program 3 (id=7379): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x80000000000002, 0xffffffffffffeffe, 0x9, 0x3, 0x0, {0x40, 0x8, 0xe, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x126, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x200) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 2.761460358s ago: executing program 3 (id=7380): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000"], 0x0) 2.464384464s ago: executing program 2 (id=7381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240400c1}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.3081154s ago: executing program 8 (id=7382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.25328172s ago: executing program 8 (id=7383): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000100)=""/95) 2.039850831s ago: executing program 8 (id=7384): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) mmap(&(0x7f0000813000/0x1000)=nil, 0x1000, 0x1000004, 0x11, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="19e201"], 0x48}}, 0x90) 2.009039698s ago: executing program 2 (id=7385): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)}, {0x0}], 0x2, &(0x7f0000002400)}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.848351085s ago: executing program 2 (id=7386): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) socket$kcm(0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000c579e42bd7"], 0x0, 0x4, 0x0, 0x0, 0x40f00}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r4}, 0xc) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0xd) accept4(r3, 0x0, 0x0, 0x80800) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, 0x0) dup(r5) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) 1.664347507s ago: executing program 1 (id=7387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0x5}, {}, {0x1}}}, 0x24}}, 0x0) 1.596974922s ago: executing program 7 (id=7388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0xc000) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.49122385s ago: executing program 1 (id=7389): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)="8238", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f00000000c0)="014f52191fed07c25b4b245829b65c97ec454c95180289d2b70297b6", 0x1c, 0x20000044, 0x0, 0x0) 1.355768644s ago: executing program 1 (id=7390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b8001800000f23d00f21f8353000000e0f23f83e0fae8d001000000fd8e866baf80cb84a8cce8cef66bafc0cec26640f23dbc7442400b30d45d5c744240204000000c7442406000000000f011c2466baf80cb8dc759680ef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x74}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.312160297s ago: executing program 7 (id=7391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$fb0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x541b, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0xffff7fffffffc059, 0x3fa7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r6, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1.152084451s ago: executing program 1 (id=7392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$key(0xf, 0x3, 0x2) socket(0x2b, 0x80801, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket(0x2000000000000021, 0x2, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.137737701s ago: executing program 3 (id=7393): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setitimer(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3d, 0x301, 0x70bd25, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x7ffff, &(0x7f0000006680)) setfsgid(0xee00) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4004000) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000003c0)={0x1, {{0xa, 0x4e23, 0x8caa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}}, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, &(0x7f0000000140)) open$dir(&(0x7f0000000300)='./file0\x00', 0x20800, 0xf8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000000)={0x3fffffffffffff69, &(0x7f0000001ac0)=[{0x0, 0x1000}]}) 504.188603ms ago: executing program 1 (id=7394): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 389.363902ms ago: executing program 2 (id=7395): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x0, 0x7fffffffffffffef, 0x20002}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x9, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0xa, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000100)=""/95) 327.066449ms ago: executing program 7 (id=7396): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)}, {0x0}], 0x2, &(0x7f0000002400)}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 215.161565ms ago: executing program 7 (id=7397): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0xbc, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x31}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040840}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read$FUSE(r6, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x10000007, 0xfffc, 0xe655, 0x2, 0x85, 0x8, 0xff}, 0x9c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 174.820693ms ago: executing program 8 (id=7398): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0xa964c761d5ec79d1, 0x31, 0xffffffffffffffff, 0xcee90000) capset(0x0, 0x0) 0s ago: executing program 8 (id=7399): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) chroot(&(0x7f0000000000)='./file0/file0\x00') pivot_root(&(0x7f0000000380)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0x200000, 0xb2af, {0x0, 0x0, 0x0, 0xc, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x1000, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000280)='net/stat\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29018 comm="syz.2.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2077.200959][ T30] audit: type=1326 audit(1947.315:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29018 comm="syz.2.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2077.285289][ T30] audit: type=1326 audit(1947.315:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29018 comm="syz.2.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2077.309728][ T30] audit: type=1326 audit(1947.315:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29018 comm="syz.2.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2077.333469][ T30] audit: type=1326 audit(1947.315:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29018 comm="syz.2.6229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2077.442945][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 2077.455952][ T5818] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2077.465142][ T5818] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2077.489699][ T5818] usb 8-1: config 0 descriptor?? [ 2077.802437][ T5818] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2079.303261][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2082.128616][ T5818] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2082.139463][ T5818] usb 8-1: media controller created [ 2083.528202][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2083.609680][T29054] netlink: 92 bytes leftover after parsing attributes in process `syz.2.6242'. [ 2084.787617][ T5818] DVB: Unable to find symbol dib7000p_attach() [ 2084.912803][ T5818] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2085.147000][ T5818] rc_core: IR keymap rc-dib0700-rc5 not found [ 2085.153888][ T5818] Registered IR keymap rc-empty [ 2085.170148][ T5818] dvb-usb: could not initialize remote control. [ 2085.180306][ T5818] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2085.211513][ T5818] usb 8-1: USB disconnect, device number 39 [ 2085.257467][ T5818] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2085.296134][ T24] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2085.402783][T15449] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2085.449977][ T5922] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 2085.459057][ T5922] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 2085.467057][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 2085.472834][ T5922] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2085.489905][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2085.505488][ T24] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2085.515636][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2085.524838][ T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2085.534825][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.543404][ T24] usb 3-1: Product: syz [ 2085.547747][ T24] usb 3-1: Manufacturer: syz [ 2085.554478][ T24] usb 3-1: SerialNumber: syz [ 2085.567058][ T24] usb 3-1: config 0 descriptor?? [ 2085.575832][T15449] usb 2-1: Using ep0 maxpacket: 32 [ 2085.583650][T15449] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2085.607215][T15449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.619034][T15449] usb 2-1: config 0 descriptor?? [ 2086.089857][ T24] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 2086.557666][ T24] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 2086.566409][ T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 2086.596422][ T24] usb 3-1: USB disconnect, device number 113 [ 2086.608573][T15449] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2086.629779][T15449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2086.641383][T15449] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2086.651294][T15449] usb 2-1: media controller created [ 2086.670028][T15449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2086.734829][T15449] DVB: Unable to find symbol dib7000p_attach() [ 2086.742539][T15449] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2086.885179][T15449] rc_core: IR keymap rc-dib0700-rc5 not found [ 2086.885197][T15449] Registered IR keymap rc-empty [ 2086.885390][T15449] dvb-usb: could not initialize remote control. [ 2086.885398][T15449] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2087.197884][T15449] usb 2-1: USB disconnect, device number 119 [ 2087.915054][T15449] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2087.950744][ T24] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 2087.950780][ T24] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 2087.971954][ T24] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2088.289206][T15449] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 2089.310670][T29117] fido_id[29117]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2089.582741][T15449] usb 8-1: Using ep0 maxpacket: 32 [ 2089.601180][T15449] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 2089.601209][T15449] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2089.601229][T15449] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2089.601278][T15449] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2089.601300][T15449] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2089.601321][T15449] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 2089.601343][T15449] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2089.601377][T15449] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2089.601397][T15449] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.603478][T15449] usb 8-1: config 0 descriptor?? [ 2089.604335][T29113] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2090.278603][T15449] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2090.413968][T29127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2090.416840][T29129] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6264'. [ 2090.919855][ T5922] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 2091.100830][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 2091.113899][ T5922] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2091.113927][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.119935][ T5922] usb 9-1: config 0 descriptor?? [ 2091.349185][ T5922] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2091.355840][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2091.366360][ T5922] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2091.366423][ T5922] usb 9-1: media controller created [ 2091.388514][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2091.527295][ T5922] DVB: Unable to find symbol dib7000p_attach() [ 2091.552650][ T5922] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2091.558137][ T24] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 2091.572806][ T24] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 2091.572868][T22147] usb 8-1: USB disconnect, device number 40 [ 2091.605561][ T24] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2091.655072][T22147] usblp0: removed [ 2091.750154][T29149] fido_id[29149]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2091.810755][ T5922] rc_core: IR keymap rc-dib0700-rc5 not found [ 2091.816850][ T5922] Registered IR keymap rc-empty [ 2091.836794][T29157] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6275'. [ 2091.846334][ T5922] dvb-usb: could not initialize remote control. [ 2092.870387][ T5922] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2092.884172][ T5922] usb 9-1: USB disconnect, device number 30 [ 2092.937803][ T5922] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2093.385969][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'. [ 2093.410096][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'. [ 2093.422650][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'. [ 2093.436543][T29168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6278'. [ 2093.627964][T29172] netlink: 'syz.7.6280': attribute type 3 has an invalid length. [ 2094.686258][ T5922] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 2094.694012][ T5922] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 2094.729449][ T5922] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 2095.883851][T29203] lo speed is unknown, defaulting to 1000 [ 2097.536458][T29220] fuse: Bad value for 'fd' [ 2097.718928][T15449] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 2097.923749][T15449] usb 9-1: Using ep0 maxpacket: 32 [ 2097.925055][T15449] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2097.925081][T15449] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.926450][T15449] usb 9-1: config 0 descriptor?? [ 2098.149176][T15449] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2098.152766][T15449] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2098.155080][T15449] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2098.155123][T15449] usb 9-1: media controller created [ 2098.183677][T15449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2098.264056][T15449] DVB: Unable to find symbol dib7000p_attach() [ 2098.275316][T15449] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2098.361172][T15449] rc_core: IR keymap rc-dib0700-rc5 not found [ 2098.367705][T15449] Registered IR keymap rc-empty [ 2098.373116][T15449] dvb-usb: could not initialize remote control. [ 2098.379508][T15449] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2098.405527][T15449] usb 9-1: USB disconnect, device number 31 [ 2098.441345][T15449] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 2098.876570][T29244] netlink: 'syz.2.6297': attribute type 10 has an invalid length. [ 2101.601647][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2102.110834][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2102.110851][ T30] audit: type=1326 audit(1970.869:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.168299][ T30] audit: type=1326 audit(1970.869:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.219239][ T30] audit: type=1326 audit(1970.869:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.328128][T29273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6307'. [ 2102.351352][ T30] audit: type=1326 audit(1970.869:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.374865][ T30] audit: type=1326 audit(1970.869:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.398273][ T30] audit: type=1326 audit(1970.906:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.541335][ T30] audit: type=1326 audit(1970.906:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.628402][ T30] audit: type=1326 audit(1970.906:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.628448][ T30] audit: type=1326 audit(1970.906:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2102.629337][ T30] audit: type=1326 audit(1970.953:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29266 comm="syz.1.6305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2103.092476][T29274] lo speed is unknown, defaulting to 1000 [ 2105.456565][T29311] syzkaller0: entered promiscuous mode [ 2105.456580][T29311] syzkaller0: entered allmulticast mode [ 2108.590803][ T792] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 2108.619680][T29347] syzkaller0: entered promiscuous mode [ 2108.629122][T29347] syzkaller0: entered allmulticast mode [ 2108.763545][ T792] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2108.797063][ T792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.820516][ T792] usb 8-1: config 0 descriptor?? [ 2108.839624][T29359] fuse: Unknown parameter 'grou00000000000000000000' [ 2109.044296][ T792] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2109.444718][ T792] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 2109.468448][ T792] [drm] Initialized udl on minor 2 [ 2109.684759][ T792] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 2109.724943][T29369] SQUASHFS error: Failed to read block 0x0: -5 [ 2109.735509][ T792] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2109.895827][T15449] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2109.903724][T15449] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 2109.916964][ T792] usb 8-1: USB disconnect, device number 41 [ 2109.923927][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 2109.923943][ T30] audit: type=1400 audit(1978.174:1810): avc: denied { getopt } for pid=29352 comm="syz.8.6331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2110.750830][T29384] hpfs: hpfs_map_sector(): read error [ 2110.785519][ T30] audit: type=1400 audit(1978.988:1811): avc: denied { ioctl } for pid=29383 comm="syz.3.6339" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2110.970172][T29396] fuse: Unknown parameter 'grou00000000000000000000' [ 2110.974779][ T792] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2111.176727][ T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2111.216417][ T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2111.244997][ T792] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2111.277065][ T792] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2111.304532][ T792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.364268][ T792] usb 8-1: config 0 descriptor?? [ 2111.909726][ T792] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 2112.119799][ T5922] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 2112.335481][ T5922] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2112.345417][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2112.357609][ T5922] usb 3-1: config 0 descriptor?? [ 2112.587566][ T5922] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2112.811824][ T5922] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 2112.844786][ T5922] [drm] Initialized udl on minor 2 [ 2113.028823][ T5922] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 2113.047451][ T5922] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2113.071414][T25642] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2113.091918][ T5922] usb 3-1: USB disconnect, device number 114 [ 2113.108895][T25642] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2113.382398][ C0] plantronics 0003:047F:FFFF.002A: usb_submit_urb(ctrl) failed: -1 [ 2113.634003][T29429] fuse: Unknown parameter 'grou00000000000000000000' [ 2114.103380][T29455] netlink: 'syz.1.6360': attribute type 10 has an invalid length. [ 2115.493428][ T30] audit: type=1400 audit(1983.384:1812): avc: denied { write } for pid=29492 comm="syz.3.6364" path="socket:[114653]" dev="sockfs" ino=114653 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2115.551214][ T5922] usb 8-1: reset high-speed USB device number 42 using dummy_hcd [ 2115.630695][T29498] 9pnet_virtio: no channels available for device syz [ 2115.728586][ T5922] usb 8-1: device firmware changed [ 2115.806081][T25642] usb 8-1: USB disconnect, device number 42 [ 2115.984137][T29504] fuse: Unknown parameter 'group_i00000000000000000000' [ 2116.075951][T25642] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2116.236777][ T5922] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2116.268358][T25642] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2116.291106][T25642] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2117.294528][T25642] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2117.307535][T25642] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2117.316637][T25642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.327151][T25642] usb 8-1: config 0 descriptor?? [ 2118.323237][ T5922] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2118.347268][T25642] usb 8-1: can't set config #0, error -71 [ 2118.356364][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.369223][T29514] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2118.376723][T25642] usb 8-1: USB disconnect, device number 43 [ 2118.388347][ T5922] usb 2-1: config 0 descriptor?? [ 2118.597170][T14468] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 2118.631096][ T5922] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2118.810557][T14468] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 2118.825688][T14468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.833965][T14468] usb 3-1: Product: syz [ 2118.838194][T14468] usb 3-1: Manufacturer: syz [ 2118.842836][T14468] usb 3-1: SerialNumber: syz [ 2118.868213][ T5922] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 2118.875336][ T5922] [drm] Initialized udl on minor 2 [ 2119.064284][ T5922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 2119.075100][ T5922] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2119.088407][T25642] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2119.111456][ T5922] usb 2-1: USB disconnect, device number 120 [ 2119.119176][T25642] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 2119.198277][T14468] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2119.232113][T14468] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2119.240827][T14468] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 2119.248423][T14468] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 2119.261484][T14468] usb 3-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 2119.276378][T14468] usb 3-1: found format II with max.bitrate = 0, frame size=9 [ 2119.287598][T14468] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 2119.304377][T14468] usb 3-1: unit 5 not found! [ 2119.309100][T14468] usb 3-1: unit 2 not found! [ 2119.585267][T14468] usb 3-1: USB disconnect, device number 115 [ 2119.667324][T28015] udevd[28015]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2120.302575][T29514] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.338281][T29530] fuse: Bad value for 'fd' [ 2120.397051][T29514] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.452716][T29514] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2120.660639][T29475] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.700048][T29475] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.747939][T29475] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.787648][T29475] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.829056][T29552] fuse: Unknown parameter 'group_i00000000000000000000' [ 2120.841729][T29544] ptrace attach of "./syz-executor exec"[29546] was attempted by "./syz-executor exec"[29544] [ 2123.127646][ T30] audit: type=1400 audit(1990.531:1813): avc: denied { read append } for pid=29605 comm="syz.2.6387" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 2123.368286][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6387'. [ 2123.559139][T29611] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.6388'. [ 2123.659287][T29610] bridge_slave_1: left allmulticast mode [ 2123.686571][T29610] bridge_slave_1: left promiscuous mode [ 2123.706986][T29610] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.729594][T29610] bridge_slave_0: left allmulticast mode [ 2123.736441][T29610] bridge_slave_0: left promiscuous mode [ 2123.755974][T29610] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.009212][T29621] fuse: Unknown parameter 'group_i00000000000000000000' [ 2124.099466][T29625] Bluetooth: hci0: invalid len left 7, exp >= 100 [ 2125.784843][T29683] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.6401'. [ 2126.113253][T29699] overlayfs: failed to clone upperpath [ 2128.848435][T29756] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.6415'. [ 2129.071171][T29762] syzkaller0: entered promiscuous mode [ 2129.076782][T29762] syzkaller0: entered allmulticast mode [ 2129.989575][ T792] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2130.303378][ T792] usb 2-1: Using ep0 maxpacket: 32 [ 2130.314518][ T792] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2130.335425][ T792] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2130.345173][ T792] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2130.369566][ T792] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2130.393184][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.410196][ T792] usb 2-1: Product: syz [ 2130.414380][ T792] usb 2-1: Manufacturer: syz [ 2130.429950][ T792] usb 2-1: SerialNumber: syz [ 2130.437680][ T792] usb 2-1: config 0 descriptor?? [ 2130.885090][T29779] Set syz1 is full, maxelem 65536 reached [ 2130.982697][ T792] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 2131.256970][ T792] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2131.294787][ T792] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 2131.463628][ T792] usb 2-1: USB disconnect, device number 121 [ 2131.632480][T29793] pim6reg: entered allmulticast mode [ 2131.673915][T29795] team0: entered allmulticast mode [ 2131.679498][T29795] team_slave_0: entered allmulticast mode [ 2131.687521][T29795] team_slave_1: entered allmulticast mode [ 2131.695190][T29796] team0: left allmulticast mode [ 2131.700574][T29796] team_slave_0: left allmulticast mode [ 2131.707399][T29796] team_slave_1: left allmulticast mode [ 2131.713850][T29796] pim6reg: left allmulticast mode [ 2138.354611][T29858] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6446'. [ 2138.637654][T29860] fuse: Invalid rootmode [ 2138.924382][T29871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6452'. [ 2139.702642][T29905] 9p: Bad value for 'rfdno' [ 2139.897077][T29915] loop2: detected capacity change from 0 to 7 [ 2139.923600][T29861] Dev loop2: unable to read RDB block 7 [ 2139.929402][T29861] loop2: unable to read partition table [ 2139.935905][T29861] loop2: partition table beyond EOD, truncated [ 2139.962677][T29915] Dev loop2: unable to read RDB block 7 [ 2139.976966][T29915] loop2: unable to read partition table [ 2140.006032][T29915] loop2: partition table beyond EOD, truncated [ 2140.016450][T29915] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 2141.463652][T14468] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2142.194740][T14468] usb 8-1: Using ep0 maxpacket: 32 [ 2142.210701][T14468] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2142.233026][T14468] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2142.250466][T14468] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2142.260092][T14468] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2142.290332][T14468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2142.327765][T14468] usb 8-1: Product: syz [ 2142.342586][T14468] usb 8-1: Manufacturer: syz [ 2142.356173][T14468] usb 8-1: SerialNumber: syz [ 2142.375832][T14468] usb 8-1: config 0 descriptor?? [ 2143.211805][T14468] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 2143.534423][T14468] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2143.548872][T14468] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 2143.612533][T29968] loop2: detected capacity change from 0 to 7 [ 2143.623539][T29968] Dev loop2: unable to read RDB block 7 [ 2143.630792][T29968] loop2: unable to read partition table [ 2143.637907][T29968] loop2: partition table beyond EOD, truncated [ 2143.644821][T29968] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 2143.713873][ T792] usb 8-1: USB disconnect, device number 44 [ 2143.751794][ T30] audit: type=1400 audit(526297.830:1814): avc: denied { write } for pid=29969 comm="syz.3.6488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2145.320925][T29993] syzkaller0: entered promiscuous mode [ 2145.338633][T29997] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6497'. [ 2145.348069][T29993] syzkaller0: entered allmulticast mode [ 2149.846197][ T24] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2150.014028][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 2150.027261][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2150.051857][ T24] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2150.084462][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2150.125092][ T24] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2150.148909][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.186115][ T24] usb 4-1: Product: syz [ 2150.192429][ T24] usb 4-1: Manufacturer: syz [ 2150.222140][ T24] usb 4-1: SerialNumber: syz [ 2150.273749][ T24] usb 4-1: config 0 descriptor?? [ 2150.749615][ T24] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 2150.973861][ T24] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2151.001383][ T24] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 2151.194951][T14468] usb 4-1: USB disconnect, device number 112 [ 2153.059038][T30078] syzkaller0: entered promiscuous mode [ 2153.077411][T30078] syzkaller0: entered allmulticast mode [ 2155.465622][ T24] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2155.626694][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 2155.651332][ T24] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2155.675192][ T24] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2155.715149][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2155.749593][ T24] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2155.780814][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.805486][ T24] usb 8-1: Product: syz [ 2155.827210][ T24] usb 8-1: Manufacturer: syz [ 2155.854051][ T24] usb 8-1: SerialNumber: syz [ 2155.873193][ T24] usb 8-1: config 0 descriptor?? [ 2156.322089][ T24] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 2156.537719][ T24] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2156.546667][ T24] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 2156.761308][ T24] usb 8-1: USB disconnect, device number 45 [ 2157.229295][T30120] loop2: detected capacity change from 0 to 7 [ 2157.251984][T30120] Dev loop2: unable to read RDB block 7 [ 2157.257601][T30120] loop2: AHDI p1 p2 [ 2157.262620][T30120] loop2: partition table partially beyond EOD, truncated [ 2157.270116][T30120] loop2: p1 start 1818582900 is beyond EOD, truncated [ 2157.452053][T30130] syzkaller0: entered promiscuous mode [ 2157.464456][T30130] syzkaller0: entered allmulticast mode [ 2158.184246][T30152] fuse: Unknown parameter '0x0000000000000003' [ 2158.630851][T25642] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2158.845067][T30158] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6545'. [ 2158.878401][T25642] usb 3-1: Using ep0 maxpacket: 32 [ 2158.900430][T25642] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2158.934022][T25642] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2158.954860][T25642] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2158.978266][T25642] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2159.007358][T25642] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.037012][T25642] usb 3-1: Product: syz [ 2159.046725][T25642] usb 3-1: Manufacturer: syz [ 2159.056885][T25642] usb 3-1: SerialNumber: syz [ 2159.070818][T25642] usb 3-1: config 0 descriptor?? [ 2159.208066][ T792] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2159.235286][T30162] syzkaller0: entered promiscuous mode [ 2159.249365][T30162] syzkaller0: entered allmulticast mode [ 2159.390651][ T792] usb 9-1: Using ep0 maxpacket: 32 [ 2159.402347][ T792] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2159.420333][ T792] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2159.445172][ T792] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2159.452466][T30164] syzkaller0: entered promiscuous mode [ 2159.453837][ T792] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2159.467168][T30164] syzkaller0: entered allmulticast mode [ 2159.474046][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.493548][ T792] usb 9-1: Product: syz [ 2159.516548][ T792] usb 9-1: Manufacturer: syz [ 2159.521188][ T792] usb 9-1: SerialNumber: syz [ 2159.537001][T25642] gs_usb 3-1:0.0: Configuring for 14 interfaces [ 2159.540916][ T792] usb 9-1: config 0 descriptor?? [ 2159.898209][T25642] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 2159.925954][T25642] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 2159.958882][T25642] usb 3-1: USB disconnect, device number 116 [ 2159.999724][ T792] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 2160.214028][ T792] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2160.232781][ T792] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -121 [ 2160.433340][T25642] usb 9-1: USB disconnect, device number 32 [ 2160.577161][T30188] syzkaller0: entered promiscuous mode [ 2160.583006][T30188] syzkaller0: entered allmulticast mode [ 2164.046554][T30226] syzkaller0: entered promiscuous mode [ 2164.075923][T30226] syzkaller0: entered allmulticast mode [ 2164.125768][T30224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6568'. [ 2164.146167][T30224] bridge_slave_0: default FDB implementation only supports local addresses [ 2164.444222][T14468] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2164.657973][T14468] usb 8-1: Using ep0 maxpacket: 32 [ 2164.666431][T30247] fuse: Unknown parameter 'user_i00000000000000000000' [ 2164.705966][T14468] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2164.794845][T14468] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2164.809409][T14468] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2164.823650][T14468] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2164.834056][T14468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.842427][T14468] usb 8-1: Product: syz [ 2164.847735][T14468] usb 8-1: Manufacturer: syz [ 2164.854827][T14468] usb 8-1: SerialNumber: syz [ 2164.887391][T14468] usb 8-1: config 0 descriptor?? [ 2166.353892][T14468] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 2166.586584][T14468] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2166.595404][T14468] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 2166.799698][T30273] syzkaller0: entered promiscuous mode [ 2166.805199][ T5922] usb 8-1: USB disconnect, device number 46 [ 2166.819281][T30273] syzkaller0: entered allmulticast mode [ 2166.930030][T14468] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2167.130562][T14468] usb 4-1: no configurations [ 2167.137886][T14468] usb 4-1: can't read configurations, error -22 [ 2167.215427][T30283] fuse: Unknown parameter 'user_i00000000000000000000' [ 2167.280082][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2167.330819][T14468] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2167.426746][T30288] netlink: 124 bytes leftover after parsing attributes in process `syz.7.6591'. [ 2167.524027][T14468] usb 4-1: no configurations [ 2167.545771][T14468] usb 4-1: can't read configurations, error -22 [ 2167.565559][T14468] usb usb4-port1: attempt power cycle [ 2167.834511][T30296] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6593'. [ 2168.078809][T14468] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2168.106153][T14468] usb 4-1: no configurations [ 2168.111670][T14468] usb 4-1: can't read configurations, error -22 [ 2168.183761][ T30] audit: type=1326 audit(526320.676:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.212878][ T30] audit: type=1326 audit(526320.686:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.257862][ T30] audit: type=1326 audit(526320.704:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.281262][T14468] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2168.310196][ T30] audit: type=1326 audit(526320.704:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.334641][T14468] usb 4-1: no configurations [ 2168.339357][T14468] usb 4-1: can't read configurations, error -22 [ 2168.346450][ T30] audit: type=1326 audit(526320.704:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.373923][T14468] usb usb4-port1: unable to enumerate USB device [ 2168.406550][ T30] audit: type=1326 audit(526320.704:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.430573][ T30] audit: type=1326 audit(526320.704:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.455154][ T30] audit: type=1326 audit(526320.704:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.479134][ T30] audit: type=1326 audit(526320.704:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2168.503585][ T30] audit: type=1326 audit(526320.704:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30300 comm="syz.8.6595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2169.121878][T30314] loop2: detected capacity change from 0 to 7 [ 2169.138574][T29861] Dev loop2: unable to read RDB block 7 [ 2169.157603][T29861] loop2: AHDI p1 p2 [ 2169.173808][T29861] loop2: partition table partially beyond EOD, truncated [ 2169.204310][T29861] loop2: p1 start 1818582900 is beyond EOD, truncated [ 2169.238184][T30314] Dev loop2: unable to read RDB block 7 [ 2169.264117][T30314] loop2: AHDI p1 p2 [ 2169.279522][T30314] loop2: partition table partially beyond EOD, truncated [ 2169.303220][T30314] loop2: p1 start 1818582900 is beyond EOD, truncated [ 2169.644922][T30320] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2169.659947][T30320] syzkaller1: Refused to change device type [ 2169.741403][T30322] syzkaller0: entered promiscuous mode [ 2169.747224][T30322] syzkaller0: entered allmulticast mode [ 2172.878281][T30353] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6609'. [ 2172.895497][T30356] fuse: Unknown parameter 'user_id00000000000000000000' [ 2173.594030][ T5818] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2174.714357][ T5818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.731938][ T5818] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2174.781237][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.863896][ T5818] usb 4-1: config 0 descriptor?? [ 2174.881650][ T5818] pwc: Askey VC010 type 2 USB webcam detected. [ 2174.948767][T30384] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6624'. [ 2174.988645][T30387] fuse: Unknown parameter 'user_id00000000000000000000' [ 2175.231929][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6628'. [ 2175.400467][ T5818] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2175.413310][ T5818] pwc: recv_control_msg error -32 req 02 val 2700 [ 2175.541243][ T5818] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2175.563355][ T5818] pwc: recv_control_msg error -32 req 04 val 1000 [ 2175.635180][ T5818] pwc: recv_control_msg error -32 req 04 val 1300 [ 2175.775513][ T5818] pwc: recv_control_msg error -71 req 04 val 1400 [ 2175.798544][ T5818] pwc: recv_control_msg error -71 req 02 val 2000 [ 2175.828392][ T5818] pwc: recv_control_msg error -71 req 02 val 2100 [ 2175.855687][ T5818] pwc: recv_control_msg error -71 req 04 val 1500 [ 2175.867065][ T5818] pwc: recv_control_msg error -71 req 02 val 2500 [ 2175.898601][ T5818] pwc: recv_control_msg error -71 req 02 val 2400 [ 2175.921819][ T5818] pwc: recv_control_msg error -71 req 02 val 2600 [ 2175.958876][ T5818] pwc: recv_control_msg error -71 req 02 val 2900 [ 2175.989591][ T5818] pwc: recv_control_msg error -71 req 02 val 2800 [ 2176.014563][ T5818] pwc: recv_control_msg error -71 req 04 val 1100 [ 2176.040111][ T5818] pwc: recv_control_msg error -71 req 04 val 1200 [ 2176.098301][ T5818] pwc: Registered as video103. [ 2176.124014][ T5818] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input54 [ 2176.259603][ T5818] usb 4-1: USB disconnect, device number 117 [ 2176.755224][T30426] fuse: Bad value for 'fd' [ 2177.426098][T30457] fuse: Bad value for 'fd' [ 2177.796575][ T5818] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2178.010207][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 2178.031848][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2178.092037][ T5818] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2178.186435][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2178.241303][T30479] syzkaller0: entered promiscuous mode [ 2178.257209][ T5818] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2178.270661][T30479] syzkaller0: entered allmulticast mode [ 2178.313987][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.331587][ T5818] usb 3-1: Product: syz [ 2178.343690][ T5818] usb 3-1: Manufacturer: syz [ 2178.354820][ T5818] usb 3-1: SerialNumber: syz [ 2178.381328][ T5818] usb 3-1: config 0 descriptor?? [ 2178.653139][ T30] kauditd_printk_skb: 370 callbacks suppressed [ 2178.653155][ T30] audit: type=1326 audit(526330.481:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2178.720723][ T30] audit: type=1326 audit(526330.481:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2178.783211][ T30] audit: type=1326 audit(526330.481:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2178.833065][ T5818] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 2178.847253][ T30] audit: type=1326 audit(526330.481:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2178.921132][ T30] audit: type=1326 audit(526330.509:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2178.921214][T30491] fuse: Bad value for 'fd' [ 2178.998969][ T30] audit: type=1326 audit(526330.509:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2179.048321][ T5818] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 2179.071790][ T5818] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 2179.091400][ T30] audit: type=1326 audit(526330.509:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2179.175405][ T30] audit: type=1326 audit(526330.509:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2179.231033][ T30] audit: type=1326 audit(526330.509:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2179.270546][ T5818] usb 3-1: USB disconnect, device number 117 [ 2179.296429][ T30] audit: type=1326 audit(526330.509:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30482 comm="syz.1.6660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a3959c799 code=0x7ffc0000 [ 2179.499868][T30500] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6666'. [ 2179.598673][T30501] /dev/nullb0: Can't open blockdev [ 2179.770849][T30507] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6669'. [ 2180.294625][T30520] fuse: Unknown parameter '0x0000000000000003' [ 2183.223792][T30555] fuse: Unknown parameter '0x0000000000000003' [ 2183.631983][T14468] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2183.920888][T14468] usb 4-1: Using ep0 maxpacket: 32 [ 2183.932185][T14468] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2183.959813][T14468] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2183.976286][T14468] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2183.993389][T14468] usb 4-1: Product: syz [ 2184.007715][T14468] usb 4-1: Manufacturer: syz [ 2184.024353][T14468] usb 4-1: SerialNumber: syz [ 2184.050878][T14468] usb 4-1: config 0 descriptor?? [ 2184.084473][T30567] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2184.678358][ T5818] usb 4-1: USB disconnect, device number 118 [ 2184.847865][T30581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6694'. [ 2185.826981][T30591] fuse: Unknown parameter '0x0000000000000003' [ 2187.455252][T30613] fuse: Unknown parameter 'user_i00000000000000000000' [ 2188.857105][T30637] syzkaller0: entered promiscuous mode [ 2188.931836][T30637] syzkaller0: entered allmulticast mode [ 2189.878082][T30654] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 2189.911874][T30654] syzkaller1: linktype set to 260 [ 2190.934942][T30662] fuse: Unknown parameter 'user_i00000000000000000000' [ 2192.295788][T30671] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6721'. [ 2192.612766][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 2192.612808][ T30] audit: type=1800 audit(526343.541:2356): pid=30679 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.6723" name="bus" dev="overlay" ino=1433 res=0 errno=0 [ 2193.704934][T30696] loop2: detected capacity change from 0 to 7 [ 2193.720141][T30696] Dev loop2: unable to read RDB block 7 [ 2193.734645][T30696] loop2: unable to read partition table [ 2193.822470][T30696] loop2: partition table beyond EOD, truncated [ 2193.844977][T30696] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 2196.898746][T30723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6736'. [ 2197.019957][T30745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6745'. [ 2197.259587][T14468] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 2197.409243][T14468] usb 4-1: device descriptor read/64, error -71 [ 2197.729929][T14468] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2197.891051][T14468] usb 4-1: device descriptor read/64, error -71 [ 2198.019614][T14468] usb usb4-port1: attempt power cycle [ 2198.414024][T14468] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2198.479469][T14468] usb 4-1: device descriptor read/8, error -71 [ 2198.724671][T30775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6753'. [ 2198.778448][T14468] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2198.832451][T14468] usb 4-1: device descriptor read/8, error -71 [ 2198.950248][T14468] usb usb4-port1: unable to enumerate USB device [ 2199.149526][T30782] loop2: detected capacity change from 0 to 7 [ 2199.159092][T29861] Dev loop2: unable to read RDB block 7 [ 2199.166949][T29861] loop2: unable to read partition table [ 2199.173498][T29861] loop2: partition table beyond EOD, truncated [ 2199.181298][T30782] Dev loop2: unable to read RDB block 7 [ 2199.190907][T30782] loop2: unable to read partition table [ 2199.197308][T30782] loop2: partition table beyond EOD, truncated [ 2199.213222][T30782] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 2199.824977][ T5818] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2199.985534][ T5818] usb 3-1: device descriptor read/64, error -71 [ 2200.253465][ T5818] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2200.370438][T14468] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 2200.487764][ T5818] usb 3-1: device descriptor read/64, error -71 [ 2200.642972][ T5818] usb usb3-port1: attempt power cycle [ 2200.659016][T14468] usb 8-1: Using ep0 maxpacket: 32 [ 2200.666047][T14468] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2200.678748][T14468] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2200.688680][T14468] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2201.840844][T14468] usb 8-1: Product: syz [ 2201.845196][T14468] usb 8-1: Manufacturer: syz [ 2201.849837][T14468] usb 8-1: SerialNumber: syz [ 2201.856848][T14468] usb 8-1: config 0 descriptor?? [ 2201.864157][T30802] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2201.917384][ T5818] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2201.988544][ T5818] usb 3-1: device descriptor read/8, error -71 [ 2202.240826][ T5818] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2202.273272][ T5818] usb 3-1: device descriptor read/8, error -71 [ 2202.401290][ T5818] usb usb3-port1: unable to enumerate USB device [ 2202.551439][ T30] audit: type=1400 audit(526352.840:2357): avc: denied { create } for pid=30844 comm="syz.8.6777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2202.808055][T30850] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2202.835933][T30850] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2203.235728][T30861] usb usb1: usbfs: process 30861 (syz.2.6782) did not claim interface 0 before use [ 2203.345924][T14468] usb 8-1: USB disconnect, device number 47 [ 2203.566179][ T792] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2204.496417][ T792] usb 3-1: Using ep0 maxpacket: 16 [ 2204.510742][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2204.550667][ T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.590286][ T792] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2204.633199][ T792] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2204.673948][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.705885][ T792] usb 3-1: config 0 descriptor?? [ 2204.716820][T30892] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2204.744743][T30892] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2205.178700][ T792] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.002B/input/input55 [ 2205.309414][ T792] appleir 0003:05AC:8241.002B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 2205.474896][T14468] usb 3-1: USB disconnect, device number 122 [ 2205.525400][T30902] fido_id[30902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2205.683141][T25642] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2205.990553][T30921] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6800'. [ 2206.005125][T25642] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2206.057646][T25642] usb 9-1: can't read configurations, error -61 [ 2206.260976][T25642] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2206.443651][T25642] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2206.460653][T25642] usb 9-1: can't read configurations, error -61 [ 2206.488892][T25642] usb usb9-port1: attempt power cycle [ 2206.633202][T30946] batman_adv: batadv0: Adding interface: gretap1 [ 2206.639596][T30946] batman_adv: batadv0: Interface activated: gretap1 [ 2206.720798][T30949] syzkaller0: entered promiscuous mode [ 2206.740579][T30949] syzkaller0: entered allmulticast mode [ 2206.897040][T25642] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2206.952638][T25642] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2206.984482][T25642] usb 9-1: can't read configurations, error -61 [ 2207.182313][T25642] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 2207.384459][T30965] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6816'. [ 2207.414610][T25642] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 2207.422211][T25642] usb 9-1: can't read configurations, error -61 [ 2207.445375][T25642] usb usb9-port1: unable to enumerate USB device [ 2210.533746][T31002] fuse: Unknown parameter 'fd0x0000000000000003' [ 2211.028049][T31010] fuse: Bad value for 'fd' [ 2211.519428][T31037] syzkaller0: entered promiscuous mode [ 2211.535730][T31037] syzkaller0: entered allmulticast mode [ 2212.382900][T31041] syzkaller0: entered promiscuous mode [ 2212.389405][T31041] syzkaller0: entered allmulticast mode [ 2213.739835][T31054] fuse: Bad value for 'fd' [ 2217.864666][T31094] fuse: Bad value for 'fd' [ 2218.096267][T31097] Invalid option length (598) for dns_resolver key [ 2218.117582][T31105] pim6reg: entered allmulticast mode [ 2218.138588][T31105] team0: entered allmulticast mode [ 2218.144326][T31105] team_slave_0: entered allmulticast mode [ 2218.164267][T31105] team_slave_1: entered allmulticast mode [ 2218.195661][T31108] team0: left allmulticast mode [ 2218.221436][T31108] team_slave_0: left allmulticast mode [ 2218.241242][T31108] team_slave_1: left allmulticast mode [ 2218.263057][T31108] pim6reg: left allmulticast mode [ 2218.947697][ T5818] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2218.955343][ T24] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2219.183020][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 2219.191717][T31120] syzkaller0: entered promiscuous mode [ 2219.205473][ T24] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2219.217911][T31120] syzkaller0: entered allmulticast mode [ 2219.236349][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.253643][ T24] usb 3-1: Product: syz [ 2219.266367][ T24] usb 3-1: Manufacturer: syz [ 2219.280213][ T24] usb 3-1: SerialNumber: syz [ 2219.287740][ T24] usb 3-1: config 0 descriptor?? [ 2219.306297][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 2219.333009][ T5818] usb 8-1: Using ep0 maxpacket: 32 [ 2219.368975][ T5818] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.391541][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2219.510501][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2219.522604][ T5818] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 2219.535912][ T5818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2219.546916][ T5818] usb 8-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 2219.583950][ T5818] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2219.596142][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2219.633122][ T5818] usb 8-1: Product: syz [ 2219.649551][ T5818] usb 8-1: Manufacturer: syz [ 2219.654627][ T5818] usb 8-1: SerialNumber: syz [ 2219.680476][ T5818] usb 8-1: config 0 descriptor?? [ 2219.964244][ T24] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 2220.301470][T31138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.361938][T31138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.571376][ T5818] usb 8-1: can't set config #0, error -71 [ 2220.623117][ T5818] usb 8-1: USB disconnect, device number 48 [ 2220.673732][T31141] netlink: 'syz.7.6866': attribute type 5 has an invalid length. [ 2221.314544][T31153] overlayfs: failed to resolve './file0': -2 [ 2221.417355][ T5818] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2221.619970][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 2221.634292][ T5818] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2221.642638][T31157] syzkaller0: entered promiscuous mode [ 2221.654106][T31157] syzkaller0: entered allmulticast mode [ 2221.673862][ T5818] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2221.712075][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2221.738190][ T5818] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2221.766112][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.799288][ T5818] usb 2-1: Product: syz [ 2221.819634][ T5818] usb 2-1: Manufacturer: syz [ 2221.836951][ T5818] usb 2-1: SerialNumber: syz [ 2221.837563][ T5922] usb 3-1: USB disconnect, device number 123 [ 2221.855626][ T5818] usb 2-1: config 0 descriptor?? [ 2222.343694][ T5818] gs_usb 2-1:0.0: Configuring for 14 interfaces [ 2222.580356][ T5818] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 2222.622269][ T5818] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 2222.710649][ T5818] usb 2-1: USB disconnect, device number 122 [ 2223.448007][ T30] audit: type=1326 audit(526372.365:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.556253][ T30] audit: type=1326 audit(526372.365:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.613025][ T30] audit: type=1326 audit(526372.365:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.681194][ T30] audit: type=1326 audit(526372.365:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.681230][ T30] audit: type=1326 audit(526372.365:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.681252][ T30] audit: type=1326 audit(526372.365:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.681276][ T30] audit: type=1326 audit(526372.365:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.681312][ T30] audit: type=1326 audit(526372.365:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.681346][ T30] audit: type=1326 audit(526372.374:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.682766][ T30] audit: type=1326 audit(526372.411:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31183 comm="syz.2.6882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34dd79c799 code=0x7ffc0000 [ 2223.976444][T31195] syzkaller0: entered promiscuous mode [ 2223.976490][T31195] syzkaller0: entered allmulticast mode [ 2225.697920][T31233] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 2225.709278][T31233] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 2227.740595][T31253] syzkaller0: entered promiscuous mode [ 2227.768471][T31253] syzkaller0: entered allmulticast mode [ 2228.130484][ T5818] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 2228.359893][ T5818] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2228.754121][ T5818] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2228.923431][ T5818] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2228.984820][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 2229.040166][ T5818] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2229.143386][T31274] netlink: 'syz.8.6908': attribute type 10 has an invalid length. [ 2229.288334][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2229.369359][ T5818] usb 2-1: Product: syz [ 2229.396726][ T5818] usb 2-1: Manufacturer: syz [ 2229.579396][ T5818] cdc_wdm 2-1:1.0: skipping garbage [ 2229.596564][ T5818] cdc_wdm 2-1:1.0: skipping garbage [ 2229.640442][ T5818] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2229.976747][ T5818] usb 2-1: USB disconnect, device number 123 [ 2230.137957][T31285] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6910'. [ 2231.660361][T31317] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 2231.700464][T31317] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 2231.926763][T31308] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2231.995953][T31324] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6916'. [ 2232.344854][T31333] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6925'. [ 2232.921853][T31346] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6929'. [ 2232.945962][T31308] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 2232.959932][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2235.756985][T31373] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.6938'. [ 2236.062483][ T5818] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 2236.120564][T31393] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6945'. [ 2236.242699][ T5818] usb 2-1: Using ep0 maxpacket: 32 [ 2236.267371][ T5818] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2236.283910][ T5818] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2236.294383][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2236.303429][ T5818] usb 2-1: Product: syz [ 2236.310651][ T5818] usb 2-1: Manufacturer: syz [ 2236.318984][ T5818] usb 2-1: SerialNumber: syz [ 2236.338068][ T5818] usb 2-1: config 0 descriptor?? [ 2236.344516][T31376] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2237.411584][T31407] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6948'. [ 2237.573856][T31412] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.6951'. [ 2237.874904][T31425] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 2237.928151][T31425] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 2238.516438][T14468] usb 2-1: USB disconnect, device number 124 [ 2239.422814][T31437] syzkaller0: entered promiscuous mode [ 2239.441780][T31437] syzkaller0: entered allmulticast mode [ 2239.514420][ T792] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2240.162368][ T792] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 2240.207145][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 2240.311299][ T792] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 2240.374795][T31455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2240.399486][T31455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2240.418242][T31455] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2240.439646][T31455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2240.451396][T31455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2240.469616][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2240.480239][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2240.489200][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2240.506924][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2240.526644][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2240.527446][T31458] loop8: detected capacity change from 0 to 7 [ 2240.542989][T31458] Dev loop8: unable to read RDB block 7 [ 2240.548709][T31458] loop8: unable to read partition table [ 2240.568980][T31458] loop8: partition table beyond EOD, truncated [ 2240.613108][T31458] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2240.703812][ T792] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2240.719651][ T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.728226][ T792] usb 9-1: Product: syz [ 2240.732927][ T792] usb 9-1: Manufacturer: syz [ 2240.737631][ T792] usb 9-1: SerialNumber: syz [ 2240.759074][ T792] usb 9-1: config 0 descriptor?? [ 2240.820074][T31434] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2241.055414][T31434] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2242.703284][ T5132] Bluetooth: hci5: command tx timeout [ 2242.923326][ T5818] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2243.005671][T14468] usb 9-1: USB disconnect, device number 37 [ 2243.096767][ T5818] usb 3-1: Using ep0 maxpacket: 32 [ 2243.120425][ T5818] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2243.159609][ T5818] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2243.168698][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2243.180010][ T5818] usb 3-1: Product: syz [ 2243.191047][ T5818] usb 3-1: Manufacturer: syz [ 2243.196020][ T5818] usb 3-1: SerialNumber: syz [ 2243.218686][ T5818] usb 3-1: config 0 descriptor?? [ 2243.224587][T31478] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2244.943516][ T5132] Bluetooth: hci5: command tx timeout [ 2245.697584][T31454] lo speed is unknown, defaulting to 1000 [ 2245.837719][ T5818] usb 3-1: USB disconnect, device number 124 [ 2245.895690][ T30] kauditd_printk_skb: 168 callbacks suppressed [ 2245.895706][ T30] audit: type=1400 audit(526393.386:2536): avc: denied { name_bind 0x1000000 } for pid=31503 comm="syz.1.6977" path="socket:[124562]" dev="sockfs" ino=124562 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 2246.091773][T31454] chnl_net:caif_netlink_parms(): no params data found [ 2246.534168][T31454] bridge0: port 1(bridge_slave_0) entered blocking state [ 2246.536216][ T5818] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 2246.552230][T31454] bridge0: port 1(bridge_slave_0) entered disabled state [ 2246.572776][T31454] bridge_slave_0: entered allmulticast mode [ 2246.622247][T31454] bridge_slave_0: entered promiscuous mode [ 2246.670122][T31454] bridge0: port 2(bridge_slave_1) entered blocking state [ 2246.686771][T31454] bridge0: port 2(bridge_slave_1) entered disabled state [ 2246.703953][T31454] bridge_slave_1: entered allmulticast mode [ 2246.720526][T31454] bridge_slave_1: entered promiscuous mode [ 2246.801326][T31454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2246.864289][T31454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2246.933875][T31454] team0: Port device team_slave_0 added [ 2246.944471][T31454] team0: Port device team_slave_1 added [ 2247.109098][T31454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2247.132021][T31454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2247.159360][ T5132] Bluetooth: hci5: command tx timeout [ 2247.264252][T31454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2247.373101][T31454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2247.401137][T31454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2247.556116][T31454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2247.821409][T31454] hsr_slave_0: entered promiscuous mode [ 2247.827913][T31454] hsr_slave_1: entered promiscuous mode [ 2247.880995][ T5818] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 2247.898913][ T5818] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 2247.905033][T31454] debugfs: 'hsr0' already exists in 'hsr' [ 2247.938838][ T5818] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 2248.004084][T31454] Cannot create hsr debugfs directory [ 2248.025420][ T5818] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2248.038818][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.048413][ T5818] usb 9-1: Product: syz [ 2248.056429][ T5818] usb 9-1: Manufacturer: syz [ 2248.061163][ T5818] usb 9-1: SerialNumber: syz [ 2248.072422][ T5818] usb 9-1: config 0 descriptor?? [ 2248.355206][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 2248.372457][T31515] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2248.423903][T31454] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.467014][T31454] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.526904][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2248.534510][T31454] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.549306][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2248.571326][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2248.580524][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2248.598230][ T24] usb 2-1: Product: syz [ 2248.613831][ T24] usb 2-1: Manufacturer: syz [ 2248.623768][ T24] usb 2-1: SerialNumber: syz [ 2248.636783][T31454] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2248.652039][ T24] usb 2-1: config 0 descriptor?? [ 2248.668403][T31554] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2248.749145][T31515] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2249.128943][T31562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6993'. [ 2249.151612][T31562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6993'. [ 2249.168604][T31562] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6993'. [ 2249.380560][ T5132] Bluetooth: hci5: command tx timeout [ 2250.020924][ T24] usb 2-1: USB disconnect, device number 125 [ 2250.879540][ T24] usb 9-1: USB disconnect, device number 38 [ 2251.498492][T31567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6994'. [ 2251.632297][T31588] fuse: Unknown parameter 'user_id00000000000000000000' [ 2251.794211][T31454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2251.850882][T31454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2251.875730][T31454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2251.899443][T31454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2252.082729][T31454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2252.170257][T31454] 8021q: adding VLAN 0 to HW filter on device team0 [ 2252.223409][T11320] bridge0: port 1(bridge_slave_0) entered blocking state [ 2252.230495][T11320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2252.304647][T11320] bridge0: port 2(bridge_slave_1) entered blocking state [ 2252.311757][T11320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2252.816102][T31622] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7009'. [ 2254.315126][T31454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2254.522120][T31634] fuse: Unknown parameter 'grou00000000000000000000' [ 2254.549041][T31454] veth0_vlan: entered promiscuous mode [ 2254.630529][T31454] veth1_vlan: entered promiscuous mode [ 2254.656768][T31454] veth0_macvtap: entered promiscuous mode [ 2254.685549][T31454] veth1_macvtap: entered promiscuous mode [ 2254.753006][T31454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2254.773393][T31454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2254.811635][T14852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.874292][T14852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.904855][T14852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2254.953306][T14852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.039302][T31648] lo speed is unknown, defaulting to 1000 [ 2255.121812][T31655] loop8: detected capacity change from 0 to 7 [ 2255.156510][T31655] Dev loop8: unable to read RDB block 7 [ 2255.169146][T31655] loop8: unable to read partition table [ 2255.193424][ T30] audit: type=1400 audit(526402.077:2537): avc: denied { write } for pid=31651 comm="syz.1.7019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2255.215252][T31655] loop8: partition table beyond EOD, truncated [ 2255.239708][T31655] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2255.284785][T29477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.319558][T29477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2255.444907][T29472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.485246][T29472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.872947][T31673] fuse: Unknown parameter 'grou00000000000000000000' [ 2257.280479][T31455] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2257.293723][T31455] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2257.317637][T31455] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2257.326948][T31455] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2257.335673][T31455] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2257.563285][T31676] lo speed is unknown, defaulting to 1000 [ 2257.928025][T29477] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.109881][T29477] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.311899][T29477] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.549909][T29477] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.794629][T31676] chnl_net:caif_netlink_parms(): no params data found [ 2259.067962][T31709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7032'. [ 2259.095919][T13895] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2259.153069][T31676] bridge0: port 1(bridge_slave_0) entered blocking state [ 2259.267202][T13895] usb 8-1: Using ep0 maxpacket: 8 [ 2259.344443][T31716] 9p: Bad value for 'rfdno' [ 2259.545529][T31676] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.555493][T31455] Bluetooth: hci2: command tx timeout [ 2259.725424][T31676] bridge_slave_0: entered allmulticast mode [ 2260.199384][T31676] bridge_slave_0: entered promiscuous mode [ 2260.367828][T13895] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 2260.376388][T13895] usb 8-1: config 0 has no interface number 0 [ 2260.386805][T13895] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2260.403586][T13895] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2260.415442][T13895] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2260.436857][T13895] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2260.453433][T13895] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2260.457884][T31676] bridge0: port 2(bridge_slave_1) entered blocking state [ 2260.462652][T13895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2260.517492][T13895] usb 8-1: config 0 descriptor?? [ 2260.530424][T31676] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.530824][T13895] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2260.537655][T31676] bridge_slave_1: entered allmulticast mode [ 2260.622243][T31676] bridge_slave_1: entered promiscuous mode [ 2260.692386][T29477] bridge_slave_1: left allmulticast mode [ 2260.700462][T29477] bridge_slave_1: left promiscuous mode [ 2260.706114][T29477] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.725702][T29477] bridge_slave_0: left allmulticast mode [ 2260.745789][T29477] bridge_slave_0: left promiscuous mode [ 2260.790175][T29477] bridge0: port 1(bridge_slave_0) entered disabled state [ 2261.180458][T14468] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2261.380214][T14468] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 2261.416426][T14468] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 2261.440539][T14468] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 2261.443165][T29477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2261.495872][T14468] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2261.516334][T14468] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.522350][ T5818] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 2261.539894][T14468] usb 4-1: Product: syz [ 2261.555329][T29477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2261.571656][T14468] usb 4-1: Manufacturer: syz [ 2261.580857][T14468] usb 4-1: SerialNumber: syz [ 2261.592686][T29477] bond0 (unregistering): Released all slaves [ 2261.601222][T14468] usb 4-1: config 0 descriptor?? [ 2261.622465][T31726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2261.706045][ T5818] usb 9-1: Using ep0 maxpacket: 32 [ 2261.733416][ T5818] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2261.746454][T31676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2261.769921][T31455] Bluetooth: hci2: command tx timeout [ 2261.775467][ T5818] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2261.799176][T29477] tipc: Disabling bearer [ 2261.811719][T29477] tipc: Left network mode [ 2261.817710][ T5818] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2261.829789][T31676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2261.862198][ T5818] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2261.918470][ T5818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.926136][T31726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2261.964825][ T5818] usb 9-1: Product: syz [ 2261.999675][ T5818] usb 9-1: Manufacturer: syz [ 2262.024672][ T5818] usb 9-1: SerialNumber: syz [ 2262.043808][T14468] usb 8-1: USB disconnect, device number 49 [ 2262.055542][T31676] team0: Port device team_slave_0 added [ 2262.064822][ T5818] usb 9-1: config 0 descriptor?? [ 2262.105348][T14468] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 2262.276585][T31676] team0: Port device team_slave_1 added [ 2262.588409][T31676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2262.598741][T31676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2262.627279][ T5818] gs_usb 9-1:0.0: Configuring for 14 interfaces [ 2262.633653][T31676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.643065][T31764] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 2263.835210][ T5818] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 2263.869451][ T5818] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -110 [ 2263.993917][T31455] Bluetooth: hci2: command tx timeout [ 2264.875111][T29477] hsr_slave_0: left promiscuous mode [ 2264.881000][T29477] hsr_slave_1: left promiscuous mode [ 2264.892264][T29477] veth1_macvtap: left promiscuous mode [ 2264.897750][T29477] veth0_macvtap: left promiscuous mode [ 2264.903508][T29477] veth1_vlan: left promiscuous mode [ 2264.908709][T29477] veth0_vlan: left promiscuous mode [ 2265.257353][T31770] netlink: 'syz.2.7043': attribute type 10 has an invalid length. [ 2265.414152][T29477] team0 (unregistering): Port device team_slave_1 removed [ 2265.457706][T29477] team0 (unregistering): Port device team_slave_0 removed [ 2266.195364][T31676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2266.203103][T31676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2266.216172][T31455] Bluetooth: hci2: command tx timeout [ 2266.239273][T31676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2266.291959][ T5818] usb 9-1: USB disconnect, device number 39 [ 2266.580157][T31777] 9p: Bad value for 'rfdno' [ 2267.108963][T29477] IPVS: stop unused estimator thread 0... [ 2267.346546][T31676] hsr_slave_0: entered promiscuous mode [ 2267.441495][T31676] hsr_slave_1: entered promiscuous mode [ 2267.817091][T31796] tipc: Enabling of bearer rejected, failed to enable media [ 2268.073446][T31792] syzkaller0: entered promiscuous mode [ 2268.106177][T31792] syzkaller0: entered allmulticast mode [ 2268.151981][ T792] usb 4-1: USB disconnect, device number 123 [ 2269.231212][T31843] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7058'. [ 2269.432449][ T5922] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2269.624601][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 2269.666153][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 2269.718892][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2269.756346][T31676] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2269.779280][ T5922] usb 3-1: Product: syz [ 2269.787695][ T5922] usb 3-1: Manufacturer: syz [ 2269.792312][ T5922] usb 3-1: SerialNumber: syz [ 2269.850670][ T5922] usb 3-1: config 0 descriptor?? [ 2269.864162][T31676] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2269.883609][ T5922] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 2270.879760][ T5922] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2270.886100][ T5922] dvb-usb: bulk message failed: -22 (2/0) [ 2270.898245][ T5922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2270.920022][ T5922] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 2271.861422][T31676] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2271.872288][T31841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.891102][T31841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.911899][ T5922] usb 3-1: media controller created [ 2271.930700][T31841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.962209][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 2272.060119][T31676] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2272.072922][ T5922] dw2102: i2c transfer failed. [ 2272.078274][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 2272.133536][ T5922] dw2102: i2c transfer failed. [ 2272.139940][T31841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.168635][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 2272.188613][ T5922] dw2102: i2c transfer failed. [ 2272.226483][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 2272.275071][ T5922] dw2102: i2c transfer failed. [ 2272.297023][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 2272.321259][ T5922] dw2102: i2c transfer failed. [ 2272.378317][ T5922] dvb-usb: bulk message failed: -22 (6/0) [ 2272.483138][ T5922] dw2102: i2c transfer failed. [ 2272.521459][ T5922] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2272.559059][T31876] syzkaller0: entered promiscuous mode [ 2272.586186][T31876] syzkaller0: entered allmulticast mode [ 2272.612313][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2272.751671][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 2272.835408][T31676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2272.872651][ T5922] dw2102: command 0x0e transfer failed. [ 2272.944190][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 2272.965173][T31676] 8021q: adding VLAN 0 to HW filter on device team0 [ 2272.996893][ T5922] dw2102: command 0x0e transfer failed. [ 2273.036414][T14852] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.043518][T14852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2273.208991][T14852] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.216139][T14852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.366604][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 2273.375834][ T5922] dw2102: command 0x0e transfer failed. [ 2273.413608][ T5922] dvb-usb: bulk message failed: -22 (3/0) [ 2273.447810][ T5922] dw2102: command 0x0e transfer failed. [ 2273.489297][ T5922] dvb-usb: bulk message failed: -22 (1/0) [ 2273.515625][ T30] audit: type=1800 audit(526419.207:2538): pid=31897 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.7068" name="bus" dev="overlay" ino=89 res=0 errno=0 [ 2273.548514][ T5922] dw2102: command 0x51 transfer failed. [ 2273.713722][ T5922] DVB: Unable to find symbol ds3000_attach() [ 2273.728075][ T5922] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' [ 2273.806087][T31676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2274.740426][T31676] veth0_vlan: entered promiscuous mode [ 2274.748645][ T5922] rc_core: IR keymap rc-su3000 not found [ 2274.769150][T31676] veth1_vlan: entered promiscuous mode [ 2274.777543][ T5922] Registered IR keymap rc-empty [ 2274.792545][ T5922] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2274.862404][ T5922] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input57 [ 2274.892581][T31676] veth0_macvtap: entered promiscuous mode [ 2274.913194][ T5922] dvb-usb: schedule remote query interval to 150 msecs. [ 2274.940694][ T5922] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2274.947215][T31676] veth1_macvtap: entered promiscuous mode [ 2274.965082][ T5922] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected. [ 2275.025966][T31676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2275.045179][ T5922] usb 3-1: USB disconnect, device number 125 [ 2275.067565][T31676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2275.135036][ T3525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.135185][ T5922] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected. [ 2275.223326][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.267945][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.302904][ T3525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2275.378644][T11320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.402044][T11320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.571599][T11320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2275.591824][T11320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.902983][T31455] Bluetooth: hci2: connection err: -111 [ 2276.059532][ T24] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2276.604653][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 2276.625441][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 2276.646350][ T24] usb 3-1: config 0 has no interface number 0 [ 2276.658190][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2276.676139][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2276.690386][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2276.701640][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2276.753019][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2276.860615][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2276.873782][ T24] usb 3-1: config 0 descriptor?? [ 2276.887617][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2276.989378][T25642] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 2277.216912][ T792] usb 3-1: USB disconnect, device number 126 [ 2277.247677][ T792] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 2277.446762][T25642] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 2277.463801][T25642] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2277.490245][T25642] usb 4-1: config 8 has no interface number 0 [ 2277.505111][T25642] usb 4-1: config 8 interface 177 has no altsetting 0 [ 2277.529294][T25642] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2277.542304][T25642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2277.706324][T32011] fuse: Unknown parameter '0x0000000000000003' [ 2277.889616][T31455] Bluetooth: hci2: connection err: -111 [ 2278.542730][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2278.554903][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2278.567142][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2278.575782][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2278.586405][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2278.652293][T32021] lo speed is unknown, defaulting to 1000 [ 2279.006539][ T3525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.141501][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7096'. [ 2279.375644][ T3525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.837931][T32021] chnl_net:caif_netlink_parms(): no params data found [ 2279.920120][ T3525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.064670][ T3525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.279389][ T24] usb 4-1: USB disconnect, device number 124 [ 2280.281352][T32052] fuse: Unknown parameter 'fd0x0000000000000003' [ 2280.479742][T32060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7105'. [ 2280.618634][T32021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.635870][T32021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.675575][T32021] bridge_slave_0: entered allmulticast mode [ 2280.700025][T32021] bridge_slave_0: entered promiscuous mode [ 2280.744404][T32021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.755871][ T5132] Bluetooth: hci1: command tx timeout [ 2280.781259][T32021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2280.797718][T32021] bridge_slave_1: entered allmulticast mode [ 2280.813965][T32021] bridge_slave_1: entered promiscuous mode [ 2280.975364][T32021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2281.000797][T32021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2281.058663][T32021] team0: Port device team_slave_0 added [ 2281.066666][ T3525] batman_adv: batadv0: Interface deactivated: gretap1 [ 2281.357720][ T3525] gretap0 (unregistering): left promiscuous mode [ 2281.412330][ T3525] batman_adv: batadv0: Removing interface: gretap1 [ 2281.452886][T32088] fuse: Unknown parameter 'fd0x0000000000000003' [ 2281.465614][ T3525] bond0 (unregistering): left promiscuous mode [ 2281.478674][ T3525] bond_slave_0: left promiscuous mode [ 2281.486937][ T3525] bond_slave_1: left promiscuous mode [ 2281.504785][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.527782][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.567837][ T3525] bond0 (unregistering): Released all slaves [ 2281.595963][ T3525] bond1 (unregistering): Released all slaves [ 2281.653327][T32021] team0: Port device team_slave_1 added [ 2281.668427][T32082] pim6reg: entered allmulticast mode [ 2281.679213][T32083] team0: entered allmulticast mode [ 2281.684675][T32083] team_slave_0: entered allmulticast mode [ 2281.691318][T32083] team_slave_1: entered allmulticast mode [ 2281.716325][T32086] team0: left allmulticast mode [ 2281.731373][T32086] team_slave_0: left allmulticast mode [ 2281.751776][T32086] team_slave_1: left allmulticast mode [ 2281.771420][T32086] pim6reg: left allmulticast mode [ 2281.813989][ T3525] tipc: Disabling bearer [ 2281.820244][ T3525] tipc: Left network mode [ 2281.874762][T32021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2281.892076][T32021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2281.920332][T32021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2281.972181][T32021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2281.980802][T32021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2282.013040][T32021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2282.111021][T32021] hsr_slave_0: entered promiscuous mode [ 2282.128937][T32021] hsr_slave_1: entered promiscuous mode [ 2282.146525][T32021] debugfs: 'hsr0' already exists in 'hsr' [ 2282.160898][T32021] Cannot create hsr debugfs directory [ 2282.255220][T32106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7117'. [ 2282.609962][ T3525] hsr_slave_0: left promiscuous mode [ 2282.620332][ T3525] hsr_slave_1: left promiscuous mode [ 2282.633952][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2282.649989][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2282.659124][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2282.669379][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2282.676855][T32126] netlink: 'syz.1.7122': attribute type 2 has an invalid length. [ 2282.708664][ T3525] veth1_macvtap: left promiscuous mode [ 2282.723214][ T3525] veth0_macvtap: left promiscuous mode [ 2282.736449][ T3525] veth1_vlan: left promiscuous mode [ 2282.749821][ T3525] veth0_vlan: left promiscuous mode [ 2282.804286][ T5922] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2282.975277][ T5132] Bluetooth: hci1: command tx timeout [ 2282.986134][ T5922] usb 9-1: Using ep0 maxpacket: 16 [ 2282.993204][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2283.004658][ T5922] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2283.015118][ T5922] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2283.030010][ T5922] usb 9-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 2283.041848][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2283.056740][ T5922] usb 9-1: config 0 descriptor?? [ 2283.057656][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 2283.085485][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 2283.206867][T32126] : entered promiscuous mode [ 2283.338881][T32134] fuse: Unknown parameter 'fd0x0000000000000003' [ 2283.517019][ T5922] input: HID 05ac:8241 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:05AC:8241.002C/input/input58 [ 2283.677885][ T5922] appleir 0003:05AC:8241.002C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.8-1/input0 [ 2285.441912][ T5132] Bluetooth: hci1: command tx timeout [ 2285.571621][ T5922] usb 9-1: USB disconnect, device number 40 [ 2285.811995][T32153] fido_id[32153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 2286.167616][T32166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7127'. [ 2286.195737][ T3525] IPVS: stop unused estimator thread 0... [ 2286.645490][T32021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2287.592960][T31455] Bluetooth: hci1: command tx timeout [ 2287.701070][T32021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2287.919325][T32021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2287.989670][T32021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2288.258521][T32213] syzkaller0: entered promiscuous mode [ 2288.285365][T32213] syzkaller0: entered allmulticast mode [ 2288.573866][T32021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2288.733219][T32021] 8021q: adding VLAN 0 to HW filter on device team0 [ 2289.769653][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2289.776839][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2289.938361][T32237] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7147'. [ 2290.035490][T29477] bridge0: port 2(bridge_slave_1) entered blocking state [ 2290.042580][T29477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2290.110758][T32237] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 2290.123361][T32237] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 2290.199469][T32021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2290.211788][T32021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2290.275654][T32252] usb usb8: usbfs: process 32252 (syz.1.7151) did not claim interface 0 before use [ 2291.366200][T32271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7156'. [ 2291.510614][T32021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2291.570647][T32021] veth0_vlan: entered promiscuous mode [ 2291.606034][T32021] veth1_vlan: entered promiscuous mode [ 2291.731585][T32021] veth0_macvtap: entered promiscuous mode [ 2291.740143][T32021] veth1_macvtap: entered promiscuous mode [ 2291.756442][T32021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2291.766877][T32021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2291.778932][T29477] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.231351][T29477] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.325136][T29477] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.374180][T29477] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.468926][T29477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.480972][T29477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2292.533436][T29477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2292.559517][T29477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2293.094560][T32306] batman_adv: batadv0: Adding interface: gretap1 [ 2293.101023][T32306] batman_adv: batadv0: Interface activated: gretap1 [ 2294.614320][T32326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2294.621768][T32326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.991383][T32349] batman_adv: batadv0: Adding interface: gretap1 [ 2295.997858][T32349] batman_adv: batadv0: Interface activated: gretap1 [ 2297.154745][T32356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7177'. [ 2297.918913][T32377] loop8: detected capacity change from 0 to 7 [ 2297.925742][T32377] Dev loop8: unable to read RDB block 7 [ 2297.941339][T32377] loop8: unable to read partition table [ 2297.958396][T32377] loop8: partition table beyond EOD, truncated [ 2297.975496][T32377] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2297.994416][T32379] netlink: 108 bytes leftover after parsing attributes in process `syz.1.7183'. [ 2298.017955][T32379] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 2298.197484][T32379] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 2298.299305][T32383] futex_wake_op: syz.3.7187 tries to shift op by -1; fix this program [ 2298.368877][T32383] dummy0: entered promiscuous mode [ 2298.376259][T32383] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 2298.419432][T32383] hsr1: entered allmulticast mode [ 2298.424802][T32385] input: syz0 as /devices/virtual/input/input59 [ 2298.448788][T32383] dummy0: entered allmulticast mode [ 2298.456476][T32383] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 2298.536204][T32388] fuse: Invalid rootmode [ 2298.679919][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2298.784085][ T30] audit: type=1326 audit(526442.838:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2298.816951][T25642] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 2298.953454][ T30] audit: type=1326 audit(526442.838:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2298.998582][T25642] usb 4-1: device descriptor read/64, error -71 [ 2299.091825][ T30] audit: type=1326 audit(526442.838:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.217523][ T30] audit: type=1326 audit(526442.838:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.309783][T25642] usb 4-1: new low-speed USB device number 126 using dummy_hcd [ 2299.351389][ T30] audit: type=1326 audit(526442.838:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.468521][T25642] usb 4-1: device descriptor read/64, error -71 [ 2299.493623][ T30] audit: type=1326 audit(526442.838:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.556263][ T30] audit: type=1326 audit(526442.838:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.655815][ T30] audit: type=1326 audit(526442.838:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.696758][T25642] usb usb4-port1: attempt power cycle [ 2299.785013][ T30] audit: type=1326 audit(526442.838:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2299.872444][ T30] audit: type=1326 audit(526442.838:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.8.7190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2300.099516][T25642] usb 4-1: new low-speed USB device number 127 using dummy_hcd [ 2300.143947][T25642] usb 4-1: device descriptor read/8, error -71 [ 2300.420175][T25642] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 2300.476299][T25642] usb 4-1: device descriptor read/8, error -71 [ 2300.626715][T25642] usb usb4-port1: unable to enumerate USB device [ 2301.082604][T25642] usb 8-1: new full-speed USB device number 50 using dummy_hcd [ 2301.245771][T25642] usb 8-1: config 0 has an invalid interface number: 230 but max is 0 [ 2301.264303][T25642] usb 8-1: config 0 has no interface number 0 [ 2301.282289][T32426] fuse: Invalid rootmode [ 2301.294747][T25642] usb 8-1: too many endpoints for config 0 interface 230 altsetting 255: 65, using maximum allowed: 30 [ 2301.357524][T25642] usb 8-1: config 0 interface 230 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2301.400091][T25642] usb 8-1: config 0 interface 230 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2301.422004][T25642] usb 8-1: config 0 interface 230 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 2301.436883][T25642] usb 8-1: config 0 interface 230 has no altsetting 0 [ 2301.463961][T25642] usb 8-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 2301.479193][T25642] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.514971][T25642] usb 8-1: config 0 descriptor?? [ 2301.761183][T32436] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7205'. [ 2302.880942][T32458] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7214'. [ 2303.240953][T32463] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7212'. [ 2303.448369][T32465] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7216'. [ 2304.129894][T25642] usbhid 8-1:0.230: can't add hid device: -71 [ 2304.177621][T25642] usbhid 8-1:0.230: probe with driver usbhid failed with error -71 [ 2304.285337][T25642] usb 8-1: USB disconnect, device number 50 [ 2304.815131][T32498] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7229'. [ 2304.861119][T32500] pim6reg: entered allmulticast mode [ 2304.891735][T32500] team0: entered allmulticast mode [ 2304.931363][T32500] team_slave_0: entered allmulticast mode [ 2304.980041][T32500] team_slave_1: entered allmulticast mode [ 2305.019033][T32503] team0: left allmulticast mode [ 2305.044242][T32503] team_slave_0: left allmulticast mode [ 2305.105159][T32503] team_slave_1: left allmulticast mode [ 2305.177187][T32503] pim6reg: left allmulticast mode [ 2305.326871][ T792] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 2305.541095][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 2305.568201][ T792] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2305.607798][ T792] usb 2-1: config 0 has no interface number 0 [ 2305.631393][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2305.700883][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2305.752369][ T792] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2305.910210][ T792] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2306.644769][ T792] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2306.658003][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2306.863267][ T792] usb 2-1: config 0 descriptor?? [ 2306.897081][ T792] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2306.937618][T32535] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7241'. [ 2308.055598][ T792] usb 2-1: USB disconnect, device number 126 [ 2308.056803][T32510] ldusb 2-1:0.55: Couldn't submit interrupt_in_urb -19 [ 2308.690198][ T792] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2308.756939][T32537] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7242'. [ 2308.880424][T32546] fuse: Unknown parameter 'J§<@e/\ð(5™_'StÝ' [ 2309.008027][T32546] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7244'. [ 2309.260846][T32552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7244'. [ 2309.394340][T32557] fuse: Bad value for 'rootmode' [ 2309.847639][T25642] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2309.917657][T32570] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7254'. [ 2310.034945][T25642] usb 9-1: Using ep0 maxpacket: 16 [ 2310.068117][T25642] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2310.115041][T25642] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2310.149067][T25642] usb 9-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2310.192961][T25642] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2310.235488][T25642] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2310.987076][T25642] usb 9-1: Product: syz [ 2311.043818][T25642] usb 9-1: Manufacturer: syz [ 2311.083584][T25642] usb 9-1: SerialNumber: syz [ 2312.003420][T25642] usb 9-1: 0:2 : does not exist [ 2312.182457][T25642] usb 9-1: USB disconnect, device number 41 [ 2312.186147][T32589] fuse: Unknown parameter 'use00000000000000000000' [ 2312.314661][T32593] syz_tun: entered allmulticast mode [ 2312.398513][T32590] syz_tun: left allmulticast mode [ 2312.702539][T32603] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7265'. [ 2316.794337][T32636] fuse: Unknown parameter 'use00000000000000000000' [ 2317.122276][T32647] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7277'. [ 2318.764292][T32677] fuse: Unknown parameter 'use00000000000000000000' [ 2319.087840][T32687] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7288'. [ 2319.798760][T32698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7291'. [ 2320.019695][T32703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2320.384529][T32708] syzkaller0: entered promiscuous mode [ 2320.400074][T32708] syzkaller0: entered allmulticast mode [ 2322.161797][T32732] netlink: 'syz.3.7301': attribute type 10 has an invalid length. [ 2323.883596][T32738] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7303'. [ 2327.574321][T32760] loop8: detected capacity change from 0 to 7 [ 2327.596983][T31463] Dev loop8: unable to read RDB block 7 [ 2327.607032][T31463] loop8: unable to read partition table [ 2327.615995][T31463] loop8: partition table beyond EOD, truncated [ 2327.622967][T32760] Dev loop8: unable to read RDB block 7 [ 2327.638754][T32760] loop8: unable to read partition table [ 2327.651239][T32760] loop8: partition table beyond EOD, truncated [ 2327.668902][T32760] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 2330.468849][ T792] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 2330.723478][ T792] usb 2-1: Using ep0 maxpacket: 8 [ 2330.724772][ T792] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 2330.724792][ T792] usb 2-1: config 0 has no interface number 0 [ 2330.724811][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2330.724826][ T792] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 2330.724841][ T792] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2330.724856][ T792] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 2330.724878][ T792] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 2330.724891][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2330.726226][ T792] usb 2-1: config 0 descriptor?? [ 2330.730384][ T792] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 2332.641701][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 2332.641713][ T30] audit: type=1400 audit(526474.534:2664): avc: denied { map } for pid=348 comm="syz.2.7329" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2332.717696][ T30] audit: type=1400 audit(526474.572:2665): avc: denied { execute } for pid=348 comm="syz.2.7329" path="/dev/video3" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 2333.351848][ T29] usb 2-1: USB disconnect, device number 127 [ 2333.365245][ T29] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 2338.131183][ T5818] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 2339.189326][ T5818] usb 2-1: device descriptor read/64, error -71 [ 2339.467134][ T5818] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 2339.638217][ T5818] usb 2-1: device descriptor read/64, error -71 [ 2339.758213][ T5818] usb usb2-port1: attempt power cycle [ 2340.140724][ T5818] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2340.162906][ T5818] usb 2-1: device descriptor read/8, error -71 [ 2340.418453][ T5818] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2340.451228][ T5818] usb 2-1: device descriptor read/8, error -71 [ 2340.471948][ T792] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2340.579999][ T5818] usb usb2-port1: unable to enumerate USB device [ 2340.643061][ T792] usb 8-1: Using ep0 maxpacket: 16 [ 2340.655094][ T792] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 2340.672181][ T792] usb 8-1: config 0 has no interface number 0 [ 2340.685142][ T792] usb 8-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2340.708857][ T792] usb 8-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2340.726895][ T792] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2340.743053][ T792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.751207][ T792] usb 8-1: Product: syz [ 2340.755745][ T792] usb 8-1: Manufacturer: syz [ 2340.761533][ T792] usb 8-1: SerialNumber: syz [ 2340.768485][ T792] usb 8-1: config 0 descriptor?? [ 2340.774691][ T457] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 2340.879822][ T792] asix 8-1:0.251: probe with driver asix failed with error -22 [ 2341.355591][ T5922] usb 8-1: USB disconnect, device number 51 [ 2342.412319][ T30] audit: type=1326 audit(526483.674:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.505336][ T30] audit: type=1326 audit(526483.674:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640534][ T30] audit: type=1326 audit(526483.702:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640565][ T30] audit: type=1326 audit(526483.721:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640592][ T30] audit: type=1326 audit(526483.721:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640614][ T30] audit: type=1326 audit(526483.721:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640638][ T30] audit: type=1326 audit(526483.740:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640661][ T30] audit: type=1326 audit(526483.740:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640683][ T30] audit: type=1326 audit(526483.740:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2342.640705][ T30] audit: type=1326 audit(526483.740:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=493 comm="syz.8.7374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f84aa99c799 code=0x7ffc0000 [ 2343.717087][ T513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7378'. [ 2343.792582][ T515] fuse: Unknown parameter '0x0000000000000003' [ 2344.169197][ T520] tipc: Started in network mode [ 2344.174183][ T5922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2344.188365][ T520] tipc: Node identity bece5b64188e, cluster identity 4711 [ 2344.206128][ T520] tipc: Enabled bearer , priority 0 [ 2344.241487][ T521] syzkaller0: entered promiscuous mode [ 2344.283280][ T521] syzkaller0: entered allmulticast mode [ 2344.303341][ T520] tipc: Resetting bearer [ 2344.353965][ T519] tipc: Resetting bearer [ 2344.385100][ T5922] usb 4-1: Using ep0 maxpacket: 16 [ 2344.397211][ T5922] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2344.416170][ T5922] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2344.437053][ T5922] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2344.460362][ T519] tipc: Disabling bearer [ 2344.477449][ T5922] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2344.496765][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.527006][ T5922] usb 4-1: Product: syz [ 2344.542692][ T5922] usb 4-1: Manufacturer: syz [ 2344.553232][ T5922] usb 4-1: SerialNumber: syz [ 2344.828318][ T5922] usb 4-1: 0:2 : does not exist [ 2344.968002][ T5922] usb 4-1: USB disconnect, device number 3 [ 2345.033837][T31463] udevd[31463]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2346.479637][ T792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2346.639507][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 2346.643072][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2346.643106][ T792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2346.643126][ T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2346.643161][ T792] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2346.643182][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.643957][T25642] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2346.652344][ T792] usb 2-1: config 0 descriptor?? [ 2346.800495][T25642] usb 3-1: Using ep0 maxpacket: 16 [ 2346.802038][T25642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2346.802068][T25642] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2346.802091][T25642] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2346.802128][T25642] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2346.802150][T25642] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2346.804630][T25642] usb 3-1: config 0 descriptor?? [ 2347.103692][ T792] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 2347.103759][ T792] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 2347.103835][ T792] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 2347.103904][ T792] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 2347.103962][ T792] shield 0003:0955:7214.002D: unknown main item tag 0x0 [ 2347.109727][ T792] input: HID 0955:7214 Haptics as /devices/virtual/input/input60 [ 2347.182448][ T792] shield 0003:0955:7214.002D: Registered Thunderstrike controller [ 2347.182714][ T792] shield 0003:0955:7214.002D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 2347.245666][T25642] HID 045e:07da: Invalid code 65791 type 1 [ 2347.252670][T25642] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002E/input/input61 [ 2347.283522][T25642] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 2347.325727][ T554] random: crng reseeded on system resumption [ 2347.330394][ T554] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 2347.330419][ T554] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 2347.330443][ T554] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 2347.330458][ T554] PM: hibernation: Basic memory bitmaps created [ 2347.347370][ T553] PM: hibernation: Basic memory bitmaps freed [ 2347.365863][ T792] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2347.366158][ T792] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 2347.366183][T31921] usb 2-1: USB disconnect, device number 6 [ 2347.366210][ T792] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2347.366259][ T792] shield 0003:0955:7214.002D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 2347.378345][T31921] ------------[ cut here ]------------ [ 2347.378360][T31921] workqueue: work disable count underflowed [ 2347.378369][T31921] WARNING: kernel/workqueue.c:4410 at enable_work+0x2d1/0x320, CPU#0: kworker/0:0/31921 [ 2347.378407][T31921] Modules linked in: [ 2347.378442][T31921] CPU: 0 UID: 0 PID: 31921 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2347.378471][T31921] Tainted: [L]=SOFTLOCKUP [ 2347.378479][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2347.378493][T31921] Workqueue: usb_hub_wq hub_event [ 2347.378523][T31921] RIP: 0010:enable_work+0x2d1/0x320 [ 2347.378548][T31921] Code: ff e8 f3 a9 38 00 e8 ae e8 bf 09 e9 61 ff ff ff e8 e4 a9 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 a9 38 00 48 8d 3d 6f 81 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 6a 2e a5 00 e9 [ 2347.378566][T31921] RSP: 0018:ffffc9000525f3b0 EFLAGS: 00010087 [ 2347.378583][T31921] RAX: 000000000000bacf RBX: 0000000000000000 RCX: ffffc90019d72000 [ 2347.378596][T31921] RDX: 0000000000100000 RSI: ffffffff81d0116a RDI: ffffffff90dc92e0 [ 2347.378610][T31921] RBP: ffff88805508a738 R08: 0000000000000007 R09: 0000000000000000 [ 2347.378622][T31921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2347.378633][T31921] R13: 1ffff92000a4be77 R14: ffff88805508a698 R15: 000000007fffffff [ 2347.378646][T31921] FS: 0000000000000000(0000) GS:ffff888124342000(0000) knlGS:0000000000000000 [ 2347.378665][T31921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2347.378677][T31921] CR2: 00007f7e2a3636bc CR3: 0000000079869000 CR4: 00000000003526f0 [ 2347.378690][T31921] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 2347.378701][T31921] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2347.378713][T31921] Call Trace: [ 2347.378721][T31921] [ 2347.378731][T31921] ? __pfx_enable_work+0x10/0x10 [ 2347.378753][T31921] ? __pfx___might_resched+0x10/0x10 [ 2347.378780][T31921] cancel_delayed_work_sync+0x96/0xf0 [ 2347.378808][T31921] thermal_zone_device_unregister+0x28e/0x4e0 [ 2347.378835][T31921] ? __pfx_shield_remove+0x10/0x10 [ 2347.378863][T31921] power_supply_unregister+0x10a/0x150 [ 2347.378888][T31921] shield_remove+0x75/0x130 [ 2347.378915][T31921] ? __pfx_shield_remove+0x10/0x10 [ 2347.378938][T31921] hid_device_remove+0xd1/0x270 [ 2347.378958][T31921] ? __pfx_hid_device_remove+0x10/0x10 [ 2347.378979][T31921] device_remove+0xcb/0x180 [ 2347.379006][T31921] device_release_driver_internal+0x42e/0x600 [ 2347.379039][T31921] bus_remove_device+0x22f/0x440 [ 2347.379068][T31921] device_del+0x376/0x9b0 [ 2347.379098][T31921] ? __pfx_device_del+0x10/0x10 [ 2347.379124][T31921] ? do_raw_spin_lock+0x128/0x260 [ 2347.379146][T31921] ? find_held_lock+0x2b/0x80 [ 2347.379176][T31921] hid_destroy_device+0x19c/0x240 [ 2347.379208][T31921] usbhid_disconnect+0xa0/0xe0 [ 2347.379235][T31921] usb_unbind_interface+0x1dd/0x9e0 [ 2347.379273][T31921] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 2347.379299][T31921] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2347.379330][T31921] device_remove+0x12a/0x180 [ 2347.379358][T31921] device_release_driver_internal+0x42e/0x600 [ 2347.379394][T31921] bus_remove_device+0x22f/0x440 [ 2347.379421][T31921] device_del+0x376/0x9b0 [ 2347.379452][T31921] ? __pfx_device_del+0x10/0x10 [ 2347.379475][T31921] ? kobject_put+0xb9/0x640 [ 2347.379507][T31921] usb_disable_device+0x367/0x810 [ 2347.379542][T31921] usb_disconnect+0x2e2/0x9a0 [ 2347.379572][T31921] hub_event+0x1d0c/0x4af0 [ 2347.379618][T31921] ? __lock_acquire+0x4a5/0x2630 [ 2347.379649][T31921] ? do_raw_spin_unlock+0x145/0x1e0 [ 2347.379672][T31921] ? __pfx_hub_event+0x10/0x10 [ 2347.379696][T31921] ? debug_object_deactivate+0x2e4/0x3b0 [ 2347.379722][T31921] ? sched_core_enqueue+0x60/0xc00 [ 2347.379756][T31921] ? rcu_is_watching+0x12/0xc0 [ 2347.379783][T31921] process_one_work+0xa23/0x19a0 [ 2347.379816][T31921] ? __pfx_process_one_work+0x10/0x10 [ 2347.379845][T31921] ? __pfx_hub_event+0x10/0x10 [ 2347.379872][T31921] worker_thread+0x5ef/0xe50 [ 2347.379900][T31921] ? __pfx_worker_thread+0x10/0x10 [ 2347.379922][T31921] ? kthread+0x13a/0x450 [ 2347.379939][T31921] ? __pfx_worker_thread+0x10/0x10 [ 2347.379958][T31921] kthread+0x370/0x450 [ 2347.379977][T31921] ? __pfx_kthread+0x10/0x10 [ 2347.379997][T31921] ret_from_fork+0x754/0xd80 [ 2347.380019][T31921] ? __pfx_ret_from_fork+0x10/0x10 [ 2347.380041][T31921] ? __switch_to+0x7b4/0x1120 [ 2347.380065][T31921] ? __pfx_kthread+0x10/0x10 [ 2347.380085][T31921] ret_from_fork_asm+0x1a/0x30 [ 2347.380123][T31921] [ 2347.380134][T31921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2347.380148][T31921] CPU: 0 UID: 0 PID: 31921 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 2347.380174][T31921] Tainted: [L]=SOFTLOCKUP [ 2347.380181][T31921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2347.380194][T31921] Workqueue: usb_hub_wq hub_event [ 2347.380218][T31921] Call Trace: [ 2347.380226][T31921] [ 2347.380235][T31921] dump_stack_lvl+0x100/0x190 [ 2347.380271][T31921] vpanic+0x552/0x970 [ 2347.380292][T31921] ? __pfx_vpanic+0x10/0x10 [ 2347.380321][T31921] panic+0xd1/0xe0 [ 2347.380341][T31921] ? __pfx_panic+0x10/0x10 [ 2347.380374][T31921] check_panic_on_warn.cold+0x19/0x34 [ 2347.380396][T31921] ? enable_work+0x2d1/0x320 [ 2347.380417][T31921] __warn.cold+0x191/0x348 [ 2347.380440][T31921] __report_bug+0x296/0x3d0 [ 2347.380461][T31921] ? enable_work+0x2d1/0x320 [ 2347.380485][T31921] ? __pfx___report_bug+0x10/0x10 [ 2347.380508][T31921] ? __pfx_debug_object_free+0x10/0x10 [ 2347.380534][T31921] ? enable_work+0x2ca/0x320 [ 2347.380558][T31921] ? find_held_lock+0x2b/0x80 [ 2347.380582][T31921] ? __flush_work+0x928/0xcb0 [ 2347.380603][T31921] ? __flush_work+0x928/0xcb0 [ 2347.380628][T31921] report_bug_entry+0xe1/0x290 [ 2347.380648][T31921] ? enable_work+0x2d1/0x320 [ 2347.380670][T31921] handle_bug+0x1cd/0x2a0 [ 2347.380696][T31921] exc_invalid_op+0x17/0x50 [ 2347.380724][T31921] asm_exc_invalid_op+0x1a/0x20 [ 2347.380743][T31921] RIP: 0010:enable_work+0x2d1/0x320 [ 2347.380764][T31921] Code: ff e8 f3 a9 38 00 e8 ae e8 bf 09 e9 61 ff ff ff e8 e4 a9 38 00 90 0f 0b 90 e9 17 fe ff ff e8 d6 a9 38 00 48 8d 3d 6f 81 0c 0f <67> 48 0f b9 3a 45 31 f6 e9 36 fe ff ff 48 89 ef e8 6a 2e a5 00 e9 [ 2347.380779][T31921] RSP: 0018:ffffc9000525f3b0 EFLAGS: 00010087 [ 2347.380792][T31921] RAX: 000000000000bacf RBX: 0000000000000000 RCX: ffffc90019d72000 [ 2347.380804][T31921] RDX: 0000000000100000 RSI: ffffffff81d0116a RDI: ffffffff90dc92e0 [ 2347.380815][T31921] RBP: ffff88805508a738 R08: 0000000000000007 R09: 0000000000000000 [ 2347.380826][T31921] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2347.380836][T31921] R13: 1ffff92000a4be77 R14: ffff88805508a698 R15: 000000007fffffff [ 2347.380854][T31921] ? enable_work+0x2ca/0x320 [ 2347.380879][T31921] ? __pfx_enable_work+0x10/0x10 [ 2347.380900][T31921] ? __pfx___might_resched+0x10/0x10 [ 2347.380925][T31921] cancel_delayed_work_sync+0x96/0xf0 [ 2347.380950][T31921] thermal_zone_device_unregister+0x28e/0x4e0 [ 2347.380975][T31921] ? __pfx_shield_remove+0x10/0x10 [ 2347.381000][T31921] power_supply_unregister+0x10a/0x150 [ 2347.381024][T31921] shield_remove+0x75/0x130 [ 2347.381048][T31921] ? __pfx_shield_remove+0x10/0x10 [ 2347.381069][T31921] hid_device_remove+0xd1/0x270 [ 2347.381086][T31921] ? __pfx_hid_device_remove+0x10/0x10 [ 2347.381106][T31921] device_remove+0xcb/0x180 [ 2347.381132][T31921] device_release_driver_internal+0x42e/0x600 [ 2347.381165][T31921] bus_remove_device+0x22f/0x440 [ 2347.381193][T31921] device_del+0x376/0x9b0 [ 2347.381222][T31921] ? __pfx_device_del+0x10/0x10 [ 2347.381248][T31921] ? do_raw_spin_lock+0x128/0x260 [ 2347.381275][T31921] ? find_held_lock+0x2b/0x80 [ 2347.381307][T31921] hid_destroy_device+0x19c/0x240 [ 2347.381341][T31921] usbhid_disconnect+0xa0/0xe0 [ 2347.381368][T31921] usb_unbind_interface+0x1dd/0x9e0 [ 2347.381400][T31921] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 2347.381424][T31921] ? __pfx_usb_unbind_interface+0x10/0x10 [ 2347.381452][T31921] device_remove+0x12a/0x180 [ 2347.381479][T31921] device_release_driver_internal+0x42e/0x600 [ 2347.381513][T31921] bus_remove_device+0x22f/0x440 [ 2347.381537][T31921] device_del+0x376/0x9b0 [ 2347.381566][T31921] ? __pfx_device_del+0x10/0x10 [ 2347.381587][T31921] ? kobject_put+0xb9/0x640 [ 2347.381617][T31921] usb_disable_device+0x367/0x810 [ 2347.381648][T31921] usb_disconnect+0x2e2/0x9a0 [ 2347.381673][T31921] hub_event+0x1d0c/0x4af0 [ 2347.381714][T31921] ? __lock_acquire+0x4a5/0x2630 [ 2347.381742][T31921] ? do_raw_spin_unlock+0x145/0x1e0 [ 2347.381763][T31921] ? __pfx_hub_event+0x10/0x10 [ 2347.381786][T31921] ? debug_object_deactivate+0x2e4/0x3b0 [ 2347.381808][T31921] ? sched_core_enqueue+0x60/0xc00 [ 2347.381839][T31921] ? rcu_is_watching+0x12/0xc0 [ 2347.381865][T31921] process_one_work+0xa23/0x19a0 [ 2347.381895][T31921] ? __pfx_process_one_work+0x10/0x10 [ 2347.381924][T31921] ? __pfx_hub_event+0x10/0x10 [ 2347.381948][T31921] worker_thread+0x5ef/0xe50 [ 2347.381975][T31921] ? __pfx_worker_thread+0x10/0x10 [ 2347.381998][T31921] ? kthread+0x13a/0x450 [ 2347.382014][T31921] ? __pfx_worker_thread+0x10/0x10 [ 2347.382033][T31921] kthread+0x370/0x450 [ 2347.382050][T31921] ? __pfx_kthread+0x10/0x10 [ 2347.382071][T31921] ret_from_fork+0x754/0xd80 [ 2347.382091][T31921] ? __pfx_ret_from_fork+0x10/0x10 [ 2347.382110][T31921] ? __switch_to+0x7b4/0x1120 [ 2347.382135][T31921] ? __pfx_kthread+0x10/0x10 [ 2347.382153][T31921] ret_from_fork_asm+0x1a/0x30 [ 2347.382188][T31921] [ 2347.382401][T31921] Kernel Offset: disabled