last executing test programs: 11m39.74709722s ago: executing program 2 (id=703): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mount$cgroup2(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@memory_hugetlb_accounting}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5", 0x0, 0xcc, 0xffffffff}, 0x3c) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010003704000000000500000000000000", @ANYRES32=r1, @ANYBLOB="83040500000000003000128008000100736974002400028006000f0002000000060011004e21000006001000b1900000080003"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 11m38.118211503s ago: executing program 2 (id=705): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x207) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x83, 0xfffff034}, {0x6, 0x0, 0x0, 0x20000}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 11m37.868639068s ago: executing program 2 (id=707): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x409b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/103}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 11m37.646229888s ago: executing program 2 (id=710): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) syz_init_net_socket$llc(0x1a, 0x801, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000, 0x0, &(0x7f0000c7d000/0x3000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0xe6) 11m35.372697803s ago: executing program 2 (id=713): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0xc00) 11m27.491340275s ago: executing program 2 (id=730): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) setns(r3, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 11m10.710282525s ago: executing program 32 (id=730): mkdirat(0xffffffffffffffff, 0x0, 0x120) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) syz_clone3(&(0x7f0000000000)={0x82040480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x58) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) setns(r3, 0x24020000) syz_clone(0x1fa02000, 0x0, 0xfffffffffffffeab, 0x0, 0x0, 0x0) 8m39.698481463s ago: executing program 4 (id=987): r0 = socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x10) bind$netlink(r0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c0c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) 8m34.018731517s ago: executing program 4 (id=1001): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x29, 0x0, 0x0, 0x7995}, 0x1001f, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) fallocate(r4, 0x0, 0x0, 0x1001f0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 8m32.137954564s ago: executing program 4 (id=1005): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 8m29.147599939s ago: executing program 4 (id=1010): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socket$inet6(0x2d, 0x806, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8916, &(0x7f0000000180)="a8de6e1bd378143c33e1b7cfd3c4f914a907d10114f841bbadea1a52dfb53b97a6bfd86fdb5315d682cfd334956038d9874353b06d2d10bc82abad5f09a6a791888ae6295736dd14bd1a2cd9dd2609bb6a88c21cccb1380f8456f374878b39c5f0820fbae7e3d9ea8be0f30d002e4bfc68f4df2ff3bf43be48afea1540b23d3e489258ecd13aa218eef80a6c47d648252d3a7032ed77601adca37f8574004e") r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001380)=[{{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000880)="723aa5669d6534e4069306556265a52d7b", 0x11}, {&(0x7f00000008c0)="c23c31cc005949df9c3658d49469a5d9f7b75e57db1dd8e048dc77391e6f98f12d2ae5086ab922aa99faa10ab8c63a35cc1fcd2a91f1b5decaaae47dd93840897b55e1b7fc26f8dcec7273b7ef83a79295149a8a86df3b96136aa682dca6eb6d374e2f3f89566de2e177430bc165f6a00ea69cb9", 0x74}, {&(0x7f0000000940)="9ef74240a0e15251771c6030011864e9be14f804b512ac5a70158b1f144755b19c9f249b59d8e99cea6177b28d0cf7", 0x2f}], 0x3, 0x0, 0x0, 0x20084044}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000a40)="ed1d16a7ed02f9b3f8209ba692dbe740cf25fca82d67f393424cd76103c065068104867436253dfe6fc0a6e8c6c0427683148e33515750ffa36ac288696a3d3e98baa1a2bbd9953db680cd747ebd0c034b80489b52168249ded88ef6e05223fd39ae53915a02784e46170a4b0f6786adeca20d6dd38af803c95f1f32584abd53ddc4c08f42f43ce704df261f825d0cb49da2632b548d9373e66dc6dfa9ba47a7d956597633db43c5e99796b2b966bc51afb4cc5a0867b38d8aad6826c67d1bbe8c9071a72b56511d90ec1bd12b7a3f702fc7e3c62efbc0dbc026d54abe35fb3c6c71bd10559018ff80d52517b3855c13f21538cdbedca8293cf6ee415a", 0xfd}], 0x1}}, {{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000e40)="00a52754418d60845891f171de02b260178bb1c8bed61cf7d7c45894fed6c5128fb7860bdc03c3276d902a20fc0ff4796350bf2edbcf50c91ffc791b9588e666998c52ef9c0af37edd10731a1696e4f7a2955f25516f5012335c768acd9a9ee23898ed09cdb1abbd37c658e058f7c8", 0x6f}], 0x1, &(0x7f0000000480)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="dc5aa9bcbf900b50b49e70a29077f17300a74f1d185d09941f2e48690bd59f9a13dfe5925e763c6d6cf4dbc2dab1dbb08f6ab89c843b7f633364ca0ee12ccb26f93ae74cc85f72c5f15ecbe413bfc2745e0127dcf44628d27d7d1b5b0b3459cfb79e2583be041efd9ce2afb953813cbf2f29", 0x72}], 0x1, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8}}, {{&(0x7f0000001080)=@abs, 0x6e, &(0x7f0000001280)=[{&(0x7f0000001100)="21abb9324d4bb0e142c60944b8f4722af52b9ab909390262a5d6c32aba6fe9eee6016da156e93e257e23ece67f6e74b254c75e76a74a", 0x36}, {&(0x7f0000001140)="d92a4161e20fd18389f3347fc4a8db3900829b87945e91344d0c440a63262e30f6c1e1e39a527d22abceb7b783c115533e68681ca0ffbcfe4d04f890394456034e2f0f5e6259bc1119aceb1d2e079b8da4510a797c07685febda2c69cbc5533e701b1c5df2835bbb0e49697f72c19937f703fe94ae6ff9eb2ed9cb6d6e7fa72e64a6d4745413a1905f24acfeaeaf02a2f61575f13a824fbdfb1f15dd6563ff0971a07850a71f758f764333fc4a935df29c81f8f75bb9ae3a10d11e9e860b79d246866ee467fbbcaf52ce94aff48eed0b25357a507547b7949a6ab041764d3962878bbf66864d53560492cbd40c9d4ab0f450", 0xf2}, {&(0x7f0000001240)="81c1cb152774ad5120d3269d2a892740ccc92b0f67e099aa80e62e5c0d7e3da5d7fa714dce56bcc5cd", 0x29}], 0x3, &(0x7f00000012c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c080000000000000000000001000010", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000de00"], 0x98}}], 0x5, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4040085) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={'rose', 0x0}, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) 8m26.927126464s ago: executing program 4 (id=1016): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) eventfd2(0x0, 0x0) r3 = socket(0x28, 0x5, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) r5 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000380), &(0x7f00000002c0)=r6}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x3, 0x3a) r8 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000140)={0x9, 0x1, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x3ff, 0x58, 0x6df9, 0x3234564e, [0xa, 0x6], [], 0x108}}) 8m25.443062463s ago: executing program 4 (id=1017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 8m9.261469702s ago: executing program 33 (id=1017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 5m30.060696596s ago: executing program 1 (id=1364): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x4, 0x2, 0x500, 0x0, @msi={0x6, 0x3, 0xfffffffe, 0x7f}}]}) 5m29.777660745s ago: executing program 1 (id=1366): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005080)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0xb9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYBLOB="0000000021000000000000002900000032000000bd00000000"], 0x40}}], 0x1, 0x8800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x20000, 0x10) 5m28.609231822s ago: executing program 1 (id=1369): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1d) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x200011, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000040)='./file0\x00') mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18b980, 0x11c) mmap$snddsp(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x2000005, 0x50, r0, 0x10000) 5m27.676310792s ago: executing program 1 (id=1373): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b40)={0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r6, 0x400, 0x0) close(0x3) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 5m26.456034309s ago: executing program 1 (id=1375): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, &(0x7f0000000400)=""/4096, 0xc00) 5m25.096788801s ago: executing program 1 (id=1377): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 5m8.550492253s ago: executing program 34 (id=1377): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x2007ffb) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 4m46.322491249s ago: executing program 0 (id=1468): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b40)={0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) close(0x3) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 4m45.540077527s ago: executing program 0 (id=1469): socket$packet(0x11, 0xa, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$kvm(0xffffffffffffff9c, 0x0, 0x424881, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x2000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f000004b680)=""/102393, 0x18ff9) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r4, 0x0, &(0x7f0000004540)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp(0x2, 0x3, 0x2) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r6, &(0x7f0000000140)={0x90, 0x0, r7, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x0, 0x7, r8, r9, 0x5, 0xfff}}}, 0x90) 4m43.572220558s ago: executing program 0 (id=1473): socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 4m42.968793328s ago: executing program 0 (id=1475): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 4m40.311486023s ago: executing program 0 (id=1481): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000700), 0x101043, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4c840) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) writev(r0, &(0x7f00000001c0), 0x0) listen(0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000040)="09000000010001", 0x7) 4m39.492204874s ago: executing program 0 (id=1483): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x168, 0x190, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x9, &(0x7f0000002e40)) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2d000000010001", 0x7) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000000c0)=""/179, &(0x7f0000000040)=0xb3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 4m22.598818593s ago: executing program 35 (id=1483): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x3c0, 0xffffff80, 0x178, 0x0, 0x178, 0x528, 0x22b, 0x258, 0x528, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x168, 0x190, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52", 0x59}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xffffff00], 'veth1_to_bridge\x00', 'geneve1\x00', {0xff}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3c) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x10000, &(0x7f0000000800)) io_setup(0x9, &(0x7f0000002e40)) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2d000000010001", 0x7) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000000c0)=""/179, &(0x7f0000000040)=0xb3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) 3m52.558481164s ago: executing program 8 (id=1512): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x88400) r2 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x20c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x7fff, 0x8, 0x100}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000280)={r3}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x91) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 3m52.222775093s ago: executing program 8 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(r0, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r1 = fsopen(&(0x7f0000000140)='ocfs2_dlmfs\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) exit(0x2616) timer_gettime(r3, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015008900000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 3m35.851517697s ago: executing program 36 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(r0, 0x4, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) r1 = fsopen(&(0x7f0000000140)='ocfs2_dlmfs\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) exit(0x2616) timer_gettime(r3, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400010000000900020073797a31000000000500010007000000050005000a000000140007800800114000000000050015008900000013000300686173683a6e65742c6966616365"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') 12.28441661s ago: executing program 9 (id=2033): socketpair$unix(0x1, 0x3, 0x0, 0x0) unshare(0x24020400) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x5000000, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r2 = syz_io_uring_complete(0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x80) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc040) 11.463648s ago: executing program 9 (id=2035): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) epoll_create1(0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000580)={0x200d}) 9.995140323s ago: executing program 6 (id=2036): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) 9.952903035s ago: executing program 3 (id=2037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getpriority(0x0, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) shutdown(r0, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 8.926312088s ago: executing program 6 (id=2038): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.914997286s ago: executing program 3 (id=2039): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, 0x0) 8.847436753s ago: executing program 5 (id=2040): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 8.792575524s ago: executing program 3 (id=2041): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001080)={0x24, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x3, 0x3, 0x406}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00030c000000000000000319419b952740e407d7401e081dfded"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, 0x0, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x24, 0x1, 0x1, {0x22, 0xbc5}}}}, 0x0) 8.694565836s ago: executing program 6 (id=2043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="e8000000000000001701000002000000cf00000062783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b21ff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f0447708b51899084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a000000000018000000000000001701000004000001070000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000070000000000000018000000000000001701000004000000800000000000000018000000000000001701000004000000e50a0000000000004000000000000000170100000200000025000000bd2dfdf3a35167789d1e86eb11d3da70196a98ded037398fd10a44e4483892f9e41494aeae000000000000000000000000000000170100000200000000000000a1525e4edb3ed20038351cbec9986b7f1548bae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd407542c5ea9c24721e1a50f1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb51800000000000000170100000300000000000000000000003000000000000000000000e186f696fd1013a29e3da8955ad005d353361442a1000000000000000000000000000000008fb8960464426840b10d787ac586579c9c4d60a3e27a71ecb0b4143f970ce5ea4801a1a383fdd533c730259c405cb1e2b4ffc4de079c810c2900010eed1e00d253c25b74fc946869b75397a8c5fd9a26c45f9d327d5c577dfba562a6919210a820089b4245840b2c1eecd2865bc9f030fb50d8cdb6e494486e97a2c075809c"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000000017010000040000000900000000005000000000000000170100000200000038000000ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad000000001800000000000000170100000300000000000000000000004001000000000000170100000200000028010000526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd84430400f736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ccbc39669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d0000000018000000000000001701000004000000ed0e000000000000"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x0, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 7.763154116s ago: executing program 9 (id=2044): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x11a, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x25, 0x1, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001840)={0x90000001}) sendmsg$IPVS_CMD_NEW_DEST(r1, 0x0, 0x8000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10) lchown(0x0, 0xee01, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xdd) 7.599842806s ago: executing program 5 (id=2045): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x88400) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x20c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.934006465s ago: executing program 5 (id=2046): socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 6.651675173s ago: executing program 5 (id=2047): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) execveat$binfmt(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000034e40000000000000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f7274000000000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) 6.555461475s ago: executing program 6 (id=2048): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x5000003a, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 6.537123392s ago: executing program 9 (id=2049): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) 5.542697111s ago: executing program 6 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getpriority(0x0, r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) shutdown(r0, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 5.476510068s ago: executing program 9 (id=2051): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x3, "2bb704e3eed676d9d650b8da35645f7bfa2eb16e9bce87e3e7ecb2901e524a32", 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000980)={0x0, 0x0, "f5a9c2d6639ca8b61e371169d491f0bc687902d0a518e5129c797e335be58115e0763fb33c4fc2e31e8509b0782907088bbff157ddec6263c0c33c1fc006ba183350f437c8f3f6ab23eefac6f7da4d7a365f0bd26b06f9ef565a1eb0c47985bcb88550eb1126454ec8c6c45d9d2eeee1a67858ef68d8491a1a1f748962728efe49ab9605f32cd9ef8fe29cffad38d5782e57cedc7dae11fe37ac76b96afd73b1310658e75eddde33708dd413f4d0d46a39f3b0aa2713367a2424bb8cf3b071b558971ece2c952f760ebf0cd3a7d26835459090cbae047519b2a1051be99027bb28582ab5956979d14e5848533c4aac275f6b44fbc33b607788c279f9f85da6a6", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001980)={0x0, r1, "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", "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"}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f00000001c0)) socket$inet6(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000440)=@req3={0x7, 0x2, 0x8, 0xffffffff, 0xc, 0x4df, 0x4}, 0x1c) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000080)=0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r5, &(0x7f0000000100)="24b690b5448879809bde5aefd0111d820029c935e815ea5929184af1085db46558d3f12ea02274169b6bf40182ca4e0fd9bd1c0f2468ff4e76392951b178b432ff0bdf223eda4d3e00d7a88091b88ebc33edecbc605919d87e892598ae7665911d894340c2985c79", 0x68) 4.435527029s ago: executing program 6 (id=2052): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) socket$netlink(0x10, 0x3, 0x10) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x7ddfdbdfafa51cdd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x1, 0xb77, 0x2, 0x0, 0x10001}, &(0x7f0000000100)=0x14) 4.131495384s ago: executing program 3 (id=2053): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x42800) socket$igmp6(0xa, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000280), 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.969375134s ago: executing program 3 (id=2055): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 3.919658785s ago: executing program 7 (id=2056): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x88400) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x20c}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1fd, 0x101c3c}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)={r2}) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.544841456s ago: executing program 7 (id=2057): socket$inet6_sctp(0xa, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$cec(&(0x7f0000001080), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x400, 0x2, 0x3b9}, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.315829654s ago: executing program 7 (id=2058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0xffffff99}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x0, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3.256629594s ago: executing program 9 (id=2059): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@loopback, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x100000000fe, 0x0, 0x800000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3ff}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 2.805328931s ago: executing program 3 (id=2060): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f0000001180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001b40)={0xffffffffffffffff, &(0x7f0000001ac0), 0x0, 0x4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x149040, 0x2) fcntl$setlease(r6, 0x400, 0x0) close(0x3) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001a40)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x800) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 2.108561664s ago: executing program 7 (id=2061): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x109880) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0)=0xff) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x7e) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'bind', '', @val={0x3a, [0x30]}}}}]}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) 1.1538883s ago: executing program 7 (id=2062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000023c0)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000002c0)='G', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000001300)="1f", 0x1}], 0x1}}], 0x2, 0x880) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) getpriority(0x0, r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) shutdown(r0, 0x1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r4, 0x1) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 1.139983808s ago: executing program 5 (id=2063): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x0, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0xbcdb], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000002880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 35.311406ms ago: executing program 7 (id=2064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x2, 0x7, 0x367}, &(0x7f0000000140)=0x0, &(0x7f0000000400)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_uring_enter(r0, 0x66a8, 0x4000, 0xf, 0x0, 0x18) 0s ago: executing program 5 (id=2065): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x1, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800"], 0x2c}}, 0x808) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) kernel console output (not intermixed with test programs): u0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x80d0 [ 552.745547][ T8009] kvm [8008]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 552.804046][ T8009] kvm [8008]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0xf000006a64 [ 552.879240][ T8009] kvm [8008]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 552.889900][ T4232] usb 6-1: Using ep0 maxpacket: 16 [ 552.928510][ T8009] kvm [8008]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x270000e308 [ 552.971766][ T8009] kvm [8008]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 553.015467][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.038198][ T8009] kvm [8008]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x40000080c8 [ 554.436394][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.500658][ T8009] kvm [8008]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 554.507007][ T4232] usb 6-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 554.583340][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.655000][ T4232] usb 6-1: config 0 descriptor?? [ 555.273386][ T4232] sony 0003:054C:05C4.0001: hidraw0: USB HID v80.00 Device [HID 054c:05c4] on usb-dummy_hcd.5-1/input0 [ 555.618938][ T8051] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 555.939149][ T4232] sony 0003:054C:05C4.0001: failed to claim input [ 556.612612][ T8064] fuse: Unknown parameter 'group_i00000000000000000000' [ 557.548004][ T4232] usb 6-1: USB disconnect, device number 2 [ 559.531177][ T8082] sctp: failed to load transform for md5: -2 [ 563.387883][ T8114] fuse: Unknown parameter 'group_i00000000000000000000' [ 565.838558][ T2305] Bluetooth: hci5: command 0x0406 tx timeout [ 569.680786][ T8187] fuse: Unknown parameter 'group_i00000000000000000000' [ 572.522712][ T13] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 573.405571][ T8208] overlayfs: overlapping lowerdir path [ 573.936218][ T13] usb 5-1: unable to get BOS descriptor or descriptor too short [ 574.021772][ T13] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 574.038002][ T13] usb 5-1: can't read configurations, error -71 [ 575.243593][ T13] kernel read not supported for file /dsp1 (pid: 13 comm: kworker/0:1) [ 577.453118][ T8228] autofs4:pid:8228:autofs_fill_super: called with bogus options [ 580.114285][ T781] wlan1: Trigger new scan to find an IBSS to join [ 580.550210][ T4229] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 581.405952][ T8259] overlayfs: overlapping lowerdir path [ 582.249183][ T4229] usb 1-1: unable to get BOS descriptor or descriptor too short [ 582.314495][ T4229] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 583.186654][ T4229] usb 1-1: can't read configurations, error -71 [ 585.457428][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.518988][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 586.591681][ T154] wlan1: Trigger new scan to find an IBSS to join [ 587.702106][ T154] wlan1: Creating new IBSS network, BSSID 42:1f:01:7c:1d:5f [ 587.891290][ T7046] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 588.756202][ T7046] usb 6-1: unable to get BOS descriptor or descriptor too short [ 588.842828][ T7046] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 588.850787][ T7046] usb 6-1: can't read configurations, error -71 [ 593.038309][ T6854] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 593.922632][ T6854] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 594.093055][ T6854] usb 4-1: config 0 has no interface number 0 [ 595.699764][ T6854] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 595.727919][ T6854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.802896][ T6854] usb 4-1: Product: syz [ 595.811944][ T6854] usb 4-1: Manufacturer: syz [ 595.822621][ T6854] usb 4-1: SerialNumber: syz [ 595.847165][ T6854] usb 4-1: config 0 descriptor?? [ 595.939349][ T6854] usb 4-1: can't set config #0, error -71 [ 595.956030][ T6854] usb 4-1: USB disconnect, device number 18 [ 596.802663][ T8388] sctp: failed to load transform for md5: -2 [ 601.478344][ T8425] fuse: Unknown parameter '0x0000000000000006' [ 602.689342][ T4229] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 605.896490][ T2305] Bluetooth: hci3: command 0x1003 tx timeout [ 605.903398][ T4200] Bluetooth: hci3: sending frame failed (-49) [ 606.226502][ T4229] usb 6-1: unable to read config index 0 descriptor/all [ 606.234671][ T4229] usb 6-1: can't read configurations, error -71 [ 606.452492][ T8451] sctp: failed to load transform for md5: -2 [ 608.207926][ T4255] Bluetooth: hci3: command 0x1001 tx timeout [ 608.572359][ T4200] Bluetooth: hci3: sending frame failed (-49) [ 608.607146][ T8447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.264592][ T8471] fuse: Unknown parameter 'fd0x0000000000000006' [ 610.797416][ T4269] Bluetooth: hci3: command 0x1009 tx timeout [ 613.631088][ T8498] sctp: failed to load transform for md5: -2 [ 614.680617][ T8508] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 616.101770][ T8525] fuse: Unknown parameter 'fd0x0000000000000006' [ 617.919669][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 618.069689][ T8517] chnl_net:caif_netlink_parms(): no params data found [ 618.210260][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.220475][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.233822][ T8517] device bridge_slave_0 entered promiscuous mode [ 618.244645][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.271704][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.285529][ T8517] device bridge_slave_1 entered promiscuous mode [ 618.391477][ T8517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.073836][ T8517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.079661][ T4271] Bluetooth: hci3: command 0x041b tx timeout [ 620.163005][ T4351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.293058][ T8517] team0: Port device team_slave_0 added [ 620.367272][ T8517] team0: Port device team_slave_1 added [ 620.423807][ T4351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.929320][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.937328][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.966964][ T8517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.245092][ T4351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.375347][ T8517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.404469][ T8517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.565075][ T8517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.715175][ T4351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.934818][ T8517] device hsr_slave_0 entered promiscuous mode [ 622.277955][ T8517] device hsr_slave_1 entered promiscuous mode [ 622.366807][ T4271] Bluetooth: hci3: command 0x040f tx timeout [ 622.382026][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 622.393711][ T8517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.401334][ T8517] Cannot create hsr debugfs directory [ 623.368345][ T8564] sctp: failed to load transform for md5: -2 [ 623.620417][ T7046] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 623.886465][ T4351] tipc: Left network mode [ 623.985564][ T8577] fuse: Unknown parameter 'fd0x0000000000000006' [ 624.037659][ T7046] usb 1-1: Using ep0 maxpacket: 32 [ 624.670026][ T7046] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 624.741847][ T7046] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 624.753849][ T7046] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 624.895290][ T8576] fuse: Bad value for 'fd' [ 624.957759][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 625.197061][ T7046] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 625.280380][ T7046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.315527][ T7046] usb 1-1: Product: syz [ 625.336314][ T7046] usb 1-1: Manufacturer: syz [ 625.359751][ T7046] usb 1-1: SerialNumber: syz [ 626.153868][ T7046] usb 1-1: can't set config #155, error -71 [ 626.182655][ T7046] usb 1-1: USB disconnect, device number 13 [ 626.332684][ T8517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 626.380336][ T8517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 626.608853][ T8517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 628.218406][ T8517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 628.725326][ T8517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.849173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 628.879957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.904139][ T8517] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.962834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 628.992368][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 629.008161][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.015322][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.135793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 629.157652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 629.183386][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 629.248864][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.256026][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.316544][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 629.353584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 629.431848][ T4351] device hsr_slave_0 left promiscuous mode [ 629.442397][ T4351] device hsr_slave_1 left promiscuous mode [ 629.453379][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.468227][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.483839][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.501003][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.539862][ T4351] device bridge_slave_1 left promiscuous mode [ 629.553289][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.630510][ T4351] device bridge_slave_0 left promiscuous mode [ 629.650725][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.697094][ T4351] device veth1_macvtap left promiscuous mode [ 629.738376][ T4351] device veth0_macvtap left promiscuous mode [ 629.767542][ T4351] device veth1_vlan left promiscuous mode [ 629.800717][ T4351] device veth0_vlan left promiscuous mode [ 630.755035][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 630.841889][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 631.223758][ T8630] sctp: failed to load transform for md5: -2 [ 631.852717][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.000488][ T26] audit: type=1326 audit(1772141841.165:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.3.1073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x0 [ 632.026635][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.349142][ T4351] bond0 (unregistering): Released all slaves [ 632.854873][ T8652] fuse: Bad value for 'fd' [ 633.631167][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.804069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.824779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.166231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.011395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.019972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.047403][ T8517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.112372][ T8517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.616886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.632958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.641810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 637.485926][ T8678] device syzkaller1 entered promiscuous mode [ 637.810482][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 637.843804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 638.081965][ T8517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.473607][ T8704] fuse: Bad value for 'fd' [ 641.935085][ T8725] sctp: failed to load transform for md5: -2 [ 643.285230][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 643.611881][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 644.914751][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 644.947827][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 645.777673][ T8517] device veth0_vlan entered promiscuous mode [ 645.800642][ T8517] device veth1_vlan entered promiscuous mode [ 645.874815][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 646.121403][ T263] block nbd0: Attempted send on invalid socket [ 646.128582][ T263] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 646.140706][ T263] gfs2: error 10 reading superblock [ 646.307342][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 646.470973][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 646.514036][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 646.549885][ T8517] device veth0_macvtap entered promiscuous mode [ 646.565495][ T8517] device veth1_macvtap entered promiscuous mode [ 646.610279][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.625273][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.638584][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.654615][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.741774][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.782932][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.834711][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.889604][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 646.909383][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 647.021849][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 647.069524][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 647.158468][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.223590][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.236844][ T8771] fuse: Bad value for 'fd' [ 647.938952][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.951327][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.961746][ T8517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.972562][ T8517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.984287][ T8517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.992648][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 648.007000][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 648.050662][ T8517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.084686][ T8517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.137543][ T8517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.186802][ T8517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.205340][ T8775] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.283674][ T8775] F2FS-fs (loop3): Unable to read 1th superblock [ 648.308509][ T8775] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 648.369836][ T8775] F2FS-fs (loop3): Unable to read 2th superblock [ 648.518842][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.562185][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.593142][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 648.607796][ T1571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.628326][ T1571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.638690][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 650.482872][ T13] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 650.921235][ T13] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 650.929800][ T13] usb 7-1: config 0 has no interface number 0 [ 651.105875][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 651.112303][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 651.188779][ T13] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 651.213728][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.256600][ T13] usb 7-1: Product: syz [ 651.260959][ T13] usb 7-1: Manufacturer: syz [ 651.289079][ T13] usb 7-1: SerialNumber: syz [ 651.318392][ T13] usb 7-1: config 0 descriptor?? [ 652.570978][ T13] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 652.581857][ T13] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 652.592085][ T13] asix: probe of 7-1:0.251 failed with error -5 [ 652.648925][ T13] usb 7-1: USB disconnect, device number 2 [ 652.654994][ T4232] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 653.163535][ T8839] fuse: Invalid rootmode [ 653.326182][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 653.418317][ T4232] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.585465][ T4232] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 653.944646][ T4232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.020406][ T4232] usb 6-1: config 0 descriptor?? [ 654.117610][ T8840] device syzkaller1 entered promiscuous mode [ 654.526072][ T4232] isku 0003:1E7D:319C.0002: item fetching failed at offset 6/7 [ 654.548769][ T4232] isku 0003:1E7D:319C.0002: parse failed [ 654.585523][ T4232] isku: probe of 0003:1E7D:319C.0002 failed with error -22 [ 654.788796][ T7136] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 655.227225][ T7136] usb 7-1: Using ep0 maxpacket: 32 [ 655.233096][ T8826] netlink: 4292 bytes leftover after parsing attributes in process `syz.5.1104'. [ 655.430483][ T7136] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 655.441676][ T7136] usb 7-1: config 0 has no interface number 0 [ 655.665066][ T7136] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 655.789050][ T7136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.798276][ T7136] usb 7-1: Product: syz [ 655.802686][ T7136] usb 7-1: Manufacturer: syz [ 655.812639][ T7136] usb 7-1: SerialNumber: syz [ 657.366545][ T7136] usb 7-1: config 0 descriptor?? [ 657.376147][ T4269] usb 6-1: USB disconnect, device number 7 [ 657.606752][ T7136] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 657.619390][ T7136] usb 7-1: selecting invalid altsetting 1 [ 657.641293][ T7136] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 657.697936][ T7136] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 657.735713][ T7136] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 657.875873][ T8881] vivid-000: disconnect [ 657.910191][ T7136] usb 7-1: media controller created [ 658.010374][ T8884] fuse: Invalid rootmode [ 658.742474][ T8878] vivid-000: reconnect [ 658.855928][ T7136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 658.989838][ T7136] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 659.010880][ T7136] zl10353_read_register: readreg error (reg=127, ret==-71) [ 659.041176][ T8896] device syzkaller1 entered promiscuous mode [ 659.073068][ T7136] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 659.172947][ T7136] usb 7-1: USB disconnect, device number 3 [ 659.551193][ T6364] udevd[6364]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 659.650559][ T7136] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 660.110154][ T7136] usb 7-1: Using ep0 maxpacket: 32 [ 660.971601][ T7136] usb 7-1: config 0 has no interfaces? [ 661.583171][ T7136] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 661.610987][ T7136] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 661.636740][ T7136] usb 7-1: Product: syz [ 661.749344][ T7136] usb 7-1: Manufacturer: syz [ 661.876285][ T7136] usb 7-1: SerialNumber: syz [ 662.226921][ T6854] Bluetooth: hci0: command 0x0c1a tx timeout [ 662.814552][ T7136] usb 7-1: config 0 descriptor?? [ 662.834615][ T7136] usb 7-1: can't set config #0, error -71 [ 662.845496][ T7136] usb 7-1: USB disconnect, device number 4 [ 663.646614][ T7136] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 663.932773][ T8952] fuse: Invalid rootmode [ 664.947596][ T8963] device syzkaller1 entered promiscuous mode [ 665.027514][ T7136] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 665.048589][ T7136] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.056783][ T7136] usb 7-1: Product: syz [ 665.066825][ T7136] usb 7-1: Manufacturer: syz [ 665.073126][ T7136] usb 7-1: SerialNumber: syz [ 665.082425][ T7136] usb 7-1: config 0 descriptor?? [ 665.155377][ T7136] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 665.499522][ T7136] gspca_sunplus: reg_r err -71 [ 665.504465][ T7136] sunplus: probe of 7-1:0.0 failed with error -71 [ 665.535208][ T7136] usb 7-1: USB disconnect, device number 5 [ 665.954606][ T4271] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 667.088102][ T8995] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 667.251448][ T4271] usb 6-1: Using ep0 maxpacket: 16 [ 667.429235][ T4271] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.621672][ T4271] usb 6-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 667.630779][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.696320][ T4271] usb 6-1: Product: syz [ 667.713137][ T4271] usb 6-1: Manufacturer: syz [ 667.733553][ T4271] usb 6-1: SerialNumber: syz [ 667.750624][ T4271] usb 6-1: config 0 descriptor?? [ 667.826066][ T4271] kobil_sct 6-1:0.0: required endpoints missing [ 668.539429][ T6854] usb 6-1: USB disconnect, device number 8 [ 670.768041][ T9040] fuse: Bad value for 'rootmode' [ 672.241272][ T9053] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 677.591665][ T9096] fuse: Bad value for 'rootmode' [ 678.392796][ T9105] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 679.730515][ T9121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1167'. [ 680.442248][ T150] block nbd3: Attempted send on invalid socket [ 680.448571][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 680.460042][ T150] gfs2: error 10 reading superblock [ 681.255461][ T7046] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 681.693919][ T7046] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 681.749734][ T7046] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 681.896376][ T7046] usb 7-1: config 220 has no interface number 2 [ 681.933014][ T7046] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 682.177209][ T7046] usb 7-1: config 220 interface 0 has no altsetting 0 [ 682.184365][ T7046] usb 7-1: config 220 interface 76 has no altsetting 0 [ 682.223704][ T7046] usb 7-1: config 220 interface 1 has no altsetting 0 [ 682.324544][ T9153] fuse: Bad value for 'rootmode' [ 683.452432][ T9159] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 684.935390][ T7046] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 684.955609][ T7046] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.016566][ T7046] usb 7-1: can't set config #220, error -71 [ 685.026198][ T7046] usb 7-1: USB disconnect, device number 6 [ 685.071818][ T26] audit: type=1326 audit(1772141890.833:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 685.159093][ T26] audit: type=1326 audit(1772141890.852:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 685.345610][ T26] audit: type=1326 audit(1772141890.852:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 685.617142][ T26] audit: type=1326 audit(1772141890.852:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 686.221067][ T26] audit: type=1326 audit(1772141890.861:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 686.350656][ T26] audit: type=1326 audit(1772141890.861:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 686.501543][ T26] audit: type=1326 audit(1772141890.871:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 686.618410][ T26] audit: type=1326 audit(1772141890.871:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 686.724665][ T26] audit: type=1326 audit(1772141891.077:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 686.866341][ T26] audit: type=1326 audit(1772141891.077:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.3.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 688.061626][ T7136] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 688.862919][ T7136] usb 2-1: Using ep0 maxpacket: 16 [ 688.999471][ T7136] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 689.042061][ T7136] usb 2-1: config 0 interface 0 has no altsetting 0 [ 689.085277][ T7136] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 689.146051][ T7136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.225041][ T7136] usb 2-1: config 0 descriptor?? [ 691.075782][ T9221] fuse: Unknown parameter 'use00000000000000000000' [ 691.569095][ T7136] hid-generic 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 692.591966][ T2305] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 692.998259][ T2305] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 693.017346][ T2305] usb 6-1: config 0 has no interface number 0 [ 693.167933][ T4269] usb 2-1: USB disconnect, device number 14 [ 693.233342][ T2305] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 693.264341][ T2305] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.339700][ T2305] usb 6-1: Product: syz [ 693.361323][ T2305] usb 6-1: Manufacturer: syz [ 693.366010][ T2305] usb 6-1: SerialNumber: syz [ 693.433060][ T2305] usb 6-1: config 0 descriptor?? [ 693.756272][ T9270] autofs4:pid:9270:autofs_fill_super: called with bogus options [ 693.992050][ T2305] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 694.009915][ T2305] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 694.041588][ T2305] asix: probe of 6-1:0.251 failed with error -5 [ 694.102649][ T2305] usb 6-1: USB disconnect, device number 9 [ 695.657619][ T9297] fuse: Unknown parameter 'use00000000000000000000' [ 696.620442][ T2305] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 697.508913][ T2305] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 697.743651][ T2305] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 697.754817][ T2305] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.295291][ T2305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.333496][ T9295] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 698.434563][ T9310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 698.442364][ T9310] IPv6: NLM_F_CREATE should be set when creating new route [ 698.449679][ T9310] IPv6: NLM_F_CREATE should be set when creating new route [ 698.457030][ T9310] IPv6: NLM_F_CREATE should be set when creating new route [ 698.689222][ T2305] usb 4-1: USB disconnect, device number 19 [ 701.065696][ T7046] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 703.185329][ T9363] fuse: Unknown parameter 'use00000000000000000000' [ 703.297739][ T150] block nbd0: Attempted send on invalid socket [ 703.413663][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 703.426072][ T7046] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 703.435515][ T150] gfs2: error 10 reading superblock [ 703.442822][ T7046] usb 2-1: config 0 has no interface number 0 [ 703.641184][ T7046] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 703.673009][ T7046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.692385][ T7046] usb 2-1: Product: syz [ 703.713843][ T7046] usb 2-1: Manufacturer: syz [ 703.748411][ T7046] usb 2-1: SerialNumber: syz [ 703.951553][ T7046] usb 2-1: config 0 descriptor?? [ 704.881430][ T7046] usb 2-1: can't set config #0, error -71 [ 704.921894][ T7046] usb 2-1: USB disconnect, device number 15 [ 705.090462][ T9384] autofs4:pid:9384:autofs_fill_super: called with bogus options [ 706.621751][ T6854] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 708.138840][ T9417] fuse: Unknown parameter 'user_i00000000000000000000' [ 708.594029][ T263] block nbd3: Attempted send on invalid socket [ 708.601580][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 708.613586][ T263] gfs2: error 10 reading superblock [ 708.962649][ T6854] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.997531][ T6854] usb 7-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 709.089985][ T6854] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.159977][ T6854] usb 7-1: config 0 descriptor?? [ 712.393199][ T6854] usbhid 7-1:0.0: can't add hid device: -71 [ 712.399338][ T6854] usbhid: probe of 7-1:0.0 failed with error -71 [ 712.560780][ T6854] usb 7-1: USB disconnect, device number 7 [ 716.145676][ T9446] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1237'. [ 716.233585][ T9471] fuse: Unknown parameter 'user_i00000000000000000000' [ 716.752624][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.759166][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.210697][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 717.210717][ T26] audit: type=1326 audit(1772141920.904:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 717.299173][ T26] audit: type=1326 audit(1772141920.904:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 718.281638][ T26] audit: type=1326 audit(1772141920.941:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 718.309974][ T26] audit: type=1326 audit(1772141920.941:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 718.336120][ T26] audit: type=1326 audit(1772141920.941:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9473 comm="syz.3.1242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309be44799 code=0x7ffc0000 [ 718.499898][ T9488] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 720.945663][ T9502] serio: Serial port ptm0 [ 723.352698][ T9520] fuse: Unknown parameter 'user_i00000000000000000000' [ 723.972090][ T9531] ubi1: attaching mtd0 [ 724.843989][ T9537] autofs4:pid:9537:autofs_fill_super: called with bogus options [ 731.068681][ T21] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 731.527839][ T21] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 731.557771][ T21] usb 6-1: config 0 has no interface number 0 [ 733.195092][ T21] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 733.215937][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.235039][ T21] usb 6-1: Product: syz [ 733.244808][ T21] usb 6-1: Manufacturer: syz [ 733.258619][ T21] usb 6-1: SerialNumber: syz [ 733.296642][ T21] usb 6-1: config 0 descriptor?? [ 733.651469][ T7136] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 733.921429][ T21] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 733.967688][ T21] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 733.985299][ T7136] usb 2-1: Using ep0 maxpacket: 16 [ 734.155706][ T21] asix: probe of 6-1:0.251 failed with error -5 [ 734.367337][ T21] usb 6-1: USB disconnect, device number 10 [ 734.438819][ T7136] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 734.465098][ T7136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.530141][ T7136] usb 2-1: Product: syz [ 734.534540][ T7136] usb 2-1: Manufacturer: syz [ 734.585125][ T7136] usb 2-1: SerialNumber: syz [ 734.632749][ T7136] r8152-cfgselector 2-1: config 0 descriptor?? [ 735.819375][ T7136] r8152-cfgselector 2-1: Unknown version 0x0000 [ 735.826763][ T7136] r8152-cfgselector 2-1: bad CDC descriptors [ 735.898156][ T7136] r8152-cfgselector 2-1: Unknown version 0x0000 [ 735.932164][ T7136] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 736.045270][ T9602] autofs4:pid:9602:autofs_fill_super: called with bogus options [ 740.054332][ T21] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 740.509438][ T9630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1281'. [ 740.789505][ T9643] ubi1: attaching mtd0 [ 741.411334][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 741.471687][ T9646] vivid-000: disconnect [ 741.495916][ T9646] vivid-000: reconnect [ 741.500586][ T21] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 741.519052][ T21] usb 2-1: can't read configurations, error -71 [ 741.794765][ T150] block nbd0: Attempted send on invalid socket [ 741.801486][ T150] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 741.813647][ T150] gfs2: error 10 reading superblock [ 744.852265][ T21] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 745.282248][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 745.418492][ T21] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA4, skipping [ 745.445375][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 745.472350][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.501384][ T21] usb 1-1: config 0 descriptor?? [ 746.641784][ T9694] autofs4:pid:9694:autofs_fill_super: called with bogus options [ 746.856561][ T263] block nbd1: Attempted send on invalid socket [ 746.862831][ T263] blk_update_request: I/O error, dev nbd1, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 746.874470][ T21] ath6kl: Failed to submit usb control message: -110 [ 746.881210][ T21] ath6kl: unable to send the bmi data to the device: -110 [ 746.888508][ T263] gfs2: error 10 reading superblock [ 746.898969][ T21] ath6kl: Unable to send get target info: -110 [ 746.913008][ T21] ath6kl: Failed to init ath6kl core: -110 [ 746.925361][ T9570] Bluetooth: hci3: command 0x0406 tx timeout [ 747.376063][ T21] ath6kl_usb: probe of 1-1:0.0 failed with error -110 [ 747.647455][ T21] usb 1-1: USB disconnect, device number 14 [ 752.012354][ T9735] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1309'. [ 752.723509][ T263] block nbd0: Attempted send on invalid socket [ 752.729976][ T263] blk_update_request: I/O error, dev nbd0, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 752.745717][ T263] gfs2: error 10 reading superblock [ 753.163327][ T9747] ubi1: attaching mtd0 [ 757.656167][ T9778] tmpfs: Unknown parameter 'usrquota' [ 757.663111][ T7136] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 757.860314][ T9781] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1325'. [ 757.974532][ T9782] overlayfs: failed to resolve './file0': -2 [ 758.212513][ T7136] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 758.222456][ T7136] usb 1-1: can't read configurations, error -71 [ 759.811579][ T263] block nbd3: Attempted send on invalid socket [ 759.818524][ T263] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 759.833009][ T263] gfs2: error 10 reading superblock [ 762.381946][ T9835] autofs4:pid:9835:autofs_fill_super: called with bogus options [ 762.588510][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1340'. [ 764.197920][ T150] block nbd3: Attempted send on invalid socket [ 764.205197][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 764.226851][ T9848] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 764.226851][ T9848] program syz.1.1344 not setting count and/or reply_len properly [ 764.246987][ T150] gfs2: error 10 reading superblock [ 764.617922][ T9859] ubi1: attaching mtd0 [ 764.630412][ T7235] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 765.174596][ T7235] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 765.182695][ T7235] usb 6-1: config 0 has no interface number 0 [ 765.190009][ T7235] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 765.201632][ T7235] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 765.213166][ T7235] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 765.222636][ T7235] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.398305][ T7235] usb 6-1: config 0 descriptor?? [ 765.486763][ T9852] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 765.634064][ T7235] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 766.700977][ T9881] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 766.832475][ T4231] usb 6-1: USB disconnect, device number 11 [ 766.852535][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 767.598946][ T9881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.660069][ T9881] bond0: (slave rose0): Enslaving as an active interface with an up link [ 767.712935][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 768.028056][ T4271] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 768.317746][ T9896] bridge0: port 3(syz_tun) entered blocking state [ 768.331211][ T9896] bridge0: port 3(syz_tun) entered disabled state [ 768.432836][ T9896] device syz_tun entered promiscuous mode [ 768.471257][ T9896] bridge0: port 3(syz_tun) entered blocking state [ 768.478366][ T9896] bridge0: port 3(syz_tun) entered forwarding state [ 768.944557][ T4271] usb 2-1: device descriptor read/64, error -71 [ 769.929440][ T4271] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 770.195466][ T4271] usb 2-1: device descriptor read/64, error -71 [ 770.257985][ T9913] ubi1: attaching mtd0 [ 770.359225][ T4271] usb usb2-port1: attempt power cycle [ 770.859318][ T4271] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 771.136751][ T4271] usb 2-1: device descriptor read/8, error -71 [ 772.334239][ T9936] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 772.889383][ T26] audit: type=1800 audit(1772141973.005:19): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1369" name="eth0" dev="overlay" ino=49912 res=0 errno=0 [ 773.562578][ T26] audit: type=1800 audit(1772141973.043:20): pid=9944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1369" name="eth0" dev="overlay" ino=49912 res=0 errno=0 [ 773.787620][ T9957] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1371'. [ 773.912837][ T9956] fuse: Unknown parameter '0x0000000000000008' [ 775.111515][ T4271] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 775.357191][ T4271] usb 7-1: device descriptor read/64, error -71 [ 775.667162][ T4271] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 775.950455][ T4271] usb 7-1: device descriptor read/64, error -71 [ 776.095130][ T4271] usb usb7-port1: attempt power cycle [ 776.788961][ T4271] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 776.960078][ T4271] usb 7-1: device descriptor read/8, error -71 [ 777.259153][ T4271] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 777.558483][ T4271] usb 7-1: device descriptor read/8, error -71 [ 777.686673][ T4271] usb usb7-port1: unable to enumerate USB device [ 778.290374][ T26] audit: type=1800 audit(1772141978.069:21): pid=9993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1377" name="bus" dev="ramfs" ino=49977 res=0 errno=0 [ 780.784950][T10023] fuse: Unknown parameter '0x000000000000000a' [ 782.698608][T10039] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 782.857175][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.892842][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.573516][ T7136] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 785.668981][T10067] loop6: detected capacity change from 0 to 7 [ 785.693520][T10067] Dev loop6: unable to read RDB block 7 [ 785.699636][T10067] loop6: unable to read partition table [ 785.706070][T10067] loop6: partition table beyond EOD, truncated [ 785.713067][T10067] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 788.425066][ T7136] usb 6-1: device descriptor read/64, error -71 [ 788.553672][T10076] fuse: Unknown parameter 'fd0x000000000000000a' [ 790.458555][T10092] ubi1: attaching mtd0 [ 794.245765][T10128] fuse: Unknown parameter 'fd0x000000000000000a' [ 796.659359][T10155] ubi1: attaching mtd0 [ 797.871427][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 797.920041][T10159] netlink: 'syz.6.1421': attribute type 1 has an invalid length. [ 798.197685][T10159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.313549][ T13] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 799.553932][T10140] chnl_net:caif_netlink_parms(): no params data found [ 799.870114][ T13] usb 7-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b [ 799.881545][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.891825][ T13] usb 7-1: Product: syz [ 799.896548][ T13] usb 7-1: Manufacturer: syz [ 799.903835][ T13] usb 7-1: SerialNumber: syz [ 800.094005][ T4229] Bluetooth: hci4: command 0x041b tx timeout [ 800.213828][ T13] gspca_main: pac207-2.14.0 probing 093a:2476 [ 800.243242][ T13] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 800.256630][ T13] usb 7-1: USB disconnect, device number 12 [ 800.186270][T10140] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.322955][T10140] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.332185][T10140] device bridge_slave_0 entered promiscuous mode [ 800.347417][T10140] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.355882][T10140] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.375830][T10140] device bridge_slave_1 entered promiscuous mode [ 800.425692][T10140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.444987][T10140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.513980][T10140] team0: Port device team_slave_0 added [ 800.576050][T10140] team0: Port device team_slave_1 added [ 800.663189][T10140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.684211][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.809686][T10140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 801.903522][T10140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 801.943583][T10140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.104863][T10140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.200791][T10140] device hsr_slave_0 entered promiscuous mode [ 802.224598][T10140] device hsr_slave_1 entered promiscuous mode [ 802.248311][T10140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 802.296669][T10140] Cannot create hsr debugfs directory [ 802.316089][ T1108] Bluetooth: hci4: command 0x040f tx timeout [ 802.878383][T10140] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 802.931581][T10140] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 802.991475][T10140] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 803.044652][T10140] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 803.562402][T10140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.950132][ T9570] Bluetooth: hci4: command 0x0419 tx timeout [ 805.694494][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 805.714257][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 805.755438][T10140] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.901309][ T4351] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.043455][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 806.079625][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 806.143523][ T1571] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.150723][ T1571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.340125][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 806.935133][ T4351] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.174382][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 807.243225][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 807.742063][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.749388][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.814173][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 807.823446][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 807.832602][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 807.841990][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 807.851511][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 808.433957][T10140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 808.462468][T10140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 808.596207][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 808.791385][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 808.801763][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 808.810508][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 808.846255][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 809.368339][ T9570] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 809.427733][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 809.845848][ T4351] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.015114][ T9570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.038446][ T9570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.071615][ T9570] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 810.105154][ T9570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.121512][ T4351] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.143399][ T9570] usb 4-1: config 0 descriptor?? [ 810.201206][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 810.626174][ T4351] tipc: Left network mode [ 810.782594][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.256617][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.300037][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.308597][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.316920][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.325530][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.332584][ T9570] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 811.358991][ T9570] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 811.484013][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 811.505171][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 811.538821][T10140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.622967][ T9570] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 811.890889][ T9570] cp2112 0003:10C4:EA90.0004: error setting SMBus config [ 811.919424][ T9570] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 811.957489][ T9570] usb 4-1: USB disconnect, device number 20 [ 812.148537][T10328] autofs4:pid:10328:autofs_fill_super: called with bogus options [ 812.844028][T10325] fido_id[10325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 813.318398][ T4351] device hsr_slave_0 left promiscuous mode [ 813.356812][ T4351] device hsr_slave_1 left promiscuous mode [ 813.402857][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 813.441756][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.459086][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 813.518437][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.554068][ T4351] device bridge_slave_1 left promiscuous mode [ 813.573094][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.613741][ T4351] device bridge_slave_0 left promiscuous mode [ 813.637783][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.853334][ T4351] device veth1_macvtap left promiscuous mode [ 813.875049][ T4351] device veth0_macvtap left promiscuous mode [ 813.909878][ T4351] device veth1_vlan left promiscuous mode [ 813.915818][ T4351] device veth0_vlan left promiscuous mode [ 814.855167][ T4351] team0 (unregistering): Port device team_slave_1 removed [ 814.888411][ T4351] team0 (unregistering): Port device team_slave_0 removed [ 814.924885][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.949242][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.841650][ T4351] bond0 (unregistering): Released all slaves [ 816.214818][T10366] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 816.214818][T10366] program syz.3.1470 not setting count and/or reply_len properly [ 817.332382][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 817.370637][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 817.473488][T10140] device veth0_vlan entered promiscuous mode [ 817.483988][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 817.494465][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 817.539358][T10140] device veth1_vlan entered promiscuous mode [ 817.571057][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 817.581377][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 817.674437][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 817.770515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 817.782127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 817.793834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 817.835465][T10140] device veth0_macvtap entered promiscuous mode [ 817.899100][T10140] device veth1_macvtap entered promiscuous mode [ 818.016571][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.050970][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.070008][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.096551][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.115173][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.127819][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.148739][T10140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.179400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 818.210134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 818.244720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 818.255637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 818.294513][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.624209][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.977187][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.021430][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.055150][T10140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 819.114131][T10140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 819.161473][T10140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 819.296284][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 819.310940][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 819.352910][T10140] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.415733][T10140] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.489087][T10140] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.498738][T10140] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.513861][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.564930][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.614423][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 820.884445][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.893174][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.901678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 820.984313][T10418] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 820.984313][T10418] program syz.3.1480 not setting count and/or reply_len properly [ 825.398825][T10468] autofs4:pid:10468:autofs_fill_super: called with bogus options [ 827.492988][T10481] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 827.492988][T10481] program syz.5.1492 not setting count and/or reply_len properly [ 835.462374][T10539] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 835.462374][T10539] program syz.5.1504 not setting count and/or reply_len properly [ 839.612039][T10593] autofs4:pid:10593:autofs_fill_super: called with bogus options [ 840.760193][T10596] chnl_net:caif_netlink_parms(): no params data found [ 840.825314][ T4350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.955644][ T4350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.103454][ T4350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.406445][ T4350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.783239][ T150] block nbd5: Attempted send on invalid socket [ 841.791968][ T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 841.804573][ T150] gfs2: error 10 reading superblock [ 841.826722][T10596] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.835767][T10596] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.845412][T10596] device bridge_slave_0 entered promiscuous mode [ 841.880127][T10596] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.919737][T10596] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.950604][T10596] device bridge_slave_1 entered promiscuous mode [ 842.080026][ T4269] Bluetooth: hci2: command 0x0409 tx timeout [ 842.396811][T10596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.462623][T10596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 842.895527][ T4350] tipc: Left network mode [ 843.006865][T10596] team0: Port device team_slave_0 added [ 843.219169][T10596] team0: Port device team_slave_1 added [ 843.485306][T10596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.492710][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.511282][ T7235] Bluetooth: hci2: command 0x041b tx timeout [ 844.548221][T10596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.578611][T10596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.602024][T10596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.686389][T10596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.886323][T10596] device hsr_slave_0 entered promiscuous mode [ 844.907802][T10596] device hsr_slave_1 entered promiscuous mode [ 844.941673][T10596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 844.950281][T10596] Cannot create hsr debugfs directory [ 845.392351][T10596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 845.404427][T10596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 845.428511][T10596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 845.547125][T10596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 846.723078][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 848.369596][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 848.375984][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.360744][T10070] Bluetooth: hci2: command 0x0419 tx timeout [ 849.759873][ T4350] device hsr_slave_0 left promiscuous mode [ 849.847104][ T4350] device hsr_slave_1 left promiscuous mode [ 849.911032][ T4350] device bridge_slave_1 left promiscuous mode [ 849.961253][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.984622][ T4350] device bridge_slave_0 left promiscuous mode [ 849.993168][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.017138][ T4350] device veth1_macvtap left promiscuous mode [ 850.024383][ T4350] device veth0_macvtap left promiscuous mode [ 850.031286][ T4350] device veth1_vlan left promiscuous mode [ 850.037901][ T4350] device veth0_vlan left promiscuous mode [ 851.597152][T10701] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 851.597152][T10701] program syz.3.1533 not setting count and/or reply_len properly [ 852.106660][T10704] autofs4:pid:10704:autofs_fill_super: called with bogus options [ 854.111586][ T4350] team0 (unregistering): Port device team_slave_1 removed [ 854.568267][ T4350] team0 (unregistering): Port device team_slave_0 removed [ 854.586575][ T4350] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.605956][ T4350] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.592625][ T4350] bond0 (unregistering): Released all slaves [ 855.798615][T10596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.995392][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 856.068086][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 856.091473][T10596] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.129831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 856.172548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 856.220237][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.227653][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.291468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 856.334613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 856.388312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 856.419449][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.426654][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.488019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 856.548372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 856.572917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 856.625129][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 856.698621][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 856.718628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 856.785709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 856.816401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 856.849707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 856.908764][T10596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.948903][T10596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 857.004941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 857.095214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 857.802366][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 857.810413][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 857.946538][T10596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.733980][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 860.768536][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 860.860724][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 861.760181][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 861.803342][T10596] device veth0_vlan entered promiscuous mode [ 861.814126][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 861.843047][ T781] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 861.888949][T10596] device veth1_vlan entered promiscuous mode [ 861.994385][ T8637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 862.039957][ T8637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 862.055267][ T4232] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 862.146905][T10596] device veth0_macvtap entered promiscuous mode [ 862.161952][T10596] device veth1_macvtap entered promiscuous mode [ 862.200395][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.226048][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.258095][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.274271][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.296022][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.330169][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.418408][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 862.493346][ T4232] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 862.508880][ T4232] usb 4-1: config 0 has no interface number 0 [ 862.545878][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.555915][ T4232] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 862.668302][T10596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.677417][ T4232] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 862.702602][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.734892][ T4232] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 862.781514][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.791032][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.841800][ T4232] usb 4-1: config 0 descriptor?? [ 862.847826][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 862.883742][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 862.895003][T10781] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 862.925616][ T4232] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 862.937791][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.751347][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.762309][T10596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.774037][T10596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.786882][T10596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.964882][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 864.770434][ T7235] usb 4-1: USB disconnect, device number 21 [ 864.809170][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 864.852746][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 864.877152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 864.911570][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 864.937402][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 864.976952][T10596] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.003410][T10596] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.089464][T10596] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.098275][T10596] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.109816][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.151010][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.237218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 868.261293][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.289500][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.325196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 869.329650][T10852] autofs4:pid:10852:autofs_fill_super: called with bogus options [ 881.731481][ T150] block nbd6: Attempted send on invalid socket [ 881.738794][ T150] blk_update_request: I/O error, dev nbd6, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 881.752629][ T150] gfs2: error 10 reading superblock [ 886.820280][T11006] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 886.820280][T11006] program syz.3.1582 not setting count and/or reply_len properly [ 887.565241][ T8637] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.308294][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 888.753109][ T8637] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.853184][T10998] chnl_net:caif_netlink_parms(): no params data found [ 889.622670][T11032] Bluetooth: hci0: invalid len left 7, exp >= 86 [ 891.066200][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 891.197811][ T8637] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.829866][ T8637] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.845526][T10998] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.854357][T10998] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.863588][T10998] device bridge_slave_0 entered promiscuous mode [ 892.886446][T10998] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.906988][T10998] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.960203][T10998] device bridge_slave_1 entered promiscuous mode [ 893.161496][T11062] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 893.161496][T11062] program syz.3.1597 not setting count and/or reply_len properly [ 893.276838][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 895.310291][T10998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.476274][T10998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.500945][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 895.663441][T10998] team0: Port device team_slave_0 added [ 895.789438][T10998] team0: Port device team_slave_1 added [ 897.445914][T10998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.453047][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.479184][ C1] vkms_vblank_simulate: vblank timer overrun [ 897.560464][ T13] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 897.593385][T10998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.689856][T10998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.697100][T10998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.774613][T10998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.968383][ T13] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 897.990909][ T13] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.017799][ T13] usb 8-1: config 0 has no interface number 0 [ 898.053242][ T13] usb 8-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 898.054553][T10998] device hsr_slave_0 entered promiscuous mode [ 898.134634][T10998] device hsr_slave_1 entered promiscuous mode [ 898.147339][T10998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.170199][T10998] Cannot create hsr debugfs directory [ 898.298812][ T13] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 898.330235][ T13] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.349268][ T13] usb 8-1: Product: syz [ 898.376073][ T13] usb 8-1: Manufacturer: syz [ 898.380757][ T13] usb 8-1: SerialNumber: syz [ 898.418003][ T13] usb 8-1: config 0 descriptor?? [ 898.480533][ T13] asix: probe of 8-1:0.251 failed with error -22 [ 898.706104][T10998] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 898.745791][T10998] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 898.794693][T10998] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 898.814899][T10998] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 900.641412][ T8637] device hsr_slave_0 left promiscuous mode [ 900.663075][ T8637] device hsr_slave_1 left promiscuous mode [ 900.678680][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 900.765176][ T8637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.814757][ T8637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 900.853489][ T8637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.939442][ T8637] device bridge_slave_1 left promiscuous mode [ 900.948370][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.987460][ T8637] device bridge_slave_0 left promiscuous mode [ 901.008665][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.091211][ T7235] usb 8-1: USB disconnect, device number 2 [ 901.151702][ T8637] device veth1_macvtap left promiscuous mode [ 901.158099][ T8637] device veth0_macvtap left promiscuous mode [ 901.930112][ T8637] device veth1_vlan left promiscuous mode [ 901.940333][ T8637] device veth0_vlan left promiscuous mode [ 902.137941][T11139] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 902.137941][T11139] program syz.7.1609 not setting count and/or reply_len properly [ 906.203777][ T8637] team0 (unregistering): Port device team_slave_1 removed [ 906.656096][ T8637] team0 (unregistering): Port device team_slave_0 removed [ 906.910174][ T8637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.939285][ T8637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.032639][T11179] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 908.578937][T11195] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 908.578937][T11195] program syz.7.1623 not setting count and/or reply_len properly [ 910.140302][ T8637] bond0 (unregistering): Released all slaves [ 910.714512][T10998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.469489][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 912.362530][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 912.434720][T10998] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.538848][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 912.625924][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 912.638200][ T1571] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.645753][ T1571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.734818][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 912.758723][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 912.785878][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 913.043292][ T1571] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.050415][ T1571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.058901][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 913.130097][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 913.171709][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 913.243087][T11239] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 913.243087][T11239] program syz.7.1634 not setting count and/or reply_len properly [ 913.297305][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 913.339209][T10998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 913.358750][T10998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 913.653729][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 913.697911][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.704620][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 913.705870][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 915.174284][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 915.506573][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 915.548840][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 915.589705][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 915.612459][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 915.654224][ T1571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 916.371073][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 916.399289][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 916.591350][T10998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 918.904325][T11295] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 918.904325][T11295] program syz.7.1644 not setting count and/or reply_len properly [ 919.049584][ T21] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 920.172830][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 920.203378][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 920.253953][ T21] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 920.265814][ T21] usb 6-1: config 0 has no interface number 0 [ 920.274357][ T21] usb 6-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 920.360615][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 921.216335][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 921.226255][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 921.235053][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 921.251592][T10998] device veth0_vlan entered promiscuous mode [ 921.720025][ T21] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 921.753478][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.823838][ T21] usb 6-1: Product: syz [ 921.828866][ T21] usb 6-1: Manufacturer: syz [ 921.833839][ T21] usb 6-1: SerialNumber: syz [ 921.856416][ T21] usb 6-1: config 0 descriptor?? [ 922.115071][ T21] usb 6-1: can't set config #0, error -71 [ 922.116592][T10998] device veth1_vlan entered promiscuous mode [ 922.152759][ T21] usb 6-1: USB disconnect, device number 14 [ 922.406707][T10998] device veth0_macvtap entered promiscuous mode [ 923.209798][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 924.864993][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 925.271240][T10998] device veth1_macvtap entered promiscuous mode [ 925.394512][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.091196][ T2305] Bluetooth: hci4: command 0x0406 tx timeout [ 927.254530][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.284042][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.307665][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.371199][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.440821][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.519093][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 927.593606][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.648651][T10998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.676923][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 927.704190][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 927.763574][T11023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 927.776251][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 927.862474][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.930710][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.111427][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.124855][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.138678][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.152001][T10998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.333395][T10998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.352307][T10998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.361158][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 928.590393][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 928.607097][T10998] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.627783][T10998] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.675662][T10998] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.740239][T10998] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.428541][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.450048][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 932.102536][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 932.140807][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.043577][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.428060][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 937.431637][T11434] device syzkaller1 entered promiscuous mode [ 938.121016][ T9570] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 938.676760][ T9570] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 938.696031][ T9570] usb 4-1: config 0 has no interface number 0 [ 938.927529][ T9570] usb 4-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 940.076230][ T9570] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 940.085809][ T9570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.111225][ T9570] usb 4-1: Product: syz [ 940.115724][ T9570] usb 4-1: Manufacturer: syz [ 940.129463][ T9570] usb 4-1: SerialNumber: syz [ 940.173107][ T9570] usb 4-1: config 0 descriptor?? [ 940.344424][ T9570] asix: probe of 4-1:0.251 failed with error -22 [ 940.804828][T11485] device syzkaller1 entered promiscuous mode [ 940.918353][T11481] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 940.918353][T11481] program syz.7.1683 not setting count and/or reply_len properly [ 942.263616][ T9570] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 942.489471][ T7235] usb 4-1: USB disconnect, device number 22 [ 942.651253][ T9570] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 942.681114][ T9570] usb 7-1: config 0 has no interface number 0 [ 942.703741][ T9570] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 942.773813][ T9570] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 942.843662][ T9570] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 942.889774][ T9570] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.987822][ T9570] usb 7-1: config 0 descriptor?? [ 943.057692][T11495] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 943.120102][ T9570] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 945.728373][T10139] usb 7-1: USB disconnect, device number 13 [ 946.010040][T11555] device syzkaller1 entered promiscuous mode [ 946.903873][ T4231] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 947.289831][ T4231] usb 8-1: config 0 has an invalid interface number: 251 but max is 0 [ 947.298190][ T4231] usb 8-1: config 0 has no interface number 0 [ 947.338088][ T4231] usb 8-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 947.557998][ T4231] usb 8-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 947.579638][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.639506][ T4231] usb 8-1: Product: syz [ 947.664479][ T4231] usb 8-1: Manufacturer: syz [ 947.669155][ T4231] usb 8-1: SerialNumber: syz [ 947.720058][ T4231] usb 8-1: config 0 descriptor?? [ 947.759770][ T4231] asix: probe of 8-1:0.251 failed with error -22 [ 947.844067][ T21] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 948.271553][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 948.300477][ T21] usb 6-1: config 0 has no interface number 0 [ 948.329837][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 948.419611][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 948.472631][ T21] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 948.529416][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.604877][ T21] usb 6-1: config 0 descriptor?? [ 948.798270][T11583] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 948.830437][ T21] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 950.002934][ T4231] usb 6-1: USB disconnect, device number 15 [ 950.705462][ T9570] usb 8-1: USB disconnect, device number 3 [ 951.038812][ T4174] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 951.816646][T11629] device syzkaller1 entered promiscuous mode [ 952.060143][T11632] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 952.060143][T11632] program syz.7.1710 not setting count and/or reply_len properly [ 952.076618][ T4174] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 952.087867][ T4174] usb 7-1: config 0 has no interface number 0 [ 952.115747][ T4174] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 952.209532][ T4174] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 952.259858][ T4174] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 952.282201][ T4174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.303838][ T4174] usb 7-1: config 0 descriptor?? [ 952.333524][T11613] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 952.380955][ T4174] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 953.715339][ T4232] usb 7-1: USB disconnect, device number 14 [ 953.722009][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 957.150827][ T2305] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 957.503496][ T4174] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 957.663303][ T2305] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 957.671370][ T2305] usb 6-1: config 0 has no interface number 0 [ 957.779127][ T2305] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 957.941278][ T2305] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 957.962619][ T2305] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 957.982632][ T2305] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.254173][ T2305] usb 6-1: config 0 descriptor?? [ 958.272747][T11674] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 958.347605][ T4174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 958.360817][ T2305] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 958.884213][ T4174] usb 4-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19 [ 958.905273][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.927457][ T4174] usb 4-1: Product: syz [ 958.931894][ T4174] usb 4-1: Manufacturer: syz [ 958.964320][ T4174] usb 4-1: SerialNumber: syz [ 959.034496][ T9570] usb 6-1: USB disconnect, device number 16 [ 959.041843][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 959.241064][ T4174] usb 4-1: config 0 descriptor?? [ 960.496579][ T4174] usb 4-1: can't set config #0, error -71 [ 960.505743][ T4174] usb 4-1: USB disconnect, device number 23 [ 960.770925][T11706] fuse: Bad value for 'fd' [ 963.433456][ T4174] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 963.575051][T11737] tmpfs: Unknown parameter 'usrquota' [ 963.882326][ T4174] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 963.891000][ T4174] usb 6-1: config 0 has no interface number 0 [ 963.910811][ T4174] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 964.095269][ T4174] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 964.160051][ T4174] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 964.191087][ T4174] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.622102][ T4174] usb 6-1: config 0 descriptor?? [ 966.023769][ T4174] usb 6-1: can't set config #0, error -71 [ 966.083485][ T4174] usb 6-1: USB disconnect, device number 17 [ 967.938055][ T150] block nbd3: Attempted send on invalid socket [ 967.944966][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 967.962429][ T150] gfs2: error 10 reading superblock [ 968.679625][ T4174] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 968.989586][ T4174] usb 7-1: Using ep0 maxpacket: 8 [ 969.119045][ T4174] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 969.127391][ T4174] usb 7-1: config 179 has no interface number 0 [ 969.166247][ T4174] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 969.218102][ T4174] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 969.287256][ T4174] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 969.337157][ T4174] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 969.360601][ T4174] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 969.385374][T11792] kvm_set_msr_common: 1 callbacks suppressed [ 969.385393][T11792] kvm [11791]: vcpu1, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 969.406193][ T4174] usb 7-1: config 179 interface 65 has no altsetting 0 [ 969.546167][ T4174] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 969.548141][T11792] kvm [11791]: vcpu1, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 969.609168][ T4174] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.797362][ T4174] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input6 [ 970.187264][T11792] kvm [11791]: vcpu1, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x3000 [ 970.297017][ T4174] usb 7-1: USB disconnect, device number 15 [ 970.314367][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 970.329997][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 970.341500][ T4174] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 970.987696][ T2305] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 971.404938][ T2305] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.431613][ T2305] usb 8-1: config 0 has no interface number 0 [ 971.514825][ T2305] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 973.191754][ T2305] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 973.261435][ T2305] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 973.322271][ T2305] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.397779][ T2305] usb 8-1: config 0 descriptor?? [ 973.445334][T11813] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 973.479269][ T2305] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 973.650191][ T2305] usb 8-1: USB disconnect, device number 4 [ 974.299644][ T2305] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 974.780536][ T2305] usb 8-1: config index 0 descriptor too short (expected 152, got 24) [ 974.806652][ T2305] usb 8-1: config 1 has an invalid descriptor of length 10, skipping remainder of the config [ 974.893111][ T2305] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.188444][ T2305] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.205919][ T2305] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.276370][ T2305] usb 8-1: Product: syz [ 975.280614][ T2305] usb 8-1: Manufacturer: syz [ 975.352530][ T2305] usb 8-1: SerialNumber: syz [ 976.214635][ T2305] usb 8-1: cannot find UAC_HEADER [ 976.262946][ T2305] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 976.302659][ T2305] usb 8-1: USB disconnect, device number 5 [ 976.316953][ T4601] udevd[4601]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.402101][T11869] loop6: detected capacity change from 0 to 7 [ 976.419251][T11869] Dev loop6: unable to read RDB block 7 [ 976.425188][T11869] loop6: unable to read partition table [ 976.432150][T11869] loop6: partition table beyond EOD, truncated [ 976.439174][T11869] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 978.798206][T10139] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 978.958455][ T7136] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 979.482999][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.489385][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 979.674432][ T7136] usb 6-1: Using ep0 maxpacket: 8 [ 979.802964][ T7136] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 979.900501][T10139] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 979.918778][T10139] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.978532][T10139] usb 8-1: Product: syz [ 979.985605][ T7136] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 979.997466][T10139] usb 8-1: Manufacturer: syz [ 980.028862][T10139] usb 8-1: SerialNumber: syz [ 980.044395][ T7136] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.093117][ T7136] usb 6-1: Product: syz [ 980.101748][T10139] usb 8-1: config 0 descriptor?? [ 980.111302][ T7136] usb 6-1: Manufacturer: syz [ 980.117289][ T7136] usb 6-1: SerialNumber: syz [ 980.142237][ T7136] usb 6-1: config 0 descriptor?? [ 980.326229][T10139] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 980.369077][ T7136] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 980.402346][ T7136] usb 6-1: setting power ON [ 980.415150][ T7136] dvb-usb: bulk message failed: -22 (2/0) [ 980.530986][ T7136] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.607060][ T7136] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 980.625291][ T7136] usb 6-1: media controller created [ 980.674108][ T7136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.703399][T11890] dvb-usb: bulk message failed: -22 (3/0) [ 980.732524][T11890] cxusb: i2c wr: len=104 is too big! [ 980.732524][T11890] [ 980.781223][ T7136] usb 6-1: selecting invalid altsetting 6 [ 980.801242][ T7136] usb 6-1: digital interface selection failed (-22) [ 980.810294][ T7136] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 980.871165][T10139] gspca_sunplus: reg_r err -71 [ 980.876800][T10139] sunplus: probe of 8-1:0.0 failed with error -71 [ 980.903858][ T7136] usb 6-1: setting power OFF [ 980.910142][ T7136] dvb-usb: bulk message failed: -22 (2/0) [ 980.938039][T10139] usb 8-1: USB disconnect, device number 6 [ 980.967780][ T7136] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 981.028543][ T7136] (NULL device *): no alternate interface [ 981.137589][ T7136] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 981.219474][ T7136] usb 6-1: USB disconnect, device number 18 [ 983.125648][ T7136] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 983.551788][T11968] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 984.034569][ T7136] usb 6-1: unable to get BOS descriptor or descriptor too short [ 984.131434][ T7136] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 984.139209][ T7136] usb 6-1: can't read configurations, error -71 [ 984.960684][ T4231] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 985.084339][ T4231] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 988.521447][ T9570] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 989.985423][ T9570] usb 8-1: unable to get BOS descriptor or descriptor too short [ 990.060200][ T9570] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 990.112054][ T9570] usb 8-1: can't read configurations, error -71 [ 990.242355][ T1108] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 991.043175][ T1108] usb 7-1: Using ep0 maxpacket: 32 [ 991.182325][ T1108] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 991.858084][ T1108] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 991.858119][ T1108] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 991.877901][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 991.888719][ T1108] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 991.972661][ T1108] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 992.057349][ T1108] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 992.125873][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.173388][ T1108] usb 7-1: config 0 descriptor?? [ 992.477061][ T1108] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 992.856779][T12109] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1806'. [ 993.648534][ T7235] usb 7-1: USB disconnect, device number 16 [ 993.830834][ T7235] usblp0: removed [ 994.494696][T12130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1813'. [ 994.505086][T12130] netlink: zone id is out of range [ 995.220976][ T1108] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 996.211176][T12144] netlink: 'syz.5.1818': attribute type 2 has an invalid length. [ 996.220303][T12144] netlink: 'syz.5.1818': attribute type 1 has an invalid length. [ 996.686053][T12152] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1819'. [ 996.706439][T12157] device syzkaller0 left promiscuous mode [ 996.802362][ T1108] usb 10-1: unable to get BOS descriptor or descriptor too short [ 996.866491][ T1108] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 996.874491][ T1108] usb 10-1: can't read configurations, error -71 [ 1004.286811][T12255] tipc: Started in network mode [ 1004.292466][T12255] tipc: Node identity 2, cluster identity 4711 [ 1004.298781][T12255] tipc: Node number set to 2 [ 1005.201724][T12267] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1005.201724][T12267] program syz.3.1837 not setting count and/or reply_len properly [ 1006.079480][T12277] capability: warning: `syz.6.1848' uses deprecated v2 capabilities in a way that may be insecure [ 1011.611961][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1854'. [ 1014.839500][T12306] netlink: 'syz.9.1853': attribute type 1 has an invalid length. [ 1014.938094][T12317] device gretap1 entered promiscuous mode [ 1014.956028][T12327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1856'. [ 1017.009039][T12367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1867'. [ 1018.324192][ T26] audit: type=1800 audit(1772142202.722:22): pid=12380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1869" name="/" dev="fuse" ino=4 res=0 errno=0 [ 1019.437384][T12401] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1873'. [ 1020.271270][ T4255] Bluetooth: hci0: command 0x0406 tx timeout [ 1022.212387][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1880'. [ 1023.450370][ T4232] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1024.313569][ T4232] usb 8-1: Using ep0 maxpacket: 8 [ 1024.551352][ T4232] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1024.584153][ T4232] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1024.814857][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1885'. [ 1025.581174][ T4232] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1025.592341][ T4232] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1025.606423][ T4232] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1025.625600][ T4232] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.726464][ T4232] usb 8-1: can't set config #16, error -71 [ 1025.740681][ T4232] usb 8-1: USB disconnect, device number 9 [ 1026.479478][T12472] loop6: detected capacity change from 0 to 7 [ 1026.516490][ T4601] Dev loop6: unable to read RDB block 7 [ 1026.720687][ T4601] loop6: unable to read partition table [ 1026.835419][ T4601] loop6: partition table beyond EOD, truncated [ 1026.992604][T12472] Dev loop6: unable to read RDB block 7 [ 1027.041362][T12472] loop6: unable to read partition table [ 1027.073447][T12472] loop6: partition table beyond EOD, truncated [ 1027.105219][T12472] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1027.136430][ T3561] Dev loop6: unable to read RDB block 7 [ 1027.143739][ T3561] loop6: unable to read partition table [ 1027.204628][ T3561] loop6: partition table beyond EOD, truncated [ 1027.489857][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1893'. [ 1029.241599][ T1108] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1030.107464][ T1108] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1030.143330][ T1108] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1030.362739][ T1108] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1030.373087][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.418891][T12500] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1030.738169][ T4255] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1031.026989][ T4255] usb 10-1: Using ep0 maxpacket: 32 [ 1031.362257][ T1108] usb 6-1: USB disconnect, device number 21 [ 1031.536663][ T4255] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1031.550559][ T4255] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.566696][ T4255] usb 10-1: config 0 descriptor?? [ 1031.625730][ T9316] udevd[9316]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.659536][ T4255] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1032.550987][T12542] loop6: detected capacity change from 0 to 7 [ 1032.756065][T12542] Dev loop6: unable to read RDB block 7 [ 1032.762682][T12542] loop6: unable to read partition table [ 1032.769732][T12542] loop6: partition table beyond EOD, truncated [ 1032.776071][T12542] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1033.268398][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1906'. [ 1034.883872][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.118883][ T4255] gspca_vc032x: reg_w err -71 [ 1035.123643][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.162814][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.189468][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.228746][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.234116][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.274598][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.300451][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.326425][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.359035][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.393344][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.403504][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.443357][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.448733][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.516293][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.529014][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.556998][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.578382][ T4255] gspca_vc032x: I2c Bus Busy Wait 00 [ 1035.583888][ T4255] gspca_vc032x: Unknown sensor... [ 1035.610193][ T4255] vc032x: probe of 10-1:0.0 failed with error -22 [ 1035.682459][ T4255] usb 10-1: USB disconnect, device number 4 [ 1036.974982][T12595] binder_alloc: 12594: binder_alloc_buf, no vma [ 1038.847938][ T4255] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1040.536133][ T4255] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1040.675023][ T4255] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1040.682836][ T4255] usb 7-1: can't read configurations, error -71 [ 1041.049036][ T7235] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1041.455149][ T7235] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1041.470221][ T7235] usb 10-1: config 0 has no interface number 0 [ 1041.495195][ T7235] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1041.557287][ T7235] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1041.576156][ T7235] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1041.589824][ T7235] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.641246][ T7235] usb 10-1: config 0 descriptor?? [ 1041.668907][T12647] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1041.694935][ T7235] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1042.231520][ T4255] usb 10-1: USB disconnect, device number 5 [ 1042.245655][ C1] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1044.996516][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.005589][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1046.353615][T11023] Bluetooth: hci2: Frame reassembly failed (-84) [ 1048.496154][T10139] Bluetooth: hci2: command 0x1003 tx timeout [ 1048.505485][ T4203] Bluetooth: hci2: sending frame failed (-49) [ 1050.893461][ T7235] Bluetooth: hci2: command 0x1001 tx timeout [ 1050.900762][ T4203] Bluetooth: hci2: sending frame failed (-49) [ 1053.111920][ T7235] Bluetooth: hci2: command 0x1009 tx timeout [ 1056.114770][ T7235] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 1057.343560][ T7235] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1057.357238][ T7235] usb 8-1: config 0 has no interface number 0 [ 1057.373105][ T7235] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1057.425848][ T7235] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1057.498364][ T7235] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1057.704405][ T7235] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.036755][ T7235] usb 8-1: config 0 descriptor?? [ 1060.185712][ T7235] usb 8-1: can't set config #0, error -71 [ 1060.203535][ T7235] usb 8-1: USB disconnect, device number 10 [ 1065.944813][ T7136] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 1067.314889][ T263] block nbd5: Attempted send on invalid socket [ 1067.321938][ T263] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1067.333826][ T263] gfs2: error 10 reading superblock [ 1067.964199][ T7136] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1067.973221][ T7136] usb 10-1: config 0 has no interface number 0 [ 1068.010713][ T7136] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1068.028971][ T7136] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1068.041872][ T7136] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1068.053326][ T7136] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.111397][ T7136] usb 10-1: config 0 descriptor?? [ 1068.157487][T12883] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1068.363699][ T7136] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1068.736244][ T7136] usb 10-1: USB disconnect, device number 6 [ 1068.744283][ C1] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1072.254782][T12969] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1072.254782][T12969] program syz.5.1992 not setting count and/or reply_len properly [ 1073.029111][ T9570] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 1073.873380][ T9570] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1073.895547][ T9570] usb 7-1: config 0 has no interface number 0 [ 1073.915020][ T9570] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1073.958453][ T9570] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1074.005066][ T9570] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1074.038326][ T9570] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.154645][ T9570] usb 7-1: config 0 descriptor?? [ 1074.194384][T12965] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1074.243272][ T9570] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1074.694245][ T9570] usb 7-1: USB disconnect, device number 19 [ 1074.718233][ C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1075.719354][T13007] loop6: detected capacity change from 0 to 7 [ 1075.740135][T13007] Dev loop6: unable to read RDB block 7 [ 1075.747460][T13007] loop6: unable to read partition table [ 1075.756624][T13007] loop6: partition table beyond EOD, truncated [ 1075.764920][T13007] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1076.045364][ T4174] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 1076.920300][ T4174] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1077.025631][ T4174] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1077.055322][ T4174] usb 7-1: can't read configurations, error -71 [ 1079.168563][ T150] block nbd5: Attempted send on invalid socket [ 1079.178093][ T150] blk_update_request: I/O error, dev nbd5, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1079.198874][ T150] gfs2: error 10 reading superblock [ 1081.170837][ T4174] usb 8-1: new low-speed USB device number 11 using dummy_hcd [ 1081.583241][ T4174] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1081.628293][ T4174] usb 8-1: config 0 has no interface number 0 [ 1081.847391][ T4174] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1081.859991][ T4174] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1081.894244][ T4174] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1082.402863][ T4174] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.424181][ T4174] usb 8-1: config 0 descriptor?? [ 1082.453790][T13070] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1082.520101][ T4174] iowarrior 8-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1084.022044][T10139] usb 8-1: USB disconnect, device number 11 [ 1084.034221][ C1] iowarrior 8-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1084.316333][ T4231] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1085.616303][ T4231] usb 6-1: Using ep0 maxpacket: 16 [ 1085.744776][ T4231] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1085.753698][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.763842][ T4231] usb 6-1: config 0 has no interface number 0 [ 1085.990377][ T4231] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1086.009522][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.043039][ T4231] usb 6-1: Product: syz [ 1086.049701][ T4231] usb 6-1: Manufacturer: syz [ 1086.075980][ T4231] usb 6-1: SerialNumber: syz [ 1086.105339][ T4231] usb 6-1: config 0 descriptor?? [ 1086.174237][ T4231] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1086.190885][ T4231] usb 6-1: No valid video chain found. [ 1086.399256][ T4231] usb 6-1: USB disconnect, device number 22 [ 1087.474928][ T4269] Bluetooth: hci0: command 0x0405 tx timeout [ 1088.074031][ T7046] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1088.373209][ T7046] usb 6-1: Using ep0 maxpacket: 8 [ 1088.501766][ T7046] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 1088.600798][T13175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2032'. [ 1088.860393][ T7046] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1088.921779][ T7046] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.963003][T13177] bridge1: port 1(veth5) entered blocking state [ 1088.963152][ T7046] usb 6-1: Product: syz [ 1089.013812][T13177] bridge1: port 1(veth5) entered disabled state [ 1089.137867][T13177] device veth5 entered promiscuous mode [ 1089.610079][ T7046] usb 6-1: Manufacturer: syz [ 1089.623252][ T7046] usb 6-1: SerialNumber: syz [ 1089.688567][ T7046] usb 6-1: config 0 descriptor?? [ 1089.783730][ T7046] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1089.791880][ T7046] usb 6-1: setting power ON [ 1089.842017][ T7046] dvb-usb: bulk message failed: -22 (2/0) [ 1089.859609][ T7046] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1089.912533][ T7046] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1089.945866][T13164] dvb-usb: bulk message failed: -22 (3/0) [ 1089.961963][ T7046] usb 6-1: media controller created [ 1089.980274][T13164] cxusb: i2c wr: len=104 is too big! [ 1089.980274][T13164] [ 1090.052805][ T7046] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1090.434645][ T4269] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 1090.989714][ T4269] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1090.998522][ T4269] usb 10-1: config 0 has no interface number 0 [ 1091.019283][ T7046] usb 6-1: selecting invalid altsetting 6 [ 1091.026762][ T7046] usb 6-1: digital interface selection failed (-22) [ 1091.041051][ T4269] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1091.054702][ T7046] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1091.067885][ T4269] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1091.095230][ T4269] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1091.108310][ T7046] usb 6-1: setting power OFF [ 1091.113071][ T7046] dvb-usb: bulk message failed: -22 (2/0) [ 1091.120104][ T4269] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.150996][ T7046] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1091.183159][ T7046] (NULL device *): no alternate interface [ 1091.258347][ T4269] usb 10-1: config 0 descriptor?? [ 1091.289348][T13187] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1091.314385][ T4269] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1091.349954][ T7046] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1091.433793][ T7046] usb 6-1: USB disconnect, device number 23 [ 1092.266863][ T4229] usb 10-1: USB disconnect, device number 7 [ 1092.293743][ C0] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1092.807297][ T4231] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1093.247869][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1093.273702][ T4231] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1093.853797][T13231] tmpfs: Unknown parameter 'usrquota' [ 1093.942736][ T4231] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1094.277495][ T4231] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1094.330597][ T4231] usb 4-1: Manufacturer: syz [ 1094.357896][ T4231] usb 4-1: config 0 descriptor?? [ 1094.390531][T13229] mkiss: ax0: crc mode is auto. [ 1096.130574][ T4229] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1096.251617][ T4231] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input7 [ 1096.440170][ T4229] usb 10-1: Using ep0 maxpacket: 8 [ 1096.597876][ T4229] usb 10-1: config index 0 descriptor too short (expected 30, got 18) [ 1096.637355][ T4231] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1096.726624][ T4231] usb 4-1: USB disconnect, device number 24 [ 1096.822267][ T4229] usb 10-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1096.848418][T13254] fido_id[13254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1096.855334][ T4229] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.897858][ T4229] usb 10-1: Product: syz [ 1096.915964][ T4229] usb 10-1: Manufacturer: syz [ 1096.923660][ T4229] usb 10-1: SerialNumber: syz [ 1096.949932][ T4229] usb 10-1: config 0 descriptor?? [ 1097.029791][ T4229] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1097.054306][ T4229] usb 10-1: setting power ON [ 1097.097869][ T4229] dvb-usb: bulk message failed: -22 (2/0) [ 1097.156232][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1097.220476][ T4229] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1097.233840][T13248] dvb-usb: bulk message failed: -22 (3/0) [ 1097.257094][ T4229] usb 10-1: media controller created [ 1097.270470][T13248] cxusb: i2c wr: len=104 is too big! [ 1097.270470][T13248] [ 1097.295422][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1097.545031][ T4229] usb 10-1: selecting invalid altsetting 6 [ 1097.552550][ T4229] usb 10-1: digital interface selection failed (-22) [ 1097.559405][ T4229] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1097.615475][ T4229] usb 10-1: setting power OFF [ 1097.622658][ T4229] dvb-usb: bulk message failed: -22 (2/0) [ 1097.643621][ T4229] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1097.687839][ T4229] (NULL device *): no alternate interface [ 1097.746236][ T4229] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1097.795910][ T4229] usb 10-1: USB disconnect, device number 8 [ 1110.643996][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1110.650377][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1215.532152][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1215.539182][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7349/1:b..l [ 1215.547734][ C0] (detected by 0, t=10503 jiffies, g=65273, q=75) [ 1215.554393][ C0] task:kworker/u4:5 state:R running task stack:22640 pid: 7349 ppid: 2 flags:0x00004000 [ 1215.566633][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 1215.574476][ C0] Call Trace: [ 1215.577763][ C0] [ 1215.580698][ C0] __schedule+0x11ef/0x43c0 [ 1215.585210][ C0] ? mark_lock+0x94/0x320 [ 1215.589559][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1215.595457][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1215.601617][ C0] ? preempt_schedule_irq+0xb0/0x160 [ 1215.606920][ C0] preempt_schedule_irq+0xbb/0x160 [ 1215.612050][ C0] ? __cond_resched+0xd0/0xd0 [ 1215.616726][ C0] ? rcu_is_watching+0x11/0xa0 [ 1215.621500][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x200 [ 1215.627322][ C0] irqentry_exit+0x63/0x70 [ 1215.631859][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1215.638037][ C0] RIP: 0010:batadv_iv_ogm_schedule+0x671/0xec0 [ 1215.644258][ C0] Code: 89 c3 31 ff 89 c6 e8 ee e7 ec f7 85 db 4c 8b a4 24 90 00 00 00 74 15 e8 ad 92 d8 f7 84 c0 74 18 e8 74 e4 ec f7 48 8b 5c 24 48 65 e8 68 e4 ec f7 48 8b 5c 24 48 eb 59 e8 9c f0 2f 00 89 c3 31 [ 1215.664096][ C0] RSP: 0018:ffffc9000152fa40 EFLAGS: 00000293 [ 1215.670175][ C0] RAX: ffffffff898c3dcc RBX: 0000000000000270 RCX: ffff888020020000 [ 1215.678164][ C0] RDX: 0000000000000000 RSI: ffffffff8a79f7e0 RDI: ffffffff8a79f7a0 [ 1215.686345][ C0] RBP: ffffc9000152fb80 R08: dffffc0000000000 R09: 1ffffffff203a618 [ 1215.694333][ C0] R10: dffffc0000000000 R11: fffffbfff203a619 R12: ffff88807d397840 [ 1215.702313][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 1215.710397][ C0] ? batadv_iv_ogm_schedule+0x66c/0xec0 [ 1215.716157][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 1215.723362][ C0] ? batadv_send_skb_packet+0x392/0x5f0 [ 1215.729004][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 1215.736150][ C0] process_one_work+0x85f/0x1010 [ 1215.741104][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1215.746748][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1215.752428][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1215.757579][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1215.763138][ C0] ? wq_worker_running+0x97/0x170 [ 1215.768183][ C0] worker_thread+0xaa6/0x1290 [ 1215.772880][ C0] kthread+0x436/0x520 [ 1215.776952][ C0] ? rcu_lock_release+0x20/0x20 [ 1215.781842][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1215.786671][ C0] ret_from_fork+0x1f/0x30 [ 1215.791116][ C0] [ 1215.794145][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 6528 jiffies! g65273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1215.806382][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=62141 [ 1215.814401][ C0] rcu: rcu_preempt kthread starved for 6531 jiffies! g65273 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 1215.825685][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1215.835776][ C0] rcu: RCU grace-period kthread stack dump: [ 1215.841851][ C0] task:rcu_preempt state:I stack:27384 pid: 15 ppid: 2 flags:0x00004000 [ 1215.851318][ C0] Call Trace: [ 1215.854708][ C0] [ 1215.857781][ C0] __schedule+0x11ef/0x43c0 [ 1215.862413][ C0] ? release_firmware_map_entry+0x190/0x190 [ 1215.868603][ C0] ? __mod_timer+0x91e/0xd00 [ 1215.873401][ C0] schedule+0x11b/0x1e0 [ 1215.877595][ C0] schedule_timeout+0x184/0x2d0 [ 1215.882466][ C0] ? console_conditional_schedule+0x40/0x40 [ 1215.888585][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1215.894593][ C0] ? update_process_times+0x200/0x200 [ 1215.900082][ C0] ? prepare_to_swait_event+0x331/0x350 [ 1215.905808][ C0] rcu_gp_fqs_loop+0x2be/0x11d0 [ 1215.910676][ C0] ? dyntick_save_progress_counter+0x230/0x230 [ 1215.916866][ C0] ? rcu_gp_init+0x10f0/0x10f0 [ 1215.921652][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1215.926864][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1215.932083][ C0] rcu_gp_kthread+0x9b/0x370 [ 1215.936679][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1215.942602][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1215.947857][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1215.953776][ C0] ? __kthread_parkme+0x157/0x1b0 [ 1215.958951][ C0] kthread+0x436/0x520 [ 1215.963054][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1215.968627][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1215.973604][ C0] ret_from_fork+0x1f/0x30 [ 1215.978239][ C0] [ 1215.981278][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1215.987729][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1215.992953][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10