last executing test programs: 4m28.279967179s ago: executing program 1 (id=2812): ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x200) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) r0 = getpgrp(0xffffffffffffffff) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create(0x4) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) sendto$phonet(r3, &(0x7f0000000200)="12f1718426929800446b51fc941d703a063e65225ec33cd9f839e5ebc5287918880f9454e96d26071c7dd3eca18814d28e6e51384ad2c1cefae4d0c59bffc3c5acd4a87e820d42f640da97a62f620d0652c3353f6d1b563314c0fd3f3acb8cb1198bcf5984385a3cd7c71711ef", 0x6d, 0x0, &(0x7f00000000c0)={0x23, 0x5, 0x9, 0x7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card3/oss_mixer\x00', 0x242, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x208000, 0x0) 4m26.010481094s ago: executing program 2 (id=2834): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1e0, 0x20a, 0x278, 0x1e0, 0x278, 0x3, 0x0, {[{{@ipv6={@remote, @empty, [0x0, 0xffffff00], [], 'nicvf0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xf7ff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'veth1_to_hsr\x00', 'ipvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x2, 0x40, 0x5, '\x00', 'syz0\x00', {0x147c}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 4m25.888754657s ago: executing program 2 (id=2837): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() write$tcp_congestion(r1, &(0x7f0000000300)='vegas\x00', 0x6) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc10c5541, &(0x7f0000000040)) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, 0x0, 0x240048d0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000132000/0x4000)=nil, 0x4000}, 0x7}) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 4m24.747057334s ago: executing program 1 (id=2841): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) 4m24.390049886s ago: executing program 1 (id=2844): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x20008000, 0x1}) io_uring_enter(r3, 0x47f6, 0xb277, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 4m24.202618887s ago: executing program 2 (id=2846): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000000000000000000070228615b94d144c00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x8, 0x8, 0x5, 0x6, {{0x5, 0x4, 0x2, 0x12, 0x14, 0x68, 0x0, 0x1c, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, 0x0, 0x0) syz_clone3(&(0x7f0000000640)={0x4000000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x22}, &(0x7f0000000580)=""/162, 0xa2, &(0x7f0000000300)=""/18, &(0x7f0000000340)=[r0, r0, r0, r0, r0, r0, r0, r0], 0x8, {r4}}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r3}, 0x10) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f0000000180)={0x0, 0x8, 0x0, 0x0, 0x80, 0xc11}) 4m23.274826535s ago: executing program 2 (id=2852): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 4m23.190131959s ago: executing program 2 (id=2853): mknod(&(0x7f0000000000)='./bus\x00', 0x8000, 0x1600) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10, 0x1842, &(0x7f0000000440)={0x7, 0x3370}) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) 4m22.958863336s ago: executing program 2 (id=2854): r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/189) 4m22.735508325s ago: executing program 32 (id=2854): r0 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/189) 4m22.01275139s ago: executing program 1 (id=2861): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 4m21.888900719s ago: executing program 1 (id=2862): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x200000000000000, 0x0, 0x8000000000000, 0xfffffffffffffffd, 0x23, 0x7, 0x1, 0x8000, 0x0, r2, r3, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, 0x0, 0x0) dup2(r4, r0) pwrite64(r0, &(0x7f00000003c0), 0x0, 0x100001) 4m21.610400604s ago: executing program 1 (id=2863): syz_emit_ethernet(0x0, 0x0, 0x0) 4m21.509253809s ago: executing program 33 (id=2863): syz_emit_ethernet(0x0, 0x0, 0x0) 4m3.650159715s ago: executing program 0 (id=3053): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m3.540388586s ago: executing program 0 (id=3054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @private0, 0x0, 0x6, 0x0, 0x0, 0x6}) 4m3.540277921s ago: executing program 0 (id=3055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) 4m3.450017421s ago: executing program 0 (id=3056): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2151480, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2121019, 0x0) 4m3.378839666s ago: executing program 0 (id=3057): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 4m3.136756304s ago: executing program 0 (id=3064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) 4m2.986607501s ago: executing program 34 (id=3064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sys_exit\x00', r0, 0x0, 0x4}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x4) 3m24.019778588s ago: executing program 3 (id=3682): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "82613584"}]}}, 0x0}, 0x0) 3m22.469623351s ago: executing program 3 (id=3692): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000037c0)='/', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40400d1) 3m22.468910767s ago: executing program 3 (id=3693): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x5e) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x7fffffff, @loopback, 0x1}, 0x1c) syz_usb_connect(0x0, 0x333, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000de3f50205e0457d37ca7010203010902"], 0x0) shutdown(r0, 0x1) 3m21.509357096s ago: executing program 4 (id=3710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) setrlimit(0x1, &(0x7f0000000380)={0x1, 0x713}) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) 3m21.289312309s ago: executing program 3 (id=3715): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 3m21.139478799s ago: executing program 3 (id=3717): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8c00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000001200)}], 0x1, 0x20000003, 0xffffc) 3m21.045162833s ago: executing program 4 (id=3720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r0, 0x0, 0x4}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='subflow_check_data_avail\x00', r1, 0x0, 0x4}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) 3m20.960576394s ago: executing program 4 (id=3722): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @local}, @in6={0xa, 0x0, 0xfffffffc, @loopback, 0x8}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x41, 0x1, 0xfe, 0x0, 0x9, 0x40, 0x8, 0x5a, 0x0, 0xff, 0x9, 0x0, 0x1, 0x9}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000005c0)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/224, 0xe0}, 0x102}], 0x1, 0x40000023, 0x0) 3m20.909213113s ago: executing program 4 (id=3725): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 3m20.902909039s ago: executing program 4 (id=3726): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.849239867s ago: executing program 3 (id=3727): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r2, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.785449002s ago: executing program 35 (id=3727): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r2, 0xffffffffffffffff}) close_range(r0, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.579131018s ago: executing program 4 (id=3733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3m20.515244966s ago: executing program 36 (id=3733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 6.13683927s ago: executing program 7 (id=5447): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{}, {0x0, 0x9}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000, 0x2000000}, &(0x7f0000002000)=0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0xc, 0x2, 0x0, @multicast}, 0x10) recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) 5.850088847s ago: executing program 6 (id=5452): sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x14008850) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r5, r0}, 0xc) 5.005911867s ago: executing program 5 (id=5455): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 4.90849166s ago: executing program 6 (id=5457): pselect6(0x40, &(0x7f0000000080)={0x3, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8d37}, 0x0, 0x0, 0x0) 4.776685345s ago: executing program 6 (id=5458): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3.180067139s ago: executing program 5 (id=5460): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3.133107051s ago: executing program 6 (id=5461): unshare(0x6e000000) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2], 0x28}}, 0x0) 2.707760348s ago: executing program 8 (id=5464): r0 = userfaultfd(0x801) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r2, &(0x7f00000001c0), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000180)={0x2, 0x5}, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000a00)={0xaa, 0x150}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_open_dev$mouse(&(0x7f00000002c0), 0x7f, 0x0) 2.703276402s ago: executing program 7 (id=5465): r0 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000080)={0x3ff, 0xc, [0x1, 0x3, 0x3740]}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r7}, 0x18) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000006380)={0x2020}, 0x2020) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}}, 0x34}}, 0x0) 2.486294976s ago: executing program 7 (id=5466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0xfff2, 0x9}, {0xe, 0x9}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0xc, &(0x7f0000000040)=0x4) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r9 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$CDROMGETSPINDOWN(r9, 0x531d, &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2.323475003s ago: executing program 5 (id=5467): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000280)={0x80, 0x44}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x1cb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0) 2.248097402s ago: executing program 7 (id=5468): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') r4 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r5, r5, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.92650685s ago: executing program 8 (id=5469): mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/124, 0x7c}, {&(0x7f0000001280)=""/60, 0x3c}], 0x5}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001b00)=""/118, 0x76}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001640)=""/135, 0x87}, {&(0x7f00000014c0)=""/101, 0x65}, {&(0x7f0000001780)=""/171, 0xab}], 0x7, &(0x7f00000018c0)=""/176, 0xb0}}], 0x3, 0x0, 0x0) 1.718106635s ago: executing program 6 (id=5470): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 1.507502614s ago: executing program 8 (id=5471): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.345857891s ago: executing program 5 (id=5472): socket$netlink(0x10, 0x3, 0x0) setpgid(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, &(0x7f00000000c0)) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.31503098s ago: executing program 5 (id=5473): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.203863961s ago: executing program 8 (id=5474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.203484341s ago: executing program 8 (id=5475): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.099408046s ago: executing program 7 (id=5476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}]}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@deltfilter={0x34, 0x2d, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x9}, {0xe, 0x9}, {0xb, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0xc, &(0x7f0000000040)=0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$CDROMGETSPINDOWN(r8, 0x531d, &(0x7f0000000280)) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 937.027674ms ago: executing program 6 (id=5477): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000240)=0x7fe) mkdir(0x0, 0x191) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000004c00)=""/102392, 0x18ff8) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 935.331618ms ago: executing program 8 (id=5478): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xc8f, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000280)={0x80, 0x44}, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x42, 0x1cb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) 554.467102ms ago: executing program 7 (id=5479): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000000000140600", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r3, r3, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 0s ago: executing program 5 (id=5480): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000600)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r0, 0x0}]) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x4, 0x4) kernel console output (not intermixed with test programs): [ T76] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.590834][ T76] usb 13-1: Product: syz [ 377.592327][ T76] usb 13-1: Manufacturer: syz [ 377.595122][ T76] usb 13-1: SerialNumber: syz [ 377.599392][ T76] usb 13-1: config 0 descriptor?? [ 377.715713][ T6006] usb 11-1: USB disconnect, device number 11 [ 377.804685][ T5912] usb 13-1: USB disconnect, device number 2 [ 378.330561][T22699] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3782'. [ 378.372538][T22702] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3783'. [ 378.803980][ T6025] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 378.985506][ T6025] usb 13-1: config 201 has an invalid interface number: 249 but max is 0 [ 378.988378][ T6025] usb 13-1: config 201 has no interface number 0 [ 378.990497][ T6025] usb 13-1: config 201 interface 249 has no altsetting 0 [ 378.994728][ T6025] usb 13-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 378.998141][ T6025] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.001119][ T6025] usb 13-1: Product: syz [ 379.002550][ T6025] usb 13-1: Manufacturer: syz [ 379.004454][ T6025] usb 13-1: SerialNumber: syz [ 379.034080][ T6006] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 379.164269][ T5944] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 379.194183][ T6006] usb 12-1: Using ep0 maxpacket: 32 [ 379.197722][ T6006] usb 12-1: config 0 has no interfaces? [ 379.201759][ T6006] usb 12-1: New USB device found, idVendor=045e, idProduct=d357, bcdDevice=a7.7c [ 379.205738][ T6006] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.209197][ T6006] usb 12-1: Product: syz [ 379.210707][ T6006] usb 12-1: Manufacturer: syz [ 379.212424][ T6006] usb 12-1: SerialNumber: syz [ 379.219913][ T6006] usb 12-1: config 0 descriptor?? [ 379.222771][ T6025] ath6kl: Failed to submit usb control message: -71 [ 379.229736][ T6025] ath6kl: unable to send the bmi data to the device: -71 [ 379.232495][ T6025] ath6kl: Unable to send get target info: -71 [ 379.244141][ T6025] ath6kl: Failed to init ath6kl core: -71 [ 379.246424][ T6025] ath6kl_usb 13-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 379.251103][ T6025] usb 13-1: USB disconnect, device number 3 [ 379.324062][ T5944] Bluetooth: hci1: command tx timeout [ 379.435020][ T6006] usb 12-1: USB disconnect, device number 2 [ 379.644179][ T5944] Bluetooth: hci3: command tx timeout [ 381.234041][ T6061] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 381.386124][ T6061] usb 13-1: config index 0 descriptor too short (expected 65183, got 72) [ 381.391294][ T6061] usb 13-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 381.395388][ T6061] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.398186][ T6061] usb 13-1: Product: syz [ 381.399658][ T6061] usb 13-1: Manufacturer: syz [ 381.401373][ T6061] usb 13-1: SerialNumber: syz [ 381.409486][ T6061] usb 13-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 381.434993][T22833] usb 13-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 381.645469][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.650056][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.655410][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.658904][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.666151][T22819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.670330][T22819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.674588][T22728] usb 13-1: USB disconnect, device number 4 [ 381.679547][ C3] dummy_hcd dummy_hcd.8: timer fired with no URBs pending? [ 382.524571][T22833] ath9k_htc 13-1:1.0: ath9k_htc: Target is unresponsive [ 382.528537][T22833] ath9k_htc: Failed to initialize the device [ 382.535160][T22728] usb 13-1: ath9k_htc: USB layer deinitialized [ 382.824090][T22728] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 382.994401][T22728] usb 13-1: Using ep0 maxpacket: 32 [ 382.998301][T22728] usb 13-1: config index 0 descriptor too short (expected 241, got 72) [ 383.001924][T22728] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 383.007130][T22728] usb 13-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 383.011533][T22728] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.018994][T22728] usb 13-1: config 0 descriptor?? [ 383.025568][T22728] mos7840 13-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 383.177167][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.180177][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.204232][T22693] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 383.356983][T22693] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 383.359980][T22693] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 383.363621][T22693] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 383.368180][T22693] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 383.372518][T22693] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 383.378858][T22693] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 383.382171][T22693] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 383.385988][T22693] usb 12-1: Product: syz [ 383.387582][T22693] usb 12-1: Manufacturer: syz [ 383.393416][T22693] cdc_wdm 12-1:1.0: skipping garbage [ 383.395638][T22693] cdc_wdm 12-1:1.0: skipping garbage [ 383.401112][T22693] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 383.403869][T22693] cdc_wdm 12-1:1.0: Unknown control protocol [ 383.428274][T22728] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 383.440601][T22728] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 383.458476][T22728] usb 13-1: USB disconnect, device number 5 [ 383.487456][T22728] mos7840 13-1:0.0: device disconnected [ 383.670308][ C3] cdc_wdm 12-1:1.0: nonzero urb status received: -71 [ 383.670403][T15558] usb 12-1: USB disconnect, device number 3 [ 383.673230][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - 0 bytes [ 383.678816][ C3] cdc_wdm 12-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 383.684165][ C3] dummy_hcd dummy_hcd.7: timer fired with no URBs pending? [ 383.815225][T22954] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3840'. [ 384.097472][T22960] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3841'. [ 385.808813][T23008] Invalid ELF header len 8 [ 386.253316][T23034] vxcan1: tx address claim with different name [ 386.253824][T22693] libceph: connect (1)[c::]:6789 error -101 [ 386.271828][T22693] libceph: mon0 (1)[c::]:6789 connect error [ 386.424222][T22693] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 386.535925][T22833] libceph: connect (1)[c::]:6789 error -101 [ 386.538156][T22833] libceph: mon0 (1)[c::]:6789 connect error [ 386.554038][T22693] usb 11-1: device descriptor read/64, error -71 [ 386.554068][T15558] usb 13-1: new full-speed USB device number 6 using dummy_hcd [ 386.720385][T15558] usb 13-1: config 201 has an invalid interface number: 249 but max is 0 [ 386.724116][T15558] usb 13-1: config 201 has no interface number 0 [ 386.726232][T15558] usb 13-1: config 201 interface 249 has no altsetting 0 [ 386.731476][T15558] usb 13-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 386.735780][T15558] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.739168][T15558] usb 13-1: Product: syz [ 386.740907][T15558] usb 13-1: Manufacturer: syz [ 386.742942][T15558] usb 13-1: SerialNumber: syz [ 386.794101][T22693] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 386.934212][T22693] usb 11-1: device descriptor read/64, error -71 [ 386.977469][T15558] ath6kl: Failed to submit usb control message: -71 [ 386.980080][T15558] ath6kl: unable to send the bmi data to the device: -71 [ 386.982962][T15558] ath6kl: Unable to send get target info: -71 [ 387.002681][T15558] ath6kl: Failed to init ath6kl core: -71 [ 387.011944][T15558] ath6kl_usb 13-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 387.037861][T15558] usb 13-1: USB disconnect, device number 6 [ 387.044348][T22833] libceph: connect (1)[c::]:6789 error -101 [ 387.046873][T22833] libceph: mon0 (1)[c::]:6789 connect error [ 387.051101][T22693] usb usb11-port1: attempt power cycle [ 387.057698][T23029] ceph: No mds server is up or the cluster is laggy [ 387.177410][T23064] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.180374][T23064] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.320959][T23064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.335385][T23064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.394007][T22693] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 387.414524][T22693] usb 11-1: device descriptor read/8, error -71 [ 387.469488][ T1142] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.473869][ T1142] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.483784][ T1142] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.497896][ T1142] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.650787][T23088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3871'. [ 387.793979][T22693] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 388.445090][T22693] usb 11-1: device descriptor read/8, error -71 [ 388.554132][T22693] usb usb11-port1: unable to enumerate USB device [ 388.734470][T23131] 9p: Bad value for 'rfdno' [ 388.935927][ T5944] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 388.939325][ T5944] Bluetooth: hci2: Injecting HCI hardware error event [ 388.945771][ T5299] Bluetooth: hci2: hardware error 0x00 [ 389.385817][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 389.385830][ T40] audit: type=1326 audit(1767447717.083:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.6.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 389.398031][ T40] audit: type=1326 audit(1767447717.083:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.6.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 389.407594][ T40] audit: type=1326 audit(1767447717.083:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.6.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=324 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 389.415372][ T40] audit: type=1326 audit(1767447717.083:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.6.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 389.422483][ T40] audit: type=1326 audit(1767447717.083:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23184 comm="syz.6.3900" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 389.873999][ T825] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 390.037007][ T825] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 390.039982][ T825] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.043568][ T825] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 390.050352][ T825] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 390.053582][ T825] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 390.057450][ T825] usb 11-1: Manufacturer: syz [ 390.065995][ T825] usb 11-1: config 0 descriptor?? [ 390.075937][ T825] igorplugusb 11-1:0.0: incorrect number of endpoints [ 390.282387][ T825] usb 11-1: USB disconnect, device number 16 [ 391.004000][ T5299] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 391.004540][ T5944] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 391.011766][ T5944] Bluetooth: hci3: Injecting HCI hardware error event [ 391.016912][ T5944] Bluetooth: hci3: hardware error 0x00 [ 391.559000][T23307] QAT: failed to copy from user cfg_data. [ 392.061187][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3939'. [ 392.067122][T23315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3939'. [ 392.446122][T23338] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3949'. [ 392.647193][T23357] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3956'. [ 393.084932][ T5944] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 393.101809][T23372] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3963'. [ 393.818422][T23401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3969'. [ 394.477200][ T60] libceph: connect (1)[c::]:6789 error -101 [ 394.480142][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 394.764881][ T60] libceph: connect (1)[c::]:6789 error -101 [ 394.767763][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 395.262864][T23418] ceph: No mds server is up or the cluster is laggy [ 395.282965][ T60] libceph: connect (1)[c::]:6789 error -101 [ 395.286039][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 395.807337][T23450] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3989'. [ 395.960816][T23456] openvswitch: netlink: Message has 4 unknown bytes. [ 395.963312][T23456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.081340][T23463] Invalid ELF header len 8 [ 396.153337][T23471] netlink: 'syz.6.3999': attribute type 1 has an invalid length. [ 396.156634][T23471] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3999'. [ 396.247837][T23477] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 396.300146][T23481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4005'. [ 396.419713][T23495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4011'. [ 397.455703][T23538] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4025'. [ 397.477216][T23540] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4026'. [ 397.579412][ T825] libceph: connect (1)[c::]:6789 error -101 [ 397.582248][ T825] libceph: mon0 (1)[c::]:6789 connect error [ 397.855583][ T825] libceph: connect (1)[c::]:6789 error -101 [ 397.858371][ T825] libceph: mon0 (1)[c::]:6789 connect error [ 397.896800][T23557] mmap: syz.5.4032 (23557): VmData 37347328 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 398.364401][ T825] libceph: connect (1)[c::]:6789 error -101 [ 398.370892][T23546] ceph: No mds server is up or the cluster is laggy [ 398.373544][ T825] libceph: mon0 (1)[c::]:6789 connect error [ 398.560093][T23591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4043'. [ 398.777623][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 398.780333][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 398.804201][T23615] tipc: Enabling of bearer rejected, failed to enable media [ 399.036533][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 399.039427][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 399.412623][T23623] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4054'. [ 399.544784][ T6025] libceph: connect (1)[c::]:6789 error -101 [ 399.547702][ T6025] libceph: mon0 (1)[c::]:6789 connect error [ 399.602555][T23610] ceph: No mds server is up or the cluster is laggy [ 399.652136][T23645] bad cache= option: nonein keysize : 8 [ 399.652136][T23645] max keysize : 8 [ 399.652136][T23645] ivsize : 8 [ 399.652136][T23645] chunksize : 8 [ 399.652136][T23645] statesize : 0 [ 399.652136][T23645] [ 399.652136][T23645] name : ecb(des) [ 399.652136][T23645] driver : ecb(des-generic) [ 399.652136][T23645] module : kernel [ 399.652136][T23645] priority : 100 [ 399.652136][T23645] refcnt : 1 [ 399.652136][T23645] selftest : passed [ 399.652136][T23645] internal : no [ 399.652136][T23645] type : lskcipher [ 399.652136][T23645] blocksize : 8 [ 399.652136][T23645] min keysize : 8 [ 399.652136][T23645] max keysize : 8 [ 399.652136][T23645] ivsize : 0 [ 399.652136][T23645] chunksize : 8 [ 399.652136][T23645] statesize : 0 [ 399.652136][T23645] [ 399.652136][T23645] name : rfc3686(ctr(aes)) [ 399.652136][T23645] driver : rfc3686(ctr-aes-vaes-avx2) [ 399.652136][T23645] module : kernel [ 399.652136][T23645] priority : 600 [ 399.652136][T23645] refcnt : 1 [ 399.652136][T23645] selftest : passed [ 399.652136][T23645] internal : no [ 399.652136][T23645] type : skcipher [ 399.652136][T23645] async : no [ 399.652136][T23645] blocksize : 1 [ 399.652136][T23645] min keysize : 20 [ 399.652136][T23645] max keysize : 36 [ 399.652136][T23645] ivsize : 8 [ 399.652136][T23645] chunksize : 16 [ 399.652136][T23645] walksize : 16 [ 399.652136][T23645] statesize : 0 [ 399.652136][T23645] [ 399.652136][T23645] name : hmac(sm3) [ 399.652136][T23645] driver : hmac(sm3-avx) [ 399.652136][T23645] module : kernel [ 399.652136][T23645] priority : 400 [ 399.652136][T23645] refcnt : 1 [ 399.652136][T23645] selftest : passed [ 399.652136][T23645] internal : no [ 399.652136][T23645] type : ahash [ 399.652136][T23645] async : no [ 399.652136][T23645] blocksize : 64 [ 399.652369][T23645] CIFS: VFS: bad cache= option: nonein keysize : 8 [ 399.652369][T23645] max keysize : 8 [ 399.652369][T23645] ivsize : 8 [ 399.652369][T23645] chunksize : 8 [ 399.652369][T23645] statesize : 0 [ 399.652369][T23645] [ 399.652369][T23645] name : ecb(des) [ 399.652369][T23645] driver : ecb(des-generic) [ 399.652369][T23645] module : kernel [ 399.652369][T23645] priority : 100 [ 399.652369][T23645] refcnt : 1 [ 399.652369][T23645] selftest : passed [ 399.652369][T23645] internal : no [ 399.652369][T23645] type : lskcipher [ 399.652369][T23645] blocksize : 8 [ 399.652369][T23645] min keysize : 8 [ 399.652369][T23645] max keysize : 8 [ 399.652369][T23645] ivsize : 0 [ 399.652369][T23645] chunksize : 8 [ 399.652369][T23645] statesize : 0 [ 399.652369][T23645] [ 399.652369][T23645] name : rfc3686(ctr(aes)) [ 399.652369][T23645] driver : rfc3686(ctr-aes-vaes-avx2) [ 399.652369][T23645] module : kernel [ 399.652369][T23645] priority : 600 [ 399.652369][T23645] refcnt : 1 [ 399.652369][T23645] selftest : passed [ 399.652369][T23645] internal : no [ 399.652369][T23645] type : skcipher [ 399.652369][T23645] async : no [ 399.652369][T23645] blocksize : 1 [ 399.652369][T23645] min keysize : 20 [ 399.652369][T23645] max keysize : 36 [ 399.652369][T23645] ivsize : 8 [ 399.652369][T23645] chunksize : 16 [ 399.652369][T23645] walksize : 16 [ 399.652369][T23645] statesize : 0 [ 399.652369][T23645] [ 399.652369][T23645] name : hmac(sm3) [ 399.652369][T23645] driver : hmac(sm3-avx) [ 399.652369][T23645] module : kernel [ 399.652369][T23645] priority : 400 [ 399.652369][T23645] refcnt : 1 [ 399.652369][T23645] selftest : passed [ 399.652369][T23645] internal : no [ 399.652369][T23645] type : ahash [ 399.652369][T23645] async : no [ 399.728411][T23645] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 399.774142][ T6025] usb 11-1: new full-speed USB device number 17 using dummy_hcd [ 399.805162][T23645] CIFS mount error: No usable UNC path provided in device string! [ 399.805162][T23645] [ 399.808995][T23645] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 399.966267][ T6025] usb 11-1: config 201 has an invalid interface number: 249 but max is 0 [ 399.974041][ T6025] usb 11-1: config 201 has no interface number 0 [ 399.974276][ T60] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 399.980326][ T6025] usb 11-1: config 201 interface 249 has no altsetting 0 [ 399.988881][ T6025] usb 11-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 399.993120][ T6025] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.003259][ T6025] usb 11-1: Product: syz [ 400.006488][ T6025] usb 11-1: Manufacturer: syz [ 400.008583][ T6025] usb 11-1: SerialNumber: syz [ 400.104143][ T60] usb 12-1: device descriptor read/64, error -71 [ 400.229747][ T6025] ath6kl: Failed to submit usb control message: -71 [ 400.232113][ T6025] ath6kl: unable to send the bmi data to the device: -71 [ 400.236562][ T6025] ath6kl: Unable to send get target info: -71 [ 400.248293][ T6025] ath6kl: Failed to init ath6kl core: -71 [ 400.251996][ T6025] ath6kl_usb 11-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 400.269841][ T6025] usb 11-1: USB disconnect, device number 17 [ 400.296221][T23668] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4066'. [ 400.364011][ T60] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 400.494058][ T60] usb 12-1: device descriptor read/64, error -71 [ 400.604899][ T60] usb usb12-port1: attempt power cycle [ 400.964009][ T60] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 400.984467][ T60] usb 12-1: device descriptor read/8, error -71 [ 401.223990][ T6025] usb 11-1: new full-speed USB device number 18 using dummy_hcd [ 401.224027][ T60] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 401.247047][ T60] usb 12-1: device descriptor read/8, error -71 [ 401.354169][ T60] usb usb12-port1: unable to enumerate USB device [ 401.386074][ T6025] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 401.389585][ T6025] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 26232, setting to 64 [ 401.394401][ T6025] usb 11-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 401.398589][ T6025] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.408444][ T6025] usb 11-1: config 0 descriptor?? [ 401.635442][ T6025] ath6kl: Failed to submit usb control message: -71 [ 401.638378][ T6025] ath6kl: unable to send the bmi data to the device: -71 [ 401.651004][ T6025] ath6kl: Unable to send get target info: -71 [ 401.655898][ T6025] ath6kl: Failed to init ath6kl core: -71 [ 401.659707][ T6025] ath6kl_usb 11-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 401.673795][ T6025] usb 11-1: USB disconnect, device number 18 [ 402.237989][T23722] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 402.240495][T23722] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 402.250771][T23722] vhci_hcd vhci_hcd.0: Device attached [ 402.264917][T23722] netlink: 'syz.8.4079': attribute type 3 has an invalid length. [ 402.268435][T23722] netlink: 'syz.8.4079': attribute type 3 has an invalid length. [ 402.276944][T23727] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4082'. [ 402.544094][ T825] usb 54-1: SetAddress Request (2) to port 0 [ 402.546694][ T825] usb 54-1: new SuperSpeed USB device number 2 using vhci_hcd [ 402.756134][T23723] vhci_hcd: connection reset by peer [ 402.760915][ T59] vhci_hcd vhci_hcd.8: stop threads [ 402.763156][ T59] vhci_hcd vhci_hcd.8: release socket [ 402.775933][ T59] vhci_hcd vhci_hcd.8: disconnect device [ 403.866109][T23808] sctp: [Deprecated]: syz.8.4114 (pid 23808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.866109][T23808] Use struct sctp_sack_info instead [ 404.265724][T23844] netlink: 'syz.7.4126': attribute type 1 has an invalid length. [ 404.268446][T23844] netlink: 'syz.7.4126': attribute type 3 has an invalid length. [ 404.271315][T23844] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4126'. [ 405.353963][T23848] comedi comedi2: reset error (fatal) [ 406.801523][T23909] overlayfs: failed to clone upperpath [ 406.982995][T23919] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4148'. [ 407.644271][ T825] usb 54-1: device descriptor read/8, error -110 [ 407.859193][T23964] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4164'. [ 408.034498][ T825] usb usb54-port1: attempt power cycle [ 408.444002][ T6006] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 408.594537][ T825] usb usb54-port1: unable to enumerate USB device [ 408.596772][ T6006] usb 12-1: Using ep0 maxpacket: 16 [ 408.702617][ T6006] usb 12-1: config 0 interface 0 has no altsetting 0 [ 408.705109][ T6006] usb 12-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 408.708653][ T6006] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.716658][ T6006] usb 12-1: config 0 descriptor?? [ 409.049049][T23995] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4174'. [ 409.104539][T24000] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4176'. [ 409.129138][ T6006] hid (null): global environment stack underflow [ 409.131394][ T6006] hid (null): report_id 0 is invalid [ 409.135277][ T6006] hid (null): global environment stack underflow [ 409.138010][ T6006] hid (null): unknown global tag 0xc [ 409.139888][ T6006] hid (null): report_id 25068 is invalid [ 409.142122][ T6006] hid (null): report_id 0 is invalid [ 409.145298][ T6006] hid (null): global environment stack overflow [ 409.148268][ T6006] hid (null): unknown global tag 0xc [ 409.150125][ T6006] hid (null): unknown global tag 0x58 [ 409.207865][T24011] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4179'. [ 409.330023][ T6006] usb 12-1: USB disconnect, device number 8 [ 410.255895][T24038] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4185'. [ 410.353585][T24040] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4186'. [ 410.710881][T24061] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4194'. [ 410.724075][ T10] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 410.751249][T24063] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4195'. [ 410.814813][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 410.817370][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 410.894025][ T10] usb 13-1: Using ep0 maxpacket: 8 [ 410.925535][ T10] usb 13-1: unable to get BOS descriptor or descriptor too short [ 410.929192][ T10] usb 13-1: config 7 has an invalid interface number: 208 but max is 0 [ 410.932174][ T10] usb 13-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 410.962558][ T10] usb 13-1: config 7 has no interface number 0 [ 410.964986][ T10] usb 13-1: config 7 interface 208 has no altsetting 0 [ 410.969444][ T10] usb 13-1: New USB device found, idVendor=5050, idProduct=0900, bcdDevice=b3.ef [ 410.973241][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.976381][ T10] usb 13-1: Product: syz [ 410.977844][ T10] usb 13-1: Manufacturer: syz [ 410.979494][ T10] usb 13-1: SerialNumber: syz [ 411.074082][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 411.076104][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 411.205489][ T10] ftdi_sio 13-1:7.208: FTDI USB Serial Device converter detected [ 411.210596][ T10] ftdi_sio ttyUSB0: unknown device type: 0xb3ef [ 411.221155][ T10] usb 13-1: USB disconnect, device number 7 [ 411.228407][ T10] ftdi_sio 13-1:7.208: device disconnected [ 411.584117][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 411.586868][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 411.638627][T24065] ceph: No mds server is up or the cluster is laggy [ 411.910876][T24125] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4210'. [ 412.173367][T24129] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4211'. [ 413.003181][T24161] netlink: 392 bytes leftover after parsing attributes in process `syz.7.4224'. [ 413.726674][T24204] vivid-002: ================= START STATUS ================= [ 413.733599][T24204] vivid-002: Radio HW Seek Mode: Bounded [ 413.740234][T24204] vivid-002: Radio Programmable HW Seek: false [ 413.742253][T24204] vivid-002: RDS Rx I/O Mode: Block I/O [ 413.747069][T24204] vivid-002: Generate RBDS Instead of RDS: false [ 413.749358][T24204] vivid-002: RDS Reception: true [ 413.751050][T24204] vivid-002: RDS Program Type: 0 inactive [ 413.753070][T24204] vivid-002: RDS PS Name: inactive [ 413.759717][T24204] vivid-002: RDS Radio Text: inactive [ 413.761563][T24204] vivid-002: RDS Traffic Announcement: false inactive [ 413.764589][T24204] vivid-002: RDS Traffic Program: false inactive [ 413.766876][T24204] vivid-002: RDS Music: false inactive [ 413.770386][T24204] vivid-002: ================== END STATUS ================== [ 417.707371][T24305] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4272'. [ 419.260488][T24326] infiniband syz1: set active [ 419.266087][T24326] infiniband syz1: added veth0_to_team [ 419.320753][T24326] RDS/IB: syz1: added [ 419.322105][T24326] smc: adding ib device syz1 with port count 1 [ 419.325124][T24326] smc: ib device syz1 port 1 has no pnetid [ 420.051435][T24365] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4291'. [ 420.532109][T24376] geneve2: entered promiscuous mode [ 420.540111][T21328] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.543056][T21328] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.547990][T21328] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.550807][T21328] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.874297][T24390] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4300'. [ 421.334079][ T6618] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 421.484008][ T6618] usb 13-1: Using ep0 maxpacket: 32 [ 421.488783][ T6618] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.492419][ T6618] usb 13-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.503628][ T6618] usb 13-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.514023][ T6618] usb 13-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 421.519634][ T6618] usb 13-1: config 0 interface 0 has no altsetting 0 [ 421.522516][ T6618] usb 13-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 421.528696][ T6618] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.539397][ T6618] usb 13-1: config 0 descriptor?? [ 421.962945][ T6618] hid_parser_main: 817 callbacks suppressed [ 421.962959][ T6618] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 421.972858][ T6618] hid-thrustmaster 0003:044F:B65D.000F: item fetching failed at offset 4/5 [ 421.976571][ T6618] hid-thrustmaster 0003:044F:B65D.000F: parse failed with error -22 [ 421.984186][ T6618] hid-thrustmaster 0003:044F:B65D.000F: probe with driver hid-thrustmaster failed with error -22 [ 422.163573][ T9] usb 13-1: USB disconnect, device number 8 [ 422.533618][T24474] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4323'. [ 423.334207][ T5912] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 423.485663][ T5912] usb 12-1: config 0 has no interfaces? [ 423.489824][ T5912] usb 12-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 423.493709][ T5912] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.498206][ T5912] usb 12-1: Product: syz [ 423.500311][ T5912] usb 12-1: Manufacturer: syz [ 423.502430][ T5912] usb 12-1: SerialNumber: syz [ 423.522551][ T5912] usb 12-1: config 0 descriptor?? [ 423.664193][ T9] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 423.827113][T24501] veth0_macvtap: left promiscuous mode [ 423.895374][ T9] usb 13-1: config 1 has an invalid interface number: 121 but max is 0 [ 423.898301][ T9] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.901857][ T9] usb 13-1: config 1 has no interface number 0 [ 423.906642][ T9] usb 13-1: config 1 interface 121 has no altsetting 0 [ 423.910543][ T9] usb 13-1: New USB device found, idVendor=0421, idProduct=01f5, bcdDevice=57.da [ 423.913754][ T9] usb 13-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 423.923934][ T9] usb 13-1: Manufacturer: syz [ 423.939561][ T9] usb 13-1: bad CDC descriptors [ 423.989743][T24501] veth0_macvtap: entered promiscuous mode [ 424.012498][ T6618] usb 12-1: USB disconnect, device number 9 [ 424.144762][ T29] usb 13-1: USB disconnect, device number 9 [ 424.490106][T24581] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4345'. [ 424.856288][ T12] veth0_macvtap: left promiscuous mode [ 425.484096][ T5944] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 425.494127][ T5944] Bluetooth: hci1: Injecting HCI hardware error event [ 425.500117][ T5299] Bluetooth: hci1: hardware error 0x00 [ 425.769161][T24624] netlink: 'syz.5.4357': attribute type 1 has an invalid length. [ 425.772348][T24624] netlink: 'syz.5.4357': attribute type 2 has an invalid length. [ 425.811817][T24630] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4359'. [ 425.951227][ T60] libceph: connect (1)[c::]:6789 error -101 [ 425.953454][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 426.215200][ T60] libceph: connect (1)[c::]:6789 error -101 [ 426.217399][ T60] libceph: mon0 (1)[c::]:6789 connect error [ 426.544155][ T60] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 426.706742][ T60] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 426.710344][ T60] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.715903][ T60] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 426.718931][ T60] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 426.721439][ T60] usb 11-1: Manufacturer: syz [ 426.730637][ T60] usb 11-1: config 0 descriptor?? [ 426.735591][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 426.737935][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 426.769716][T24639] ceph: No mds server is up or the cluster is laggy [ 426.814064][ T60] rc_core: IR keymap rc-hauppauge not found [ 426.816082][ T60] Registered IR keymap rc-empty [ 426.818694][ T60] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 426.824075][ T60] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input53 [ 426.936745][ T6006] usb 11-1: USB disconnect, device number 19 [ 427.464014][ T60] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 427.564474][ T5299] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 427.600608][T24752] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 427.614061][ T60] usb 12-1: Using ep0 maxpacket: 16 [ 427.617956][ T60] usb 12-1: config 1 has an invalid interface number: 105 but max is 0 [ 427.620719][ T60] usb 12-1: config 1 has no interface number 0 [ 427.622961][ T60] usb 12-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 427.626838][ T60] usb 12-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 427.630208][ T60] usb 12-1: config 1 interface 105 has no altsetting 0 [ 427.634476][ T60] usb 12-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 427.637655][ T60] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.640176][ T60] usb 12-1: Product: syz [ 427.641565][ T60] usb 12-1: Manufacturer: syz [ 427.643142][ T60] usb 12-1: SerialNumber: syz [ 427.646722][T24746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 427.649244][T24746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 428.066340][T24746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 428.069031][T24746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 428.076709][T24768] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4400'. [ 428.674747][ T60] aqc111 12-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 428.679642][ T60] aqc111 12-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 428.697332][ T60] aqc111 12-1:1.105 eth18: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, aa:02:df:23:7c:df [ 428.703220][ T60] usb 12-1: USB disconnect, device number 10 [ 428.707787][ T60] aqc111 12-1:1.105 eth18: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 428.814970][ T60] aqc111 12-1:1.105 eth18 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 428.819556][ T60] aqc111 12-1:1.105 eth18 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 428.823153][ T60] aqc111 12-1:1.105 eth18 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 429.118939][T24802] overlayfs: failed to clone upperpath [ 429.531093][T24821] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4411'. [ 430.817916][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 430.820026][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 430.920040][T24851] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4424'. [ 431.079563][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 431.084109][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 431.410861][T24857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4426'. [ 431.424064][T24857] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4426'. [ 431.595699][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 431.600080][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 431.650854][T24844] ceph: No mds server is up or the cluster is laggy [ 432.008450][T24882] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4435'. [ 432.008527][T24882] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4435'. [ 432.605900][T24921] lo speed is unknown, defaulting to 1000 [ 432.608158][T24921] lo speed is unknown, defaulting to 1000 [ 432.618898][T24921] lo speed is unknown, defaulting to 1000 [ 432.638002][T24921] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 432.667516][T24921] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 432.749269][T24921] lo speed is unknown, defaulting to 1000 [ 432.777627][T24921] lo speed is unknown, defaulting to 1000 [ 432.780628][T24921] lo speed is unknown, defaulting to 1000 [ 432.783820][T24921] lo speed is unknown, defaulting to 1000 [ 432.786543][T24921] lo speed is unknown, defaulting to 1000 [ 434.762467][T24986] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4474'. [ 435.384000][ T1018] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 435.544055][ T1018] usb 13-1: Using ep0 maxpacket: 32 [ 435.549886][ T1018] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 435.553507][ T1018] usb 13-1: can't read configurations, error -61 [ 435.588040][T25042] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4493'. [ 435.684647][T25050] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4495'. [ 435.700663][ T1018] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 435.884204][ T1018] usb 13-1: Using ep0 maxpacket: 32 [ 435.892163][ T1018] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 435.895053][ T1018] usb 13-1: can't read configurations, error -61 [ 435.896777][T25067] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4503'. [ 435.901834][ T1018] usb usb13-port1: attempt power cycle [ 436.334155][ T1018] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 436.449644][ T1018] usb 13-1: Using ep0 maxpacket: 32 [ 436.523763][ T1018] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 436.527103][ T1018] usb 13-1: can't read configurations, error -61 [ 436.664687][ T1018] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 436.906638][ T1018] usb 13-1: Using ep0 maxpacket: 32 [ 436.920939][ T1018] usb 13-1: unable to read config index 0 descriptor/start: -61 [ 436.923811][ T1018] usb 13-1: can't read configurations, error -61 [ 436.926943][ T1018] usb usb13-port1: unable to enumerate USB device [ 437.071312][T25087] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4510'. [ 438.077339][ T825] libceph: connect (1)[c::]:6789 error -101 [ 438.079567][ T825] libceph: mon0 (1)[c::]:6789 connect error [ 438.334385][ T825] libceph: connect (1)[c::]:6789 error -101 [ 438.337253][ T825] libceph: mon0 (1)[c::]:6789 connect error [ 438.714068][ T825] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 438.855849][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 438.858488][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 438.874231][ T825] usb 11-1: Using ep0 maxpacket: 32 [ 438.878499][ T825] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 438.881973][ T825] usb 11-1: can't read configurations, error -61 [ 438.901056][T25103] ceph: No mds server is up or the cluster is laggy [ 439.024391][ T825] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 439.194079][ T825] usb 11-1: Using ep0 maxpacket: 32 [ 439.198485][ T825] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 439.201941][ T825] usb 11-1: can't read configurations, error -61 [ 439.205594][ T825] usb usb11-port1: attempt power cycle [ 439.645379][ T825] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 439.687522][ T825] usb 11-1: Using ep0 maxpacket: 32 [ 439.692615][ T825] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 439.698529][ T825] usb 11-1: can't read configurations, error -61 [ 439.824205][ T825] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 439.844832][ T825] usb 11-1: Using ep0 maxpacket: 32 [ 439.851365][ T825] usb 11-1: unable to read config index 0 descriptor/start: -61 [ 439.855690][ T825] usb 11-1: can't read configurations, error -61 [ 439.858928][ T825] usb usb11-port1: unable to enumerate USB device [ 441.685499][T25248] syzkaller0: entered promiscuous mode [ 441.687879][T25248] syzkaller0: entered allmulticast mode [ 442.131907][T25278] Bluetooth: hci0: invalid length 1, exp 2 for type 2 [ 442.999533][T25318] syzkaller0: entered promiscuous mode [ 443.001773][T25318] syzkaller0: entered allmulticast mode [ 443.343491][ T1018] libceph: connect (1)[c::]:6789 error -101 [ 443.346637][ T1018] libceph: mon0 (1)[c::]:6789 connect error [ 443.524101][T25339] hub 6-0:1.0: USB hub found [ 443.528342][T25339] hub 6-0:1.0: 1 port detected [ 443.614193][ T1018] libceph: connect (1)[c::]:6789 error -101 [ 443.616604][ T1018] libceph: mon0 (1)[c::]:6789 connect error [ 444.124150][ T1018] libceph: connect (1)[c::]:6789 error -101 [ 444.134162][ T1018] libceph: mon0 (1)[c::]:6789 connect error [ 444.159333][T25330] ceph: No mds server is up or the cluster is laggy [ 444.611714][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.623993][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.800985][T25369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4606'. [ 445.029645][T25382] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 446.978887][T25444] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4632'. [ 447.034108][ T825] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 447.135659][T25455] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4637'. [ 447.184056][ T825] usb 11-1: Using ep0 maxpacket: 32 [ 447.188639][ T825] usb 11-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.193464][ T825] usb 11-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 447.199675][ T825] usb 11-1: config 0 interface 0 has no altsetting 0 [ 447.202682][ T825] usb 11-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 447.206757][ T825] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.213238][ T825] usb 11-1: config 0 descriptor?? [ 447.635874][ T825] kye 0003:0458:0138.0010: item fetching failed at offset 0/3 [ 447.638768][ T825] kye 0003:0458:0138.0010: parse failed [ 447.640714][ T825] kye 0003:0458:0138.0010: probe with driver kye failed with error -22 [ 447.830206][ T825] usb 11-1: USB disconnect, device number 24 [ 448.321658][T25488] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4642'. [ 448.352423][T25490] genirq: Flags mismatch irq 12. 00200000 (aio_iiro_16) vs. 00200080 (i8042) [ 448.734106][ T60] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 448.775985][T25522] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4654'. [ 448.883993][ T60] usb 11-1: Using ep0 maxpacket: 32 [ 448.888747][ T60] usb 11-1: config 0 has an invalid interface number: 132 but max is 0 [ 448.893039][ T60] usb 11-1: config 0 has no interface number 0 [ 448.896371][ T60] usb 11-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 448.903724][ T60] usb 11-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 448.908247][ T60] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.911840][ T60] usb 11-1: Product: syz [ 448.914048][ T60] usb 11-1: Manufacturer: syz [ 448.919330][ T60] usb 11-1: SerialNumber: syz [ 448.926899][ T60] usb 11-1: config 0 descriptor?? [ 448.954885][ T60] em28xx 11-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 448.994022][ T60] em28xx 11-1:0.132: Video interface 132 found: [ 449.350310][ T60] em28xx 11-1:0.132: chip ID is em2874 [ 449.755598][ T60] em28xx 11-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 449.758849][ T60] em28xx 11-1:0.132: board has no eeprom [ 449.814626][ T60] em28xx 11-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 449.818325][ T60] em28xx 11-1:0.132: analog set to bulk mode. [ 449.821748][T22693] em28xx 11-1:0.132: Registering V4L2 extension [ 449.836736][ T60] usb 11-1: USB disconnect, device number 25 [ 449.840428][ T60] em28xx 11-1:0.132: Disconnecting em28xx [ 449.984232][T22693] usb 11-1: Decoder not found [ 449.987227][T22693] em28xx 11-1:0.132: failed to create media graph [ 449.994029][T22693] em28xx 11-1:0.132: V4L2 device video103 deregistered [ 450.004812][T22693] em28xx 11-1:0.132: Remote control support is not available for this card. [ 450.007853][ T60] em28xx 11-1:0.132: Closing input extension [ 450.022270][ T60] em28xx 11-1:0.132: Freeing device [ 450.743187][T25620] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4674'. [ 451.135791][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4683'. [ 451.139584][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4683'. [ 451.143241][T25645] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4683'. [ 452.687601][T25726] dummy0: entered allmulticast mode [ 453.479471][T25722] dummy0: left allmulticast mode [ 455.051363][T25758] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4726'. [ 456.562940][T25788] lo speed is unknown, defaulting to 1000 [ 457.205910][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 457.215814][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 457.255007][T22693] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 457.414004][T22693] usb 13-1: Using ep0 maxpacket: 32 [ 457.421979][T22693] usb 13-1: config 113 has an invalid interface number: 125 but max is 0 [ 457.426427][T22693] usb 13-1: config 113 has no interface number 0 [ 457.430827][T22693] usb 13-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2 [ 457.434696][T22693] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.438066][T22693] usb 13-1: Product: syz [ 457.439937][T22693] usb 13-1: Manufacturer: syz [ 457.442287][T22693] usb 13-1: SerialNumber: syz [ 457.462677][T25838] fuse: Bad value for 'group_id' [ 457.466126][T25838] fuse: Bad value for 'group_id' [ 457.480191][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 457.482608][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 457.727909][T25852] ptrace attach of "/syz-executor exec"[21889] was attempted by "/syz-executor exec"[25852] [ 457.994279][ T6618] libceph: connect (1)[c::]:6789 error -101 [ 457.998540][ T6618] libceph: mon0 (1)[c::]:6789 connect error [ 458.006233][T25830] ceph: No mds server is up or the cluster is laggy [ 458.879761][T22693] libceph: connect (1)[c::]:6789 error -101 [ 458.883616][T22693] libceph: mon0 (1)[c::]:6789 connect error [ 459.144219][T22693] libceph: connect (1)[c::]:6789 error -101 [ 459.147671][T22693] libceph: mon0 (1)[c::]:6789 connect error [ 459.654243][T22693] libceph: connect (1)[c::]:6789 error -101 [ 459.658244][T22693] libceph: mon0 (1)[c::]:6789 connect error [ 459.683387][T25881] ceph: No mds server is up or the cluster is laggy [ 460.032508][ T1018] usb 13-1: USB disconnect, device number 14 [ 460.177082][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.182042][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.186092][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.189561][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.192946][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.409871][T25946] netlink: 'syz.8.4777': attribute type 10 has an invalid length. [ 460.434011][T25946] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.445908][T25946] bond0: (slave team0): Enslaving as an active interface with an up link [ 460.449537][T25928] lo speed is unknown, defaulting to 1000 [ 460.506858][T25946] bridge0: entered promiscuous mode [ 460.532394][ T59] Bluetooth: hci2: Frame reassembly failed (-84) [ 460.539843][T25959] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 460.548920][ T4930] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.565823][T25946] bridge0: left promiscuous mode [ 460.670071][ T4930] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.744401][ T4930] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.766441][T25928] chnl_net:caif_netlink_parms(): no params data found [ 460.858464][ T4930] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.902294][T25928] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.905553][T25928] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.908176][T25928] bridge_slave_0: entered allmulticast mode [ 460.911042][T25928] bridge_slave_0: entered promiscuous mode [ 460.915845][T25928] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.918709][T25928] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.921608][T25928] bridge_slave_1: entered allmulticast mode [ 460.925492][T25928] bridge_slave_1: entered promiscuous mode [ 460.952616][T25928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.959988][T25928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.981914][T25928] team0: Port device team_slave_0 added [ 461.022540][T25928] team0: Port device team_slave_1 added [ 461.082651][T25928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.088247][T25928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.099146][T25928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.117081][T25928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.119669][T25928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.129454][T25928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.141888][ T4930] bridge_slave_1: left allmulticast mode [ 461.144107][ T4930] bridge_slave_1: left promiscuous mode [ 461.146177][ T4930] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.151510][ T4930] bridge_slave_0: left allmulticast mode [ 461.154169][ T4930] bridge_slave_0: left promiscuous mode [ 461.156471][ T4930] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.525641][ T4930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.534544][ T4930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.539946][ T4930] bond0 (unregistering): Released all slaves [ 461.617157][T25928] hsr_slave_0: entered promiscuous mode [ 461.620704][T25928] hsr_slave_1: entered promiscuous mode [ 461.627655][T25928] debugfs: 'hsr0' already exists in 'hsr' [ 461.629594][T25928] Cannot create hsr debugfs directory [ 462.203177][ T4930] hsr_slave_0: left promiscuous mode [ 462.210128][ T4930] hsr_slave_1: left promiscuous mode [ 462.212371][ T4930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.215476][ T4930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.284129][ T5944] Bluetooth: hci4: command tx timeout [ 462.616992][ T5299] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 462.618390][ T5944] Bluetooth: hci2: command 0x1003 tx timeout [ 462.716798][ T4930] team0 (unregistering): Port device team_slave_1 removed [ 462.752208][ T4930] team0 (unregistering): Port device team_slave_0 removed [ 463.927483][T25928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.936740][T25928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.965905][T25928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.983406][T25928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 464.364149][ T5299] Bluetooth: hci4: command tx timeout [ 464.533091][T25928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.662626][T25928] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.671153][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.674646][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.685703][T25754] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.688690][T25754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.930913][T25928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.075917][T26311] syz.7.4790: page allocation failure: order:0, mode:0x340cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_THISNODE), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 465.082330][T26311] CPU: 0 UID: 0 PID: 26311 Comm: syz.7.4790 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.082361][T26311] Tainted: [L]=SOFTLOCKUP [ 465.082367][T26311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.082377][T26311] Call Trace: [ 465.082384][T26311] [ 465.082394][T26311] dump_stack_lvl+0x16c/0x1f0 [ 465.082426][T26311] warn_alloc+0x248/0x3a0 [ 465.082452][T26311] ? __pfx_warn_alloc+0x10/0x10 [ 465.082473][T26311] ? __mutex_unlock_slowpath+0x161/0x790 [ 465.082521][T26311] __alloc_frozen_pages_noprof+0xe9b/0x2430 [ 465.082557][T26311] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.082583][T26311] ? update_load_avg+0x233/0x2220 [ 465.082620][T26311] __folio_alloc_noprof+0x11/0x220 [ 465.082643][T26311] alloc_migration_target+0x1a0/0x560 [ 465.082675][T26311] migrate_pages_batch+0x3bc/0x3bb0 [ 465.082694][T26311] ? __pfx_alloc_migration_target+0x10/0x10 [ 465.082724][T26311] ? __page_table_check_ptes_set+0x1b1/0x4e0 [ 465.082746][T26311] ? __pfx_migrate_pages_batch+0x10/0x10 [ 465.082760][T26311] ? find_held_lock+0x2b/0x80 [ 465.082786][T26311] migrate_pages_sync+0x12d/0x8a0 [ 465.082802][T26311] ? __pfx_alloc_migration_target+0x10/0x10 [ 465.082829][T26311] ? __handle_mm_fault+0x5a8/0x2bb0 [ 465.082845][T26311] ? __pfx_migrate_pages_sync+0x10/0x10 [ 465.082865][T26311] ? __lock_acquire+0x436/0x2890 [ 465.082881][T26311] migrate_pages+0x1b0b/0x2350 [ 465.082897][T26311] ? __pfx_alloc_migration_target+0x10/0x10 [ 465.082926][T26311] ? __pfx_migrate_pages+0x10/0x10 [ 465.082944][T26311] ? __lock_acquire+0x436/0x2890 [ 465.082960][T26311] ? mtree_load+0x315/0xa30 [ 465.083008][T26311] move_pages_and_store_status+0xf1/0x230 [ 465.083026][T26311] ? __pfx_move_pages_and_store_status+0x10/0x10 [ 465.083044][T26311] ? __might_fault+0x13b/0x190 [ 465.083066][T26311] kernel_move_pages+0xbbb/0x12f0 [ 465.083088][T26311] ? __pfx_kernel_move_pages+0x10/0x10 [ 465.083103][T26311] ? rcu_is_watching+0x12/0xc0 [ 465.083130][T26311] ? kcov_ioctl+0x265/0x6e0 [ 465.083151][T26311] ? kcov_ioctl+0x265/0x6e0 [ 465.083174][T26311] __ia32_sys_move_pages+0xdd/0x1b0 [ 465.083190][T26311] ? __do_fast_syscall_32+0x9a/0x680 [ 465.083213][T26311] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.083239][T26311] __do_fast_syscall_32+0xe8/0x680 [ 465.083266][T26311] do_fast_syscall_32+0x32/0x80 [ 465.083279][T26311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.083305][T26311] RIP: 0023:0xf7f84579 [ 465.083319][T26311] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 465.083337][T26311] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 000000000000013d [ 465.083354][T26311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000000020a0 [ 465.083367][T26311] RDX: 0000000080000040 RSI: 0000000080001180 RDI: 0000000080000000 [ 465.083378][T26311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.083388][T26311] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 465.083398][T26311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.083422][T26311] [ 465.083428][T26311] Mem-Info: [ 465.222245][T26311] active_anon:3271 inactive_anon:1394 isolated_anon:0 [ 465.222245][T26311] active_file:5806 inactive_file:9311 isolated_file:0 [ 465.222245][T26311] unevictable:1768 dirty:41 writeback:0 [ 465.222245][T26311] slab_reclaimable:6458 slab_unreclaimable:62525 [ 465.222245][T26311] mapped:24920 shmem:4040 pagetables:1574 [ 465.222245][T26311] sec_pagetables:322 bounce:0 [ 465.222245][T26311] kernel_misc_reclaimable:0 [ 465.222245][T26311] free:80836 free_pcp:1671 free_cma:0 [ 465.239815][T26311] Node 0 active_anon:4788kB inactive_anon:100kB active_file:16kB inactive_file:12kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4728kB dirty:12kB writeback:0kB shmem:8248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9952kB pagetables:1728kB sec_pagetables:1144kB all_unreclaimable? no Balloon:0kB [ 465.256334][T26311] Node 1 active_anon:8508kB inactive_anon:5476kB active_file:23208kB inactive_file:37236kB unevictable:3536kB isolated(anon):4kB isolated(file):0kB mapped:94940kB dirty:84kB writeback:0kB shmem:8092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4524kB pagetables:4708kB sec_pagetables:144kB all_unreclaimable? no Balloon:0kB [ 465.269835][T26311] Node 0 DMA free:2652kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 465.282451][T26311] lowmem_reserve[]: 0 289 289 289 289 [ 465.285141][T26311] Node 0 DMA32 free:23240kB boost:0kB min:13332kB low:16664kB high:19996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7168kB inactive_anon:68kB active_file:0kB inactive_file:32kB unevictable:3536kB writepending:4kB zspages:484kB present:1032196kB managed:296808kB mlocked:0kB bounce:0kB free_pcp:2712kB local_pcp:0kB free_cma:0kB [ 465.299398][T26311] lowmem_reserve[]: 0 0 0 0 0 [ 465.301485][T26311] Node 1 DMA32 free:295296kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8508kB inactive_anon:5476kB active_file:23208kB inactive_file:37236kB unevictable:3536kB writepending:0kB zspages:5176kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:4388kB local_pcp:688kB free_cma:0kB [ 465.315936][T26311] lowmem_reserve[]: 0 0 0 0 0 [ 465.317726][T26311] Node 0 DMA: 41*4kB (U) 18*8kB (U) 14*16kB (U) 7*32kB (U) 2*64kB (U) 0*128kB 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 2676kB [ 465.323361][T26311] Node 0 DMA32: 0*4kB 191*8kB (U) 317*16kB (U) 226*32kB (UE) 61*64kB (UE) 10*128kB (UE) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19016kB [ 465.334753][T26311] Node 1 DMA32: 3373*4kB (UME) 4032*8kB (UE) 3194*16kB (UME) 542*32kB (UME) 268*64kB (UME) 149*128kB (UME) 84*256kB (UME) 59*512kB (UM) 47*1024kB (UM) 12*2048kB (UM) 5*4096kB (M) = 295316kB [ 465.342727][T26311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.353987][T26311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 465.357832][T26311] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 465.361564][T26311] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 465.366333][T26331] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4791'. [ 465.366875][T26311] 21771 total pagecache pages [ 465.372521][T26311] 902 pages in swap cache [ 465.374620][T26311] Free swap = 93732kB [ 465.376306][T26311] Total swap = 124996kB [ 465.384105][T26311] 524155 pages RAM [ 465.385748][T26311] 0 pages HighMem/MovableOnly [ 465.387779][T26311] 209060 pages reserved [ 465.387789][T26311] 0 pages cma reserved [ 465.476186][T25928] veth0_vlan: entered promiscuous mode [ 465.480073][T25928] veth1_vlan: entered promiscuous mode [ 465.514578][T25928] veth0_macvtap: entered promiscuous mode [ 465.541221][T25928] veth1_macvtap: entered promiscuous mode [ 465.572209][T25928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.598692][T25928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.618531][ T1145] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.757092][T25754] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.780087][T25754] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.787308][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.849212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.852785][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.883442][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.892956][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.444219][ T5299] Bluetooth: hci4: command tx timeout [ 468.274026][ T825] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 468.420361][T26421] program syz.7.4814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.424730][ T825] usb 10-1: Using ep0 maxpacket: 32 [ 468.467539][ T825] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 468.472172][ T825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 468.486918][ T825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 468.513802][ T825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 468.520038][ T825] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 468.524830][ T5299] Bluetooth: hci4: command tx timeout [ 468.530160][ T825] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 468.533539][T26425] program syz.8.4815 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 468.534628][ T825] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.543175][ T825] usb 10-1: Product: syz [ 468.545511][ T825] usb 10-1: Manufacturer: syz [ 468.548443][ T825] usb 10-1: SerialNumber: syz [ 468.560267][ T825] usb 10-1: config 0 descriptor?? [ 468.980315][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 468.983849][ T825] input input55: Device does not respond to id packet M [ 468.992167][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 468.994859][ T825] input input55: Device does not respond to id packet P [ 468.997514][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 468.999551][ T825] input input55: Device does not respond to id packet B [ 469.002079][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 469.004128][ T825] input input55: Device does not respond to id packet N [ 469.006854][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 469.009376][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 469.011806][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 469.014651][ T825] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 469.017462][ T825] iforce 10-1:0.0: usb_submit_urb failed -90 [ 469.019798][ T825] iforce 10-1:0.0: usb_submit_urb failed -90 [ 469.022748][ T825] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input55 [ 469.032375][ T825] usb 10-1: USB disconnect, device number 5 [ 469.319580][T26457] fuse: Unknown parameter 'grou00000000000000000000' [ 469.761492][T26472] lo speed is unknown, defaulting to 1000 [ 469.834073][ T60] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 469.984066][ T60] usb 12-1: device descriptor read/64, error -71 [ 470.224090][ T60] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 470.298796][T26508] program syz.8.4828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 470.324526][T26506] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4827'. [ 470.364265][ T60] usb 12-1: device descriptor read/64, error -71 [ 470.477592][ T60] usb usb12-port1: attempt power cycle [ 470.824061][ T60] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 470.845320][ T60] usb 12-1: device descriptor read/8, error -71 [ 471.104169][ T60] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 471.134491][ T60] usb 12-1: device descriptor read/8, error -71 [ 471.244466][ T60] usb usb12-port1: unable to enumerate USB device [ 471.264779][T26517] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4830'. [ 471.756680][ T40] audit: type=1326 audit(1767447799.453:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.767787][ T40] audit: type=1326 audit(1767447799.453:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.777325][ T40] audit: type=1326 audit(1767447799.453:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.813554][ T40] audit: type=1326 audit(1767447799.503:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.822508][ T40] audit: type=1326 audit(1767447799.503:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.832091][ T40] audit: type=1326 audit(1767447799.503:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.841345][ T40] audit: type=1326 audit(1767447799.503:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.850227][ T40] audit: type=1326 audit(1767447799.503:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.859672][ T40] audit: type=1326 audit(1767447799.503:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 471.869743][ T40] audit: type=1326 audit(1767447799.523:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26527 comm="syz.8.4835" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 473.390782][ T825] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 473.403078][ T825] hid-generic 0000:0000:0000.0011: hidraw1: HID v0.00 Device [syz1] on syz0 [ 474.509962][T26611] lo speed is unknown, defaulting to 1000 [ 474.534574][ T60] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 474.694286][ T60] usb 10-1: device descriptor read/64, error -71 [ 474.944031][ T60] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 475.084084][ T60] usb 10-1: device descriptor read/64, error -71 [ 475.195956][ T60] usb usb10-port1: attempt power cycle [ 475.534070][ T60] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 475.554482][ T60] usb 10-1: device descriptor read/8, error -71 [ 475.794122][ T60] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 475.814654][ T60] usb 10-1: device descriptor read/8, error -71 [ 475.925676][T26716] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 475.928224][T26716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.931453][T26716] vhci_hcd vhci_hcd.0: Device attached [ 475.949803][ T60] usb usb10-port1: unable to enumerate USB device [ 475.986762][ T6006] lo speed is unknown, defaulting to 1000 [ 476.133085][T26725] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 476.135912][T26725] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 476.141118][T26725] vhci_hcd vhci_hcd.0: Device attached [ 476.184049][ T10] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 476.405553][ T29] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 476.721006][T26717] vhci_hcd: connection reset by peer [ 476.729704][ T59] vhci_hcd vhci_hcd.6: stop threads [ 476.735028][ T59] vhci_hcd vhci_hcd.6: release socket [ 476.737811][ T59] vhci_hcd vhci_hcd.6: disconnect device [ 476.804670][T26732] binder: BINDER_SET_CONTEXT_MGR already set [ 476.807444][T26732] binder: 26731:26732 ioctl 4018620d 800001c0 returned -16 [ 476.855491][T26732] tipc: Started in network mode [ 476.857772][T26732] tipc: Node identity , cluster identity 4711 [ 476.859750][T26732] tipc: Failed to obtain node identity [ 476.862053][T26732] tipc: Enabling of bearer rejected, failed to enable media [ 476.938840][T26726] vhci_hcd: connection reset by peer [ 476.944375][ T59] vhci_hcd vhci_hcd.7: stop threads [ 476.960543][ T59] vhci_hcd vhci_hcd.7: release socket [ 476.963760][ T59] vhci_hcd vhci_hcd.7: disconnect device [ 477.293161][T26739] program syz.6.4882 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.769218][T26773] binder: BINDER_SET_CONTEXT_MGR already set [ 477.771341][T26773] binder: 26772:26773 ioctl 4018620d 800001c0 returned -16 [ 477.783400][T26773] tipc: Started in network mode [ 477.786162][T26773] tipc: Node identity , cluster identity 4711 [ 477.788258][T26773] tipc: Failed to obtain node identity [ 477.790389][T26773] tipc: Enabling of bearer rejected, failed to enable media [ 478.007873][T26786] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 478.010255][T26786] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 478.014054][ T6006] usb 13-1: new high-speed USB device number 15 using dummy_hcd [ 478.018038][T26786] vhci_hcd vhci_hcd.0: Device attached [ 478.118753][T26792] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 478.121592][T26792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 478.125141][T26792] vhci_hcd vhci_hcd.0: Device attached [ 478.327068][T26788] vhci_hcd: connection closed [ 478.327669][ T59] vhci_hcd vhci_hcd.7: stop threads [ 478.332780][ T59] vhci_hcd vhci_hcd.7: release socket [ 478.342630][ T59] vhci_hcd vhci_hcd.7: disconnect device [ 478.353995][ T6006] usb 13-1: Using ep0 maxpacket: 8 [ 478.395543][T22693] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 478.563045][ T6006] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 478.567223][ T6006] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 478.571907][ T6006] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 478.576678][ T6006] usb 13-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 478.582782][ T6006] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 478.586601][ T6006] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.598650][ T6006] usbtmc 13-1:16.0: bulk endpoints not found [ 478.621358][T26799] binder: 26798:26799 ioctl c008551b 80000080 returned -22 [ 478.625943][T26799] binder_alloc: 26798: binder_alloc_buf, no vma [ 478.631193][T26793] vhci_hcd: connection reset by peer [ 478.637598][ T1232] vhci_hcd vhci_hcd.5: stop threads [ 478.639855][ T1232] vhci_hcd vhci_hcd.5: release socket [ 478.644251][ T1232] vhci_hcd vhci_hcd.5: disconnect device [ 478.651959][T26799] tipc: Started in network mode [ 478.654342][T26799] tipc: Node identity , cluster identity 4711 [ 478.656824][T26799] tipc: Failed to obtain node identity [ 478.660712][T26799] tipc: Enabling of bearer rejected, failed to enable media [ 479.525526][T26816] ptrace attach of ""[26822] was attempted by "/syz-executor exec"[26816] [ 480.877790][ T1018] usb 13-1: USB disconnect, device number 15 [ 480.909277][T26857] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 480.912197][T26857] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 480.916185][T26857] vhci_hcd vhci_hcd.0: Device attached [ 480.926519][T26857] smc: net device ip6_vti0 applied user defined pnetid SYZ1 [ 480.930383][T26857] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ1 [ 481.147666][T26885] tipc: Started in network mode [ 481.149668][T26885] tipc: Node identity , cluster identity 4711 [ 481.151892][T26885] tipc: Failed to obtain node identity [ 481.154196][T26885] tipc: Enabling of bearer rejected, failed to enable media [ 481.164271][T26881] vhci_hcd: connection closed [ 481.168457][ T59] vhci_hcd vhci_hcd.6: stop threads [ 481.177094][ T59] vhci_hcd vhci_hcd.6: release socket [ 481.178994][ T59] vhci_hcd vhci_hcd.6: disconnect device [ 481.325662][ T10] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 481.599200][ T29] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 482.909989][T26930] ptrace attach of ""[26933] was attempted by "/syz-executor exec"[26930] [ 482.949843][ T1018] usb usb50-port1: attempt power cycle [ 483.602680][ T1018] usb usb50-port1: unable to enumerate USB device [ 483.834262][T22693] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 484.063713][T26961] Cannot find del_set index 65533 as target [ 484.238983][T15558] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 484.253167][T15558] hid-generic 0000:0000:0000.0012: hidraw1: HID v0.00 Device [syz1] on syz0 [ 484.336007][T26956] macvlan0: entered promiscuous mode [ 484.352293][T26956] netlink: 'syz.6.4921': attribute type 1 has an invalid length. [ 484.355999][T26956] netlink: 'syz.6.4921': attribute type 2 has an invalid length. [ 484.481405][T26979] program syz.7.4924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.545160][T27007] syzkaller0: entered promiscuous mode [ 485.554166][T27007] syzkaller0: entered allmulticast mode [ 485.725666][T27016] macvlan0: entered promiscuous mode [ 485.731508][T27016] netlink: 'syz.5.4933': attribute type 1 has an invalid length. [ 485.736455][T27016] netlink: 'syz.5.4933': attribute type 2 has an invalid length. [ 485.755058][T27016] Cannot find add_set index 0 as target [ 485.891767][T27022] fuse: Unknown parameter 'group_id00000000000000000000' [ 486.471037][T27043] program syz.5.4942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 486.861567][T27050] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 486.864420][T27050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.868207][T27050] vhci_hcd vhci_hcd.0: Device attached [ 487.214108][ T825] usb 53-1: new low-speed USB device number 2 using vhci_hcd [ 487.524684][T27052] vhci_hcd: connection reset by peer [ 487.527105][ T1232] vhci_hcd vhci_hcd.8: stop threads [ 487.529331][ T1232] vhci_hcd vhci_hcd.8: release socket [ 487.531777][ T1232] vhci_hcd vhci_hcd.8: disconnect device [ 488.666913][T27084] program syz.7.4952 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.870295][T27089] syzkaller0: entered promiscuous mode [ 488.873118][T27089] syzkaller0: entered allmulticast mode [ 489.462701][T27099] binder: BINDER_SET_CONTEXT_MGR already set [ 489.467207][T27099] binder: 27098:27099 ioctl 4018620d 800001c0 returned -16 [ 489.473220][T27099] tipc: Started in network mode [ 489.475210][T27099] tipc: Node identity , cluster identity 4711 [ 489.477194][T27099] tipc: Failed to obtain node identity [ 489.478799][T27099] tipc: Enabling of bearer rejected, failed to enable media [ 490.143066][T27103] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 490.145903][T27103] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 490.165932][T27103] vhci_hcd vhci_hcd.0: Device attached [ 490.384041][ T6006] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 490.408635][T27107] lo speed is unknown, defaulting to 1000 [ 490.546439][ T6006] usb 12-1: no configurations [ 490.548470][ T6006] usb 12-1: can't read configurations, error -22 [ 490.694134][ T6006] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 490.868113][ T6006] usb 12-1: no configurations [ 490.870386][ T6006] usb 12-1: can't read configurations, error -22 [ 490.894294][ T6006] usb usb12-port1: attempt power cycle [ 490.895239][T27146] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4958'. [ 491.234230][ T6006] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 491.255427][ T6006] usb 12-1: no configurations [ 491.257730][ T6006] usb 12-1: can't read configurations, error -22 [ 491.385379][ T6006] usb 12-1: new high-speed USB device number 18 using dummy_hcd [ 491.415435][ T6006] usb 12-1: no configurations [ 491.417871][ T6006] usb 12-1: can't read configurations, error -22 [ 491.421424][ T6006] usb usb12-port1: unable to enumerate USB device [ 491.582302][T27156] syzkaller0: entered promiscuous mode [ 491.585345][T27156] syzkaller0: entered allmulticast mode [ 491.967241][T27171] program syz.6.4965 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.374017][ T825] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 492.900614][T27111] vhci_hcd: connection closed [ 492.905130][ T1141] vhci_hcd vhci_hcd.8: stop threads [ 492.910584][ T1141] vhci_hcd vhci_hcd.8: release socket [ 492.913070][ T1141] vhci_hcd vhci_hcd.8: disconnect device [ 493.031131][T27188] program syz.5.4969 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 493.170395][T27193] ubi: mtd0 is already attached to ubi31 [ 493.837670][T27210] macvlan0: entered promiscuous mode [ 493.843112][T27210] netlink: 'syz.8.4975': attribute type 1 has an invalid length. [ 493.854325][T27210] netlink: 'syz.8.4975': attribute type 2 has an invalid length. [ 493.860566][T27210] Cannot find del_set index 65533 as target [ 494.133307][T27223] program syz.8.4977 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.295226][T27230] program syz.5.4978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 495.015117][T22693] usb usb54-port1: attempt power cycle [ 495.585508][T22693] usb usb54-port1: unable to enumerate USB device [ 495.794478][T27258] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 495.797364][T27258] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 495.800884][T27258] vhci_hcd vhci_hcd.0: Device attached [ 496.054585][T22693] usb 47-1: new low-speed USB device number 3 using vhci_hcd [ 496.092734][ C1] Unknown status report in ack skb [ 496.597130][T27259] vhci_hcd: connection reset by peer [ 496.608393][T21328] vhci_hcd vhci_hcd.5: stop threads [ 496.610452][T21328] vhci_hcd vhci_hcd.5: release socket [ 496.612690][T21328] vhci_hcd vhci_hcd.5: disconnect device [ 497.539976][T27287] tipc: Started in network mode [ 497.541937][T27287] tipc: Node identity , cluster identity 4711 [ 497.544806][T27287] tipc: Failed to obtain node identity [ 497.547151][T27287] tipc: Enabling of bearer rejected, failed to enable media [ 497.984212][ T6006] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 498.141521][ C2] Unknown status report in ack skb [ 498.154023][ T6006] usb 12-1: Using ep0 maxpacket: 8 [ 498.161321][ T6006] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 498.166947][ T6006] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 498.171643][ T6006] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 498.177911][ T6006] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 498.182198][ T6006] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 498.188320][ T6006] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 498.192573][ T6006] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.201837][ T6006] usbtmc 12-1:16.0: probe with driver usbtmc failed with error -22 [ 498.537498][T27307] syzkaller0: entered promiscuous mode [ 498.539998][T27307] syzkaller0: entered allmulticast mode [ 498.790489][T27318] binder: 27317:27318 ioctl c008551b 80000080 returned -22 [ 498.803001][T27318] tipc: Started in network mode [ 498.805549][T27318] tipc: Node identity , cluster identity 4711 [ 498.808564][T27318] tipc: Failed to obtain node identity [ 498.811036][T27318] tipc: Enabling of bearer rejected, failed to enable media [ 500.320481][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 500.320495][ T40] audit: type=1326 audit(1767447828.013:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.330594][ T40] audit: type=1326 audit(1767447828.013:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.338325][ T40] audit: type=1326 audit(1767447828.013:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.345707][ T40] audit: type=1326 audit(1767447828.013:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.353506][ T40] audit: type=1326 audit(1767447828.013:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.360634][ T40] audit: type=1326 audit(1767447828.013:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.370627][ T40] audit: type=1326 audit(1767447828.013:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.380665][ T40] audit: type=1326 audit(1767447828.013:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.390777][ T40] audit: type=1326 audit(1767447828.013:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.400414][ T40] audit: type=1326 audit(1767447828.013:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27355 comm="syz.5.5018" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000 [ 500.556881][T27367] fuse: Bad value for 'fd' [ 500.733794][ T10] usb 12-1: USB disconnect, device number 19 [ 501.154754][T22693] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 501.375528][T27385] syzkaller0: entered promiscuous mode [ 501.377991][T27385] syzkaller0: entered allmulticast mode [ 502.124252][T18945] usb 13-1: new high-speed USB device number 16 using dummy_hcd [ 502.284202][T18945] usb 13-1: Using ep0 maxpacket: 8 [ 502.287822][T18945] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 502.291777][T18945] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 502.296133][T18945] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 502.300528][T18945] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 502.305030][T18945] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 502.311604][T18945] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 502.316422][T18945] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.323835][T18945] usbtmc 13-1:16.0: probe with driver usbtmc failed with error -22 [ 502.548235][ C1] Unknown status report in ack skb [ 502.616563][T27425] syzkaller0: entered promiscuous mode [ 502.618727][T27425] syzkaller0: entered allmulticast mode [ 502.879177][T27433] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 503.020835][T27445] ubi: mtd0 is already attached to ubi31 [ 503.198978][ C0] Unknown status report in ack skb [ 504.903289][T22693] usb 13-1: USB disconnect, device number 16 [ 505.597568][T27505] fuse: Bad value for 'fd' [ 505.901382][T27514] ubi: mtd0 is already attached to ubi31 [ 506.048280][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.050421][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.112153][T27523] tipc: Started in network mode [ 506.114256][T27523] tipc: Node identity , cluster identity 4711 [ 506.116648][T27523] tipc: Failed to obtain node identity [ 506.119033][T27523] tipc: Enabling of bearer rejected, failed to enable media [ 506.218238][ C1] Unknown status report in ack skb [ 506.385557][ C1] Unknown status report in ack skb [ 506.729417][T27542] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 506.731516][T27542] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 506.750356][T27542] vhci_hcd vhci_hcd.0: Device attached [ 506.984980][T15558] usb 53-1: new low-speed USB device number 3 using vhci_hcd [ 507.323164][T27544] vhci_hcd: connection reset by peer [ 507.332668][T11649] vhci_hcd vhci_hcd.8: stop threads [ 507.342833][T11649] vhci_hcd vhci_hcd.8: release socket [ 507.352398][T11649] vhci_hcd vhci_hcd.8: disconnect device [ 507.378770][T27551] program syz.7.5072 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 507.804740][ T29] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 507.984048][ T29] usb 11-1: Using ep0 maxpacket: 8 [ 508.005514][ T29] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 508.010649][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 508.026324][ T29] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.044118][ T29] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.049529][ T29] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.052893][ T29] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.136628][T27573] fuse: Bad value for 'fd' [ 508.296408][ T29] usb 11-1: usb_control_msg returned -32 [ 508.298318][ T29] usbtmc 11-1:16.0: can't read capabilities [ 508.356548][T27566] lo speed is unknown, defaulting to 1000 [ 508.530327][T27602] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5079'. [ 508.964889][T27615] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 508.967603][T27615] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 508.971777][T27615] vhci_hcd vhci_hcd.0: Device attached [ 509.188545][ C3] Unknown status report in ack skb [ 509.414330][T27616] vhci_hcd: connection closed [ 509.414735][ T1232] vhci_hcd vhci_hcd.8: stop threads [ 509.421739][ T1232] vhci_hcd vhci_hcd.8: release socket [ 509.424760][ T1232] vhci_hcd vhci_hcd.8: disconnect device [ 509.918208][ T5299] Bluetooth: hci4: link tx timeout [ 509.921469][ T5299] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 510.116600][T27625] lo speed is unknown, defaulting to 1000 [ 510.131858][T27638] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5085'. [ 510.420195][T27663] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 510.423050][T27663] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.429487][T27663] vhci_hcd vhci_hcd.0: Device attached [ 510.661224][T18945] usb 11-1: USB disconnect, device number 26 [ 510.694526][ T6006] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 510.798491][T27677] program syz.6.5090 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.064529][ C3] Unknown status report in ack skb [ 511.997485][ T5944] Bluetooth: hci4: command 0x0406 tx timeout [ 512.134042][T15558] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 512.457859][T27664] vhci_hcd: connection reset by peer [ 512.466029][ T1145] vhci_hcd vhci_hcd.5: stop threads [ 512.467800][ T1145] vhci_hcd vhci_hcd.5: release socket [ 512.471740][ T1145] vhci_hcd vhci_hcd.5: disconnect device [ 512.664567][T27719] binder: 27718:27719 ioctl c008551b 80000080 returned -22 [ 512.667749][T27719] binder: BINDER_SET_CONTEXT_MGR already set [ 512.668568][ C2] Unknown status report in ack skb [ 512.669664][T27719] binder: 27718:27719 ioctl 4018620d 800001c0 returned -16 [ 512.678709][T27719] tipc: Started in network mode [ 512.680605][T27719] tipc: Node identity , cluster identity 4711 [ 512.682759][T27719] tipc: Failed to obtain node identity [ 512.684764][T27719] tipc: Enabling of bearer rejected, failed to enable media [ 512.746592][T27726] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5103'. [ 512.758188][T27728] program syz.7.5104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.776016][ C2] Unknown status report in ack skb [ 513.447977][T22833] usb usb54-port1: attempt power cycle [ 513.558819][T27739] syzkaller0: entered promiscuous mode [ 513.560874][T27739] syzkaller0: entered allmulticast mode [ 513.708226][T27749] program syz.6.5108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 513.929451][T27754] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5107'. [ 514.835499][T22833] usb usb54-port1: unable to enumerate USB device [ 515.156773][T27767] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5112'. [ 515.605746][ C3] Unknown status report in ack skb [ 515.805481][ T6006] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 515.808562][T27780] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.5118'. [ 516.189782][T27786] lo speed is unknown, defaulting to 1000 [ 516.622413][T27819] syzkaller0: entered promiscuous mode [ 516.626655][T27819] syzkaller0: entered allmulticast mode [ 517.039225][T27840] program syz.8.5128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.068162][T27842] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.5129'. [ 517.843118][T27853] tipc: Started in network mode [ 517.845513][T27853] tipc: Node identity , cluster identity 4711 [ 517.848348][T27853] tipc: Failed to obtain node identity [ 517.850937][T27853] tipc: Enabling of bearer rejected, failed to enable media [ 518.088924][T27875] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 518.315396][T27857] lo speed is unknown, defaulting to 1000 [ 518.555572][ T40] kauditd_printk_skb: 100 callbacks suppressed [ 518.555591][ T40] audit: type=1326 audit(1767447846.253:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.573148][ T40] audit: type=1326 audit(1767447846.253:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.582669][ T40] audit: type=1326 audit(1767447846.253:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.610048][ T40] audit: type=1326 audit(1767447846.303:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.619419][ T40] audit: type=1326 audit(1767447846.303:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.628983][ T40] audit: type=1326 audit(1767447846.303:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=93 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.678631][T27867] lo speed is unknown, defaulting to 1000 [ 518.694046][ T40] audit: type=1326 audit(1767447846.303:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.702564][ T40] audit: type=1326 audit(1767447846.303:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.705293][T27923] tipc: Started in network mode [ 518.712899][ T40] audit: type=1326 audit(1767447846.303:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.725360][ T40] audit: type=1326 audit(1767447846.303:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27911 comm="syz.8.5141" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 518.733684][T27923] tipc: Node identity , cluster identity 4711 [ 518.736526][T27923] tipc: Failed to obtain node identity [ 518.738417][T27923] tipc: Enabling of bearer rejected, failed to enable media [ 518.960597][T27953] fuse: Bad value for 'fd' [ 519.123044][T27960] fuse: Unknown parameter 'use00000000000000000000' [ 519.592084][T27975] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5153'. [ 520.679178][T27999] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 520.682617][T27999] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.685750][T27999] vhci_hcd vhci_hcd.0: Device attached [ 520.833523][T28008] tipc: Started in network mode [ 520.836333][T28008] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 520.839415][T28008] tipc: Enabled bearer , priority 0 [ 520.936258][T28013] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5169'. [ 520.944085][ T6006] usb 53-1: new low-speed USB device number 4 using vhci_hcd [ 521.278379][T28022] ptrace attach of ""[28024] was attempted by "/syz-executor exec"[28022] [ 521.355762][T28027] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 521.358278][T28027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.361954][T28027] vhci_hcd vhci_hcd.0: Device attached [ 521.439464][T28000] vhci_hcd: connection reset by peer [ 521.444906][T21328] vhci_hcd vhci_hcd.8: stop threads [ 521.447350][T21328] vhci_hcd vhci_hcd.8: release socket [ 521.454944][T21328] vhci_hcd vhci_hcd.8: disconnect device [ 521.614031][T22734] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 521.845352][ T825] tipc: Node number set to 11578026 [ 522.316076][T28042] tipc: Started in network mode [ 522.318196][T28042] tipc: Node identity , cluster identity 4711 [ 522.320858][T28042] tipc: Failed to obtain node identity [ 522.323400][T28042] tipc: Enabling of bearer rejected, failed to enable media [ 522.480339][T28028] vhci_hcd: connection reset by peer [ 522.483695][ T4869] vhci_hcd vhci_hcd.5: stop threads [ 522.492870][ T4869] vhci_hcd vhci_hcd.5: release socket [ 522.495759][ T4869] vhci_hcd vhci_hcd.5: disconnect device [ 523.017630][T28060] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 523.020292][T28060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 523.036814][T28060] vhci_hcd vhci_hcd.0: Device attached [ 523.284340][ T825] usb 51-1: new low-speed USB device number 3 using vhci_hcd [ 523.884109][T28061] vhci_hcd: connection reset by peer [ 523.887015][ T1180] vhci_hcd vhci_hcd.7: stop threads [ 523.893509][ T1180] vhci_hcd vhci_hcd.7: release socket [ 523.902329][ T1180] vhci_hcd vhci_hcd.7: disconnect device [ 524.233860][T28082] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 524.236642][T28082] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 524.264565][T28082] vhci_hcd vhci_hcd.0: Device attached [ 524.429962][ C2] Unknown status report in ack skb [ 524.543977][T28093] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 524.598802][T28098] tipc: Started in network mode [ 524.600622][T28098] tipc: Node identity , cluster identity 4711 [ 524.602826][T28098] tipc: Failed to obtain node identity [ 524.605268][T28098] tipc: Enabling of bearer rejected, failed to enable media [ 524.691922][T28102] tipc: Started in network mode [ 524.693736][T28102] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 524.696837][T28102] tipc: Enabled bearer , priority 0 [ 524.715842][T28083] vhci_hcd: connection closed [ 524.724204][ T4930] vhci_hcd vhci_hcd.5: stop threads [ 524.727959][ T4930] vhci_hcd vhci_hcd.5: release socket [ 524.734092][ T4930] vhci_hcd vhci_hcd.5: disconnect device [ 525.158066][T28119] binder: BINDER_SET_CONTEXT_MGR already set [ 525.162902][T28119] binder: 28118:28119 ioctl 4018620d 800001c0 returned -16 [ 525.171906][T28119] tipc: Started in network mode [ 525.173684][T28119] tipc: Node identity , cluster identity 4711 [ 525.177370][T28119] tipc: Failed to obtain node identity [ 525.179233][T28119] tipc: Enabling of bearer rejected, failed to enable media [ 525.226184][T28109] lo speed is unknown, defaulting to 1000 [ 525.324119][T22693] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 525.475966][T22693] usb 12-1: config 0 has no interfaces? [ 525.481096][T22693] usb 12-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 525.487470][T22693] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.490894][T22693] usb 12-1: Product: syz [ 525.492748][T22693] usb 12-1: Manufacturer: syz [ 525.495620][T22693] usb 12-1: SerialNumber: syz [ 525.500838][T22693] usb 12-1: config 0 descriptor?? [ 525.749737][T22728] usb 12-1: USB disconnect, device number 20 [ 525.814093][T22693] tipc: Node number set to 11578026 [ 526.044485][ T6006] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 526.100489][T28172] fuse: Unknown parameter 'user_i00000000000000000000' [ 526.427976][T28184] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 526.723801][T28198] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 526.726611][T28198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.732479][T28198] vhci_hcd vhci_hcd.0: Device attached [ 527.024186][T22734] usb 47-1: device descriptor read/64, error -110 [ 527.274179][T22734] usb 47-1: new low-speed USB device number 6 using vhci_hcd [ 527.546234][T28199] vhci_hcd: connection reset by peer [ 527.551062][ T1180] vhci_hcd vhci_hcd.5: stop threads [ 527.557018][ T1180] vhci_hcd vhci_hcd.5: release socket [ 527.562047][ T1180] vhci_hcd vhci_hcd.5: disconnect device [ 527.754037][ T6006] usb 13-1: new high-speed USB device number 17 using dummy_hcd [ 527.984514][ T6006] usb 13-1: config 0 has no interfaces? [ 528.028456][ T6006] usb 13-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 528.033284][ T6006] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.049516][ T6006] usb 13-1: Product: syz [ 528.051123][ T6006] usb 13-1: Manufacturer: syz [ 528.052737][ T6006] usb 13-1: SerialNumber: syz [ 528.071083][ T6006] usb 13-1: config 0 descriptor?? [ 528.077633][T28209] lo speed is unknown, defaulting to 1000 [ 528.242812][T28247] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 528.264002][T28252] fuse: Unknown parameter 'user_i00000000000000000000' [ 528.288176][T22693] usb 13-1: USB disconnect, device number 17 [ 528.444259][ T825] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 528.537207][T28277] program syz.7.5233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 528.632382][T28286] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 529.508376][T28312] syzkaller0: entered promiscuous mode [ 529.510286][T28312] syzkaller0: entered allmulticast mode [ 529.748379][T28329] tipc: Started in network mode [ 529.750020][T28329] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 529.752435][T28329] tipc: Enabled bearer , priority 0 [ 529.909942][T28336] netlink: 'syz.8.5252': attribute type 1 has an invalid length. [ 529.932782][T28336] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5252'. [ 529.937830][T28336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.042643][T28375] syzkaller0: entered promiscuous mode [ 530.047606][T28375] syzkaller0: entered allmulticast mode [ 530.716754][T28391] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 530.874033][ T1333] tipc: Node number set to 11578026 [ 530.981875][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 530.981893][ T40] audit: type=1326 audit(1767447858.673:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.044238][ T40] audit: type=1326 audit(1767447858.673:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.051711][ T40] audit: type=1326 audit(1767447858.673:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.058707][ T40] audit: type=1326 audit(1767447858.673:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.066191][ T40] audit: type=1326 audit(1767447858.673:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.074270][ T40] audit: type=1326 audit(1767447858.673:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.080954][ T40] audit: type=1326 audit(1767447858.673:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.089588][ T40] audit: type=1326 audit(1767447858.673:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.097374][ T40] audit: type=1326 audit(1767447858.673:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.106333][ T40] audit: type=1326 audit(1767447858.673:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28395 comm="syz.6.5259" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11579 code=0x7ffc0000 [ 531.362723][T28419] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 531.551769][T28429] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5268'. [ 531.769110][T28414] lo speed is unknown, defaulting to 1000 [ 532.252994][T28458] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 532.256113][T28458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.260132][T28458] vhci_hcd vhci_hcd.0: Device attached [ 532.437757][T22734] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 532.533991][ T9] usb 53-1: new low-speed USB device number 5 using vhci_hcd [ 533.022150][T28459] vhci_hcd: connection reset by peer [ 533.025194][ T1141] vhci_hcd vhci_hcd.8: stop threads [ 533.027663][ T1141] vhci_hcd vhci_hcd.8: release socket [ 533.029703][ T1141] vhci_hcd vhci_hcd.8: disconnect device [ 533.508071][T28476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5278'. [ 533.629370][T28477] ptrace attach of ""[28482] was attempted by "/syz-executor exec"[28477] [ 533.682035][T28483] tipc: Enabled bearer , priority 0 [ 534.020873][T28485] lo speed is unknown, defaulting to 1000 [ 534.098929][ T1018] usb usb48-port1: attempt power cycle [ 534.263357][T28520] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 534.695737][ T1018] usb usb48-port1: unable to enumerate USB device [ 534.841752][T28547] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5286'. [ 536.456599][T28570] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 536.617294][T28582] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 536.620263][T28582] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 536.625171][T28582] vhci_hcd vhci_hcd.0: Device attached [ 537.170405][T28583] vhci_hcd: connection closed [ 537.170928][ T1145] vhci_hcd vhci_hcd.8: stop threads [ 537.174874][ T1145] vhci_hcd vhci_hcd.8: release socket [ 537.176834][ T1145] vhci_hcd vhci_hcd.8: disconnect device [ 537.654069][ T9] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 537.720202][T28598] lo speed is unknown, defaulting to 1000 [ 537.919275][T28647] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5303'. [ 538.861049][T28657] binder: 28656:28657 ioctl c008551b 80000080 returned -22 [ 539.026148][T28657] tipc: Enabled bearer , priority 0 [ 539.075770][ C2] Unknown status report in ack skb [ 539.817326][T22833] usb usb54-port1: attempt power cycle [ 539.911684][T28677] ptrace attach of ""[28680] was attempted by "/syz-executor exec"[28677] [ 540.026460][T28684] binder: 28683:28684 ioctl c008551b 0 returned -22 [ 540.035589][T28684] tipc: Enabling of bearer rejected, already enabled [ 540.384512][T22833] usb usb54-port1: unable to enumerate USB device [ 540.855203][T28696] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5319'. [ 543.063068][T28730] ptrace attach of ""[28733] was attempted by "/syz-executor exec"[28730] [ 544.466893][T28743] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5334'. [ 544.754451][T28754] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5335'. [ 544.970830][T28747] lo speed is unknown, defaulting to 1000 [ 547.517090][T28818] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5343'. [ 547.735274][T28827] binder: 28826:28827 ioctl c008551b 80000080 returned -22 [ 547.744367][T28827] tipc: Enabled bearer , priority 0 [ 548.790016][T28846] lo speed is unknown, defaulting to 1000 [ 549.325335][ T40] kauditd_printk_skb: 96 callbacks suppressed [ 549.325353][ T40] audit: type=1326 audit(1767447877.023:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.364080][ T40] audit: type=1326 audit(1767447877.023:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.374246][ T40] audit: type=1326 audit(1767447877.023:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.382559][ T40] audit: type=1326 audit(1767447877.043:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.390311][ T40] audit: type=1326 audit(1767447877.043:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.397340][ T40] audit: type=1326 audit(1767447877.043:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.404613][T28856] lo speed is unknown, defaulting to 1000 [ 549.405307][ T40] audit: type=1326 audit(1767447877.043:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.417173][ T40] audit: type=1326 audit(1767447877.043:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.433709][ T40] audit: type=1326 audit(1767447877.043:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.444636][ T40] audit: type=1326 audit(1767447877.043:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28900 comm="syz.8.5358" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d579 code=0x7ffc0000 [ 549.596340][T28950] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.5360'. [ 549.675401][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5362'. [ 549.726642][ C1] Unknown status report in ack skb [ 550.150044][T28966] lo speed is unknown, defaulting to 1000 [ 550.178131][T28981] tipc: Enabling of bearer rejected, already enabled [ 550.254087][T15558] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 550.387187][ C2] Unknown status report in ack skb [ 550.425573][T15558] usb 12-1: config 0 has no interfaces? [ 550.429545][T15558] usb 12-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 550.432569][T15558] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.436164][T15558] usb 12-1: Product: syz [ 550.437578][T15558] usb 12-1: Manufacturer: syz [ 550.439293][T15558] usb 12-1: SerialNumber: syz [ 550.442581][T15558] usb 12-1: config 0 descriptor?? [ 550.728789][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 550.733184][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 550.738579][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 550.741264][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 550.744058][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 550.746816][ T9] usb 12-1: USB disconnect, device number 21 [ 550.761423][T29045] program syz.8.5377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.952207][T29023] lo speed is unknown, defaulting to 1000 [ 551.179247][T11649] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.198337][T29027] lo speed is unknown, defaulting to 1000 [ 551.261765][T29105] program syz.5.5378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 551.320307][T11649] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.352869][T29027] chnl_net:caif_netlink_parms(): no params data found [ 551.365138][T29133] binder: 29131:29133 ioctl c008551b 80000080 returned -22 [ 551.379724][T29133] tipc: Enabling of bearer rejected, already enabled [ 551.437998][T11649] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.471066][T29166] fuse: Unknown parameter '0x0000000000000003' [ 551.495405][T29027] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.498552][T29027] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.501592][T29027] bridge_slave_0: entered allmulticast mode [ 551.505308][T29027] bridge_slave_0: entered promiscuous mode [ 551.521767][T11649] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.535243][T29027] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.539038][T29027] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.542110][T29027] bridge_slave_1: entered allmulticast mode [ 551.548223][T29027] bridge_slave_1: entered promiscuous mode [ 551.579520][T29027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.588666][T29027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.641312][T29027] team0: Port device team_slave_0 added [ 551.657418][T29027] team0: Port device team_slave_1 added [ 551.713578][T29027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.717375][T29027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.727734][T29027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.732305][T29228] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 551.748413][T29027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.751445][T29027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 551.762907][T29027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.831742][T29027] hsr_slave_0: entered promiscuous mode [ 551.836471][T29027] hsr_slave_1: entered promiscuous mode [ 551.839498][T29027] debugfs: 'hsr0' already exists in 'hsr' [ 551.841861][T29027] Cannot create hsr debugfs directory [ 551.845283][T11649] bridge_slave_1: left allmulticast mode [ 551.847970][T11649] bridge_slave_1: left promiscuous mode [ 551.849918][T11649] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.856678][T11649] bridge_slave_0: left allmulticast mode [ 551.858594][T11649] bridge_slave_0: left promiscuous mode [ 551.860539][T11649] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.132744][T11649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.138279][T11649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.142679][T11649] bond0 (unregistering): Released all slaves [ 552.233735][T11649] tipc: Disabling bearer [ 552.243795][T11649] tipc: Disabling bearer [ 552.253109][T11649] tipc: Left network mode [ 552.275736][T11649] IPVS: stopping backup sync thread 24752 ... [ 552.854056][ T5944] Bluetooth: hci2: command tx timeout [ 554.147287][T29027] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 554.164632][T29027] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 554.235094][T29027] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 554.250434][T29027] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 554.274604][T29424] program syz.5.5389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 554.392203][T11649] hsr_slave_0: left promiscuous mode [ 554.396966][T11649] hsr_slave_1: left promiscuous mode [ 554.400481][T11649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 554.410160][T11649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.416584][T11649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 554.419196][T11649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.456007][T11649] veth1_macvtap: left promiscuous mode [ 554.458489][T11649] veth0_macvtap: left promiscuous mode [ 554.461021][T11649] veth1_vlan: left promiscuous mode [ 554.474428][T11649] veth0_vlan: left promiscuous mode [ 554.924043][ T5944] Bluetooth: hci2: command tx timeout [ 555.085973][T11649] team0 (unregistering): Port device team_slave_1 removed [ 555.134332][T11649] team0 (unregistering): Port device team_slave_0 removed [ 555.520557][T15558] lo speed is unknown, defaulting to 1000 [ 555.524141][ T6026] syz2: Port: 1 Link DOWN [ 555.534026][T15558] syz0: Port: 1 Link DOWN [ 555.535578][T29439] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 555.586048][T29027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 555.606739][T29027] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.612830][T25754] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.616315][T25754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.660325][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.663146][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.715237][T29392] lo speed is unknown, defaulting to 1000 [ 555.733159][ T12] smc: removing ib device syz2 [ 555.882301][T29027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 556.285761][T29027] veth0_vlan: entered promiscuous mode [ 556.308276][T29027] veth1_vlan: entered promiscuous mode [ 556.428201][T29027] veth0_macvtap: entered promiscuous mode [ 556.446546][T29027] veth1_macvtap: entered promiscuous mode [ 556.514941][T29027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.528555][T29027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.540991][T29108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.549703][T29108] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.560070][T29108] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.563829][T29108] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.965253][ T4930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.967898][ T4930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.005788][ T5944] Bluetooth: hci2: command tx timeout [ 557.006194][T25754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.010843][T25754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.278969][T29512] ptrace attach of ""[29517] was attempted by "/syz-executor exec"[29512] [ 558.216213][T29528] binder: 29527:29528 ioctl c008551b 80000080 returned -22 [ 558.223432][T29528] binder: BINDER_SET_CONTEXT_MGR already set [ 558.228704][T29528] binder: 29527:29528 ioctl 4018620d 800001c0 returned -16 [ 558.355092][T29528] tipc: Started in network mode [ 558.442255][T29528] tipc: Node identity , cluster identity 4711 [ 558.451508][T29528] tipc: Failed to obtain node identity [ 558.457572][T29528] tipc: Enabling of bearer rejected, failed to enable media [ 559.124422][ T5944] Bluetooth: hci2: command tx timeout [ 559.367126][T29540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5401'. [ 559.914048][T29554] 9p: Bad value for 'source' [ 559.979381][T29556] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input59 [ 560.421134][T29570] fuse: Unknown parameter 'fd0x0000000000000003' [ 560.913177][T29587] binder: 29586:29587 ioctl c008551b 80000080 returned -22 [ 560.938728][T29587] tipc: Enabling of bearer rejected, already enabled [ 561.087456][T29591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5409'. [ 561.207215][ C1] Unknown status report in ack skb [ 561.229199][ C0] Unknown status report in ack skb [ 561.277564][T29605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5415'. [ 561.300067][T29607] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input60 [ 561.345114][T29621] binder: 29617:29621 ioctl c008551b 80000080 returned -22 [ 561.351391][T29621] tipc: Enabling of bearer rejected, already enabled [ 561.413509][T29638] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5420'. [ 562.208792][T29664] binder: 29663:29664 ioctl c008551b 80000080 returned -22 [ 562.218898][T29664] tipc: Enabling of bearer rejected, already enabled [ 562.321684][T29667] 9p: Bad value for 'source' [ 562.560857][T29691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5430'. [ 562.627718][T29711] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5431'. [ 562.941515][T29717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5432'. [ 562.982711][ C3] Unknown status report in ack skb [ 563.366796][T29732] 9p: Bad value for 'source' [ 564.423534][T29743] bond2: entered promiscuous mode [ 565.502714][ C2] Unknown status report in ack skb [ 565.723464][T29798] program syz.8.5450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.749482][T29815] 9p: Bad value for 'source' [ 566.815563][T29822] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input61 [ 567.258845][T29884] 9p: Bad value for 'source' [ 567.260001][T29856] bond3: entered promiscuous mode [ 567.501476][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.503759][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.196406][T29898] 9p: Bad value for 'source' [ 568.204815][T29898] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input62 [ 568.914195][ T1018] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 569.097548][ T1018] usb 11-1: config 0 has no interfaces? [ 569.103156][ T1018] usb 11-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 569.106430][T29958] binder: 29957:29958 ioctl c008551b 80000080 returned -22 [ 569.106621][ T1018] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.109664][T29958] binder: 29957:29958 ioctl 4018620d 0 returned -22 [ 569.111744][ T1018] usb 11-1: Product: syz [ 569.117570][ T1018] usb 11-1: Manufacturer: syz [ 569.119814][ T1018] usb 11-1: SerialNumber: syz [ 569.127175][ T1018] usb 11-1: config 0 descriptor?? [ 569.141160][T29958] tipc: Enabling of bearer rejected, already enabled [ 569.248542][T29962] sch_tbf: burst 22 is lower than device lo mtu (82) ! [ 569.357641][T29911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5461'. [ 569.362892][ T1018] usb 11-1: USB disconnect, device number 27 [ 569.524969][T29982] 9p: Bad value for 'source' [ 569.892930][T29982] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input63 [ 570.545115][T30009] 9p: Bad value for 'source' [ 570.571012][T30009] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input64 [ 570.617450][T30025] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5475'. [ 571.256253][T30071] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input65 [ 571.766149][ T1232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.768753][ T1232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.874108][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.878768][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.986732][ T59] ------------[ cut here ]------------ [ 571.988593][ T59] WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x4d5/0x580, CPU#2: kworker/u32:3/59 [ 571.991759][ T59] Modules linked in: [ 571.994094][ T59] CPU: 2 UID: 0 PID: 59 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.997445][ T59] Tainted: [L]=SOFTLOCKUP [ 571.998751][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.001735][ T59] Workqueue: cfg80211 cfg80211_event_work [ 572.003509][ T59] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 572.005451][ T59] Code: ff ff e8 0e 9c ec f6 90 0f 0b 90 e9 58 fe ff ff e8 a0 79 55 f7 e9 22 fc ff ff e8 36 79 55 f7 e9 66 fc ff ff e8 ec 9b ec f6 90 <0f> 0b 90 e9 6f fc ff ff e8 de 9b ec f6 90 0f 0b e8 a6 79 55 f7 e9 [ 572.010887][ T59] RSP: 0018:ffffc900007afa60 EFLAGS: 00010293 [ 572.012730][ T59] RAX: 0000000000000000 RBX: ffff888056c4cd90 RCX: 0000000000000006 [ 572.015493][ T59] RDX: ffff888020f7a4c0 RSI: ffffffff8ad1cef4 RDI: ffffffff8bf2b600 [ 572.018165][ T59] RBP: ffffc900007afb10 R08: 0000000000000001 R09: 0000000000000001 [ 572.020513][ T59] R10: ffffffff9088edd7 R11: ffff888020f7aff0 R12: ffff888056c4c000 [ 572.022955][ T59] R13: 1ffff920000f5f50 R14: 0000000000000000 R15: ffffc900007afaa0 [ 572.025358][ T59] FS: 0000000000000000(0000) GS:ffff8880978fc000(0000) knlGS:0000000000000000 [ 572.027969][ T59] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 572.029921][ T59] CR2: 0000000032df8ffc CR3: 0000000052c06000 CR4: 0000000000352ef0 [ 572.032162][ T59] Call Trace: [ 572.033167][ T59] [ 572.034380][ T59] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 572.036367][ T59] ? mark_held_locks+0x49/0x80 [ 572.037855][ T59] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 572.039651][ T59] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 572.041362][ T59] cfg80211_process_rdev_events+0x9f/0x130 [ 572.043414][ T59] cfg80211_event_work+0x37/0x70 [ 572.045647][ T59] process_one_work+0x9ba/0x1b20 [ 572.047455][ T59] ? __pfx_process_one_work+0x10/0x10 [ 572.049068][ T59] ? assign_work+0x1a0/0x250 [ 572.050447][ T59] worker_thread+0x6c8/0xf10 [ 572.051882][ T59] ? __pfx_worker_thread+0x10/0x10 [ 572.053511][ T59] kthread+0x3c5/0x780 [ 572.055099][ T59] ? __pfx_kthread+0x10/0x10 [ 572.056765][ T59] ? rcu_is_watching+0x12/0xc0 [ 572.058270][ T59] ? __pfx_kthread+0x10/0x10 [ 572.059652][ T59] ret_from_fork+0x983/0xb10 [ 572.061112][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 572.062696][ T59] ? __switch_to+0x7af/0x10d0 [ 572.064225][ T59] ? __pfx_kthread+0x10/0x10 [ 572.065854][ T59] ret_from_fork_asm+0x1a/0x30 [ 572.067376][ T59] [ 572.068650][ T59] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 572.071132][ T59] CPU: 2 UID: 0 PID: 59 Comm: kworker/u32:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.074524][ T59] Tainted: [L]=SOFTLOCKUP [ 572.075877][ T59] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 572.079312][ T59] Workqueue: cfg80211 cfg80211_event_work [ 572.081198][ T59] Call Trace: [ 572.082705][ T59] [ 572.083800][ T59] dump_stack_lvl+0x3d/0x1f0 [ 572.085412][ T59] vpanic+0x640/0x6f0 [ 572.087004][ T59] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 572.088939][ T59] panic+0xca/0xd0 [ 572.090221][ T59] ? __pfx_panic+0x10/0x10 [ 572.091779][ T59] ? check_panic_on_warn+0x1f/0xb0 [ 572.093889][ T59] check_panic_on_warn+0xab/0xb0 [ 572.096249][ T59] __warn+0x108/0x3c0 [ 572.097965][ T59] __report_bug+0x2a0/0x520 [ 572.099896][ T59] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 572.102456][ T59] ? __pfx___report_bug+0x10/0x10 [ 572.104885][ T59] ? __lock_acquire+0x436/0x2890 [ 572.107285][ T59] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 572.109708][ T59] report_bug+0xb2/0x220 [ 572.111715][ T59] ? __cfg80211_ibss_joined+0x4d5/0x580 [ 572.114243][ T59] handle_bug+0x127/0x260 [ 572.116070][ T59] exc_invalid_op+0x17/0x50 [ 572.117930][ T59] asm_exc_invalid_op+0x1a/0x20 [ 572.120123][ T59] RIP: 0010:__cfg80211_ibss_joined+0x4d5/0x580 [ 572.123143][ T59] Code: ff ff e8 0e 9c ec f6 90 0f 0b 90 e9 58 fe ff ff e8 a0 79 55 f7 e9 22 fc ff ff e8 36 79 55 f7 e9 66 fc ff ff e8 ec 9b ec f6 90 <0f> 0b 90 e9 6f fc ff ff e8 de 9b ec f6 90 0f 0b e8 a6 79 55 f7 e9 [ 572.131239][ T59] RSP: 0018:ffffc900007afa60 EFLAGS: 00010293 [ 572.133847][ T59] RAX: 0000000000000000 RBX: ffff888056c4cd90 RCX: 0000000000000006 [ 572.137239][ T59] RDX: ffff888020f7a4c0 RSI: ffffffff8ad1cef4 RDI: ffffffff8bf2b600 [ 572.140626][ T59] RBP: ffffc900007afb10 R08: 0000000000000001 R09: 0000000000000001 [ 572.144620][ T59] R10: ffffffff9088edd7 R11: ffff888020f7aff0 R12: ffff888056c4c000 [ 572.148410][ T59] R13: 1ffff920000f5f50 R14: 0000000000000000 R15: ffffc900007afaa0 [ 572.152012][ T59] ? __cfg80211_ibss_joined+0x4d4/0x580 [ 572.154567][ T59] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 572.157117][ T59] ? mark_held_locks+0x49/0x80 [ 572.159168][ T59] ? cfg80211_process_wdev_events+0x3dd/0x5c0 [ 572.161776][ T59] cfg80211_process_wdev_events+0x3dd/0x5c0 [ 572.164613][ T59] cfg80211_process_rdev_events+0x9f/0x130 [ 572.167571][ T59] cfg80211_event_work+0x37/0x70 [ 572.169686][ T59] process_one_work+0x9ba/0x1b20 [ 572.171811][ T59] ? __pfx_process_one_work+0x10/0x10 [ 572.174118][ T59] ? assign_work+0x1a0/0x250 [ 572.176165][ T59] worker_thread+0x6c8/0xf10 [ 572.178161][ T59] ? __pfx_worker_thread+0x10/0x10 [ 572.180520][ T59] kthread+0x3c5/0x780 [ 572.182494][ T59] ? __pfx_kthread+0x10/0x10 [ 572.184397][ T59] ? rcu_is_watching+0x12/0xc0 [ 572.186320][ T59] ? __pfx_kthread+0x10/0x10 [ 572.188422][ T59] ret_from_fork+0x983/0xb10 [ 572.190530][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 572.192795][ T59] ? __switch_to+0x7af/0x10d0 [ 572.195021][ T59] ? __pfx_kthread+0x10/0x10 [ 572.197187][ T59] ret_from_fork_asm+0x1a/0x30 [ 572.199684][ T59] [ 572.201851][ T59] Kernel Offset: disabled [ 572.203823][ T59] Rebooting in 86400 seconds..