last executing test programs: 1m38.644998065s ago: executing program 3 (id=860): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0xc004) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010025bd7000ffdbdf250900020073797a32000000000800410072786500140033006272696467655f736c6176655f3100003d3ae301ded111acc548f4f2eef51f1948c7db282976cc1b41f38aee2ec49dbdca9bc38b998b25508320d44d3a09d12eba31b3de"], 0x38}}, 0x4000) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)={0x114, 0x14, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0x103, 0x4e, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x2001, 0x0, 0x0, @ipv6=@mcast1}, @generic="2a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023ab86a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef00ead1ebbe1b58e5b323435a913a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad", @typed={0x8, 0x11a, 0x0, 0x0, @uid=0xee00}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m37.24476507s ago: executing program 3 (id=863): unshare(0x2a020480) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) syz_io_uring_setup(0x54a9, &(0x7f0000000380)={0x0, 0xb002, 0x10100, 0x3, 0x2c, 0x0, r0}, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}, 0x1, 0x0, 0x0, 0x40009}, 0x40800) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0xf) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900010000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m34.902795766s ago: executing program 3 (id=868): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314230c2abd7000fbdbdf250900020073797a32000000000800410072786500140033007678636d6e31040000000000000000000262fbcd48f260f750874590f612effadd0691d8a25934f84d61ebd9c1d2c01c5c1b3b0522a4d6a7977391608950b8952775e22a270c5bcddee45eeff4c7addfeb96a7834f0346ce1ae0d3c26b72806fcb0622b1bea8d47d17c7c1f57dc318c68dcb4415c1eb5581615900676a11dc9dc337768907651582fde9838f53830aeb4407f9d9d43f648f45bce41aeddb8b43e8d08d5fdc0c"], 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)=0x8) read$dsp(0xffffffffffffffff, &(0x7f0000000280)=""/85, 0x55) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000080)=[0xd10d, 0x400b, 0x800, 0x5, 0x3, 0xffffdffb, 0x47, 0x9, 0xfffffe01, 0x6, 0xfffffff8, 0x3, 0x6, 0x880e, 0x0], 0x0, 0x4000007}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40895}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44040804}, 0x841) 1m34.33610427s ago: executing program 3 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) openat(r0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 1m31.07075147s ago: executing program 3 (id=875): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80", 0x63}], 0x3}], 0x1, 0x20040885) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b80)=""/80, 0x50}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f00000006c0)=""/123, 0x7b}], 0x3}, 0x0) 1m26.303471568s ago: executing program 3 (id=883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e28, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0xfffffffffffffffc, 0x100000000000f42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@loopback, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1m24.847599172s ago: executing program 32 (id=883): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e28, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0xfffffffffffffffc, 0x100000000000f42, 0x5}, {0x0, 0x0, 0x0, 0x8}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in6=@loopback, 0x3507, 0x0, 0x2, 0x4, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 1m11.591862436s ago: executing program 1 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 1m8.199226759s ago: executing program 1 (id=916): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) 1m6.79389881s ago: executing program 1 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x4040080) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0xc9, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001380)={0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 1m6.11331717s ago: executing program 1 (id=922): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 1m5.820997999s ago: executing program 1 (id=925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) 1m5.279965953s ago: executing program 1 (id=926): sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='R', 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe80900", 0x40}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.772750683s ago: executing program 33 (id=926): sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='R', 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe80900", 0x40}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 52.740755034s ago: executing program 4 (id=950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x29) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(r0, 0x4, &(0x7f00000000c0)={0x886, 0xb8f}, &(0x7f0000000180)) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r6, r7, 0x6d, 0x2001, 0x2, 0x200, {0x80000000, 0x5, 0x6, 0xe, 0x8000, 0x0, 0x3, 0x22, 0x9, 0x800, 0x7, 0x60b, 0x72, 0x9, "6f4f1b7a30d057b30bd15586b7445443c515947436419c2cd5ae7297dceeaabe"}}) 51.060076777s ago: executing program 4 (id=952): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 50.06306492s ago: executing program 2 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000945f64009400050028925a01000000000000008000f0fffeffa809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) 50.00368176s ago: executing program 4 (id=954): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000240)={0x6, 0x1, 0x1}, &(0x7f0000000280)=[{}]) 49.881035708s ago: executing program 2 (id=955): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xd, 0x45, {0x45, 0x1, "9fcf53a8a1bd3956f4d3e51dd578477cdc53aba3f00da5be3a186d0d13bfc05a8b666349434070674c2f462e6de99980b5336bcd835b6c22c8c4d458bf07ffc6742e7b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000240)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xa, 0xad5}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xe5, 0x0, 0x5, 0x0, 0x6}}}, 0x0) 49.634342265s ago: executing program 4 (id=956): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 49.370923649s ago: executing program 4 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r2, 0x1) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x8500, 0x0) getpeername$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000280)=0x6e) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000680)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x367}, @alu={0x4, 0x1, 0x0, 0x2, 0x6, 0x100, 0x10}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000ff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) r7 = socket(0x2c, 0x3, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfe2f], [0x0, 0x0, 0x3], [0x0, 0x0, 0x2800000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000200)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r12}) prlimit64(0x0, 0x2, &(0x7f0000000300)={0x5, 0xfff}, &(0x7f0000000340)) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) fcntl$notify(r2, 0x402, 0x38) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="01001400"}) 48.655790693s ago: executing program 4 (id=959): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000a40)={0xcc49c02a495a20fa, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.536423661s ago: executing program 34 (id=959): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000122f0d40710404030300000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000001180)={0x44, &(0x7f0000000a40)={0xcc49c02a495a20fa, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 46.53098056s ago: executing program 2 (id=962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 44.580330144s ago: executing program 2 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 44.413825444s ago: executing program 2 (id=965): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) 43.987273309s ago: executing program 2 (id=966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r2, 0x1) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x8500, 0x0) getpeername$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000280)=0x6e) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000680)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x367}, @alu={0x4, 0x1, 0x0, 0x2, 0x6, 0x100, 0x10}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000ff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) r7 = socket(0x2c, 0x3, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfe2f], [0x0, 0x0, 0x3], [0x0, 0x0, 0x2800000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000200)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r12}) prlimit64(0x0, 0x2, &(0x7f0000000300)={0x5, 0xfff}, &(0x7f0000000340)) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) fcntl$notify(r2, 0x402, 0x38) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="01001400"}) 43.462240216s ago: executing program 35 (id=966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r2, 0x1) r3 = openat$sw_sync_info(0xffffff9c, &(0x7f00000001c0), 0x8500, 0x0) getpeername$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000280)=0x6e) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000680)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x367}, @alu={0x4, 0x1, 0x0, 0x2, 0x6, 0x100, 0x10}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000ff}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) r7 = socket(0x2c, 0x3, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) r9 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r9, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0xfe2f], [0x0, 0x0, 0x3], [0x0, 0x0, 0x2800000000, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000200)={r11, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r12}) prlimit64(0x0, 0x2, &(0x7f0000000300)={0x5, 0xfff}, &(0x7f0000000340)) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r5, 0xffffffffffffffff, 0x3, 0x4}, 0x50) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x10) fcntl$notify(r2, 0x402, 0x38) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41d8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="01001400"}) 9.830970238s ago: executing program 6 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYRESHEX], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) clock_gettime(0x3, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 8.973292437s ago: executing program 6 (id=1050): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000001400)="9e74720b4949dd14b726badb57f016c3874d42340685e5af37d9d352ac739667546ab1897ec0f2fca33e402e62684d6f1f7bd3b281c17ff2b9575e88ed0264d35a6a10a5635b3b95fdd129d8a7f19bfc456f92098237f0e6fadce260d131a520b26d86390dbb99fcfbb9c5716a8134f0e1df76c45f10c57c8c658c3b76a7f84ff9d6d0964edecac3bc88d2b73051513a74ac758e7bb09e11f4cf999a486c5a8c34406d79ce51b790ac546521582bc2a9ad6167d7c5b9edd962d693e080a314bd31180ff59d7ec6b77bd6036817ab9e6f175736046c9f1d0997b9902c1a1201a446bf707bd2af47ec19dc8c97dfa73e532cada9a36f3bee55f1008ead64c640830d5eb5f047ad731713100ee3aa8d7c1fb0619c254d98ac0267df6e1dd3838cb31020af60b073376c1a08800fdf3d35720041f2aa74795ed3dbdb87631bfaddbb2da8f08fcde8d868070fbe7776073fe53b582e60b2bc1a84ba46c13227852dc9a65944e9186b7278973a36d17afa6181a2cc7539b32bfb64baceffbe3fd05efc088099d1ac62d2d5b062ecb3dc9dfdae20400a0ac09418013f02eeb3407e816534b4179810e59b4382cc59b86171586b1790257fed1b9ff27748a7d90d9407380e85a21faf357ac75a5821c581b34ca0a5531d527676f4e377f056a6dd574c7ac05d16fed626083bd8206ed32289bf5d94c3ba54f9c611ba2bbfc0cc66c0aee6bd32af449860a3969680bed537c3afe4128aa9984db297894bd01b69b1ffff4c86abdb946349deb1ee92013afd9d08d933431e41dd86648bd57965e6d9452542bd09411954ea4b0c27fe46203c8fcd8a1dc462d95003420f170bed4f4353ffde59ad6378aa90d1d2aa752218233d49b416e98d4a6ffd1baa526a8ce3451162b5eb5355f3faa6289ea2fbfd61278d407e77dc321b922c548c2d0eebd9b64071581830e66d65fb2a16d268db95a4db7bc7d4c7bd9ad000cb9520642c2bea06910ad99eca323b86189aab3db9125b4285e818854a012f74b2062de694986c7a03457775e96b30403ab06c4aa786f82e92c02635ec91ae7437fc0b71bbb73f7d15f39e023c88a5b156bd0f91e119f729695c48250975fe853a056c2a603f794b80e0fc22804616136912604e3833154f6f16a4bdaf48338152756a7fbf1b4cff414e98a4bff1f024727e676210448d189952ef67acb055433f3d0cb5abaae77c12dbe9d3b4a986c31b562025ef97dcc073b03ff6d3b010569238b11892f59caff159d4c54a3ebda66936b2d37a6c207a8362f7defeca6d5879037a2a5f195c04486d27686bff036b955c9beb8561e1f625acb04791992a8080e45c939a021bd2a4212018b0d605437962cf5736a7264b8734d74ed87e5e36ebd369aafbf9e2ba3f8d69b156f763024a6268199a70356a2824868180a9ff494179b35afde7047a94c7753dcefd7649b8b9c8642a1c2998e82d83c4812aa445a3ce06b76befadfe6278e1ea44b9ab784d945e8df0e2f3c6ec25341975f6bc0af7e102b6f5168b62c92f74babb856e3bbd2a96d952e1a40c5dd61252f8b9b701df9e3d272e77043cff57849fac4511f8d9d6bdcb8be26d96612565926b025c1d4d66263c8fa097dc0dfa5b1b8a36f9ef0881cbb3538f93a488259df30727c422313faf17ba54b246bd416b38f853b4b965a101c04a9ba8298f66318a41bc03467bac68893bc9b5e1d47f5913bf3b29fb522a597facbd406486bb0bae631fd321eecccc5c3a7bb8880073882c42d22487d58ece660c23862239b7699ccde923b88f777053f351b1a6c241546cefe6a52a6013e18ef0a2c37f41688e33d79efe41dfd81df58f1423baa3c1cc4ef7bcb1bde04e0bc0c9c63233e77afd2ceb742e5e7e7a7af2265c5cf70c639b1d84a637f7bb632baa3cee451e23f065614c6afaa637c89c5191925ebafffcd84fdb9e6a0ebfee2f1f4026a16e98477c8e15aacb4bfe45011e0a052eee775d48e6d88216c52fadb55f6fa4ef07f3b1b70b63beb74c6473008bcfa08fd4f320c95de4f74c37a098a1c05c486c4b98ada818e94d96f4f67257ad6a3218ba047839e634c8801e9c9bd157211889299114752cc3cf92bc340443eb74486d32be5b8055ed20c53d58a0a047c85bf63ceaf75286f6af2b9e8a50b82d7f6828cf90611fd59cd155b8152b63f6b5d447d6527288e5051966250ebda77c910b7468a162813f09dde277a4ae30539db55fabee7a10a4cc55f39c9049f907baac8171c0502c54234f7679c1e79415635cc6851b92e51cc784f078706ebe29924169d9e5982d335ec2b4b35f002cc66eba2b47e883c05a7980e30dddc6a59a0fee2403e77a31c147c12319e05cd3f101fecb1a14ab77bddd958d0da63263aa75fb07b936686c7391d1f97576fb4d526d73acecab0573c2179cf92bd5dec0d03861846ca31d4c555efa4670cab43de38fd8c979e06a0ba5e990e5cd84c3d760f8b8f59623ed2f0063bdbe9b3d00b7967b08edf6575c4f887db243f77d07b85a9b7aa2b37d562f4adaab6891408c1003c82891b736c2eb61919f17d0657eb49fbf6bb51c56ac8547212f15b950683c533ad170fb23ac11e55eddffd044710a6bcf563e601e77a75277f1dcc92a5fb0052b41cebb282aecf93d460706f1323b8766140389c66ffed5026daf508c52fcaecb55c1aa4273cb05d25d04938c7df6bcda9174cf08b4d2b7172a3dc45ce9866e6141210c7ee5a61d35751fa2945a4ff94e5df5d77eb0c9fc63148c4871d2dca098bb192aa99ccab8dd8b78313d124cdfe5cc2eabe884554f6081abb91904fe01f6d9d01cb320ab62002a4644b5ccd248e8bec740d72851e328ff55157b39234705e8bfe947daf892be1a09230f3d8b86360adce01621ba347fc9e9e4901fc815a208c63a60266f1998709f5f03983a7b35e0e2963070a91f2912beb46c36d6d5b748944630ccd84917b3eb4abd9353b19ca8042f57a401fe05241b5771e4b8d3c7c592295771fe9e02a2906719e38d306e53105f1c48ff88cb93ff1d315428f15baeeb56fb4f5504ef6993bd0d33ce8dba40be620dc4b2d5e3b5d5a941bcd194723a3c634a19599e0d0bc7ce0d55f1411ae3b2e25caa39c96cacefe08a2870b25615e3106a64cc9181548cfcb62ffc6fe10294fec2d7d0297b913fd7326ad8bb991113172fa8dececf448f887fbf9f0def1bddb796e5e1f323234326a089bed346b3d8dcec4ee52e78b50dfc48dee499420ca1f652b34d8a64b890801e5c90f8fae2f688e68ae3d1d079f4bfc350ef007626746958ad7bcd13dee16913407bc953ff5ac3013b1592b00fdf43784497ce8eaddfb7345fcd3b07d64e284a7529cfb9899e5b8ca62c7eb1491b985f2a3f544d6978107f87bcd8496a34d0f429e65558000b472108a99028e263649be5f3e75c10ca4102819776330423e3264a87095f2b3be20e1ea911b2e285191a4c27a0eab19a5bdbf26bd08fead4f22ebe5b1c82e99edb0c49a4770f74b2e012c5b0d6c6599eaa7f6939cffe30a4184fb3dec8c5a2acd6718edda3867f25cb552926b34c0ee01ccc0160f6f90d08eb72062d014e11285b9c3d02176942c6d881ef830c313b8b578cb54a494205fe7ecf257f7d545c374b931c6c2b15dceacd926b3b76c5298edf0c3bd943537c320ec4c151e6d94743288a030f7cf759229736e68963871b3f31eb521f3e9106255a7c9b8b9db64e9627922df28b5610fa5d66d6fc5fd9966ab57c46daac489b2dabb7273fe15c14a4d837efa05449e8ca37682ea41c363b963cb7ca27d3a2e697d09b71bbab30f157fb0edbcaaf291e4ee0777afb24b1645b9286101daf36cd3af7fed31fee657ddaf2cdd9906d732051eed5bbeec96f9348ba230bd26f0a0f91e3353ab70c85b1af9af9d56d283992eeb24c1e4199088305ba9b2463c0585b28678726bd99ee89722a3525a06d01c0dc1641634748e401f38506d5066ec458235001f1a1d921154cf5bb5946cb9dcf02b5adcb94607fe95af9226346e7bd55b41d376b27d587d840be88eb0aa988e205b1cd63ce4102b7feda0d6bf632a03b80c320f4bacf1660f72c7fd18098f39e026d396135ceaa5844e8dae0b75644e69019baf7cff642d01e503f6017ab253d5af0fca728b608d17dfc86b3bcb4332a52de77e3f8f81b90fe9877cc5cd8e382290f1433404a5810a88c5bdb16d28578479956a049b4ad4fbfe739b38fcef8516699213d276d58de8e5a7989b1dad8a7f04617bb1146c97bda69c2cd9cfa526d742dc92822131d50f2b11b914ba02d5c7614fcd327a1c4446513d9443615a3de7543b3aec7a84a88e54d1ca1f53057d6b30ad49d7fc93282dc00ceab4d16e376383516b1c86732bfbfcc5ef52945fb42e751688c9359032cbfcc870006cc66e22009465e1e74e367f50cc0e8e103b690ce77b8fb641d522a129b1710835f75661301b2a300ec0ba1b883e1ca1ac39df11dd292b8df892ae1a3d705460bcd332fb42385f66d9420d1af2a8b19a36a27584c1eb24e8d02fd4bf907ff952fb30e55c188c4014680145bc2e9ea970beede08dda6aba0d0f698ee373bb94e666de280d6ad6f5200224a18053c2d1360d76926fd1dc1611e8481fcb7c6491addfbc2a2de5975bcd8478260b79134eaa13fe1e93e109f85d45305744b008de64075bf7b3ded8ef7f7d9051fd7ec24f6f36ce3ddd57316d39d2d25257bb226ad0e6950a9c488c5c366ef5c7b3d000ba11b5725755a6d70cdbd4d18e259b9a1cb1e62d8eaf4346faa259cdc09e75bf1ebc05e288f49a73004f80dfd56922a326055e3c492a70fda0044491e46af19711d7e47b898b614f3547d2201579774dd2896b892a0a6ca9e27195e7285dac63b4b2dc922e74ceb8eacccf46c618f381595c22c4d2c091a82808f8fb9fc260773f6c8cfef8e18e27d7fd05de10b8741ba6b2ffe8ce1761708e06f7a4eddd7121b70a4ab54739990a43e4842f36968449c45be8515c417fac4e9172756fef83d7906ce10261581563c6eb5f3d880f82f5e90c284c20bf95343dfcf2c63ad00a7dca4b8c6ed0614938ed7aca529c50610a0b3c5ecbe4977f6b13e40f50bb47ff53bd887e71040f0dc44d60a306a37e400cea89c6dc59aa2249693e0da9d0b94754aec6c4bbf4efef108974ceae0421dc09f2700643c9dd2fd56f7ac4296e3a3afcb2790adb9779c7bad5aca76ccfb467ec4be3462bef0ceccc5bbbbb0e1c124f569066d92fa7af10f5731801d8b325162c6411794ab42f1924aad20af5c626e4f20f79978bc1ba4c215e79ee2bacc973e17f6563e360290cb867e6bdcff998f690cd52ecdf0a9b308cfe7699a5bf2b5dc58273dd8da08961e8712d26913a394f45d40b0e6dd61e2c94851eb15725006f8d3a9badc66e79e465783eec94f9a6ae2c6697ea18d9fb1a4f314d6671b9ae8b9f543119b46c3b483e58efaf7bd2e023423008b2f12bb663958d0c2c1f1c37ac90f19d44a8aef9a65981c1e8c9122c818eb6fe77d5703aa42a96ae6e54fe90c215b8b622bc6fc3c8ce8ff715209b72f41b79293e4411211e9d0f324d2671196ca5dda91e0567d00623e144927f109fb521fe01559d7185e3f998309d4923b7ac5c18869467cefae61ba7cce5d26728d424d87a03f24f5e9219642ba1e06ee8ca0af76da5d0b642b7ec25a30bc2969e5085c963d0ed6ec16831f03a06d34960d6c91a38dc06d97745130e945dc1f36b8f02786f05fbf26f425ca53063fcaa3dbaa8a1f6cfd13e77b644ad7", 0xff8}], 0x2, &(0x7f0000002400)=[{0x10, 0x1, 0x8}, {0x38, 0x108, 0x2, "d1cb48e1ba3f7b288450fd50ef072eb1dd2d3d71fdbd35d588ac369a778a8af9ac"}, {0x100, 0x114, 0x3, "14de4e11cc1b7b9c87cb283c35ed2161798d1ff02f43f9040dbd96a4a31979463a557b963633819542a4dbff22946796f56173f2dcfa3a07ab17cf12afccbad562e51b8730a884d42aec71e6a411d62fd76b05b7baf008f6b781fa2c381c42907a2298b01b9341a64fcba61b45edd16e32a049db6f7531740ee2cc5bdd533d3aae7f3c911dba00a82d4dc36159c1ea023056cb6ec7379e6c33461a2422a3e1639c833116b5480f74d4cf5b59450ec4f14c278f029e60700638a59e224a42760a4deac19e6f5ed15c79802ab0c7202996abfa04d7f13e7160dfeaae2f58574d96cf8a405acc4b885829"}], 0x148}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.528391348s ago: executing program 5 (id=1052): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000200)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) 8.333338223s ago: executing program 6 (id=1053): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB], 0x0}, 0x0) 7.019111461s ago: executing program 7 (id=1056): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00"], 0x58}}, 0x0) 5.807505147s ago: executing program 7 (id=1058): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 5.759488639s ago: executing program 7 (id=1059): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[], 0x0) 5.727017913s ago: executing program 6 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x4040080) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x1000, {0x2, 0xff, 0x4}, 0xfe}, 0x18) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000001380)={0x0}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x3, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) 5.349034026s ago: executing program 5 (id=1061): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd0009058202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) 5.231423185s ago: executing program 0 (id=1062): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030402000000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="10d40000a58b542a240012800e00010069703665727370616e000000100002800400120008000d"], 0x44}, 0x1, 0x0, 0x0, 0x40890}, 0x20000840) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.066701359s ago: executing program 0 (id=1063): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r2, 0x5101) syz_io_uring_setup(0x599e, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 4.034115333s ago: executing program 6 (id=1064): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xd, 0x45, {0x45, 0x1, "9fcf53a8a1bd3956f4d3e51dd578477cdc53aba3f00da5be3a186d0d13bfc05a8b666349434070674c2f462e6de99980b5336bcd835b6c22c8c4d458bf07ffc6742e7b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000240)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xa, 0xad5}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xe5, 0x0, 0x5, 0x0, 0x6}}}, 0x0) 2.479457808s ago: executing program 7 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) ioctl$SG_IO(r0, 0x2285, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') 2.218665222s ago: executing program 5 (id=1066): syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 1.739965478s ago: executing program 0 (id=1067): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000280)='./file0/file1/file2/file3\x00', &(0x7f00000002c0)='./file0/file1/file2/file3\x00', 0x0, 0x1000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) 1.547182173s ago: executing program 0 (id=1068): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d000000000"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x40004) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) 1.127580099s ago: executing program 0 (id=1069): openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xc4, 0x0, 0x1}) add_key(&(0x7f0000000100)='big_key\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="070002807235ab000c"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) fsopen(&(0x7f00000002c0)='fuse\x00', 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 748.535102ms ago: executing program 7 (id=1070): syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) 731.354499ms ago: executing program 6 (id=1071): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 567.6503ms ago: executing program 7 (id=1072): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 520.028222ms ago: executing program 0 (id=1073): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040bd28090900000000000109022400cc0000000009040000020300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xd, 0x45, {0x45, 0x1, "9fcf53a8a1bd3956f4d3e51dd578477cdc53aba3f00da5be3a186d0d13bfc05a8b666349434070674c2f462e6de99980b5336bcd835b6c22c8c4d458bf07ffc6742e7b"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f0000000240)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0xa, 0xad5}]}}, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x3, 0xe5, 0x0, 0x5, 0x0, 0x6}}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x6840) 428.580016ms ago: executing program 5 (id=1074): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 276.322129ms ago: executing program 5 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)={@val={0xa, 0x88a8}, @void, @eth={@broadcast, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x4, 0x6, "67fc7e", 0x44, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be}, {}, {0x1}, {0xa888, 0x88be, 0x1, {{0x3, 0x1, 0x25, 0x1, 0x0, 0x0, 0x7, 0x81}, 0x1, {0xfffff000}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x9, 0x3, 0x0, 0x0, 0x5, 0x1}, 0x2, {0x2, 0x200, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}}, 0x7e) 0s ago: executing program 5 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file1/file2/file3/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file2/file3/file4\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000004c0)={0x4, r2}, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) kernel console output (not intermixed with test programs): 0] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.448334][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.456486][ T5830] usb 3-1: Product: syz [ 93.460974][ T5830] usb 3-1: Manufacturer: syz [ 93.465617][ T5830] usb 3-1: SerialNumber: syz [ 93.581905][ T5830] cdc_mbim 3-1:1.0: skipping garbage [ 93.749834][ T5847] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.755939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 93.775892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.795729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.825728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.835837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 93.935736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.266292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #108!!! [ 94.655735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.674333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.674971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.343333][ T5830] cdc_mbim 3-1:1.0: bind() failure [ 96.397187][ T5830] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 96.416121][ T5830] cdc_ncm 3-1:1.1: bind() failure [ 96.486422][ T5830] usb 3-1: USB disconnect, device number 2 [ 98.778844][ T5886] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.156772][ T5883] sctp: failed to load transform for md5: -2 [ 99.807250][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.816173][ T5831] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.296776][ T5831] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 100.305050][ T5831] usb 1-1: config 0 has no interface number 0 [ 100.311904][ T5831] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 100.322325][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 100.337134][ T5831] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 100.359616][ T5830] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.385918][ T5830] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.395770][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 100.395821][ T5831] usb 1-1: Manufacturer: syz [ 100.395837][ T5831] usb 1-1: SerialNumber: syz [ 100.446117][ T5831] usb 1-1: config 0 descriptor?? [ 100.467377][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.495974][ T5830] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.523037][ T5830] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.560113][ T5830] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.595983][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.765393][ T5908] netlink: 84 bytes leftover after parsing attributes in process `syz.3.24'. [ 100.785259][ T5908] netlink: 84 bytes leftover after parsing attributes in process `syz.3.24'. [ 100.795948][ T5908] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 100.841230][ T5830] usb 2-1: usb_control_msg returned -32 [ 100.855624][ T5830] usbtmc 2-1:16.0: can't read capabilities [ 101.106383][ T5831] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/input/input5 [ 101.156849][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.333770][ T5831] usb 1-1: USB disconnect, device number 2 [ 101.600525][ T5918] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 101.635540][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.678550][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.910666][ T5831] usb 2-1: USB disconnect, device number 2 [ 103.136131][ T2178] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.325989][ T2178] usb 1-1: Using ep0 maxpacket: 32 [ 103.372093][ T2178] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 103.381799][ T2178] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 103.394955][ T2178] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 103.442093][ T2178] usb 1-1: config 1 has no interface number 0 [ 103.451532][ T2178] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.464965][ T2178] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.478494][ T2178] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 103.503039][ T2178] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 103.515107][ T2178] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.663627][ T2178] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 103.897446][ T2178] snd_usb_pod 1-1:1.1: cannot start listening: -90 [ 103.910449][ T2178] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 103.936569][ T2178] snd_usb_pod: probe of 1-1:1.1 failed with error -90 [ 104.231299][ T5830] usb 1-1: USB disconnect, device number 3 [ 106.525800][ T5831] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.558180][ T5968] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 107.837984][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 107.868230][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.900342][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.942026][ T5831] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.965743][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.976667][ T5978] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.000516][ T5831] usb 1-1: config 0 descriptor?? [ 108.021047][ T5831] hub 1-1:0.0: USB hub found [ 108.252699][ T5831] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 108.320670][ T5982] (null): rxe_set_mtu: Set mtu to 1024 [ 108.460051][ T5982] infiniband syz1: set active [ 108.465234][ T5982] infiniband syz1: added syz_tun [ 108.558277][ T5982] RDS/IB: syz1: added [ 108.563135][ T5982] smc: adding ib device syz1 with port count 1 [ 108.569800][ T5982] smc: ib device syz1 port 1 has pnetid [ 109.072966][ T5831] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 109.082996][ T5986] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 109.127646][ T5831] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 109.179839][ T5986] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 109.368561][ T5831] usb 1-1: USB disconnect, device number 4 [ 109.639981][ T5987] fido_id[5987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 111.903371][ T6011] mmap: syz.1.58 (6011) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.161929][ T6014] sp0: Synchronizing with TNC [ 113.016555][ T6028] ptrace attach of "./syz-executor exec"[5769] was attempted by ""[6028] [ 114.034670][ T6022] overlayfs: failed to resolve './file0': -2 [ 114.579377][ T27] hid-generic 0000:008B:0000.0002: unknown main item tag 0x0 [ 114.815402][ T27] hid-generic 0000:008B:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.263278][ T6043] fido_id[6043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 117.624219][ T6055] syz1: rxe_newlink: already configured on syz_tun [ 118.231390][ T6062] hub 8-0:1.0: USB hub found [ 118.237431][ T6062] hub 8-0:1.0: 1 port detected [ 118.297082][ T6053] syz.1.73 (6053) used greatest stack depth: 17864 bytes left [ 119.585886][ T5772] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.725831][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.766059][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 119.802409][ T5772] usb 4-1: New USB device found, idVendor=0e41, idProduct=424a, bcdDevice= 0.40 [ 119.820887][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.844914][ T5772] usb 4-1: Product: syz [ 119.855029][ T5772] usb 4-1: Manufacturer: syz [ 119.868059][ T5772] usb 4-1: SerialNumber: syz [ 119.919123][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.932451][ T5830] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.957168][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.997613][ T5830] usb 2-1: config 0 descriptor?? [ 120.029181][ T5830] pwc: Askey VC010 type 2 USB webcam detected. [ 120.129720][ T5772] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 120.148740][ T5772] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 120.239982][ T5830] pwc: send_video_command error -71 [ 120.277283][ T5830] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 120.285627][ T5830] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 120.295534][ T5772] usb 4-1: USB disconnect, device number 2 [ 120.306244][ T5830] usb 2-1: USB disconnect, device number 3 [ 120.452469][ T5785] udevd[5785]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.875829][ T5830] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 121.069622][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.098118][ T5830] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.128104][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.168567][ T5830] usb 2-1: config 0 descriptor?? [ 121.209660][ T5830] pwc: Askey VC010 type 2 USB webcam detected. [ 121.265371][ T6090] syz1: rxe_newlink: already configured on syz_tun [ 121.679444][ T5830] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.700827][ T5830] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.717699][ T5830] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.749055][ T5830] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.759446][ T5830] pwc: recv_control_msg error -32 req 04 val 1300 [ 121.787003][ T5830] pwc: recv_control_msg error -32 req 04 val 1400 [ 121.811751][ T5830] pwc: recv_control_msg error -32 req 02 val 2000 [ 121.830203][ T5830] pwc: recv_control_msg error -32 req 02 val 2100 [ 121.894799][ T6094] warning: `syz.0.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 122.055558][ T5830] pwc: recv_control_msg error -32 req 04 val 1500 [ 122.108959][ T5830] pwc: recv_control_msg error -32 req 02 val 2500 [ 122.144456][ T5830] pwc: recv_control_msg error -32 req 02 val 2400 [ 122.230493][ T6105] (null): rxe_set_mtu: Set mtu to 1024 [ 122.868390][ T6102] netlink: 'syz.2.89': attribute type 2 has an invalid length. [ 122.876416][ T6102] netlink: 224 bytes leftover after parsing attributes in process `syz.2.89'. [ 122.942350][ T6108] ======================================================= [ 122.942350][ T6108] WARNING: The mand mount option has been deprecated and [ 122.942350][ T6108] and is ignored by this kernel. Remove the mand [ 122.942350][ T6108] option from the mount to silence this warning. [ 122.942350][ T6108] ======================================================= [ 122.952607][ T6105] infiniband syz2: set active [ 122.977549][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.982177][ T6105] infiniband syz2: added bridge_slave_1 [ 123.058223][ T6105] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 123.071483][ T6105] infiniband syz2: Couldn't open port 1 [ 123.116895][ T6105] RDS/IB: syz2: added [ 123.121595][ T6105] smc: adding ib device syz2 with port count 1 [ 123.128091][ T6105] smc: ib device syz2 port 1 has pnetid [ 123.144193][ T5830] pwc: recv_control_msg error -71 req 02 val 2900 [ 123.180615][ T5830] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.202834][ T5830] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.210235][ T5830] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.298603][ T6112] (null): rxe_set_mtu: Set mtu to 1024 [ 124.076036][ T6112] rdma_rxe: rxe_newlink: failed to add syz_tun [ 124.186752][ T5830] pwc: Registered as video103. [ 124.197935][ T5830] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 125.276006][ T6128] comedi: No check for data length of config insn id 53517 is implemented [ 125.284657][ T6128] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 125.294980][ T6128] comedi: Assuming n=15 is correct [ 125.529278][ T6126] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6126] [ 125.539834][ T5830] usb 2-1: USB disconnect, device number 4 [ 125.906790][ T6137] syz1: rxe_newlink: already configured on syz_tun [ 126.500628][ T6150] syzkaller0: entered promiscuous mode [ 126.506601][ T6150] syzkaller0: entered allmulticast mode [ 126.529876][ T6150] tipc: Started in network mode [ 126.535221][ T6150] tipc: Node identity 36b5594fdc35, cluster identity 4711 [ 126.552980][ T6150] tipc: Enabled bearer , priority 0 [ 126.786585][ T6150] tipc: Resetting bearer [ 126.982964][ T6150] tipc: Disabling bearer [ 128.122335][ T6162] syz1: rxe_newlink: already configured on syz_tun [ 128.305036][ T6170] netlink: 36 bytes leftover after parsing attributes in process `syz.0.110'. [ 128.514256][ T6175] (null): rxe_set_mtu: Set mtu to 1024 [ 128.520396][ T6175] rdma_rxe: rxe_newlink: failed to add syz_tun [ 132.227504][ T5831] hid-generic 0000:008B:0000.0003: unknown main item tag 0x0 [ 132.261700][ T5831] hid-generic 0000:008B:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.431166][ T6206] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 133.709437][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.725808][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.777753][ T6205] fido_id[6205]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.265860][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.465777][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 134.481639][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.512838][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.545090][ T27] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.577108][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.581955][ T6219] (null): rxe_set_mtu: Set mtu to 1024 [ 134.591457][ T6219] rdma_rxe: rxe_newlink: failed to add syz_tun [ 134.783858][ T27] usb 1-1: config 0 descriptor?? [ 134.806195][ T27] hub 1-1:0.0: USB hub found [ 135.066551][ T27] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 135.480757][ T27] usbhid 1-1:0.0: can't add hid device: -71 [ 135.487058][ T27] usbhid: probe of 1-1:0.0 failed with error -71 [ 135.551903][ T27] usb 1-1: USB disconnect, device number 5 [ 136.739725][ T5772] hid-generic 0000:008B:0000.0004: unknown main item tag 0x0 [ 136.987854][ T5772] hid-generic 0000:008B:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.778807][ T6253] fido_id[6253]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.953183][ T6261] syz1: rxe_newlink: already configured on syz_tun [ 138.567657][ T6265] (null): rxe_set_mtu: Set mtu to 1024 [ 138.573578][ T6265] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 141.189069][ T6285] ptrace attach of "./syz-executor exec"[5768] was attempted by "./syz-executor exec"[6285] [ 142.103485][ T6293] (null): rxe_set_mtu: Set mtu to 1024 [ 142.110323][ T6293] rdma_rxe: rxe_newlink: failed to add syz_tun [ 144.240761][ T6333] (null): rxe_set_mtu: Set mtu to 1024 [ 144.247559][ T6333] rdma_rxe: rxe_newlink: failed to add syz_tun [ 145.023728][ T6342] ptrace attach of "./syz-executor exec"[5768] was attempted by ""[6342] [ 146.970342][ T6366] (null): rxe_set_mtu: Set mtu to 1024 [ 146.976244][ T6366] rdma_rxe: rxe_newlink: failed to add syz_tun [ 147.445781][ T5830] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 147.676218][ T5830] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 147.700758][ T5830] usb 1-1: config 0 has no interface number 0 [ 147.719845][ T5830] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.779444][ T5830] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 147.805876][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 147.842993][ T5830] usb 1-1: Manufacturer: syz [ 147.862855][ T5830] usb 1-1: SerialNumber: syz [ 147.906828][ T5830] usb 1-1: config 0 descriptor?? [ 148.242274][ T5830] usbtouchscreen 1-1:0.214: Failed to read FW rev: -32 [ 148.250039][ T5830] usbtouchscreen: probe of 1-1:0.214 failed with error -32 [ 150.248139][ T5831] usb 1-1: USB disconnect, device number 6 [ 150.446582][ T6388] syzkaller0: entered promiscuous mode [ 150.459768][ T6388] syzkaller0: entered allmulticast mode [ 150.926013][ T6397] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[6397] [ 152.354146][ T6400] (null): rxe_set_mtu: Set mtu to 1024 [ 152.360047][ T6400] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 152.972164][ T6417] Zero length message leads to an empty skb [ 152.996831][ T23] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 153.198149][ T23] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 153.222774][ T23] usb 2-1: config 0 has no interface number 0 [ 153.239748][ T23] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 153.266700][ T23] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 153.295794][ T23] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 153.308805][ T23] usb 2-1: Manufacturer: syz [ 153.313493][ T23] usb 2-1: SerialNumber: syz [ 153.348221][ T23] usb 2-1: config 0 descriptor?? [ 154.262110][ T23] usbtouchscreen 2-1:0.214: Failed to read FW rev: -32 [ 154.275532][ T23] usbtouchscreen: probe of 2-1:0.214 failed with error -32 [ 156.605610][ T5772] usb 2-1: USB disconnect, device number 5 [ 156.662211][ T6440] syzkaller0: entered promiscuous mode [ 156.703720][ T6440] syzkaller0: entered allmulticast mode [ 158.950677][ T6469] blktrace: Concurrent blktraces are not allowed on loop0 [ 163.641988][ T6510] (null): rxe_set_mtu: Set mtu to 1024 [ 163.647965][ T6510] rdma_rxe: rxe_newlink: failed to add syz_tun [ 165.860950][ T6537] syzkaller0: entered promiscuous mode [ 165.886015][ T6537] syzkaller0: entered allmulticast mode [ 166.260573][ T6543] (null): rxe_set_mtu: Set mtu to 1024 [ 166.267292][ T6543] rdma_rxe: rxe_newlink: failed to add syz_tun [ 166.828687][ T6549] io-wq is not configured for unbound workers [ 168.395317][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 170.017506][ T6572] overlayfs: failed to resolve './file0': -2 [ 171.461304][ T6576] binder: 6575:6576 ioctl 4018620d 0 returned -22 [ 174.779546][ T27] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 175.070982][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.087958][ T27] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 175.109336][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.133709][ T27] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 175.150805][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.196646][ T27] hub 4-1:1.0: bad descriptor, ignoring hub [ 175.202604][ T27] hub: probe of 4-1:1.0 failed with error -5 [ 175.761013][ T5812] usb 4-1: USB disconnect, device number 3 [ 176.331165][ T6636] comedi: No check for data length of config insn id 53517 is implemented [ 176.339920][ T6636] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 176.349365][ T6636] comedi: Assuming n=15 is correct [ 183.225885][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 183.415745][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 183.428312][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.455873][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.483165][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.495922][ T5812] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 183.513355][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 183.530431][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.695968][ T5812] usb 2-1: device descriptor read/64, error -71 [ 183.767531][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.777088][ T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.785241][ T8] usb 1-1: Manufacturer: syz [ 183.798054][ T8] usb 1-1: config 0 descriptor?? [ 184.702732][ T5812] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.859477][ T8] rc_core: IR keymap rc-hauppauge not found [ 184.873866][ T8] Registered IR keymap rc-empty [ 184.900524][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 184.952458][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.004522][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 185.051275][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 185.121883][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.186298][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.220383][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.269374][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.336155][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.405970][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.465979][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.516961][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.575912][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.601062][ T5812] usb 2-1: device descriptor read/64, error -71 [ 185.645876][ T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 185.689663][ T8] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 185.699580][ T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 185.727519][ T5812] usb usb2-port1: attempt power cycle [ 185.764044][ T8] usb 1-1: USB disconnect, device number 7 [ 186.121049][ T6726] ptrace attach of "./syz-executor exec"[5769] was attempted by ""[6726] [ 187.885854][ T5812] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 187.946757][ T5812] usb 2-1: device descriptor read/8, error -71 [ 189.249004][ T6754] tipc: Started in network mode [ 189.254099][ T6754] tipc: Node identity 160db40656c5, cluster identity 4711 [ 189.262136][ T6754] tipc: Enabled bearer , priority 0 [ 189.312501][ T6754] tipc: Disabling bearer [ 189.415190][ T6757] ptrace attach of "./syz-executor exec"[5769] was attempted by ""[6757] [ 190.182838][ T5830] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.192769][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 190.366821][ T5812] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.397416][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 190.470632][ T5830] usb 3-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config [ 190.515526][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.575931][ T5812] usb 4-1: device descriptor read/64, error -71 [ 190.587954][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 190.669690][ T5830] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 190.740918][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.886206][ T5830] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 190.908595][ T5812] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 190.944127][ T5830] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 190.975848][ T5830] usb 3-1: Manufacturer: syz [ 191.000668][ T5830] usb 3-1: config 0 descriptor?? [ 191.099628][ T5812] usb 4-1: device descriptor read/64, error -71 [ 191.256393][ T5812] usb usb4-port1: attempt power cycle [ 191.346379][ T5830] rc_core: IR keymap rc-hauppauge not found [ 191.354735][ T5830] Registered IR keymap rc-empty [ 191.366077][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.414218][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.471996][ T5830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 191.493749][ T5830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 191.524810][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.580410][ T6785] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[6785] [ 191.605952][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.655971][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.676570][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 191.686017][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.716804][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.755928][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.772487][ T5812] usb 4-1: device descriptor read/8, error -71 [ 191.825969][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.866505][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.896238][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.926207][ T5830] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 191.965841][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.973496][ T5830] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 191.986037][ T5830] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 192.010481][ T5830] usb 3-1: USB disconnect, device number 3 [ 192.056723][ T5812] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 192.101194][ T5812] usb 4-1: device descriptor read/8, error -71 [ 192.166165][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 192.175913][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 192.199428][ T8] usb 1-1: config 8 has an invalid interface number: 216 but max is 0 [ 192.208280][ T8] usb 1-1: config 8 has no interface number 0 [ 192.219245][ T8] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=75.c6 [ 192.232791][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.242930][ T8] usb 1-1: Product: syz [ 192.247718][ T8] usb 1-1: Manufacturer: syz [ 192.252468][ T8] usb 1-1: SerialNumber: syz [ 192.253181][ T5812] usb usb4-port1: unable to enumerate USB device [ 194.353012][ T6789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.386005][ T6789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.429688][ T8] gspca_main: conex-2.14.0 probing 0572:0041 [ 194.713264][ T8] usb 1-1: USB disconnect, device number 8 [ 195.157506][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.164058][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.851649][ T6829] syz.2.334 uses obsolete (PF_INET,SOCK_PACKET) [ 197.834510][ T6833] binder: 6832:6833 ioctl 4018620d 0 returned -22 [ 199.888964][ T6863] binder: 6862:6863 ioctl c0306201 2000000003c0 returned -14 [ 206.504662][ T6910] tmpfs: Bad value for 'mpol' [ 208.555882][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 208.564382][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 208.568112][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 208.570672][ T5083] Bluetooth: hci2: command 0x0406 tx timeout [ 209.034262][ T6930] tipc: Started in network mode [ 209.042913][ T6930] tipc: Node identity 42f99637b3a7, cluster identity 4711 [ 209.056437][ T6930] tipc: Enabled bearer , priority 0 [ 209.077166][ T6930] tipc: Disabling bearer [ 209.235788][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 209.455781][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 209.485406][ T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 209.513158][ T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 209.721761][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.744352][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 209.799644][ T9] usb 1-1: config 1 has no interface number 0 [ 209.811855][ T6941] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 209.811855][ T6941] program syz.1.371 not setting count and/or reply_len properly [ 209.903733][ T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 209.946211][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.312873][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 210.524148][ T9] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 210.566094][ T9] snd_usb_pod 1-1:1.1: invalid control EP [ 210.572326][ T9] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 210.601122][ T6947] netlink: 72 bytes leftover after parsing attributes in process `syz.2.378'. [ 210.640797][ T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 210.666380][ T9] snd_usb_pod: probe of 1-1:1.1 failed with error -22 [ 210.738625][ T5830] usb 1-1: USB disconnect, device number 9 [ 211.475962][ T5812] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 211.718053][ T5812] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.730614][ T5812] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 211.742296][ T5812] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.751592][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.877426][ T6955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 211.918594][ T5812] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 212.287151][ T5812] usb 3-1: USB disconnect, device number 4 [ 212.407138][ T6965] tmpfs: Bad value for 'mpol' [ 213.206210][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 213.306224][ T5830] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 213.555866][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 213.570610][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 214.219071][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 214.316973][ T5830] usb 1-1: Using ep0 maxpacket: 16 [ 214.331133][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.342864][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 214.352429][ T5830] usb 1-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 214.370433][ T9] usb 2-1: config 1 has no interface number 0 [ 214.377778][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 214.393279][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 214.404200][ T5830] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 214.414532][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.423275][ T5830] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 214.434707][ T5830] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.457198][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 214.490338][ T5830] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 214.504444][ T5830] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 214.514555][ T5830] usb 1-1: Manufacturer: syz [ 214.526924][ T5830] usb 1-1: config 0 descriptor?? [ 214.669913][ T9] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 214.684519][ T9] snd_usb_pod 2-1:1.1: invalid control EP [ 214.701521][ T9] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 214.714160][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 214.725166][ T9] snd_usb_pod: probe of 2-1:1.1 failed with error -22 [ 214.833187][ T23] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 214.945890][ T5812] usb 2-1: USB disconnect, device number 10 [ 214.990688][ T5830] rc_core: IR keymap rc-hauppauge not found [ 215.003070][ T5830] Registered IR keymap rc-empty [ 215.020759][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.066991][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.106855][ T5830] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 215.160792][ T5830] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input11 [ 215.187169][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.232010][ T23] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 215.240931][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.326583][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.375930][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.438976][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.485964][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.545897][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.565429][ T6996] tmpfs: Bad value for 'mpol' [ 215.587007][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.666241][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.689140][ T6993] fido_id[6993]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.696680][ T5830] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.769473][ T5830] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 215.799961][ T5830] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 215.863431][ T5830] usb 1-1: USB disconnect, device number 10 [ 217.642554][ T5772] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 217.746961][ T7029] ptrace attach of "./syz-executor exec"[5770] was attempted by ""[7029] [ 217.857339][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 217.866217][ T5830] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 217.878047][ T5772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.906362][ T5830] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.917667][ T5772] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 217.987940][ T5772] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.001760][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.016749][ T5772] usb 4-1: config 0 descriptor?? [ 218.516123][ T5772] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 218.915784][ T5772] usb 1-1: Using ep0 maxpacket: 16 [ 219.036748][ T7054] comedi: No check for data length of config insn id 53517 is implemented [ 219.045429][ T7054] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 219.054827][ T7054] comedi: Assuming n=15 is correct [ 219.685082][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.717914][ T5772] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.737360][ T5772] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 219.756861][ T5772] usb 1-1: language id specifier not provided by device, defaulting to English [ 219.769428][ T5772] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 219.778927][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.799065][ T5772] usb 1-1: Product: syz [ 219.811667][ T5772] usb 1-1: Manufacturer: 衟鷲뀤꾊舓❝俨ꌰ㝾඄땒稈ꩍ팰痶嵩﴿Ⱁ襰鏖鄚鷂겊︙ [ 219.837417][ T5772] usb 1-1: SerialNumber: syz [ 219.948475][ T7061] (null): rxe_set_mtu: Set mtu to 1024 [ 219.954321][ T7061] rdma_rxe: rxe_newlink: failed to add syz_tun [ 220.105403][ T5831] usb 1-1: USB disconnect, device number 11 [ 220.285266][ T7065] hub 8-0:1.0: USB hub found [ 220.295279][ T7065] hub 8-0:1.0: 1 port detected [ 221.051461][ T23] usb 4-1: USB disconnect, device number 8 [ 221.430753][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 221.596209][ T5831] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.640094][ T7081] tmpfs: Bad value for 'mpol' [ 221.759251][ T7086] capability: warning: `syz.2.430' uses 32-bit capabilities (legacy support in use) [ 221.805789][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 221.831754][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.863437][ T5831] usb 1-1: config 0 has no interface number 0 [ 221.910043][ T7089] hub 8-0:1.0: USB hub found [ 221.917609][ T7089] hub 8-0:1.0: 1 port detected [ 222.009624][ T5831] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 222.146502][ T5831] usb 1-1: config 0 interface 1 has no altsetting 0 [ 222.282954][ T5831] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 222.432320][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.491309][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 222.526123][ T5831] usb 1-1: Product: syz [ 222.565971][ T5831] usb 1-1: Manufacturer: syz [ 222.685568][ T5831] usb 1-1: SerialNumber: syz [ 222.702012][ T5831] usb 1-1: config 0 descriptor?? [ 222.866084][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 222.886031][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.925160][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 222.940169][ T27] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.951970][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.962149][ T5831] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 222.979734][ T5831] cx231xx 1-1:0.1: Failed to read PCB config [ 222.989556][ T27] usb 3-1: config 0 descriptor?? [ 222.997171][ T5831] cx231xx: probe of 1-1:0.1 failed with error -71 [ 223.127970][ T5831] usb 1-1: USB disconnect, device number 12 [ 225.180013][ T23] usb 3-1: USB disconnect, device number 5 [ 225.431746][ T7113] tmpfs: Bad value for 'mpol' [ 225.884481][ T7125] hub 8-0:1.0: USB hub found [ 225.889684][ T7125] hub 8-0:1.0: 1 port detected [ 227.036733][ T7141] tmpfs: Bad value for 'mpol' [ 227.215915][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 227.335193][ T7150] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 227.376243][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 227.415729][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 227.423593][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.474987][ T23] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.498514][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 227.512079][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.533488][ T23] usb 3-1: config 0 descriptor?? [ 228.209386][ T7161] overlayfs: missing 'lowerdir' [ 229.666029][ T5772] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 229.984890][ T5772] usb 2-1: config 5 has an invalid interface number: 182 but max is 0 [ 230.089753][ T5772] usb 2-1: config 5 has no interface number 0 [ 230.135044][ T5772] usb 2-1: config 5 interface 182 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 230.225823][ T5772] usb 2-1: config 5 interface 182 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 230.241310][ T5772] usb 2-1: config 5 interface 182 has no altsetting 0 [ 230.260399][ T5772] usb 2-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=38.5e [ 230.282487][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.298129][ T5772] usb 2-1: Product: syz [ 230.302395][ T5772] usb 2-1: Manufacturer: syz [ 230.315871][ T5772] usb 2-1: SerialNumber: syz [ 230.382920][ T5831] usb 3-1: USB disconnect, device number 6 [ 230.510050][ T7175] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 230.574939][ T5772] radio-si470x 2-1:5.182: could not find interrupt in endpoint [ 230.619152][ T5772] radio-si470x: probe of 2-1:5.182 failed with error -5 [ 230.634077][ T5772] usbhid 2-1:5.182: couldn't find an input interrupt endpoint [ 230.674306][ T5772] usb 2-1: USB disconnect, device number 11 [ 230.823044][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 231.573559][ T7196] comedi: No check for data length of config insn id 53517 is implemented [ 231.582924][ T7196] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 231.592276][ T7196] comedi: Assuming n=15 is correct [ 232.373227][ T7197] overlayfs: missing 'lowerdir' [ 234.466359][ T7213] Cannot find add_set index 65532 as target [ 234.516524][ T7213] process 'syz.3.475' launched './file1' with NULL argv: empty string added [ 235.099389][ T7221] comedi: No check for data length of config insn id 53517 is implemented [ 235.108436][ T7221] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 235.117850][ T7221] comedi: Assuming n=15 is correct [ 236.483003][ T7227] overlayfs: missing 'lowerdir' [ 239.619397][ T7249] overlayfs: missing 'lowerdir' [ 242.070105][ T7286] comedi: No check for data length of config insn id 53517 is implemented [ 242.079067][ T7286] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 242.088583][ T7286] comedi: Assuming n=15 is correct [ 246.618985][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 246.728338][ T7307] netlink: 56 bytes leftover after parsing attributes in process `syz.3.512'. [ 252.679527][ T7339] (null): rxe_set_mtu: Set mtu to 1024 [ 252.685442][ T7339] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 252.694147][ T7339] netlink: 'syz.0.521': attribute type 2 has an invalid length. [ 252.701968][ T7339] netlink: 224 bytes leftover after parsing attributes in process `syz.0.521'. [ 253.498856][ T7349] 9pnet_fd: Insufficient options for proto=fd [ 253.747915][ T7351] tipc: Started in network mode [ 253.752887][ T7351] tipc: Node identity 62a4345e1b5, cluster identity 4711 [ 253.780281][ T7351] tipc: Enabled bearer , priority 0 [ 253.833930][ T7351] tipc: Disabling bearer [ 255.512564][ T7376] 9pnet_fd: Insufficient options for proto=fd [ 255.724350][ T7380] syz2: rxe_newlink: already configured on bridge_slave_1 [ 255.732821][ T7380] netlink: 'syz.2.532': attribute type 2 has an invalid length. [ 255.740822][ T7380] netlink: 224 bytes leftover after parsing attributes in process `syz.2.532'. [ 256.072364][ T7385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 256.590373][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.600577][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.196206][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 257.674187][ T7430] (null): rxe_set_mtu: Set mtu to 1024 [ 257.680350][ T7430] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 257.688745][ T7430] netlink: 'syz.3.547': attribute type 2 has an invalid length. [ 257.697686][ T7430] netlink: 224 bytes leftover after parsing attributes in process `syz.3.547'. [ 258.575192][ T7432] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 258.584896][ T7432] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 260.792792][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 261.669070][ T7467] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 261.678784][ T7467] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 263.384007][ T7483] tipc: Enabled bearer , priority 0 [ 263.948025][ T7488] overlayfs: missing 'lowerdir' [ 265.043181][ T7491] tipc: Disabling bearer [ 265.082928][ T5830] tipc: Node number set to 1086895110 [ 266.680229][ T7506] (null): rxe_set_mtu: Set mtu to 1024 [ 266.686322][ T7506] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 266.694634][ T7506] netlink: 'syz.1.563': attribute type 2 has an invalid length. [ 266.702707][ T7506] netlink: 224 bytes leftover after parsing attributes in process `syz.1.563'. [ 267.546810][ T7516] overlayfs: missing 'lowerdir' [ 269.552740][ T7537] (null): rxe_set_mtu: Set mtu to 1024 [ 269.558649][ T7537] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 269.567046][ T7537] netlink: 'syz.1.588': attribute type 2 has an invalid length. [ 269.575750][ T7537] netlink: 224 bytes leftover after parsing attributes in process `syz.1.588'. [ 270.180918][ T7541] overlayfs: missing 'lowerdir' [ 271.860127][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 272.531134][ T7564] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 272.531134][ T7564] program syz.1.597 not setting count and/or reply_len properly [ 272.879045][ T7568] syz2: rxe_newlink: already configured on bridge_slave_1 [ 272.887639][ T7568] netlink: 'syz.2.599': attribute type 2 has an invalid length. [ 272.895329][ T7568] netlink: 224 bytes leftover after parsing attributes in process `syz.2.599'. [ 275.140397][ T7603] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 275.140397][ T7603] program syz.2.609 not setting count and/or reply_len properly [ 275.420456][ T7608] (null): rxe_set_mtu: Set mtu to 1024 [ 275.426575][ T7608] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 275.435007][ T7608] netlink: 'syz.3.610': attribute type 2 has an invalid length. [ 275.443174][ T7608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.610'. [ 276.444860][ T7596] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.453787][ T7596] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.597605][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.747317][ T7596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.261172][ T7632] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 278.261172][ T7632] program syz.2.619 not setting count and/or reply_len properly [ 279.015007][ T7596] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.024692][ T7596] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.039143][ T7596] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.050193][ T7596] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.158227][ T7636] syz2: rxe_newlink: already configured on bridge_slave_1 [ 279.166818][ T7636] netlink: 'syz.2.620': attribute type 2 has an invalid length. [ 279.174534][ T7636] netlink: 224 bytes leftover after parsing attributes in process `syz.2.620'. [ 279.685859][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'. [ 283.290082][ T7664] (null): rxe_set_mtu: Set mtu to 1024 [ 283.296567][ T7664] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 283.305216][ T7664] netlink: 'syz.0.629': attribute type 2 has an invalid length. [ 283.313070][ T7664] netlink: 224 bytes leftover after parsing attributes in process `syz.0.629'. [ 283.721327][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 292.741329][ T7720] syzkaller0: entered promiscuous mode [ 292.749084][ T7720] syzkaller0: entered allmulticast mode [ 296.419831][ T7747] comedi: No check for data length of config insn id 53517 is implemented [ 296.428624][ T7747] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 296.438144][ T7747] comedi: Assuming n=15 is correct [ 297.132446][ T7746] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 297.558214][ T7750] netlink: 28 bytes leftover after parsing attributes in process `syz.2.658'. [ 297.590403][ T7750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.475340][ T7778] 9pnet_fd: Insufficient options for proto=fd [ 300.647120][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 301.144857][ T7788] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 301.144857][ T7788] program syz.2.675 not setting count and/or reply_len properly [ 301.333670][ T7792] (null): rxe_set_mtu: Set mtu to 1024 [ 301.438298][ T7792] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 301.483742][ T7792] netlink: 'syz.0.673': attribute type 2 has an invalid length. [ 301.588568][ T7792] netlink: 224 bytes leftover after parsing attributes in process `syz.0.673'. [ 301.986984][ T7799] syzkaller0: entered promiscuous mode [ 301.992552][ T7799] syzkaller0: entered allmulticast mode [ 302.290114][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 304.684117][ T7815] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 304.684117][ T7815] program syz.3.684 not setting count and/or reply_len properly [ 305.431493][ T7825] syzkaller0: entered promiscuous mode [ 305.445926][ T7825] syzkaller0: entered allmulticast mode [ 307.288473][ T7827] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 307.332281][ T7827] kvm: pic: non byte read [ 307.353370][ T7827] kvm: pic: non byte read [ 307.365788][ T7827] kvm: pic: non byte read [ 307.376943][ T7827] kvm: pic: non byte read [ 307.388343][ T7827] kvm: pic: non byte read [ 307.399216][ T7827] kvm: pic: non byte read [ 307.410894][ T7827] kvm: pic: level sensitive irq not supported [ 307.411895][ T7827] kvm: pic: non byte read [ 307.437149][ T7827] kvm: pic: level sensitive irq not supported [ 307.437255][ T7827] kvm: pic: non byte read [ 308.633919][ T7847] syz2: rxe_newlink: already configured on bridge_slave_1 [ 308.649187][ T7847] netlink: 'syz.2.694': attribute type 2 has an invalid length. [ 308.660716][ T7847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.694'. [ 309.641673][ T5831] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 309.855892][ T5831] usb 2-1: Using ep0 maxpacket: 32 [ 309.878826][ T5831] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.900601][ T5831] usb 2-1: config 0 has no interface number 0 [ 309.913923][ T5831] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 309.930548][ T5831] usb 2-1: config 0 interface 1 has no altsetting 0 [ 309.940889][ T5831] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 309.955835][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.964240][ T5831] usb 2-1: Product: syz [ 309.972470][ T5831] usb 2-1: Manufacturer: syz [ 309.979224][ T5831] usb 2-1: SerialNumber: syz [ 310.011600][ T5831] usb 2-1: config 0 descriptor?? [ 310.244067][ T5831] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 310.265353][ T5831] cx231xx 2-1:0.1: Failed to read PCB config [ 310.300500][ T5831] cx231xx: probe of 2-1:0.1 failed with error -71 [ 310.333923][ T5831] usb 2-1: USB disconnect, device number 12 [ 313.084892][ T7874] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 313.084892][ T7874] program syz.1.704 not setting count and/or reply_len properly [ 314.640246][ T7901] (null): rxe_set_mtu: Set mtu to 1024 [ 314.651491][ T7901] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 314.690909][ T7901] netlink: 'syz.0.708': attribute type 2 has an invalid length. [ 314.711596][ T7903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.713'. [ 314.714184][ T7901] netlink: 224 bytes leftover after parsing attributes in process `syz.0.708'. [ 314.826308][ T5831] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 315.036176][ T5831] usb 3-1: Using ep0 maxpacket: 16 [ 315.072228][ T5831] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 315.115802][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.159916][ T5831] usb 3-1: Product: syz [ 315.164174][ T5831] usb 3-1: Manufacturer: syz [ 315.223837][ T5831] usb 3-1: SerialNumber: syz [ 315.260152][ T5831] r8152-cfgselector 3-1: config 0 descriptor?? [ 315.497317][ T5831] r8152-cfgselector 3-1: Needed 1 retries to read version [ 315.515143][ T5831] r8152-cfgselector 3-1: Unknown version 0x0000 [ 315.523646][ T5831] r8152-cfgselector 3-1: bad CDC descriptors [ 315.702749][ T5831] r8152-cfgselector 3-1: Unknown version 0x0000 [ 315.724771][ T5831] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 316.824292][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 317.650400][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 317.996598][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 318.030126][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.037643][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.946564][ T7980] capability: warning: `syz.1.740' uses deprecated v2 capabilities in a way that may be insecure [ 321.255828][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 321.306019][ T5830] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 321.518961][ T5830] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 321.535743][ T5830] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 321.565813][ T5830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 321.575184][ T5830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 323.216049][ T5830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 323.247260][ T5830] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 323.256626][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 323.264665][ T5830] usb 1-1: Product: syz [ 323.275800][ T5830] usb 1-1: Manufacturer: syz [ 323.358384][ T5830] cdc_wdm 1-1:1.0: skipping garbage [ 323.363966][ T5830] cdc_wdm 1-1:1.0: skipping garbage [ 323.401269][ T5830] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 323.431377][ T5830] cdc_wdm 1-1:1.0: Unknown control protocol [ 324.607832][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.739'. [ 329.335895][ T5812] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 329.547834][ T5812] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.575625][ T5812] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.605428][ T5812] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 329.653657][ T5812] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 329.691597][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.704540][ T8020] 9pnet: Could not find request transport: fd0x0000000000000004 [ 329.736642][ T5812] hub 3-1:1.0: bad descriptor, ignoring hub [ 329.742778][ T5812] hub: probe of 3-1:1.0 failed with error -5 [ 330.066702][ T5831] usb 3-1: USB disconnect, device number 8 [ 330.275843][ T5812] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 330.572505][ T5812] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 331.350201][ T5812] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 331.380295][ T5812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.395903][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 331.407805][ T5812] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 331.515768][ T5812] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.525399][ T5812] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.545660][ T5812] usb 2-1: Product: syz [ 331.550019][ T5812] usb 2-1: Manufacturer: syz [ 331.591297][ T5812] cdc_wdm 2-1:1.0: skipping garbage [ 331.607568][ T5812] cdc_wdm 2-1:1.0: skipping garbage [ 331.625035][ T5812] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 331.663649][ T5812] cdc_wdm 2-1:1.0: Unknown control protocol [ 332.316107][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 332.636010][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 332.836475][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.872568][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.883378][ T5812] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 332.905404][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.938729][ T5812] usb 3-1: config 0 descriptor?? [ 332.959558][ T5812] hub 3-1:0.0: USB hub found [ 333.511593][ T5812] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 333.559046][ T5812] usbhid 3-1:0.0: can't add hid device: -71 [ 333.565267][ T5812] usbhid: probe of 3-1:0.0 failed with error -71 [ 333.626937][ T5812] usb 3-1: USB disconnect, device number 9 [ 333.663213][ T8057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 333.745140][ T8054] 9pnet: Could not find request transport: fd0x0000000000000004 [ 333.956184][ T5830] usb 2-1: USB disconnect, device number 13 [ 334.137660][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 334.485976][ T5830] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 334.713654][ T5830] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 334.749120][ T5830] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 334.826388][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.951414][ T5830] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.066644][ T5830] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.254096][ T5830] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 335.295865][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.349253][ T5830] usb 2-1: config 0 descriptor?? [ 335.514580][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 335.877623][ T5830] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.0007/input/input12 [ 335.987829][ T8090] 9pnet: Could not find request transport: fd0x0000000000000004 [ 336.012616][ T5830] uclogic 0003:28BD:0909.0007: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 336.111632][ T5830] usb 2-1: USB disconnect, device number 14 [ 336.154267][ T8093] fido_id[8093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 336.170756][ T8095] syzkaller0: entered promiscuous mode [ 336.176641][ T8095] syzkaller0: entered allmulticast mode [ 338.095997][ T5830] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 338.349587][ T5830] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.427545][ T5830] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.539936][ T5830] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.716655][ T5830] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.781283][ T5830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.842253][ T5830] hub 4-1:1.0: bad descriptor, ignoring hub [ 338.875738][ T5830] hub: probe of 4-1:1.0 failed with error -5 [ 339.173890][ T5830] usb 4-1: USB disconnect, device number 9 [ 339.384333][ T8124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.781'. [ 339.496330][ T8125] syzkaller0: entered promiscuous mode [ 339.520074][ T8125] syzkaller0: entered allmulticast mode [ 342.820915][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'. [ 342.867000][ T8156] syzkaller0: entered promiscuous mode [ 342.879387][ T8156] syzkaller0: entered allmulticast mode [ 347.977718][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.809'. [ 349.497923][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.815'. [ 349.965814][ T5772] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 350.139491][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.820'. [ 350.166952][ T5772] usb 4-1: Using ep0 maxpacket: 32 [ 350.192685][ T5772] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 350.221677][ T5772] usb 4-1: config 0 has no interface number 0 [ 350.252279][ T5772] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.303557][ T5772] usb 4-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.335134][ T5772] usb 4-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 350.374589][ T5772] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 350.412630][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.471037][ T5772] usb 4-1: config 0 descriptor?? [ 350.736068][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.818'. [ 350.993560][ T5772] usbhid 4-1:0.6: can't add hid device: -71 [ 351.024896][ T5772] usbhid: probe of 4-1:0.6 failed with error -71 [ 351.045406][ T5772] usb 4-1: USB disconnect, device number 10 [ 353.032966][ T8252] netlink: 'syz.1.827': attribute type 2 has an invalid length. [ 353.042925][ T8252] netlink: 224 bytes leftover after parsing attributes in process `syz.1.827'. [ 353.752252][ T8254] comedi: No check for data length of config insn id 53517 is implemented [ 353.761443][ T8254] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 353.770710][ T8254] comedi: Assuming n=15 is correct [ 354.178149][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.829'. [ 354.665726][ T8281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 355.954035][ T8292] netlink: 'syz.0.837': attribute type 2 has an invalid length. [ 355.961951][ T8292] netlink: 224 bytes leftover after parsing attributes in process `syz.0.837'. [ 355.983541][ T8291] comedi: No check for data length of config insn id 53517 is implemented [ 355.992426][ T8291] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 356.002453][ T8291] comedi: Assuming n=15 is correct [ 357.097809][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 358.006881][ T5812] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 358.274721][ T5812] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 358.309810][ T5812] usb 4-1: config 0 has no interface number 0 [ 358.334415][ T5812] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 358.362491][ T5812] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 358.382290][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 358.399335][ T8322] comedi: No check for data length of config insn id 53517 is implemented [ 358.408290][ T8322] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 358.417578][ T8322] comedi: Assuming n=15 is correct [ 358.438684][ T5812] usb 4-1: Manufacturer: syz [ 358.446334][ T5812] usb 4-1: SerialNumber: syz [ 358.469924][ T5812] usb 4-1: config 0 descriptor?? [ 358.735870][ T5812] usbtouchscreen 4-1:0.214: Failed to read FW rev: 12 [ 358.772099][ T5812] usbtouchscreen: probe of 4-1:0.214 failed with error -5 [ 359.366905][ T8333] netlink: 'syz.0.849': attribute type 2 has an invalid length. [ 359.374842][ T8333] netlink: 224 bytes leftover after parsing attributes in process `syz.0.849'. [ 360.907174][ T5812] usb 4-1: USB disconnect, device number 11 [ 362.144915][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.854'. [ 362.322976][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.378955][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.893539][ T8360] comedi: No check for data length of config insn id 53517 is implemented [ 362.902244][ T8360] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 362.911631][ T8360] comedi: Assuming n=15 is correct [ 363.948078][ T8368] (null): rxe_set_mtu: Set mtu to 1024 [ 363.955168][ T8368] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 367.243983][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.866'. [ 367.373425][ T8394] comedi: No check for data length of config insn id 53517 is implemented [ 367.382190][ T8394] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 367.391553][ T8394] comedi: Assuming n=15 is correct [ 368.826701][ T8403] (null): rxe_set_mtu: Set mtu to 1024 [ 368.833479][ T8403] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 372.389670][ T8033] infiniband syz1: set down [ 372.427117][ T23] syz1: rxe_query_port: returned err = -19 [ 372.465272][ T5830] syz1: rxe_query_port: returned err = -19 [ 372.492410][ T5830] infiniband syz1: ib_query_port failed (-19) [ 372.607707][ T23] syz1: rxe_query_port: returned err = -19 [ 372.646467][ T11] smc: removing ib device syz1 [ 374.611679][ T8429] comedi: No check for data length of config insn id 53517 is implemented [ 374.622283][ T8429] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 374.632110][ T8429] comedi: Assuming n=15 is correct [ 374.906644][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.879'. [ 376.186631][ T8442] (null): rxe_set_mtu: Set mtu to 1024 [ 376.192851][ T8442] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 376.960845][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.111947][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.219354][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.358311][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.377424][ T8448] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 377.412184][ T8452] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 377.412184][ T8452] program syz.0.882 not setting count and/or reply_len properly [ 379.134415][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 379.287348][ T11] tipc: Left network mode [ 379.469365][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.476132][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.349555][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.362056][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.376890][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.401957][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.418386][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.434428][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.816507][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 382.030580][ T23] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 382.042948][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 382.052788][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.074614][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.105744][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.137621][ T23] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 382.185632][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.226189][ T23] usb 2-1: config 0 descriptor?? [ 382.375482][ T8490] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 382.649329][ T23] usbhid 2-1:0.0: can't add hid device: -71 [ 382.670172][ T23] usbhid: probe of 2-1:0.0 failed with error -71 [ 382.716934][ T23] usb 2-1: USB disconnect, device number 15 [ 383.800495][ T5776] Bluetooth: hci0: command tx timeout [ 384.211192][ T8475] chnl_net:caif_netlink_parms(): no params data found [ 384.272073][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 385.877251][ T5776] Bluetooth: hci0: command tx timeout [ 386.206549][ T23] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 386.375641][ T23] usb 2-1: device descriptor read/64, error -71 [ 386.431944][ T8475] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.445759][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.461826][ T8475] bridge_slave_0: entered allmulticast mode [ 386.481278][ T8475] bridge_slave_0: entered promiscuous mode [ 386.526941][ T8475] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.560251][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.573419][ T8475] bridge_slave_1: entered allmulticast mode [ 386.581643][ T8475] bridge_slave_1: entered promiscuous mode [ 386.656684][ T11] hsr_slave_0: left promiscuous mode [ 386.667137][ T23] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 386.675766][ T11] hsr_slave_1: left promiscuous mode [ 386.690868][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.722886][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.736566][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.744140][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.767865][ T11] bridge_slave_1: left allmulticast mode [ 386.773768][ T11] bridge_slave_1: left promiscuous mode [ 386.797409][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.819179][ T11] bridge_slave_0: left allmulticast mode [ 386.825179][ T11] bridge_slave_0: left promiscuous mode [ 386.835740][ T23] usb 2-1: device descriptor read/64, error -71 [ 386.856645][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.941668][ T11] veth1_macvtap: left promiscuous mode [ 386.949275][ T11] veth0_macvtap: left promiscuous mode [ 386.955239][ T11] veth1_vlan: left promiscuous mode [ 386.961195][ T23] usb usb2-port1: attempt power cycle [ 386.986107][ T11] veth0_vlan: left promiscuous mode [ 387.405959][ T23] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 387.448882][ T23] usb 2-1: device descriptor read/8, error -71 [ 387.565854][ T5830] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 387.735801][ T23] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 387.760503][ T5830] usb 3-1: Using ep0 maxpacket: 32 [ 387.783090][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.794560][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.804482][ T5830] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 387.806764][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.814117][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.830445][ T5830] usb 3-1: config 0 descriptor?? [ 387.842937][ T23] usb 2-1: device descriptor read/8, error -71 [ 387.850383][ T5830] hub 3-1:0.0: USB hub found [ 387.949786][ T5776] Bluetooth: hci0: command tx timeout [ 387.975928][ T11] team0 (unregistering): Port device team_slave_1 removed [ 387.978473][ T23] usb usb2-port1: unable to enumerate USB device [ 388.043333][ T11] team0 (unregistering): Port device team_slave_0 removed [ 388.067515][ T5830] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 388.121906][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.187113][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.495114][ T5830] usbhid 3-1:0.0: can't add hid device: -71 [ 388.507391][ T5830] usbhid: probe of 3-1:0.0 failed with error -71 [ 388.546831][ T5830] usb 3-1: USB disconnect, device number 10 [ 388.677824][ T11] bond0 (unregistering): Released all slaves [ 388.809808][ T8475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.834584][ T8475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.976489][ T8475] team0: Port device team_slave_0 added [ 388.999736][ T8475] team0: Port device team_slave_1 added [ 389.104043][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.147447][ T8546] netlink: 'syz.0.904': attribute type 2 has an invalid length. [ 389.155340][ T8546] netlink: 84 bytes leftover after parsing attributes in process `syz.0.904'. [ 389.165805][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.192029][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.291927][ T8475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.435914][ T8550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 390.036242][ T5776] Bluetooth: hci0: command tx timeout [ 390.498079][ T8475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.508163][ T8475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.600974][ T8475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.648244][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 390.849428][ T8475] hsr_slave_0: entered promiscuous mode [ 390.901841][ T8475] hsr_slave_1: entered promiscuous mode [ 390.908973][ T8475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.929365][ T8475] Cannot create hsr debugfs directory [ 391.571522][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 391.908350][ T8475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 391.966634][ T8475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.035345][ T8475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.118721][ T8475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.476029][ T5830] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 392.517214][ T8475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.588206][ T8475] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.624276][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.631554][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.645821][ T5830] usb 3-1: device descriptor read/64, error -71 [ 392.701733][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.709257][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.925916][ T5830] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 393.109176][ T5830] usb 3-1: device descriptor read/64, error -71 [ 393.226196][ T5830] usb usb3-port1: attempt power cycle [ 393.665690][ T5830] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 394.310919][ T8475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.320086][ T5830] usb 3-1: device descriptor read/8, error -71 [ 394.610054][ T5830] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 394.659603][ T5830] usb 3-1: device descriptor read/8, error -71 [ 394.786873][ T5830] usb usb3-port1: unable to enumerate USB device [ 395.065440][ T8475] veth0_vlan: entered promiscuous mode [ 395.094748][ T8475] veth1_vlan: entered promiscuous mode [ 395.302364][ T8475] veth0_macvtap: entered promiscuous mode [ 395.352173][ T8475] veth1_macvtap: entered promiscuous mode [ 395.424225][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.482866][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.528725][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.586029][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.629237][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.676663][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 395.711170][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.745170][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.790868][ T8475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.802398][ T8475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.819587][ T8475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.879033][ T8475] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.895809][ T8475] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.937549][ T8475] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.976027][ T8475] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.502705][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.506331][ T23] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 396.528184][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.539500][ T8667] comedi: No check for data length of config insn id 53517 is implemented [ 396.550873][ T8667] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 396.562847][ T8667] comedi: Assuming n=15 is correct [ 396.767522][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 396.805121][ T23] usb 3-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config [ 396.855989][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 396.921491][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 396.976532][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 397.055626][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.072619][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.111514][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 397.115231][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.123558][ T23] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 397.185834][ T23] usb 3-1: Manufacturer: syz [ 397.197124][ T23] usb 3-1: config 0 descriptor?? [ 397.665687][ T23] rc_core: IR keymap rc-hauppauge not found [ 397.671734][ T23] Registered IR keymap rc-empty [ 397.712658][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 397.777618][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 397.829461][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 397.912064][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 397.948899][ T1099] tipc: Left network mode [ 397.970041][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.016263][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.071558][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.128410][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.175901][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.249421][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.315824][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.355731][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.405971][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.465806][ T23] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 398.471238][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.494859][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.513897][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.518131][ T23] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 398.546543][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 398.559813][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.578164][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 398.585498][ T23] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 398.601450][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.639543][ T23] usb 3-1: USB disconnect, device number 15 [ 398.767516][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 398.783645][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.817053][ T5830] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.851889][ T5830] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 398.873654][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.912074][ T5830] usb 5-1: Product: syz [ 398.920967][ T5830] usb 5-1: Manufacturer: syz [ 398.945528][ T5830] usb 5-1: SerialNumber: syz [ 398.974917][ T5830] usb 5-1: config 0 descriptor?? [ 399.301455][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.315418][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.324987][ T8709] infiniband syz2: set active [ 399.332819][ T8709] infiniband syz2: set active [ 400.145089][ T5830] usb 5-1: USB disconnect, device number 2 [ 400.586095][ T5830] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 400.671657][ T5778] Bluetooth: hci1: command tx timeout [ 400.789312][ T5830] usb 5-1: Using ep0 maxpacket: 32 [ 400.816049][ T5830] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.846878][ T5830] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 400.883213][ T5830] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 400.945505][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.975117][ T5830] usb 5-1: Product: syz [ 400.991261][ T5830] usb 5-1: Manufacturer: syz [ 401.031762][ T5830] usb 5-1: SerialNumber: syz [ 401.049077][ T5830] usb 5-1: config 0 descriptor?? [ 401.085875][ T1099] hsr_slave_0: left promiscuous mode [ 401.107550][ T1099] hsr_slave_1: left promiscuous mode [ 401.120376][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.139876][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.164839][ T1099] bridge_slave_1: left allmulticast mode [ 401.172089][ T1099] bridge_slave_1: left promiscuous mode [ 401.181720][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.193138][ T1099] bridge_slave_0: left allmulticast mode [ 401.202660][ T1099] bridge_slave_0: left promiscuous mode [ 401.209921][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.280588][ T5830] usb 5-1: USB disconnect, device number 3 [ 403.585713][ T5778] Bluetooth: hci1: command tx timeout [ 405.549584][ T8] IPVS: starting estimator thread 0... [ 405.562009][ T8752] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 405.626472][ T5778] Bluetooth: hci1: command tx timeout [ 405.649588][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 405.665860][ T8753] IPVS: using max 17 ests per chain, 40800 per kthread [ 405.906282][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 407.295494][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.389897][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.560628][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.296266][ T5778] Bluetooth: hci1: command tx timeout [ 411.720814][ T1099] bond0 (unregistering): Released all slaves [ 411.894151][ T8693] chnl_net:caif_netlink_parms(): no params data found [ 412.274203][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.295958][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.322776][ T8693] bridge_slave_0: entered allmulticast mode [ 412.349085][ T8693] bridge_slave_0: entered promiscuous mode [ 412.374955][ T8693] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.388964][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.431860][ T8693] bridge_slave_1: entered allmulticast mode [ 412.444195][ T8693] bridge_slave_1: entered promiscuous mode [ 412.488307][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 412.567808][ T8693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.632762][ T8693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.658200][ T8] usb 3-1: device descriptor read/64, error -71 [ 412.785373][ T8801] comedi: No check for data length of config insn id 53517 is implemented [ 412.794309][ T8801] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 412.803639][ T8801] comedi: Assuming n=15 is correct [ 412.937405][ T8693] team0: Port device team_slave_0 added [ 412.963909][ T8693] team0: Port device team_slave_1 added [ 413.219588][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.237339][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.288266][ T8693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.302875][ T8693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.310120][ T8693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.355915][ T8693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.016402][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 415.142139][ T8693] hsr_slave_0: entered promiscuous mode [ 415.174898][ T8693] hsr_slave_1: entered promiscuous mode [ 415.195723][ T8] usb 3-1: device descriptor read/64, error -71 [ 415.207186][ T8693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.235810][ T8693] Cannot create hsr debugfs directory [ 415.316074][ T8] usb usb3-port1: attempt power cycle [ 415.421628][ T1099] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.633015][ T1099] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.812856][ T1099] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.943365][ T1099] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.317857][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 416.328640][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 416.337783][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 416.359106][ T8693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.377272][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.387686][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 416.396369][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.432744][ T8693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.557891][ T8693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.587162][ T8693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 417.236907][ T8693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.521253][ T8693] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.651796][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.659267][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.935228][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.943019][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.062392][ T8693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.211939][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 418.426081][ T5776] Bluetooth: hci0: command tx timeout [ 418.702205][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.732526][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.826088][ T1099] hsr_slave_0: left promiscuous mode [ 418.844684][ T1099] hsr_slave_1: left promiscuous mode [ 418.874273][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.883174][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.892047][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.899767][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.916588][ T1099] bridge_slave_1: left allmulticast mode [ 418.922388][ T1099] bridge_slave_1: left promiscuous mode [ 418.928933][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.940966][ T1099] bridge_slave_0: left allmulticast mode [ 418.954636][ T1099] bridge_slave_0: left promiscuous mode [ 418.961266][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.008357][ T1099] veth1_macvtap: left promiscuous mode [ 419.014075][ T1099] veth0_macvtap: left promiscuous mode [ 419.019984][ T1099] veth1_vlan: left promiscuous mode [ 419.025361][ T1099] veth0_vlan: left promiscuous mode [ 419.270972][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 419.290014][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 419.299077][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 419.321745][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 419.329871][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 419.339205][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.288485][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 420.359462][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 420.432624][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.503299][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.515375][ T5778] Bluetooth: hci0: command tx timeout [ 421.033276][ T1099] bond0 (unregistering): Released all slaves [ 421.112435][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.129168][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.245763][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.253160][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.260796][ T8817] bridge_slave_0: entered allmulticast mode [ 421.269411][ T8817] bridge_slave_0: entered promiscuous mode [ 421.281585][ T8693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.317965][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.325197][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.346129][ T8880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.351694][ T8817] bridge_slave_1: entered allmulticast mode [ 421.375182][ T8817] bridge_slave_1: entered promiscuous mode [ 421.379447][ T8880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.390459][ T5778] Bluetooth: hci3: command tx timeout [ 421.520614][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.576258][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.708448][ T8817] team0: Port device team_slave_0 added [ 421.729660][ T8817] team0: Port device team_slave_1 added [ 421.825853][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.832891][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.905716][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.928568][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.956480][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.985045][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.136054][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.202153][ T8817] hsr_slave_0: entered promiscuous mode [ 422.218863][ T8817] hsr_slave_1: entered promiscuous mode [ 422.235743][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.243471][ T8817] Cannot create hsr debugfs directory [ 422.313385][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.449626][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.542050][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.599316][ T5778] Bluetooth: hci0: command tx timeout [ 422.627329][ T8693] veth0_vlan: entered promiscuous mode [ 422.747423][ T8693] veth1_vlan: entered promiscuous mode [ 422.919888][ T1099] tipc: Left network mode [ 422.958218][ T8693] veth0_macvtap: entered promiscuous mode [ 423.029035][ T8693] veth1_macvtap: entered promiscuous mode [ 423.187541][ T8867] chnl_net:caif_netlink_parms(): no params data found [ 423.214365][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.229613][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.241670][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.258375][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.273591][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.353643][ T8817] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.466950][ T5778] Bluetooth: hci3: command tx timeout [ 423.478734][ T8817] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.499733][ T8817] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.534519][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.552627][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.562989][ T8693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.579579][ T8693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.595187][ T8693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.665296][ T8817] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.779757][ T8693] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.805893][ T8693] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.824943][ T8693] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.845742][ T8693] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.008239][ T8867] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.022101][ T8867] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.031091][ T8867] bridge_slave_0: entered allmulticast mode [ 424.038897][ T8867] bridge_slave_0: entered promiscuous mode [ 424.062495][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.075849][ T8867] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.083386][ T8867] bridge_slave_1: entered allmulticast mode [ 424.097924][ T8867] bridge_slave_1: entered promiscuous mode [ 424.240326][ T8867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.319689][ T8867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.530134][ T8867] team0: Port device team_slave_0 added [ 424.551548][ T8867] team0: Port device team_slave_1 added [ 424.665966][ T5778] Bluetooth: hci0: command tx timeout [ 424.673291][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.683030][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.711908][ T8867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.737804][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.756955][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.780540][ T8867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.811208][ T8867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.849673][ T8867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.156943][ T8867] hsr_slave_0: entered promiscuous mode [ 425.176346][ T8867] hsr_slave_1: entered promiscuous mode [ 425.204989][ T8867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.216793][ T8867] Cannot create hsr debugfs directory [ 425.226541][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.234919][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.294171][ T1099] hsr_slave_0: left promiscuous mode [ 425.326148][ T1099] hsr_slave_1: left promiscuous mode [ 425.334858][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.348682][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.360979][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.378880][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.388047][ T1099] bridge_slave_1: left allmulticast mode [ 425.393792][ T1099] bridge_slave_1: left promiscuous mode [ 425.400233][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.414689][ T1099] bridge_slave_0: left allmulticast mode [ 425.428266][ T1099] bridge_slave_0: left promiscuous mode [ 425.434901][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.475258][ T1099] veth1_macvtap: left promiscuous mode [ 425.482953][ T1099] veth0_macvtap: left promiscuous mode [ 425.492476][ T1099] veth1_vlan: left promiscuous mode [ 425.501628][ T1099] veth0_vlan: left promiscuous mode [ 425.546573][ T5778] Bluetooth: hci3: command tx timeout [ 425.725208][ T1099] infiniband syz2: set down [ 426.082555][ T1099] bond1 (unregistering): Released all slaves [ 426.674625][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 426.729598][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 426.784594][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.847268][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.904471][ T6165] smc: removing ib device syz2 [ 427.323318][ T1099] bond0 (unregistering): Released all slaves [ 427.412658][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.453677][ T23] infiniband syz2: ib_query_port failed (-19) [ 427.490072][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.982'. [ 427.635813][ T5778] Bluetooth: hci3: command tx timeout [ 427.781610][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.751373][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.758759][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.815686][ T23] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 429.919520][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.926994][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.008213][ T23] usb 6-1: device descriptor read/64, error -71 [ 430.304899][ T8817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.315804][ T23] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 430.361138][ T8867] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.409614][ T8867] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.450977][ T8867] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.495674][ T23] usb 6-1: device descriptor read/64, error -71 [ 430.532941][ T8867] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.645659][ T23] usb usb6-port1: attempt power cycle [ 431.003117][ T8867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.118675][ T8867] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.528567][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.536016][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.699253][ T9001] syzkaller0: entered promiscuous mode [ 431.724475][ T9001] syzkaller0: entered allmulticast mode [ 431.822103][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.829440][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.044282][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.064350][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.987'. [ 432.178079][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.987'. [ 432.494988][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.989'. [ 432.721016][ T8867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.111100][ T8817] veth0_vlan: entered promiscuous mode [ 433.202628][ T8817] veth1_vlan: entered promiscuous mode [ 434.234955][ T8817] veth0_macvtap: entered promiscuous mode [ 434.301883][ T8817] veth1_macvtap: entered promiscuous mode [ 434.368367][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.401779][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.446117][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.588657][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.767904][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.548941][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.615008][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.664496][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.715380][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.743924][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.372963][ T8817] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.384094][ T8817] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.409124][ T8817] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.425994][ T8817] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.521660][ T8867] veth0_vlan: entered promiscuous mode [ 437.608488][ T8867] veth1_vlan: entered promiscuous mode [ 437.657335][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.734842][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.783604][ T8867] veth0_macvtap: entered promiscuous mode [ 437.809798][ T8867] veth1_macvtap: entered promiscuous mode [ 437.832556][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.841288][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.931060][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.952026][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.975742][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.994249][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.007126][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 438.018196][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.034496][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.037697][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 438.053514][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.076502][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.089432][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.115707][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.135725][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.156155][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.175997][ T8867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 438.195958][ T8867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 438.217831][ T8867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.245023][ T8867] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.256273][ T27] usb 6-1: Using ep0 maxpacket: 32 [ 438.270680][ T8867] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.285956][ T27] usb 6-1: config 1 interface 0 has no altsetting 0 [ 438.304900][ T8867] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.315435][ T8867] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.325310][ T27] usb 6-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40 [ 438.346786][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.355160][ T27] usb 6-1: Product: syz [ 438.380812][ T27] usb 6-1: Manufacturer: syz [ 438.399516][ T27] usb 6-1: SerialNumber: syz [ 438.581434][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.626501][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.742285][ T27] usbhid 6-1:1.0: can't add hid device: -71 [ 438.773439][ T27] usbhid: probe of 6-1:1.0 failed with error -71 [ 438.802591][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.834526][ T27] usb 6-1: USB disconnect, device number 5 [ 438.866192][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.916169][ T5772] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 439.116268][ T5772] usb 7-1: Using ep0 maxpacket: 32 [ 439.133407][ T5772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.168250][ T5772] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.190769][ T5772] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 439.204997][ T5772] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.228742][ T5772] usb 7-1: config 0 descriptor?? [ 439.243691][ T5772] hub 7-1:0.0: USB hub found [ 439.449975][ T5772] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 439.859201][ T5772] usbhid 7-1:0.0: can't add hid device: -71 [ 439.876230][ T5772] usbhid: probe of 7-1:0.0 failed with error -71 [ 439.958641][ T5772] usb 7-1: USB disconnect, device number 2 [ 440.912807][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.920467][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.722248][ T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 441.745717][ T7635] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 441.926608][ T27] usb 7-1: too many configurations: 82, using maximum allowed: 8 [ 441.938440][ T7635] usb 6-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 441.967900][ T7635] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.989347][ T27] usb 7-1: config index 0 descriptor too short (expected 65462, got 72) [ 442.005782][ T7635] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 204 [ 442.026609][ T27] usb 7-1: config index 1 descriptor too short (expected 65462, got 72) [ 442.045954][ T7635] usb 6-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 442.056360][ T27] usb 7-1: config index 2 descriptor too short (expected 65462, got 72) [ 442.096147][ T7635] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.116096][ T27] usb 7-1: config index 3 descriptor too short (expected 65462, got 72) [ 442.127073][ T27] usb 7-1: config index 4 descriptor too short (expected 65462, got 72) [ 442.147171][ T7635] usb 6-1: config 0 descriptor?? [ 442.174519][ T27] usb 7-1: config index 5 descriptor too short (expected 65462, got 72) [ 442.215203][ T27] usb 7-1: config index 6 descriptor too short (expected 65462, got 72) [ 442.252726][ T27] usb 7-1: config index 7 descriptor too short (expected 65462, got 72) [ 442.275287][ T27] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.303236][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.316686][ T27] usb 7-1: Product: syz [ 442.321025][ T27] usb 7-1: Manufacturer: syz [ 442.335654][ T27] usb 7-1: SerialNumber: syz [ 442.372415][ T27] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 442.440787][ T7635] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.629541][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 442.828566][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 442.864943][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 442.887362][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xEE, skipping [ 442.946172][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 442.984977][ T9] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 443.025692][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 443.081683][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x75, skipping [ 443.114556][ T9] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 443.125138][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.183231][ T9] usb 8-1: Product: syz [ 443.202871][ T9] usb 8-1: Manufacturer: syz [ 443.225344][ T9] usb 8-1: SerialNumber: syz [ 443.327867][ T9] usb 8-1: config 0 descriptor?? [ 443.364860][ T9149] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 443.545727][ T7635] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 443.562076][ T7635] ath9k_htc: Failed to initialize the device [ 443.641659][ T7635] usb 7-1: ath9k_htc: USB layer deinitialized [ 443.986555][ T9] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 444.220534][ T9] snd-usb-audio: probe of 8-1:0.0 failed with error -2 [ 444.281931][ T9] usb 8-1: USB disconnect, device number 2 [ 444.461509][ T9164] udevd[9164]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.523489][ T5830] usb 6-1: USB disconnect, device number 6 [ 445.098754][ T7635] usb 7-1: USB disconnect, device number 3 [ 445.231334][ T9184] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 446.145724][ T5831] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 446.370865][ T5831] usb 8-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 446.392607][ T5831] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.413819][ T5831] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 204 [ 446.437793][ T5831] usb 8-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 446.465682][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.502203][ T5831] usb 8-1: config 0 descriptor?? [ 448.932410][ T27] usb 8-1: USB disconnect, device number 3 [ 449.777193][ T9274] tmpfs: Unknown parameter 'grpquota_block_hardlim' [ 450.811425][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 451.006000][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 451.028022][ T23] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 451.046237][ T9297] syz.7.1042[9297]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 451.055916][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.055949][ T23] usb 6-1: Product: syz [ 451.055967][ T23] usb 6-1: Manufacturer: syz [ 451.055984][ T23] usb 6-1: SerialNumber: syz [ 451.118371][ T23] usb 6-1: config 0 descriptor?? [ 451.577103][ T23] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 451.598450][ T23] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 451.708208][ T23] peak_usb: probe of 6-1:0.0 failed with error -71 [ 451.751638][ T23] usb 6-1: USB disconnect, device number 7 [ 451.776002][ T5831] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 452.001215][ T5831] usb 8-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 452.030623][ T5831] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.076043][ T5831] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 452.085365][ T5831] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.124812][ T5831] usb 8-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 452.151108][ T5831] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.193498][ T5831] usb 8-1: config 0 descriptor?? [ 452.234574][ T5831] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 452.295995][ T9318] netlink: 'syz.6.1047': attribute type 10 has an invalid length. [ 452.384678][ T9318] team0: Port device dummy0 added [ 452.581552][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 453.875918][ T5831] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 454.067103][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 454.075136][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 454.089252][ T5831] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.106027][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.133515][ T5831] usb 6-1: config 0 has no interface number 0 [ 454.145844][ T5831] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 454.175714][ T5831] usb 6-1: config 0 interface 1 has no altsetting 0 [ 454.186700][ T5831] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 454.206345][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.224669][ T5831] usb 6-1: Product: syz [ 454.229321][ T5831] usb 6-1: Manufacturer: syz [ 454.234051][ T5831] usb 6-1: SerialNumber: syz [ 454.257181][ T5831] usb 6-1: config 0 descriptor?? [ 454.312049][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 454.321682][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.348326][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.359818][ T23] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.369930][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.396864][ T23] usb 7-1: config 0 descriptor?? [ 454.410481][ T23] hub 7-1:0.0: USB hub found [ 454.746104][ T9] usb 8-1: USB disconnect, device number 4 [ 454.888924][ T5831] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 454.905260][ T5831] cx231xx 6-1:0.1: Not found matching IAD interface [ 454.912919][ T23] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 454.923944][ T5831] usb 6-1: USB disconnect, device number 8 [ 455.389504][ T23] usbhid 7-1:0.0: can't add hid device: -71 [ 455.397170][ T23] usbhid: probe of 7-1:0.0 failed with error -71 [ 455.452649][ T23] usb 7-1: USB disconnect, device number 4 [ 455.943349][ T9376] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1056'. [ 455.957934][ T9376] IPv6: sit1: Disabled Multicast RS [ 455.964343][ T9376] sit1: entered allmulticast mode [ 456.246048][ T5831] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 456.455727][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 456.484365][ T5831] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.503854][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.545397][ T5831] usb 6-1: config 0 has no interface number 0 [ 456.559493][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1060'. [ 456.562816][ T5831] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 456.635704][ T5831] usb 6-1: config 0 interface 1 has no altsetting 0 [ 456.662448][ T5831] usb 6-1: string descriptor 0 read error: -71 [ 456.717350][ T5831] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 456.776157][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.822761][ T5831] usb 6-1: config 0 descriptor?? [ 456.836510][ T5831] usb 6-1: can't set config #0, error -71 [ 456.876105][ T5831] usb 6-1: USB disconnect, device number 9 [ 457.587452][ T8882] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 458.225668][ T5831] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 458.447080][ T5831] usb 6-1: Using ep0 maxpacket: 32 [ 458.485799][ T23] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 458.494402][ T5831] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 458.526000][ T5831] usb 6-1: config 0 has no interface number 0 [ 458.542817][ T5831] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 458.579417][ T5831] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 458.623289][ T5831] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 458.648936][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.653462][ T8882] usb 8-1: device descriptor read/64, error -71 [ 458.698064][ T23] usb 7-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 458.714467][ T5831] usb 6-1: Product: syz [ 458.728993][ T5831] usb 6-1: Manufacturer: syz [ 458.734059][ T5831] usb 6-1: SerialNumber: syz [ 458.743349][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.770308][ T5831] usb 6-1: config 0 descriptor?? [ 458.789916][ T23] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 458.824214][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 458.840395][ T5831] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 458.901053][ T23] usb 7-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 458.935715][ T8882] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 458.957525][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.030208][ T5831] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 459.048915][ T23] usb 7-1: config 0 descriptor?? [ 459.094276][ T5831] quatech2: probe of 6-1:0.51 failed with error -90 [ 459.129599][ T23] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 459.247741][ T23] usb 6-1: USB disconnect, device number 10 [ 460.320374][ T788] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 460.524855][ T788] usb 6-1: Using ep0 maxpacket: 32 [ 460.560552][ T788] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 460.617352][ T788] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.666064][ T788] usb 6-1: Product: syz [ 460.680914][ T788] usb 6-1: Manufacturer: syz [ 460.714136][ T788] usb 6-1: SerialNumber: syz [ 460.766075][ T788] usb 6-1: config 0 descriptor?? [ 460.934903][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.948283][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.016033][ T788] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 461.036180][ T788] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 461.106376][ T788] peak_usb: probe of 6-1:0.0 failed with error -71 [ 461.126731][ T788] usb 6-1: USB disconnect, device number 11 [ 461.263516][ T23] usb 7-1: USB disconnect, device number 5 [ 461.633137][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.674458][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.091490][ T9474] ------------[ cut here ]------------ [ 462.097593][ T9474] WARNING: CPU: 1 PID: 9474 at security/landlock/fs.c:748 collect_domain_accesses+0x7b6/0x820 [ 462.109334][ T9474] Modules linked in: [ 462.113436][ T9474] CPU: 1 PID: 9474 Comm: syz.5.1076 Not tainted syzkaller #0 [ 462.121483][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.132265][ T9474] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 462.138862][ T9474] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 6b 98 fd 31 ed eb dd e8 d6 6b 98 fd 0f 0b 40 b5 01 eb da e8 ca 6b 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 462.159143][ T9474] RSP: 0018:ffffc90005147ab0 EFLAGS: 00010283 [ 462.165485][ T9474] RAX: ffffffff83eeb096 RBX: ffff888079273be8 RCX: 0000000000080000 [ 462.173843][ T9474] RDX: ffffc900032e9000 RSI: 000000000000050f RDI: 0000000000000510 [ 462.183026][ T9474] RBP: 1ffff1100bd5bf15 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 462.193870][ T9474] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000001 [ 462.203084][ T9474] R13: 0000000000000000 R14: ffff888079273be8 R15: 0000000000002004 [ 462.211583][ T9474] FS: 00007f9d307136c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 462.220770][ T9474] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.228059][ T9474] CR2: 000000110c2b2e6f CR3: 0000000064ff5000 CR4: 00000000003506e0 [ 462.236724][ T9474] Call Trace: [ 462.240713][ T9474] [ 462.243821][ T9474] current_check_refer_path+0x566/0xc50 [ 462.250174][ T9474] ? hook_file_truncate+0xc0/0xc0 [ 462.256492][ T9474] ? _raw_spin_unlock+0x28/0x40 [ 462.261538][ T9474] ? d_set_d_op+0x25f/0x370 [ 462.266585][ T9474] security_path_rename+0x16c/0x200 [ 462.271985][ T9474] do_renameat2+0x6be/0xce0 [ 462.277084][ T9474] ? __lock_acquire+0x7d40/0x7d40 [ 462.282419][ T9474] ? fsnotify_move+0x4e0/0x4e0 [ 462.287803][ T9474] ? __check_object_size+0x506/0xa20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.293813][ T9474] ? getname_flags+0x20a/0x500 [ 462.298916][ T9474] __x64_sys_renameat2+0xd2/0xe0 [ 462.303993][ T9474] do_syscall_64+0x55/0xa0 [ 462.308975][ T9474] ? clear_bhb_loop+0x40/0x90 [ 462.313879][ T9474] ? clear_bhb_loop+0x40/0x90 [ 462.318831][ T9474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.324820][ T9474] RIP: 0033:0x7f9d2f79c799 [ 462.329410][ T9474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.349083][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.355498][ T9474] RSP: 002b:00007f9d30713028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 462.364565][ T9474] RAX: ffffffffffffffda RBX: 00007f9d2fa15fa0 RCX: 00007f9d2f79c799 [ 462.372686][ T9474] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 462.380860][ T9474] RBP: 00007f9d2f832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 462.389193][ T9474] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 462.397982][ T9474] R13: 00007f9d2fa16038 R14: 00007f9d2fa15fa0 R15: 00007ffc8372ebc8 [ 462.406363][ T9474] [ 462.409492][ T9474] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 462.417042][ T9474] CPU: 1 PID: 9474 Comm: syz.5.1076 Not tainted syzkaller #0 [ 462.424742][ T9474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 462.435114][ T9474] Call Trace: [ 462.438453][ T9474] [ 462.441448][ T9474] dump_stack_lvl+0x18c/0x250 [ 462.446206][ T9474] ? show_regs_print_info+0x20/0x20 [ 462.451663][ T9474] ? load_image+0x400/0x400 [ 462.456250][ T9474] panic+0x2dc/0x730 [ 462.460673][ T9474] ? bpf_jit_dump+0xd0/0xd0 [ 462.465305][ T9474] __warn+0x2e0/0x470 [ 462.469376][ T9474] ? collect_domain_accesses+0x7b6/0x820 [ 462.475234][ T9474] ? collect_domain_accesses+0x7b6/0x820 [ 462.481331][ T9474] report_bug+0x2be/0x4f0 [ 462.485982][ T9474] ? collect_domain_accesses+0x7b6/0x820 [ 462.491774][ T9474] ? collect_domain_accesses+0x7b6/0x820 [ 462.497478][ T9474] ? collect_domain_accesses+0x7b8/0x820 [ 462.503179][ T9474] handle_bug+0xcf/0x120 [ 462.507765][ T9474] exc_invalid_op+0x1a/0x50 [ 462.512386][ T9474] asm_exc_invalid_op+0x1a/0x20 [ 462.517417][ T9474] RIP: 0010:collect_domain_accesses+0x7b6/0x820 [ 462.523832][ T9474] Code: e8 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 df 6b 98 fd 31 ed eb dd e8 d6 6b 98 fd 0f 0b 40 b5 01 eb da e8 ca 6b 98 fd <0f> 0b eb e7 89 d1 80 e1 07 80 c1 03 38 c1 0f 8c 0e f9 ff ff 48 89 [ 462.543870][ T9474] RSP: 0018:ffffc90005147ab0 EFLAGS: 00010283 [ 462.550107][ T9474] RAX: ffffffff83eeb096 RBX: ffff888079273be8 RCX: 0000000000080000 [ 462.558231][ T9474] RDX: ffffc900032e9000 RSI: 000000000000050f RDI: 0000000000000510 [ 462.566444][ T9474] RBP: 1ffff1100bd5bf15 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 462.574767][ T9474] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000001 [ 462.582900][ T9474] R13: 0000000000000000 R14: ffff888079273be8 R15: 0000000000002004 [ 462.590951][ T9474] ? collect_domain_accesses+0x7b6/0x820 [ 462.596683][ T9474] current_check_refer_path+0x566/0xc50 [ 462.602409][ T9474] ? hook_file_truncate+0xc0/0xc0 [ 462.607597][ T9474] ? _raw_spin_unlock+0x28/0x40 [ 462.612673][ T9474] ? d_set_d_op+0x25f/0x370 [ 462.617276][ T9474] security_path_rename+0x16c/0x200 [ 462.622557][ T9474] do_renameat2+0x6be/0xce0 [ 462.627123][ T9474] ? __lock_acquire+0x7d40/0x7d40 [ 462.632261][ T9474] ? fsnotify_move+0x4e0/0x4e0 [ 462.637173][ T9474] ? __check_object_size+0x506/0xa20 [ 462.642550][ T9474] ? getname_flags+0x20a/0x500 [ 462.647428][ T9474] __x64_sys_renameat2+0xd2/0xe0 [ 462.652527][ T9474] do_syscall_64+0x55/0xa0 [ 462.657110][ T9474] ? clear_bhb_loop+0x40/0x90 [ 462.661849][ T9474] ? clear_bhb_loop+0x40/0x90 [ 462.666677][ T9474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.672731][ T9474] RIP: 0033:0x7f9d2f79c799 [ 462.677206][ T9474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.697146][ T9474] RSP: 002b:00007f9d30713028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 462.705735][ T9474] RAX: ffffffffffffffda RBX: 00007f9d2fa15fa0 RCX: 00007f9d2f79c799 [ 462.713861][ T9474] RDX: 0000000000000003 RSI: 0000200000000540 RDI: 0000000000000003 [ 462.722157][ T9474] RBP: 00007f9d2f832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 462.730288][ T9474] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 462.738346][ T9474] R13: 00007f9d2fa16038 R14: 00007f9d2fa15fa0 R15: 00007ffc8372ebc8 [ 462.746394][ T9474] [ 462.750147][ T9474] Kernel Offset: disabled [ 462.754620][ T9474] Rebooting in 86400 seconds..