last executing test programs: 13m6.73713327s ago: executing program 32 (id=207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001000004e69e083b868fab320100"], 0x50}}, 0x0) 12m56.014684599s ago: executing program 33 (id=235): landlock_create_ruleset(&(0x7f0000000240)={0x94eb}, 0x18, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x4000, &(0x7f0000000e40)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYBLOB=',fsmagic=0x0000000000000002,smackfsf^oor=smackfstrans-ute,fowner>', @ANYBLOB="d4199c3f003c5c8d6d222e24bfdda0389fe9ebc4333e5d9521a6cc631f653d174fb504401934b83a72449268d54cd62dbbb66d7ba1b35073e60bf699ea6cb1b5923e3a3d5e51423a7c1a13920aea8e6d3c7d53f4aa34acbe0b78df03569d0b620d54f96b33fd4895161524abc937b9d619a3add1c3b57ad5124502de88fe8f0e436f04aded9c4f7b60876d2ac9caa8502b7faa4fe85e7819540dabf8e44ccdd382e5292164879e30f5b039e5f2314adff12c154c627fabadc824eb6d2fc48d1bc75a9dd2589e2c3324cd33f0a8508f6d4a899b6e8b45fec164", @ANYRES64=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc41, &(0x7f0000001100)="$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") sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2404c850}, 0xbfe32b789443a5ca) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) 9m4.72481817s ago: executing program 2 (id=981): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000540)={0x1, 0x8d, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20044404}, 0x20000800) 9m4.105709205s ago: executing program 2 (id=984): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 9m2.701595123s ago: executing program 2 (id=988): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000540)={0x20080522, r0}, &(0x7f0000000580)={0x9, 0x0, 0x5, 0x8001, 0x6, 0x200}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000800)='./file0\x00') fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 9m0.503111353s ago: executing program 2 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) 8m57.498399009s ago: executing program 2 (id=1001): socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) add_key(&(0x7f0000000040)='id_legacy\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0700010018000000000000001c0000001c00000009000000050000000000001102000000ffffffff0700000000000008000000000000302e5f61306100"], 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0}}, 0x10) 8m56.28541633s ago: executing program 2 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4000000) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x40, 0x0, 0x7fff}, 0xc) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x8, 0x800) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000002c0)) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 8m40.462896593s ago: executing program 34 (id=1003): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4000000) madvise(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x2}, 0xc) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x40, 0x0, 0x7fff}, 0xc) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x0, r4}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x602100, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x8, 0x800) ioctl$HIDIOCGNAME(r5, 0x80404806, &(0x7f00000002c0)) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x37, 0xff, 0xfffffffffffffffa}}) 6m56.105031411s ago: executing program 6 (id=1377): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x101940, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000800), 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ftruncate(r3, 0x7ffffffe) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x1, 0x8}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x50) open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r4}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x11, r8, 0x2f2bd000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6m55.868267864s ago: executing program 6 (id=1378): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r4 = socket(0x18, 0x800, 0x0) sendfile(r4, r3, 0x0, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 6m55.28190767s ago: executing program 6 (id=1380): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20980, 0x0) pread64(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4e}, 0x28) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='pvfs2\x00', 0x2200892, 0x0) bind$inet(r4, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146", 0x59, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r7, r6}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6m54.316795517s ago: executing program 6 (id=1381): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x17, 0x3, "c49fe6"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1803}}}, &(0x7f0000000500)={0x34, &(0x7f0000000240)={0x40, 0x6, 0x2b, "802ddd1d3712638e896d30f690a7c6d8e6d9afe195f8c927cf988b71a093ab3720023723e5d5e11ee6aa95"}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x11, {0xf, "38fb07835920c6b39fca6e11483141"}}, &(0x7f0000000340)={0x20, 0x1, 0x1, 0xf}, 0x0}) 6m53.481552468s ago: executing program 6 (id=1383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r4, &(0x7f0000000340)={0x2020}, 0x2065) 6m50.233793093s ago: executing program 6 (id=1389): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) 6m34.997288527s ago: executing program 35 (id=1389): ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0xfeffffff, r2, 0x3, {0x3b4, 0x6d3}, 0x6}, 0x1) 6m12.190004302s ago: executing program 7 (id=1481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r4, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000003c0)={0x9, 0x3, 0x6, 0x4, 0xfffffffd, 0x7fff}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001a00010026bd70000000000002002000", @ANYRES32=0x0, @ANYBLOB="00000000080002000c00006d14000100fc8200"/28], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200008, 0x0) 6m9.860051891s ago: executing program 7 (id=1485): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 6m8.719703844s ago: executing program 7 (id=1489): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r4, &(0x7f00000000c0), 0x12) syz_genetlink_get_family_id$batadv(0x0, r4) 6m7.924748555s ago: executing program 9 (id=1492): syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) 6m7.765787426s ago: executing program 7 (id=1493): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee12f200daf7a4936ce7110ff4117639c2eb4b78c660e677df701905b9aa0339a2884b3e5728a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) 6m6.719305121s ago: executing program 9 (id=1496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="a685b60066bee08d38950f3e484199e0d42c8f0a4ac2d2a5bd6b557a39", 0x1d}], 0x1}}], 0x1, 0x0) 6m4.264377466s ago: executing program 9 (id=1504): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) truncate(0x0, 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x8001}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001900)={{r2}, 0x0, &(0x7f00000018c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, &(0x7f0000000180)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0xee00) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@nogrpid}, {@jqfmt_vfsv0}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@delalloc}, {@nombcache}, {@quota}, {@nolazytime}], [{@fowner_lt}, {@euid_lt}, {@permit_directio}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") socket$kcm(0x10, 0x2, 0x0) r5 = open(0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, 0x0) 6m3.541750104s ago: executing program 7 (id=1508): syz_init_net_socket$ax25(0x3, 0x5, 0xc5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) 6m3.12961237s ago: executing program 9 (id=1512): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0x58) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 6m2.681858333s ago: executing program 7 (id=1514): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) 6m1.682026563s ago: executing program 36 (id=1514): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r1, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000012c0)={r6, 0x8002, 0x7fff, 0x0, 0x0, [], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) 6m0.17053039s ago: executing program 9 (id=1524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x20}]}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x7, 0x70bd2b, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 5m59.89553419s ago: executing program 9 (id=1527): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x6, 0xf, "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", 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 5m44.51614064s ago: executing program 37 (id=1527): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x10001, @local, 0xb}, r2}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private1, 0x206}, {0xa, 0x4e20, 0x0, @mcast2, 0x10001}, r2, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x6, 0xf, "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", 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r2}}, 0xc) 5.173814098s ago: executing program 3 (id=3005): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) syz_open_dev$radio(0x0, 0x0, 0x2) close(0x3) 4.98853747s ago: executing program 3 (id=3008): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) getpgid(0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r2}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r3}, 0x38) 4.025469316s ago: executing program 8 (id=3012): connect$inet6(0xffffffffffffffff, &(0x7f0000000f80)={0xa, 0x4e22, 0xffffffff, @empty, 0x9}, 0x1c) pipe2(&(0x7f0000000000), 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.966520586s ago: executing program 8 (id=3013): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000700)=""/90, 0x5a) 3.909691732s ago: executing program 1 (id=3014): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 3.905138104s ago: executing program 8 (id=3015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000200003801c0000800c000180060001001e1c00000c000a"], 0x4c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.770899167s ago: executing program 8 (id=3017): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="a787000000ff000000"], 0x18}}, 0x0) 3.695291881s ago: executing program 5 (id=3018): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x923986954893969c}, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) 3.693184053s ago: executing program 1 (id=3019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/258, 0x102}, {&(0x7f0000001440)=""/4110, 0x100e}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000040)=""/33, 0x21}, {&(0x7f0000000c00)=""/92, 0x5c}, {&(0x7f0000000780)=""/165, 0xa5}, {&(0x7f0000000340)=""/274, 0x112}, {&(0x7f0000000140)=""/15, 0xf}], 0x8}, 0x20001008}], 0x1, 0x0, 0x0) 3.556454327s ago: executing program 5 (id=3020): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) preadv(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/195, 0xc3}], 0x1, 0x345c9763, 0xfaaf) syz_open_dev$radio(0x0, 0x0, 0x2) close(0x3) 3.553855841s ago: executing program 4 (id=3021): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000059100)={0x1, &(0x7f0000000000)=[{0xa000005, 0x2c, &(0x7f0000000600)=[0x5, 0xfffffffb, 0x1, 0x7, 0x9, 0x6, 0x6, 0x2, 0x4, 0x101, 0x7f, 0xa1acfb4, 0xcd7b, 0xfffffff8, 0x4, 0x7, 0x0, 0xfffffffb, 0x7, 0x63, 0x1, 0x1, 0xffffffff, 0x9, 0x1ff, 0x3, 0xfff, 0x0, 0x68, 0x80000000, 0x5, 0xce, 0x0, 0xffffffff, 0x9, 0x8, 0xd, 0x88, 0x7, 0x3, 0x7ff, 0x4, 0xd674, 0xffff], 0x7fff, 0x10e0}]}) 3.486813393s ago: executing program 1 (id=3022): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) memfd_secret(0x80000) creat(&(0x7f0000000580)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x8}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.443834926s ago: executing program 8 (id=3023): r0 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{}]}}]}}]}}, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc028020", 0x12) 3.367787067s ago: executing program 5 (id=3025): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) 3.366857973s ago: executing program 4 (id=3026): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 3.270249708s ago: executing program 0 (id=3027): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000700)=""/90, 0x5a) 3.238861113s ago: executing program 4 (id=3028): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 3.238394593s ago: executing program 3 (id=3029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8000, 0x5, 0x4000000, 0x10000, 0xd304}, 0x10000, 0x1, 0x3ff, 0x7, 0x7f, 0x5, 0x8, 0x16, 0x1, 0x6, {0x7, 0x7, 0x8, 0x80000001, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048084) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.173557004s ago: executing program 0 (id=3030): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000240)={0xfffffffffffffffa, 0xffffffffffffffff, 'id1\x00'}) socket$alg(0x26, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x1000) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) r4 = dup2(r3, r3) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) readv(r4, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/229, 0xe5}], 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x1) write$vhost_msg_v2(r4, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000340)=""/1, 0x1, 0x0, 0x1, 0x2}}, 0x48) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.980233726s ago: executing program 4 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = timerfd_create(0x0, 0x80800) timerfd_settime(r4, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) mlockall(0x7) syz_emit_ethernet(0x96, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x24040840) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000007c0)={'erspan0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x7, 0x10, 0x6, 0x7fffffff, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x65, 0x0, 0xd, 0x29, 0x0, @multicast1, @remote}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, 0x0, 0x20000000) 2.963129804s ago: executing program 0 (id=3032): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@quota}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4ec, &(0x7f0000000a00)="$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") 2.953365187s ago: executing program 3 (id=3033): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r3, 0x4, 0x42400) 1.741884779s ago: executing program 3 (id=3034): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, 0x0) fchown(r0, 0x0, 0x0) fchmod(r0, 0x50) 1.261656364s ago: executing program 5 (id=3035): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) mkdir(&(0x7f0000000200)='./file0\x00', 0x56) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x10, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000016c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x35, 0x0, 0x1}, 0x28) fcntl$setlease(r4, 0x400, 0x1) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000280)={0x2e, &(0x7f0000000080)=[{0x1d, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x1, @uvalue=0x4}, {0x3}, {0x3, @svalue=0x40004000000}]}, 0x5}, {0x8, '\x00', @buffer={"c4a31076fc6cbf522789141bf36f9baddfafec36f841350d0dafec57db7bd01f", 0x20}}, {0x3d, '\x00', @st={0x4, [{0x3, @svalue=0xfffffffffffffff1}, {0x0, @uvalue=0x3}, {0x3, @uvalue=0x40000000}, {0x1, @svalue}]}, 0x5}, {0x3, '\x00', @st={0x4, [{0x1, @uvalue=0x932c}, {0x0, @svalue=0x2}, {0x2, @svalue=0x10000}, {0x2, @uvalue=0x4}]}, 0x5}, {0x2a, '\x00', @data=0x9c, 0xa69f}, {0x23, '\x00', @buffer={"bb63b02668abfabb3de03a2aad7ea3cf75a29823055ba632bf1321c9766a2003", 0x20}, 0x6}]}) 1.232745158s ago: executing program 8 (id=3036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{0x0}], 0x1}, 0x8000}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00') 1.224136088s ago: executing program 1 (id=3037): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x1, [0x44, 0xfff, 0x6, 0x6, 0xffffffff, 0x400, 0x40, 0xfffffff3, 0x6, 0x4, 0x7ff, 0xed, 0x2, 0x8, 0x3, 0x0, 0x6, 0xfffffff1, 0x99c, 0x3, 0x4000000, 0xfffffffc, 0x3, 0x101, 0xa88, 0x3, 0xb, 0x11c, 0x0, 0x876, 0x3, 0x6, 0x0, 0x7, 0xfffffff8, 0x1, 0x403f, 0x200, 0x2873, 0x3e93, 0xffffffff, 0x9, 0x8, 0x2, 0x2, 0x0, 0x81, 0x6, 0x3, 0x2, 0x0, 0x8000, 0x9, 0x909d, 0x1, 0x6, 0x9, 0x8, 0xcacf, 0x1, 0x3, 0xfffffff9, 0x2, 0x80000000, 0x0, 0x5, 0x8828, 0x81, 0x6, 0x2, 0x8, 0x8, 0xffffffff, 0x6, 0x0, 0x69e0, 0x6, 0x2, 0x800, 0x65, 0x3ff, 0x5, 0x81, 0x4, 0x5, 0x0, 0x7, 0x8, 0x1000, 0x8, 0x1, 0x10001, 0x1, 0x1c5, 0x401, 0x9, 0x7, 0x2, 0x800, 0x400, 0x3, 0x8001, 0xc6, 0xd7, 0x3, 0x0, 0x7, 0xc, 0x4, 0x1000, 0xf8ca, 0x5, 0x6, 0x4, 0x7fff, 0xda, 0x81, 0x7, 0x4, 0x3, 0x91, 0x800, 0xf42, 0x1, 0x6, 0xa, 0x855a, 0x2]}}) 1.174255631s ago: executing program 0 (id=3038): unshare(0x20000400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x80, 0x8000}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 373.563695ms ago: executing program 0 (id=3039): r0 = socket$kcm(0x10, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000300), 0x0, &(0x7f0000000380)={0x0, "fafac0348886ec6ca005b2d292649e4dbd42a3446049d9952cc199677d836942efd66f9bf786ec9cb4995e7d321d39b373e0fbadb55c66bcb7119c0074afe6bc", 0x19}, 0x48, 0xfffffffffffffffd) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, 0x0, &(0x7f0000000040)) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) fchown(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 367.517378ms ago: executing program 3 (id=3040): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0xcc040}, 0x64004084) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 307.42898ms ago: executing program 4 (id=3041): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 243.281661ms ago: executing program 5 (id=3042): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c0002801400020000000000000000000000000000000001080014"], 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2000c8c0) 157.904116ms ago: executing program 1 (id=3043): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x818) 27.311224ms ago: executing program 0 (id=3045): pipe2(&(0x7f0000000000), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0xff00) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) 26.957965ms ago: executing program 4 (id=3046): r0 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000240)={0x1, 0x1, 0x203, 0x1, 0xfffffffffeffffff, 0x200000000000008, 0xfffffffffffffffd, 0x2, 0x8, 0x2, 0x80000005, 0x2}) 25.474223ms ago: executing program 1 (id=3047): syz_io_uring_setup(0x123b, &(0x7f0000000400)={0x0, 0xd9da, 0x8000, 0x0, 0x9e}, &(0x7f0000000480), &(0x7f00000004c0)) capset(&(0x7f0000000100)={0x20080522}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="0c00990041000000600000000800a0147c030000080026009a03000008"], 0x40}}, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="600000000206010100105bebbd63f4000000000000000a0000080d000300686173683a6d61630000000015000300686173683a69702c706f72742c6e6574000000000500000a000000050004000200000011000300686173683a69702c6d61"], 0x60}, 0x1, 0x0, 0x0, 0x20044844}, 0x20000014) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 0s ago: executing program 5 (id=3048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4804) kernel console output (not intermixed with test programs): c000003e syscall=321 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.521321][ T30] audit: type=1326 audit(1771614545.344:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.577980][ T30] audit: type=1326 audit(1771614545.344:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.634087][ T30] audit: type=1326 audit(1771614545.344:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.693663][ T30] audit: type=1326 audit(1771614545.344:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.750305][ T6704] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.783346][ T30] audit: type=1326 audit(1771614545.344:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.832795][ T6704] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.884466][ T30] audit: type=1326 audit(1771614545.344:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11262 comm="syz.8.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 569.907214][ T5995] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 569.916455][ T5995] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.020860][ T5995] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.063127][ T5995] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.122834][ T5995] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.131746][ T5995] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.052131][T10844] Bluetooth: hci1: command tx timeout [ 571.502187][T11192] chnl_net:caif_netlink_parms(): no params data found [ 571.847875][ T12] IPVS: stop unused estimator thread 0... [ 572.103712][T11192] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.145756][T11192] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.184744][T11192] bridge_slave_0: entered allmulticast mode [ 572.218845][T11192] bridge_slave_0: entered promiscuous mode [ 572.253393][T11192] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.290470][T11192] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.327521][T11192] bridge_slave_1: entered allmulticast mode [ 572.361687][T11192] bridge_slave_1: entered promiscuous mode [ 572.743989][T11192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.944073][T11192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.047412][T11192] team0: Port device team_slave_0 added [ 574.193990][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 574.237320][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.344055][T11192] team0: Port device team_slave_1 added [ 575.298518][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.350822][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.412534][T11192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.441478][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.524478][T11192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.830749][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 575.881879][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.992879][T11192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.000778][T11192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.059862][T11192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.346472][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.375918][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.594485][T11340] overlayfs: failed to clone lowerpath [ 576.608570][T11192] hsr_slave_0: entered promiscuous mode [ 576.624681][T11192] hsr_slave_1: entered promiscuous mode [ 576.633640][T11192] debugfs: 'hsr0' already exists in 'hsr' [ 576.640777][T11192] Cannot create hsr debugfs directory [ 576.855461][T11327] loop5: detected capacity change from 0 to 32768 [ 577.002567][T11327] /dev/loop5: Can't open blockdev [ 577.171148][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 577.171169][ T30] audit: type=1326 audit(1771614553.324:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 577.304658][ T30] audit: type=1326 audit(1771614553.324:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 577.550798][ T30] audit: type=1326 audit(1771614553.494:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 577.748048][ T30] audit: type=1326 audit(1771614553.494:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 577.928176][ T30] audit: type=1326 audit(1771614553.504:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 578.076243][ T12] bridge_slave_1: left allmulticast mode [ 578.084380][ T12] bridge_slave_1: left promiscuous mode [ 578.095153][ T30] audit: type=1326 audit(1771614553.504:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 578.132215][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.169841][ T30] audit: type=1326 audit(1771614553.514:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 578.372226][ T30] audit: type=1326 audit(1771614553.514:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 579.081903][ T30] audit: type=1326 audit(1771614553.514:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 579.086474][ T12] bridge_slave_0: left allmulticast mode [ 579.268562][ T30] audit: type=1326 audit(1771614553.514:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.0.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 579.282392][ T12] bridge_slave_0: left promiscuous mode [ 579.404266][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.997531][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.012127][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.022937][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.052331][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.094178][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 580.853519][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.889299][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.908618][ T12] bond0 (unregistering): Released all slaves [ 581.088984][T11366] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.096595][T11366] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.179536][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.191742][T11366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.191971][ T790] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 581.354353][ T790] usb 6-1: Using ep0 maxpacket: 32 [ 581.469454][ T6152] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.499238][ T6152] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.516938][ T6152] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.538086][ T6152] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.575791][T11390] overlayfs: failed to clone lowerpath [ 581.619418][ T790] usb 6-1: unable to get BOS descriptor or descriptor too short [ 581.634908][ T790] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 581.650972][ T790] usb 6-1: can't read configurations, error -71 [ 581.675415][ T6152] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.698940][ T6152] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.903139][ T6152] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 581.930746][ T6152] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.954504][T11373] vxcan1 speed is unknown, defaulting to 1000 [ 582.002097][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1570'. [ 582.027769][T11400] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1570'. [ 582.064150][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1570'. [ 582.095529][T11400] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1570'. [ 582.158016][T11403] loop8: detected capacity change from 0 to 1024 [ 582.192511][T11403] EXT4-fs: inline encryption not supported [ 582.274237][T11403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.461994][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 582.462019][ T30] audit: type=1800 audit(1771614558.614:129): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1570" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 582.513606][ T5840] Bluetooth: hci4: command tx timeout [ 582.744406][ T30] audit: type=1800 audit(1771614558.644:130): pid=11400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1570" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 583.427900][ T9527] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.593817][ T30] audit: type=1326 audit(1771614559.694:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 583.730748][ T30] audit: type=1326 audit(1771614559.694:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 583.817809][ T30] audit: type=1326 audit(1771614559.694:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 583.944018][ T30] audit: type=1326 audit(1771614559.694:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 584.046618][ T30] audit: type=1326 audit(1771614559.694:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 584.229722][T11192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 584.273580][ T30] audit: type=1326 audit(1771614559.694:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 584.324231][T11192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.381476][T11192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.390782][ T30] audit: type=1326 audit(1771614559.694:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 584.449829][T11192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.476038][ T30] audit: type=1326 audit(1771614559.694:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11417 comm="syz.0.1574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 584.572339][ T5840] Bluetooth: hci4: command tx timeout [ 585.146450][T11192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.263417][T11192] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.320449][ T543] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.327754][ T543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.432979][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.440140][T10665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.972273][ T6152] smc: removing ib device syz1 [ 586.025476][T11455] loop8: detected capacity change from 0 to 256 [ 586.176942][T11455] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 586.255631][T11455] FAT-fs (loop8): Filesystem has been set read-only [ 586.322404][T11455] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 586.372434][T11455] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 198) [ 586.681938][ T5840] Bluetooth: hci4: command tx timeout [ 587.653283][T11192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.943556][T11192] veth0_vlan: entered promiscuous mode [ 588.103258][T11373] chnl_net:caif_netlink_parms(): no params data found [ 588.729795][T11192] veth1_vlan: entered promiscuous mode [ 588.760108][ T5840] Bluetooth: hci4: command tx timeout [ 588.892939][T11468] loop5: detected capacity change from 0 to 32768 [ 588.916763][T11468] xfs: Deprecated parameter 'attr2' [ 588.932011][T11468] XFS: attr2 mount option is deprecated. [ 589.006879][T11468] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 589.069822][T11490] vxcan1 speed is unknown, defaulting to 1000 [ 589.751285][T11468] XFS (loop5): Ending clean mount [ 589.820349][T11468] XFS (loop5): Quotacheck needed: Please wait. [ 589.914192][T11192] veth0_macvtap: entered promiscuous mode [ 590.024895][T11468] XFS (loop5): Quotacheck: Done. [ 590.046071][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.053437][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.060760][T11373] bridge_slave_0: entered allmulticast mode [ 590.081241][T11373] bridge_slave_0: entered promiscuous mode [ 590.123140][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.142258][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.149591][T11373] bridge_slave_1: entered allmulticast mode [ 590.229695][T11373] bridge_slave_1: entered promiscuous mode [ 590.283766][ T5823] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 590.417418][T11192] veth1_macvtap: entered promiscuous mode [ 590.513514][T11373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.568980][T11373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.718611][T11192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.846985][T11373] team0: Port device team_slave_0 added [ 590.965689][T11192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.996878][T11373] team0: Port device team_slave_1 added [ 591.229658][ T1074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.402750][T11373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.409921][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 591.495916][T11539] blktrace: Concurrent blktraces are not allowed on loop6 [ 591.911934][T11373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.984129][T11373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.991115][T11373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.178225][T11373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.206436][ T1074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.227698][ T1074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.336993][T11553] loop8: detected capacity change from 0 to 128 [ 592.664521][ T1074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.744909][ T1074] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.823741][ T1074] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.852350][ T1074] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 593.257746][T11373] hsr_slave_0: entered promiscuous mode [ 593.327248][T11373] hsr_slave_1: entered promiscuous mode [ 594.022227][T11373] debugfs: 'hsr0' already exists in 'hsr' [ 594.027986][T11373] Cannot create hsr debugfs directory [ 594.201534][ T1074] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 594.501896][ T12] hsr_slave_0: left promiscuous mode [ 594.508316][ T12] hsr_slave_1: left promiscuous mode [ 594.542893][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.550324][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.629128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.636677][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.664424][ T12] veth1_macvtap: left promiscuous mode [ 594.669967][ T12] veth0_macvtap: left promiscuous mode [ 594.689093][ T12] veth1_vlan: left promiscuous mode [ 594.710230][ T12] veth0_vlan: left promiscuous mode [ 594.962087][T11587] blktrace: Concurrent blktraces are not allowed on loop10 [ 595.422990][ T12] team0 (unregistering): Port device team_slave_1 removed [ 595.903715][ T12] team0 (unregistering): Port device team_slave_0 removed [ 596.337878][T11609] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1612'. [ 597.200215][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.223632][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.769039][ T1074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.806604][ T1074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.912867][T11652] trusted_key: encrypted_key: insufficient parameters specified [ 599.574118][T11665] overlayfs: failed to clone lowerpath [ 599.657686][T11666] overlayfs: failed to clone lowerpath [ 600.420191][T11373] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.478633][T11373] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.519578][T11373] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.600248][T11373] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.673655][ T5928] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 600.840645][ T12] bridge_slave_1: left allmulticast mode [ 600.849620][ T5928] usb 6-1: Using ep0 maxpacket: 16 [ 600.858619][ T12] bridge_slave_1: left promiscuous mode [ 600.870405][ T5928] usb 6-1: config 0 has no interfaces? [ 600.877283][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.895638][ T12] bridge_slave_0: left allmulticast mode [ 600.901540][ T5928] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 600.911042][ T12] bridge_slave_0: left promiscuous mode [ 600.918107][ T5928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.933479][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.936460][ T5928] usb 6-1: Product: syz [ 600.966605][ T5928] usb 6-1: Manufacturer: syz [ 600.980067][ T5928] usb 6-1: SerialNumber: syz [ 600.998892][ T5928] usb 6-1: config 0 descriptor?? [ 601.240750][ T5928] usb 6-1: USB disconnect, device number 29 [ 601.388980][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.404197][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.574732][T11707] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1636'. [ 601.583876][T11707] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 601.598275][ T12] bond0 (unregistering): Released all slaves [ 602.994501][T11719] syzkaller0: entered promiscuous mode [ 603.025758][T11719] syzkaller0: entered allmulticast mode [ 603.065197][T11723] overlayfs: failed to clone lowerpath [ 603.372186][T11373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.569399][T11373] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.381957][T11732] dvmrp1: entered allmulticast mode [ 604.520681][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.527972][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.567972][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.575192][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.347503][ T12] hsr_slave_0: left promiscuous mode [ 605.379256][ T12] hsr_slave_1: left promiscuous mode [ 605.402356][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.467285][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.741424][ T12] team0 (unregistering): Port device team_slave_1 removed [ 606.850653][ T12] team0 (unregistering): Port device team_slave_0 removed [ 607.130717][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1651'. [ 607.171356][T11773] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 608.306941][T11373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.440965][T11791] affs: No valid root block on device nullb0 [ 610.815271][T11373] veth0_vlan: entered promiscuous mode [ 610.891684][T11373] veth1_vlan: entered promiscuous mode [ 611.027891][T11373] veth0_macvtap: entered promiscuous mode [ 611.075275][T11373] veth1_macvtap: entered promiscuous mode [ 611.169229][T11373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.221061][T11373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.252026][T11842] loop5: detected capacity change from 0 to 8 [ 611.258406][ T6152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.292329][T11842] SQUASHFS error: zlib decompression failed, data probably corrupt [ 611.318350][T11842] SQUASHFS error: Failed to read block 0x9b: -5 [ 611.327044][T11840] netlink: 'syz.8.1672': attribute type 10 has an invalid length. [ 611.335015][ T6152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.356269][ T6152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.370296][T11842] SQUASHFS error: Unable to read metadata cache entry [99] [ 611.389821][T11842] SQUASHFS error: Unable to read inode 0x127 [ 611.398216][T11840] syz_tun: entered promiscuous mode [ 611.414452][T11840] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 611.457047][ T6152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.276262][ T543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.336479][ T543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.386918][T11861] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1676'. [ 612.406534][ T543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.412653][T11861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1676'. [ 612.427143][T11861] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1676'. [ 612.437071][T11861] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1676'. [ 612.446035][ T543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.564434][T11919] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'. [ 615.584087][T11919] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 616.237033][T11935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1695'. [ 616.279400][T11935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'. [ 616.313376][T11935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1695'. [ 616.444173][T11935] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1695'. [ 616.509622][T11936] loop1: detected capacity change from 0 to 1024 [ 616.618296][T11943] netlink: 'syz.5.1698': attribute type 1 has an invalid length. [ 616.823788][T11936] EXT4-fs: inline encryption not supported [ 616.853546][T11947] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 616.881707][ T24] IPVS: starting estimator thread 0... [ 617.003790][T11948] IPVS: using max 25 ests per chain, 60000 per kthread [ 617.146018][T11936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.249655][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 617.249673][ T30] audit: type=1800 audit(1771614593.394:165): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1695" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 617.548043][T11192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.088324][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1707'. [ 619.142277][T11975] IPv6: NLM_F_CREATE should be specified when creating new route [ 619.598506][T11987] loop6: detected capacity change from 128 to 0 [ 619.668899][T11992] netlink: 'syz.0.1712': attribute type 25 has an invalid length. [ 619.701466][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 619.742302][T11992] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 619.801397][T12003] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1714'. [ 619.843389][T12003] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1714'. [ 619.871979][T12003] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1714'. [ 619.982400][T12003] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1714'. [ 620.491984][T12014] trusted_key: encrypted_key: insufficient parameters specified [ 622.386224][T12040] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 622.603330][T12043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1723'. [ 622.612723][T12041] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 622.853338][T12045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1724'. [ 622.891473][T12045] IPv6: NLM_F_CREATE should be specified when creating new route [ 623.248411][T12050] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1720'. [ 623.368663][T12050] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 623.629603][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.636190][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.496925][T12063] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 624.894887][T12071] ip6gre1: entered promiscuous mode [ 625.600459][T12083] trusted_key: encrypted_key: insufficient parameters specified [ 627.053080][ T790] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 627.242948][ T790] usb 6-1: Using ep0 maxpacket: 8 [ 627.289483][ T790] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 627.307457][ T790] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.341766][ T790] usb 6-1: Product: syz [ 627.356467][ T790] usb 6-1: Manufacturer: syz [ 627.378724][ T790] usb 6-1: SerialNumber: syz [ 627.436299][ T790] usb 6-1: config 0 descriptor?? [ 627.920155][ T790] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 628.017776][ T790] gspca_sunplus: reg_w_riv err -71 [ 628.048116][ T790] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 628.112120][ T790] usb 6-1: USB disconnect, device number 30 [ 630.458917][T12116] delete_channel: no stack [ 630.742159][ T30] audit: type=1326 audit(1771614606.704:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 630.822433][ T30] audit: type=1326 audit(1771614606.704:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 630.925297][ T30] audit: type=1326 audit(1771614606.704:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 631.012676][ T30] audit: type=1326 audit(1771614606.704:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 631.075042][T12162] netlink: 'syz.5.1752': attribute type 10 has an invalid length. [ 631.118171][T12162] syz_tun: entered promiscuous mode [ 632.161890][ T30] audit: type=1326 audit(1771614606.704:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 632.173483][T12162] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 632.676438][ T30] audit: type=1326 audit(1771614606.704:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 632.699596][ T30] audit: type=1326 audit(1771614606.704:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 632.768433][ T30] audit: type=1326 audit(1771614606.704:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 632.879976][ T30] audit: type=1326 audit(1771614606.714:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 632.961964][ T30] audit: type=1326 audit(1771614606.714:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12150 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbf739c629 code=0x7ffc0000 [ 633.370768][T12182] overlayfs: failed to clone lowerpath [ 634.249735][T12191] loop5: detected capacity change from 0 to 8 [ 634.328171][T12191] SQUASHFS error: zlib decompression failed, data probably corrupt [ 634.411471][T12191] SQUASHFS error: Failed to read block 0x9b: -5 [ 634.431923][T12191] SQUASHFS error: Unable to read metadata cache entry [99] [ 634.469410][T12191] SQUASHFS error: Unable to read inode 0x127 [ 637.053486][T12213] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1768'. [ 637.063372][T12213] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 638.149722][T12214] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.157271][T12214] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.656466][T12214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.726666][T12214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.216774][T12231] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1772'. [ 640.402453][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1772'. [ 640.498562][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1772'. [ 640.516026][ T6744] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.546921][ T6744] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.600901][ T6744] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.685887][ T6744] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.711968][ T790] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 641.911985][ T790] usb 5-1: Using ep0 maxpacket: 16 [ 642.182786][ T790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 642.195211][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 642.206181][ T790] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 642.216675][ T790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 642.229963][ T790] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 642.253564][ T790] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 642.278367][ T790] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 642.294817][ T790] usb 5-1: Manufacturer: syz [ 642.308536][ T790] usb 5-1: config 0 descriptor?? [ 642.773978][ T790] rc_core: IR keymap rc-hauppauge not found [ 642.803055][ T790] Registered IR keymap rc-empty [ 642.808163][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.842551][T12300] overlayfs: failed to clone lowerpath [ 642.912060][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 642.951305][ T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 643.038116][ T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 643.110786][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.172078][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.212121][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.252059][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.282159][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.332986][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.383150][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.412028][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.452382][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.493678][ T790] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 643.540073][ T790] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 643.560404][ T790] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 643.599295][ T790] usb 5-1: USB disconnect, device number 6 [ 646.541230][T12385] loop4: detected capacity change from 0 to 8 [ 646.602806][T12385] SQUASHFS error: zlib decompression failed, data probably corrupt [ 646.666322][T12385] SQUASHFS error: Failed to read block 0x9b: -5 [ 646.691952][T12385] SQUASHFS error: Unable to read metadata cache entry [99] [ 646.711097][T12385] SQUASHFS error: Unable to read inode 0x127 [ 647.011946][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 647.177775][T12396] overlayfs: failed to clone lowerpath [ 647.253707][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 647.290087][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 647.338540][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 647.359243][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.396603][ T24] usb 2-1: Product: syz [ 647.411885][ T24] usb 2-1: Manufacturer: syz [ 647.431897][ T24] usb 2-1: SerialNumber: syz [ 647.486273][ T24] usb 2-1: config 0 descriptor?? [ 648.051379][T12417] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1826'. [ 649.743803][T12451] affs: No valid root block on device nullb0 [ 650.436749][ T790] usb 2-1: USB disconnect, device number 5 [ 651.137780][T12461] overlayfs: failed to clone lowerpath [ 651.560513][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 651.584362][ T6704] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.584451][T12470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1838'. [ 651.650415][ T6704] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.716122][ T6704] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.869779][ T6704] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.991434][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1831'. [ 652.093507][T12482] loop4: detected capacity change from 0 to 1024 [ 652.378399][T12482] EXT4-fs: inline encryption not supported [ 652.554906][T12482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.589866][T12493] loop1: detected capacity change from 0 to 8 [ 652.689051][T12493] SQUASHFS error: zlib decompression failed, data probably corrupt [ 652.721960][T12493] SQUASHFS error: Failed to read block 0x9b: -5 [ 652.753578][T12493] SQUASHFS error: Unable to read metadata cache entry [99] [ 652.768998][T12493] SQUASHFS error: Unable to read inode 0x127 [ 653.068618][T11373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.712200][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 654.800517][ T6744] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.800594][T12535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'. [ 654.814296][ T6744] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.874588][ T6744] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.955070][ T6744] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.001066][T12544] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1858'. [ 656.011086][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1858'. [ 656.023768][T12544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1858'. [ 656.680181][T12561] overlayfs: failed to clone lowerpath [ 656.872327][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 656.872348][ T30] audit: type=1326 audit(1771614633.034:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 656.994468][T12577] trusted_key: encrypted_key: insufficient parameters specified [ 657.551616][ T30] audit: type=1326 audit(1771614633.034:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 657.671916][ T30] audit: type=1326 audit(1771614633.034:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 657.947515][T12588] fuse: Bad value for 'fd' [ 657.962814][ T30] audit: type=1326 audit(1771614633.074:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 658.042289][ T30] audit: type=1326 audit(1771614633.074:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 658.266306][ T30] audit: type=1326 audit(1771614633.074:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 658.558271][ T30] audit: type=1326 audit(1771614633.074:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 659.235748][ T30] audit: type=1326 audit(1771614633.074:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 659.361717][ T30] audit: type=1326 audit(1771614633.074:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 659.558307][ T30] audit: type=1326 audit(1771614633.074:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.1865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f150fb9c629 code=0x7ffc0000 [ 659.740294][T12612] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1874'. [ 659.796078][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 659.852349][T12612] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1874'. [ 661.296485][T12632] bond0: (slave syz_tun): Releasing backup interface [ 661.368680][T12632] team0: left allmulticast mode [ 661.392096][T12632] team_slave_0: left allmulticast mode [ 661.414587][T12632] team_slave_1: left allmulticast mode [ 661.440495][T12632] bridge1: left allmulticast mode [ 661.455402][T12632] team0: left promiscuous mode [ 661.505907][T12632] team_slave_0: left promiscuous mode [ 661.535530][T12632] team_slave_1: left promiscuous mode [ 661.561949][T12632] bridge1: left promiscuous mode [ 661.577659][T12632] bridge0: port 3(team0) entered disabled state [ 661.593514][T12639] overlayfs: failed to clone lowerpath [ 661.719225][T12632] bridge_slave_0: left allmulticast mode [ 661.764773][T12632] bridge_slave_0: left promiscuous mode [ 661.800224][T12632] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.919052][T12647] random: crng reseeded on system resumption [ 661.983243][T12632] bridge_slave_1: left allmulticast mode [ 661.989640][T12632] bridge_slave_1: left promiscuous mode [ 662.007422][T12632] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.095439][T12632] bond0: (slave bond_slave_0): Releasing backup interface [ 662.156518][T12632] bond0: (slave bond_slave_1): Releasing backup interface [ 662.247741][T12632] team0: Port device team_slave_0 removed [ 662.294139][T12632] team0: Port device team_slave_1 removed [ 662.352477][T12632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.489791][T12632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.577855][T12632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 662.844307][T12658] trusted_key: encrypted_key: insufficient parameters specified [ 662.997391][T12669] syz_tun: left promiscuous mode [ 665.934059][T12715] trusted_key: encrypted_key: insufficient parameters specified [ 670.936813][T12765] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1914'. [ 671.252283][T12775] loop5: detected capacity change from 0 to 8 [ 671.315979][T12775] SQUASHFS error: zlib decompression failed, data probably corrupt [ 671.416303][T12775] SQUASHFS error: Failed to read block 0x9b: -5 [ 671.469400][T12775] SQUASHFS error: Unable to read metadata cache entry [99] [ 671.511633][T12775] SQUASHFS error: Unable to read inode 0x127 [ 674.817330][T12807] syz_tun: left promiscuous mode [ 674.902382][ T12] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.933065][ T12] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.965964][ T12] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.996778][ T12] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.132834][T12819] overlayfs: missing 'lowerdir' [ 675.815756][ T953] IPVS: starting estimator thread 0... [ 676.003812][T12835] IPVS: using max 33 ests per chain, 79200 per kthread [ 678.081943][ T953] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 678.394754][ T953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.418206][ T953] usb 6-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 678.462757][ T953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.521243][ T953] usb 6-1: config 0 descriptor?? [ 678.554754][ T953] usbhid 6-1:0.0: can't add hid device: -22 [ 678.644372][ T953] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 680.597462][T12891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1945'. [ 681.839526][T12924] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1954'. [ 681.897679][T10053] usb 6-1: USB disconnect, device number 31 [ 683.625612][T12973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1963'. [ 684.500298][T12992] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1969'. [ 684.719318][T13001] overlayfs: failed to clone lowerpath [ 685.072134][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.082932][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.463783][ T5825] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 685.661946][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 685.732284][ T5825] usb 5-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 685.769991][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.839024][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 685.889886][ T5825] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 685.942272][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 685.984510][ T5825] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.025558][ T5825] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.113282][ T5825] usb 5-1: Manufacturer: syz [ 686.423776][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 686.429619][ T5825] usb 5-1: config 0 descriptor?? [ 686.668157][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 686.683156][ T24] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10 [ 686.709016][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.802738][ T24] usb 2-1: Product: syz [ 686.807626][ T24] usb 2-1: Manufacturer: syz [ 686.815131][ T24] usb 2-1: SerialNumber: syz [ 686.824689][ T24] usb 2-1: config 0 descriptor?? [ 686.846664][ T24] usb 2-1: ucan: probing device on interface #0 [ 686.854829][ T24] usb 2-1: ucan: invalid EP count (0) [ 686.862382][ T24] usb 2-1: ucan: probe failed; try to update the device firmware [ 686.954467][ T5825] rc_core: IR keymap rc-hauppauge not found [ 686.974790][ T5825] Registered IR keymap rc-empty [ 686.992913][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.043737][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.059897][T10053] usb 2-1: USB disconnect, device number 6 [ 687.098869][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 687.135167][T10844] Bluetooth: hci1: command 0x0406 tx timeout [ 687.159431][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47 [ 687.283566][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.352185][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.416850][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.462242][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.516487][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.562055][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.602106][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.628486][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 687.672357][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.082153][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 688.145095][ T5825] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 688.204447][ T5825] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.338816][ T5825] usb 5-1: USB disconnect, device number 7 [ 688.849926][T10053] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 688.858813][T13069] trusted_key: encrypted_key: insufficient parameters specified [ 689.057782][T10053] usb 6-1: Using ep0 maxpacket: 8 [ 689.093389][T10053] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 689.135568][T10053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.165954][T10053] usb 6-1: Product: syz [ 689.170247][T10053] usb 6-1: Manufacturer: syz [ 689.197762][T10053] usb 6-1: SerialNumber: syz [ 689.220835][T10053] usb 6-1: config 0 descriptor?? [ 689.462705][ T5825] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 689.494747][T10053] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 689.932026][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 689.957573][ T5825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.986842][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 690.041428][ T5825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 690.069968][ T5825] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 690.086050][ T5825] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.126280][ T5825] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 690.131997][T10053] gspca_sunplus: reg_w_riv err -71 [ 690.140732][T10053] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 690.144394][ T5825] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 690.167234][ T5825] usb 2-1: Manufacturer: syz [ 690.207860][T10053] usb 6-1: USB disconnect, device number 32 [ 690.251646][ T5825] usb 2-1: config 0 descriptor?? [ 690.615656][ T5825] rc_core: IR keymap rc-hauppauge not found [ 690.752077][ T5825] Registered IR keymap rc-empty [ 690.757096][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 690.803518][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 690.836852][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 690.882290][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 690.932511][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 690.986916][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.083018][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.102178][T10053] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 691.113292][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.152242][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.195363][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.252856][T10053] usb 6-1: Using ep0 maxpacket: 16 [ 691.262141][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.264567][T10053] usb 6-1: config 0 has an invalid descriptor of length 248, skipping remainder of the config [ 691.289285][T10053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 691.307255][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.323314][T10053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 691.353417][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.353542][T10053] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 691.393273][T13127] trusted_key: encrypted_key: insufficient parameters specified [ 691.413619][ T5825] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 691.428188][T10053] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.460020][T10053] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 691.469734][T10053] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 691.470350][ T5825] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 691.521642][ T5825] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 691.542376][T10053] usb 6-1: Manufacturer: syz [ 691.922194][T10053] usb 6-1: config 0 descriptor?? [ 692.025806][ T10] usb 2-1: USB disconnect, device number 7 [ 692.364403][T10053] rc_core: IR keymap rc-hauppauge not found [ 692.385141][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2009'. [ 692.402110][T10053] Registered IR keymap rc-empty [ 692.414463][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 692.425138][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2009'. [ 692.464468][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 692.512028][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2009'. [ 692.552874][T10053] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 692.806413][T13144] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2009'. [ 692.818521][T10053] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49 [ 692.886260][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 692.971634][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.046316][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.142084][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.192797][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.252018][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.305040][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.353388][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.404883][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.456195][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 693.520473][T10053] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 693.572244][T10053] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 694.815912][T10053] usb 6-1: USB disconnect, device number 33 [ 696.340694][T13182] trusted_key: encrypted_key: insufficient parameters specified [ 696.863421][T13200] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 696.871692][T13200] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 697.412280][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2026'. [ 697.457590][T13213] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2026'. [ 697.491982][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2026'. [ 697.540083][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2026'. [ 698.224109][T10053] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 698.930628][T10053] usb 6-1: Using ep0 maxpacket: 16 [ 698.948111][T10053] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 698.989630][T10053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.027556][T10053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 699.061692][T10053] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 699.083431][ T6744] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.112020][T10053] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 699.125229][ T6744] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.152286][ T6744] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.161616][T13235] trusted_key: encrypted_key: insufficient parameters specified [ 699.171648][T10053] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 699.223803][ T6744] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 699.262110][T10053] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 699.292993][T10053] usb 6-1: Manufacturer: syz [ 699.321447][T10053] usb 6-1: config 0 descriptor?? [ 699.733354][T10053] rc_core: IR keymap rc-hauppauge not found [ 699.765206][T10053] Registered IR keymap rc-empty [ 699.780532][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 699.832068][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 699.842345][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 699.907729][T10053] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 699.962664][T10053] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input50 [ 700.051922][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 700.061017][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 700.109970][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2047'. [ 700.131940][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.204616][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 700.331338][T10665] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.348724][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 700.408505][T10665] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.662963][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 700.682051][T10665] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.690957][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 700.714217][T10665] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.716390][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.738267][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.746543][ T10] usb 2-1: Manufacturer: syz [ 700.841480][ T10] usb 2-1: config 0 descriptor?? [ 700.859561][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 700.901941][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 700.922000][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 700.991997][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.032246][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.074149][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.123119][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.182841][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.232205][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.262076][T10053] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 701.287842][T10053] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 701.332090][ T10] rc_core: IR keymap rc-hauppauge not found [ 701.340480][T10053] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 701.358855][ T10] Registered IR keymap rc-empty [ 701.367889][T10053] usb 6-1: USB disconnect, device number 34 [ 701.388464][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.673548][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.708467][ T10] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 701.754775][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input51 [ 701.790002][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.951980][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 701.976524][T13307] netlink: 'syz.8.2056': attribute type 1 has an invalid length. [ 702.012889][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.013514][T13310] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 702.027751][ T24] IPVS: starting estimator thread 0... [ 702.033283][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.052022][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.075557][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.103288][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.172353][T13311] IPVS: using max 27 ests per chain, 64800 per kthread [ 702.258089][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.284225][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.507365][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 702.576063][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 702.851230][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 702.901087][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 703.046699][ T10] usb 2-1: USB disconnect, device number 8 [ 704.271976][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 704.511800][T13341] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2065'. [ 704.652614][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 704.660735][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 704.723545][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 704.773673][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 704.831939][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 704.861937][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 705.227334][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 706.251444][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 706.259928][ T10] usb 2-1: Manufacturer: syz [ 706.268510][ T10] usb 2-1: config 0 descriptor?? [ 706.395485][T13355] netlink: 'syz.0.2069': attribute type 10 has an invalid length. [ 706.434711][T13355] syz_tun: entered promiscuous mode [ 706.458455][T13355] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 706.724125][ T10] rc_core: IR keymap rc-hauppauge not found [ 706.739716][ T10] Registered IR keymap rc-empty [ 706.765282][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 706.819008][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 706.867661][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 706.898563][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input52 [ 706.952516][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.002047][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.042311][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.072037][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.135576][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.362027][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.409015][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.411932][T10053] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 707.465250][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.632094][T10053] usb 5-1: Using ep0 maxpacket: 16 [ 707.666145][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.670528][T10053] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10 [ 707.700954][T10053] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.709988][T10053] usb 5-1: Product: syz [ 707.714498][T10053] usb 5-1: Manufacturer: syz [ 707.715380][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 707.719085][T10053] usb 5-1: SerialNumber: syz [ 707.776117][T10053] usb 5-1: config 0 descriptor?? [ 707.800168][T10053] usb 5-1: ucan: probing device on interface #0 [ 707.801027][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 707.826723][T10053] usb 5-1: ucan: invalid EP count (0) [ 707.833969][T10053] usb 5-1: ucan: probe failed; try to update the device firmware [ 707.886053][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 707.961081][ T10] usb 2-1: USB disconnect, device number 9 [ 708.228073][T10053] usb 5-1: USB disconnect, device number 8 [ 710.212356][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 710.372229][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 710.379077][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 710.394469][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 710.414791][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 710.459216][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.491004][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 710.609662][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.713212][T13438] vxcan1 speed is unknown, defaulting to 1000 [ 711.149438][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 711.159321][ T24] usbtmc 5-1:16.0: can't read capabilities [ 711.358596][ T10] usb 5-1: USB disconnect, device number 9 [ 711.633584][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 711.633609][ T30] audit: type=1326 audit(1771614687.684:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 711.736894][ T30] audit: type=1326 audit(1771614687.684:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 711.785850][T13455] overlayfs: failed to clone lowerpath [ 711.860625][ T30] audit: type=1326 audit(1771614687.684:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 711.918316][ T30] audit: type=1326 audit(1771614687.684:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 711.972587][ T30] audit: type=1326 audit(1771614687.684:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 712.413675][ T30] audit: type=1326 audit(1771614687.684:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 712.436867][ T30] audit: type=1326 audit(1771614687.684:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 712.594842][ T30] audit: type=1326 audit(1771614687.684:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 712.690730][ T30] audit: type=1326 audit(1771614687.694:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 712.821077][ T30] audit: type=1326 audit(1771614687.694:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13446 comm="syz.8.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc28839c629 code=0x7ffc0000 [ 714.421933][T10331] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 714.545774][T13500] overlayfs: failed to clone lowerpath [ 714.646136][T10331] usb 5-1: Using ep0 maxpacket: 16 [ 714.652114][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 714.682765][T10331] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 714.708891][T10331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 714.763769][T10331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.818726][T10331] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 714.852911][T10331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 714.953583][T10331] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 714.997208][T10331] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 715.020127][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 715.040450][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.055020][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 715.057359][T10331] usb 5-1: Manufacturer: syz [ 715.065519][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.142241][T13513] blktrace: Concurrent blktraces are not allowed on loop6 [ 715.679319][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.748260][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 715.795284][T10331] usb 5-1: config 0 descriptor?? [ 715.862195][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.122741][T10331] rc_core: IR keymap rc-hauppauge not found [ 716.123888][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 716.138925][T10331] Registered IR keymap rc-empty [ 716.159197][ T24] usbtmc 6-1:16.0: can't read capabilities [ 716.162439][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.226277][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.293244][T10331] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 716.334317][ T5825] usb 6-1: USB disconnect, device number 35 [ 716.367881][T10331] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 716.500556][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.572121][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.604237][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.624088][T13538] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 716.642309][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.674544][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.693962][T13538] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2122'. [ 716.756732][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.793777][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.827210][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.894424][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.932029][T10331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 716.978655][T10331] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 717.002666][T10331] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 717.017879][T13550] overlayfs: failed to clone lowerpath [ 717.387462][T10331] usb 5-1: USB disconnect, device number 10 [ 718.352540][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'. [ 718.481752][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2129'. [ 718.958264][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 719.038713][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2134'. [ 719.370917][T13575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2134'. [ 719.479249][T13575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2134'. [ 720.502075][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 720.672430][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 720.696316][ T24] usb 5-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config [ 720.712139][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 720.801144][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 720.836505][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 720.882218][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 720.925712][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 720.965858][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 721.017613][ T24] usb 5-1: Manufacturer: syz [ 721.059163][ T24] usb 5-1: config 0 descriptor?? [ 721.077484][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2148'. [ 721.137744][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2148'. [ 721.192176][T10665] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.232011][T10665] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.250965][T10665] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.297829][T10665] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.445601][T13633] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2152'. [ 721.483304][ T24] rc_core: IR keymap rc-hauppauge not found [ 721.490793][ T24] Registered IR keymap rc-empty [ 721.505003][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.552244][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.581578][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 721.620319][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input54 [ 721.659740][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.692744][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.732322][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.772391][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.801536][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.823645][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.853550][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.874338][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.922353][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.953689][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 721.987176][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 722.007156][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 722.041186][ T24] usb 5-1: USB disconnect, device number 11 [ 722.961291][T13686] __nla_validate_parse: 3 callbacks suppressed [ 722.961311][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 722.996394][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 723.138370][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 723.154167][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 726.173477][T10331] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 726.362577][T10331] usb 2-1: Using ep0 maxpacket: 16 [ 726.385870][T10331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.430022][T10331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 726.453852][T10331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 726.477489][T10331] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 726.502254][T10331] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.532110][T10331] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 726.582159][T10331] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 726.600500][T10331] usb 2-1: Manufacturer: syz [ 726.616991][T13719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2180'. [ 726.626176][T13719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2180'. [ 726.666919][T13719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2180'. [ 726.672676][T10331] usb 2-1: config 0 descriptor?? [ 726.696071][T13719] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2180'. [ 727.041950][T10331] rc_core: IR keymap rc-hauppauge not found [ 727.056614][T10331] Registered IR keymap rc-empty [ 727.068613][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.101998][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.135234][T10331] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 727.165253][T10331] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55 [ 727.209517][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.242166][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.284139][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.344958][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.382022][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.432644][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.462470][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.492675][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.522181][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.552604][T10331] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 727.599746][T10331] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 727.657214][T10331] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 727.772651][T10331] usb 2-1: USB disconnect, device number 10 [ 728.498945][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'. [ 728.509398][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2197'. [ 728.793351][T13775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2200'. [ 728.884232][T13778] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2199'. [ 730.545057][T13794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2202'. [ 732.572787][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 732.582287][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 732.717342][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2214'. [ 733.702111][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 733.891915][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 733.910653][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.952969][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 734.008189][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 734.071171][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 734.124403][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.734145][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 734.781881][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 734.841566][ T24] usb 5-1: Manufacturer: syz [ 734.890411][ T24] usb 5-1: config 0 descriptor?? [ 735.044792][T13886] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2230'. [ 735.075004][T13888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2228'. [ 735.104168][T13888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2228'. [ 735.167876][T13888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2228'. [ 735.212417][T13888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2228'. [ 735.315245][ T24] rc_core: IR keymap rc-hauppauge not found [ 735.331376][ T24] Registered IR keymap rc-empty [ 735.342480][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.382314][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.434972][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 735.456256][T13895] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[13895] [ 735.470368][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input56 [ 735.750857][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.782050][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.812019][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.845889][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.902140][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.922136][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.947032][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 735.982186][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 736.072496][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 736.206420][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 736.295181][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 736.332208][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 736.433634][ T24] usb 5-1: USB disconnect, device number 12 [ 736.790319][T13918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2237'. [ 739.820374][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2246'. [ 739.892439][T13946] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2246'. [ 739.907563][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2246'. [ 739.954278][T13946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2246'. [ 740.503655][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2252'. [ 742.334876][T13991] affs: No valid root block on device nullb0 [ 744.416006][T14024] tipc: Failed to remove unknown binding: 66,1,1/0:1863516974/1863516976 [ 746.404295][T14048] fuse: Bad value for 'fd' [ 746.496676][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.503435][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.275288][T14075] veth1_to_bond: entered allmulticast mode [ 748.392791][T14079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2279'. [ 748.439305][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2279'. [ 748.589838][T14079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2279'. [ 748.645969][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2278'. [ 748.688353][T14079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2279'. [ 749.597569][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 749.607682][T14096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 749.803581][T14099] vxcan1 speed is unknown, defaulting to 1000 [ 751.551939][ T5928] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 751.766288][ T5928] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 751.777314][T14073] veth1_to_bond: left allmulticast mode [ 751.791913][ T5928] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 751.847800][ T5928] usb 2-1: config 220 has no interface number 2 [ 752.016810][ T5928] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 752.031340][ T5928] usb 2-1: config 220 interface 0 has no altsetting 0 [ 752.038360][ T5928] usb 2-1: config 220 interface 76 has no altsetting 0 [ 752.050018][ T5928] usb 2-1: config 220 interface 1 has no altsetting 0 [ 752.062059][ T5928] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 752.071241][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.769156][ T5928] usb 2-1: Product: syz [ 752.774253][ T5928] usb 2-1: Manufacturer: syz [ 752.783469][ T5928] usb 2-1: SerialNumber: syz [ 753.011525][T14143] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2292'. [ 753.077365][T14143] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2292'. [ 753.170443][T14143] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2292'. [ 753.327195][ T5928] usb 2-1: selecting invalid altsetting 0 [ 753.383822][ T5928] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 753.407642][ T5928] uvcvideo 2-1:220.0: No valid video chain found. [ 753.673855][ T5928] usb 2-1: selecting invalid altsetting 0 [ 753.712183][ T5928] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 753.819596][ T5928] usb 2-1: USB disconnect, device number 11 [ 753.914165][T14164] overlayfs: overlapping lowerdir path [ 754.054337][T14168] __nla_validate_parse: 1 callbacks suppressed [ 754.054355][T14168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2298'. [ 754.129070][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2298'. [ 754.390215][T14168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2298'. [ 754.563248][T14168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2298'. [ 754.605208][T14173] loop5: detected capacity change from 0 to 1024 [ 754.654039][T14173] EXT4-fs: inline encryption not supported [ 754.739436][T14173] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.907790][ T5823] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.430255][T14210] fuse: Bad value for 'fd' [ 758.834202][T14237] fuse: Bad value for 'fd' [ 759.321351][T14247] overlayfs: failed to clone lowerpath [ 763.296758][T14301] sg_write: data in/out 394477/136 bytes for SCSI command 0xff-- guessing data in; [ 763.296758][T14301] program syz.4.2331 not setting count and/or reply_len properly [ 767.628179][T14348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2344'. [ 767.671928][T14348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2344'. [ 767.751983][T14348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2344'. [ 767.793537][T14348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2344'. [ 771.836074][T14416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2360'. [ 771.902105][T14416] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2360'. [ 772.062791][T14416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2360'. [ 772.078667][T14416] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2360'. [ 772.465365][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 772.485325][T14435] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 772.742047][ T5825] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 772.939745][ T5825] usb 6-1: Using ep0 maxpacket: 16 [ 772.963034][ T5825] usb 6-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 772.974038][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 772.985893][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 773.077348][ T5825] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 773.136847][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 773.242588][ T5825] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 773.252027][ T5825] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 773.260274][ T5825] usb 6-1: Manufacturer: syz [ 773.283543][ T5825] usb 6-1: config 0 descriptor?? [ 773.635732][ T5825] rc_core: IR keymap rc-hauppauge not found [ 773.642080][ T5825] Registered IR keymap rc-empty [ 773.647072][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.670459][T14466] loop5: detected capacity change from 0 to 4096 [ 773.684737][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.713223][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 773.727362][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input57 [ 773.751154][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.782193][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.872252][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.892340][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.942237][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 773.996626][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 774.078509][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 774.103143][T14475] overlayfs: failed to clone lowerpath [ 774.155213][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 774.202355][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 774.263748][ T5825] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 774.305956][ T5825] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 774.325683][ T5825] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 774.354353][ T5825] usb 6-1: USB disconnect, device number 36 [ 775.806931][T14510] netlink: 'syz.0.2397': attribute type 10 has an invalid length. [ 776.021451][T14516] overlayfs: failed to clone lowerpath [ 777.969384][T14542] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2405'. [ 778.960321][T14558] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 779.258632][T14572] syz_tun: left promiscuous mode [ 780.561245][T14585] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2421'. [ 780.799078][ T953] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 781.114783][ T953] usb 5-1: Using ep0 maxpacket: 16 [ 781.124734][ T953] usb 5-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config [ 781.139972][ T953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.233032][T14606] blktrace: Concurrent blktraces are not allowed on loop0 [ 781.902140][ T953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 781.912188][ T953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 781.922194][ T953] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 781.966896][ T953] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 782.134393][ T953] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 782.156022][ T953] usb 5-1: Manufacturer: syz [ 782.173432][ T953] usb 5-1: config 0 descriptor?? [ 782.561923][ T953] rc_core: IR keymap rc-hauppauge not found [ 782.572997][ T953] Registered IR keymap rc-empty [ 782.577965][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.624296][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.674349][ T953] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 782.713309][ T953] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 782.754866][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.801979][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.842755][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.894827][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.932942][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 782.998216][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.043676][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.092141][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.138710][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.186141][ T953] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 783.240025][ T953] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 783.271909][ T953] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 783.340999][ T953] usb 5-1: USB disconnect, device number 13 [ 783.380565][T14624] vxcan1 speed is unknown, defaulting to 1000 [ 786.173666][T14665] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2448'. [ 786.308240][T14670] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2447'. [ 786.318075][T14670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'. [ 786.347948][T14670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2447'. [ 786.417595][T14663] netlink: 'syz.8.2446': attribute type 1 has an invalid length. [ 787.148306][ T5825] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 787.321950][ T5825] usb 5-1: Using ep0 maxpacket: 16 [ 787.338383][ T5825] usb 5-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 787.373047][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 787.384778][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 787.395091][ T5825] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 787.406277][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.426223][ T5825] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 787.659481][ T5825] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 787.718970][ T5825] usb 5-1: Manufacturer: syz [ 787.755972][ T5825] usb 5-1: config 0 descriptor?? [ 788.233663][ T5825] rc_core: IR keymap rc-hauppauge not found [ 788.257368][ T5825] Registered IR keymap rc-empty [ 788.278901][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.343269][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.397685][ T5825] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 788.478671][ T5825] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input59 [ 788.541532][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.594870][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.632136][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.663038][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.707533][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.754655][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.808792][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.852420][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.892306][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.922101][ T5825] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 788.978410][ T5825] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 789.020149][ T5825] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 789.090295][ T5825] usb 5-1: USB disconnect, device number 14 [ 789.138949][T14709] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2464'. [ 790.359988][T14720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2466'. [ 790.393788][T14720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2466'. [ 790.507180][T14720] bridge0: entered promiscuous mode [ 790.553580][T14720] ip6gretap0: entered promiscuous mode [ 790.579146][T14720] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 790.611222][T14720] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 791.234213][T14735] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 791.253823][ T58] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.279343][ T58] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.306223][ T58] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.325771][ T58] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.577069][T14744] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2477'. [ 792.134844][T14753] netlink: 'syz.3.2479': attribute type 1 has an invalid length. [ 792.822625][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2484'. [ 793.492177][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 793.518444][T10665] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.564659][ T58] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.623227][ T58] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.716104][ T58] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.973168][ T10] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 794.022318][ T10] usb 2-1: config 0 has no interface number 0 [ 794.055754][ T10] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 794.072536][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.080770][ T10] usb 2-1: Product: syz [ 794.085572][ T10] usb 2-1: Manufacturer: syz [ 794.090185][ T10] usb 2-1: SerialNumber: syz [ 794.123866][ T10] usb 2-1: config 0 descriptor?? [ 794.380780][T14786] overlayfs: missing 'lowerdir' [ 795.235790][ T30] audit: type=1326 audit(1771614771.284:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.315601][ T30] audit: type=1326 audit(1771614771.284:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.426529][ T30] audit: type=1326 audit(1771614771.284:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.510353][ T30] audit: type=1326 audit(1771614771.284:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.611334][T14773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.634786][T14773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.693198][ T30] audit: type=1326 audit(1771614771.294:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.758284][ T30] audit: type=1326 audit(1771614771.294:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.852140][T14793] misc userio: No port type given on /dev/userio [ 795.892406][ T30] audit: type=1326 audit(1771614771.294:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 795.961041][ T30] audit: type=1326 audit(1771614771.294:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 796.073583][ T30] audit: type=1326 audit(1771614771.294:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 796.204613][ T30] audit: type=1326 audit(1771614771.294:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14788 comm="syz.4.2491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 796.707373][T14800] vxcan1 speed is unknown, defaulting to 1000 [ 799.556187][T14824] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2502'. [ 799.608261][T14827] netlink: 'syz.8.2502': attribute type 10 has an invalid length. [ 799.670502][T14826] overlay: Unknown parameter '/' [ 799.678959][T14827] syz_tun: entered promiscuous mode [ 799.769871][T14827] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 799.949194][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 799.992261][ T10] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 800.036933][ T10] asix 2-1:0.251: probe with driver asix failed with error -71 [ 800.176302][ T10] usb 2-1: USB disconnect, device number 12 [ 800.437401][T14838] netlink: 'syz.5.2504': attribute type 1 has an invalid length. [ 800.549423][T14837] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2508'. [ 801.019268][T14851] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2510'. [ 803.215496][T14872] overlay: Unknown parameter '/' [ 803.815401][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2519'. [ 806.954975][T14908] netlink: 1004 bytes leftover after parsing attributes in process `syz.1.2526'. [ 807.810010][T14920] netlink: 'syz.4.2529': attribute type 1 has an invalid length. [ 808.191580][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.198296][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.194103][T14928] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2533'. [ 809.977883][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2538'. [ 809.988137][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2538'. [ 810.977816][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 811.311921][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 811.319723][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 811.338395][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.415365][T14963] overlay: Unknown parameter '/' [ 811.811264][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.832351][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 811.894753][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 811.942178][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 811.977818][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 812.120999][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.158011][ T10] usb 2-1: Manufacturer: syz [ 812.187475][ T10] usb 2-1: config 0 descriptor?? [ 812.379913][T14979] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2550'. [ 812.652552][ T10] rc_core: IR keymap rc-hauppauge not found [ 812.658698][ T10] Registered IR keymap rc-empty [ 812.664974][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.192372][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.269853][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 813.339212][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 813.412895][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.472232][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.517034][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.552067][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.582110][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.618532][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.727194][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.772167][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.835426][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.883015][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 813.927390][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 813.931992][T15004] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.2559'. [ 813.936905][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 814.498181][ T10] usb 2-1: USB disconnect, device number 13 [ 814.757957][T15010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2558'. [ 815.522004][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 815.577737][T15025] overlayfs: failed to clone lowerpath [ 815.673568][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 815.687198][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10 [ 815.712402][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.732437][ T10] usb 2-1: Product: syz [ 815.798876][ T10] usb 2-1: Manufacturer: syz [ 815.814244][ T10] usb 2-1: SerialNumber: syz [ 815.863348][ T10] usb 2-1: config 0 descriptor?? [ 815.904003][ T10] usb 2-1: ucan: probing device on interface #0 [ 815.910472][ T10] usb 2-1: ucan: invalid EP count (0) [ 815.941976][ T10] usb 2-1: ucan: probe failed; try to update the device firmware [ 815.965303][T15031] vxcan1 speed is unknown, defaulting to 1000 [ 816.110841][ T10] usb 2-1: USB disconnect, device number 14 [ 816.923483][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 816.923504][ T30] audit: type=1326 audit(1771614793.084:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 817.277026][ T30] audit: type=1326 audit(1771614793.084:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 817.339531][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 817.355180][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2578'. [ 817.621621][ T30] audit: type=1326 audit(1771614793.084:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 817.970068][ T30] audit: type=1326 audit(1771614793.084:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 818.214800][ T30] audit: type=1326 audit(1771614793.084:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 818.321960][ T30] audit: type=1326 audit(1771614793.084:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 818.521493][ T30] audit: type=1326 audit(1771614793.084:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 818.626032][ T30] audit: type=1326 audit(1771614793.084:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 818.718030][ T30] audit: type=1326 audit(1771614793.084:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15048 comm="syz.1.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadba19c629 code=0x7ffc0000 [ 819.656029][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 820.235209][T15099] netlink: 1004 bytes leftover after parsing attributes in process `syz.8.2591'. [ 820.398105][ T30] audit: type=1326 audit(1771614796.554:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15097 comm="syz.4.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41f039c629 code=0x7ffc0000 [ 820.514709][T15106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'. [ 820.543042][T15106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2593'. [ 820.616530][T15106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'. [ 820.718343][T15106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2593'. [ 822.292655][T15126] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 823.610455][T15144] overlay: Unknown parameter '/' [ 823.776894][T15142] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.784509][T15142] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.905017][T15142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.917279][T15142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.019513][T15142] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 824.148430][T15142] ip6gre1: left promiscuous mode [ 824.203090][ T6744] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.228325][ T6744] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.279060][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.318939][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.396301][T15167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2615'. [ 824.438931][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2615'. [ 824.476848][T15167] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2615'. [ 830.764438][T15222] __nla_validate_parse: 1 callbacks suppressed [ 830.764461][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 830.856562][T15222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2638'. [ 830.883026][T15226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2639'. [ 830.911611][T15225] loop4: detected capacity change from 0 to 1024 [ 830.931339][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 830.956597][T15225] EXT4-fs: inline encryption not supported [ 830.983351][T15222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 831.084658][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2623'. [ 831.098120][T15228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2623'. [ 831.189528][T15225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.664100][T11373] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.701234][T15241] netlink: 91 bytes leftover after parsing attributes in process `syz.1.2643'. [ 832.142502][ T953] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 832.315350][ T953] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 832.358852][ T953] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 832.387500][ T953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.410214][ T953] usb 5-1: Product: syz [ 832.421805][ T953] usb 5-1: Manufacturer: syz [ 832.434682][ T953] usb 5-1: SerialNumber: syz [ 832.458545][ T953] usb 5-1: config 0 descriptor?? [ 832.515728][ T953] imon_raw 5-1:0.0: IR endpoint missing [ 832.735258][T15247] netlink: 'syz.4.2646': attribute type 3 has an invalid length. [ 832.743637][T15247] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2646'. [ 832.760008][ T953] usb 5-1: USB disconnect, device number 15 [ 835.372846][T15289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 836.881975][T15306] netlink: 'syz.5.2668': attribute type 3 has an invalid length. [ 836.889835][T15306] __nla_validate_parse: 2 callbacks suppressed [ 836.889849][T15306] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2668'. [ 837.313783][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2676'. [ 837.605180][T15333] openvswitch: netlink: IP tunnel dst address not specified [ 837.622153][T15333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2675'. [ 837.889371][T15340] trusted_key: encrypted_key: insufficient parameters specified [ 839.420128][T15360] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2684'. [ 840.135961][T15377] netlink: 'syz.0.2691': attribute type 3 has an invalid length. [ 840.439799][T15377] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2691'. [ 840.759706][T15384] trusted_key: encrypted_key: insufficient parameters specified [ 841.652370][T15399] overlayfs: failed to clone lowerpath [ 842.259295][T15409] trusted_key: encrypted_key: insufficient parameters specified [ 842.853896][T15424] trusted_key: encrypted_key: insufficient parameters specified [ 847.324122][T15467] blktrace: Concurrent blktraces are not allowed on loop2 [ 847.591793][T15469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2721'. [ 848.173316][T15464] trusted_key: encrypted_key: insufficient parameters specified [ 849.792269][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 850.262335][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 850.308105][ T29] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=cf.10 [ 850.337436][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.401170][ T29] usb 5-1: Product: syz [ 850.411657][ T29] usb 5-1: Manufacturer: syz [ 850.451582][ T29] usb 5-1: SerialNumber: syz [ 850.467458][ T29] usb 5-1: config 0 descriptor?? [ 850.610683][ T29] usb 5-1: ucan: probing device on interface #0 [ 850.638800][ T29] usb 5-1: ucan: invalid EP count (0) [ 850.671902][ T29] usb 5-1: ucan: probe failed; try to update the device firmware [ 850.814039][ T29] usb 5-1: USB disconnect, device number 16 [ 852.164751][T15516] blktrace: Concurrent blktraces are not allowed on loop0 [ 852.898028][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2736'. [ 853.554922][T15521] trusted_key: encrypted_key: insufficient parameters specified [ 856.476034][T15551] /dev/nullb0: Can't lookup blockdev [ 857.691442][T15533] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2727'. [ 857.705931][T15533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2727'. [ 857.949942][T15563] trusted_key: encrypted_key: insufficient parameters specified [ 859.975392][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'. [ 860.233802][T15591] trusted_key: encrypted_key: insufficient parameters specified [ 862.237630][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2777'. [ 862.339779][T15620] wireguard0: entered allmulticast mode [ 862.673065][T15634] trusted_key: encrypted_key: insufficient parameters specified [ 865.579732][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2790'. [ 865.800706][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2792'. [ 865.844789][T15664] syz.0.2791 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 865.864587][T15664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2791'. [ 865.890236][T15652] vxcan1 speed is unknown, defaulting to 1000 [ 866.083162][T15669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2791'. [ 866.400863][T15675] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2795'. [ 868.009126][T15686] trusted_key: encrypted_key: insufficient parameters specified [ 869.150296][T15710] trusted_key: encrypted_key: key user:syz not found [ 869.377341][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.391275][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.760294][T15742] trusted_key: encrypted_key: insufficient parameters specified [ 877.511292][T15800] /dev/nullb0: Can't lookup blockdev [ 887.662231][T15905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2868'. [ 888.065527][T15914] netlink: 'syz.1.2872': attribute type 5 has an invalid length. [ 891.208115][T15952] /dev/nullb0: Can't lookup blockdev [ 897.456840][T16004] netlink: 'syz.1.2904': attribute type 4 has an invalid length. [ 897.750374][T16007] /dev/nullb0: Can't lookup blockdev [ 900.278188][T16045] /dev/nullb0: Can't lookup blockdev [ 901.989771][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2921'. [ 902.987614][T16079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2929'. [ 905.114866][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 905.125198][T16103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 911.714372][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2964'. [ 913.917891][T16214] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2977'. [ 914.716906][T16233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2978'. [ 917.281918][T10331] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 917.333536][T16258] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2994'. [ 917.462048][T10331] usb 5-1: Using ep0 maxpacket: 16 [ 917.474048][T10331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 917.498879][T10331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 917.558249][T16264] netlink: 'syz.1.2997': attribute type 4 has an invalid length. [ 917.567212][T10331] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 917.644396][T10331] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 917.944332][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2998'. [ 917.953704][T10331] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 917.961699][T10331] usb 5-1: Manufacturer: syz [ 917.993124][T10331] usb 5-1: config 0 descriptor?? [ 918.178047][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3001'. [ 919.422900][T16301] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3010'. [ 919.753223][T16309] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3015'. [ 919.765648][T16309] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3015'. [ 919.887865][T16313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3016'. [ 920.054686][ T953] usb 5-1: USB disconnect, device number 17 [ 920.517768][T16346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'. [ 922.910107][T16362] vxcan1 speed is unknown, defaulting to 1000 [ 923.200934][T16371] overlayfs: failed to clone lowerpath [ 923.549378][T16384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3043'. [ 923.700355][ T5818] ================================================================== [ 923.708462][ T5818] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 923.717596][ T5818] Read of size 8 at addr ffff88807e4ce0b8 by task syz-executor/5818 [ 923.725580][ T5818] [ 923.727901][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 923.727930][ T5818] Tainted: [L]=SOFTLOCKUP [ 923.727938][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.727952][ T5818] Call Trace: [ 923.727963][ T5818] [ 923.727972][ T5818] dump_stack_lvl+0xe8/0x150 [ 923.728007][ T5818] print_report+0xba/0x230 [ 923.728033][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 923.728058][ T5818] kasan_report+0x117/0x150 [ 923.728086][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 923.728115][ T5818] __list_del_entry_valid_or_report+0x92/0x190 [ 923.728142][ T5818] bulk_make_private+0xd9/0x8b0 [ 923.728172][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.728201][ T5818] umount_tree+0x582/0xd90 [ 923.728230][ T5818] ? __pfx_umount_tree+0x10/0x10 [ 923.728257][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.728286][ T5818] ? deactivate_nsproxy+0x41/0x140 [ 923.728314][ T5818] put_mnt_ns+0x1d6/0x2f0 [ 923.728345][ T5818] deactivate_nsproxy+0x41/0x140 [ 923.728379][ T5818] do_exit+0x696/0x2320 [ 923.728405][ T5818] ? __pfx_do_exit+0x10/0x10 [ 923.728428][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 923.728451][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 923.728480][ T5818] do_group_exit+0x21b/0x2d0 [ 923.728502][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 923.728535][ T5818] get_signal+0x1284/0x1330 [ 923.728575][ T5818] arch_do_signal_or_restart+0xbc/0x830 [ 923.728603][ T5818] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 923.728632][ T5818] ? ksys_read+0x1fc/0x270 [ 923.728659][ T5818] exit_to_user_mode_loop+0x86/0x480 [ 923.728684][ T5818] ? rcu_is_watching+0x15/0xb0 [ 923.728717][ T5818] do_syscall_64+0x32d/0xf80 [ 923.728749][ T5818] ? trace_irq_disable+0x3b/0x150 [ 923.728782][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.728806][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.728828][ T5818] RIP: 0033:0x7f150fb5cece [ 923.728846][ T5818] Code: Unable to access opcode bytes at 0x7f150fb5cea4. [ 923.728857][ T5818] RSP: 002b:00007ffcaa36e978 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 923.728879][ T5818] RAX: fffffffffffffe00 RBX: 000055557c855500 RCX: 00007f150fb5cece [ 923.728895][ T5818] RDX: 0000000000000030 RSI: 00007ffcaa36ea70 RDI: 00000000000000f9 [ 923.728909][ T5818] RBP: 00007ffcaa36ea1c R08: 0000000000000000 R09: 0000000000000000 [ 923.728923][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 923.728936][ T5818] R13: 00000000000927c0 R14: 00000000000e16cf R15: 00007ffcaa36ea70 [ 923.728961][ T5818] [ 923.728969][ T5818] [ 923.979069][ T5818] Allocated by task 15691: [ 923.983473][ T5818] kasan_save_track+0x3e/0x80 [ 923.988150][ T5818] __kasan_slab_alloc+0x6c/0x80 [ 923.992994][ T5818] kmem_cache_alloc_noprof+0x2bc/0x650 [ 923.998457][ T5818] alloc_vfsmnt+0x23/0x420 [ 924.002865][ T5818] clone_mnt+0x4b/0x9a0 [ 924.007011][ T5818] vfs_open_tree+0x507/0x1040 [ 924.011672][ T5818] __x64_sys_open_tree+0x96/0x110 [ 924.016803][ T5818] do_syscall_64+0x14d/0xf80 [ 924.021393][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.027286][ T5818] [ 924.029601][ T5818] Freed by task 15660: [ 924.033654][ T5818] kasan_save_track+0x3e/0x80 [ 924.038511][ T5818] kasan_save_free_info+0x46/0x50 [ 924.043709][ T5818] __kasan_slab_free+0x5c/0x80 [ 924.048464][ T5818] kmem_cache_free+0x187/0x630 [ 924.053224][ T5818] rcu_core+0x7cd/0x1070 [ 924.057508][ T5818] handle_softirqs+0x22a/0x870 [ 924.062273][ T5818] __irq_exit_rcu+0x5f/0x150 [ 924.066868][ T5818] irq_exit_rcu+0x9/0x30 [ 924.071112][ T5818] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 924.076749][ T5818] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 924.082726][ T5818] [ 924.085034][ T5818] Last potentially related work creation: [ 924.090732][ T5818] kasan_save_stack+0x3e/0x60 [ 924.095406][ T5818] kasan_record_aux_stack+0xbd/0xd0 [ 924.100613][ T5818] call_rcu+0xee/0x890 [ 924.104683][ T5818] task_work_run+0x1d9/0x270 [ 924.109266][ T5818] exit_to_user_mode_loop+0xed/0x480 [ 924.114537][ T5818] do_syscall_64+0x32d/0xf80 [ 924.119176][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.125069][ T5818] [ 924.127377][ T5818] Second to last potentially related work creation: [ 924.133943][ T5818] kasan_save_stack+0x3e/0x60 [ 924.138611][ T5818] kasan_record_aux_stack+0xbd/0xd0 [ 924.143805][ T5818] task_work_add+0xb6/0x440 [ 924.148298][ T5818] mntput_no_expire_slowpath+0x70c/0xbd0 [ 924.153922][ T5818] vfs_open_tree+0xe17/0x1040 [ 924.158590][ T5818] __x64_sys_open_tree+0x96/0x110 [ 924.163643][ T5818] do_syscall_64+0x14d/0xf80 [ 924.168238][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.174127][ T5818] [ 924.176699][ T5818] The buggy address belongs to the object at ffff88807e4ce000 [ 924.176699][ T5818] which belongs to the cache mnt_cache of size 352 [ 924.190575][ T5818] The buggy address is located 184 bytes inside of [ 924.190575][ T5818] freed 352-byte region [ffff88807e4ce000, ffff88807e4ce160) [ 924.204379][ T5818] [ 924.206698][ T5818] The buggy address belongs to the physical page: [ 924.213125][ T5818] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807e4ce380 pfn:0x7e4ce [ 924.223393][ T5818] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 924.231903][ T5818] memcg:ffff88803457b401 [ 924.236234][ T5818] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 924.244738][ T5818] page_type: f5(slab) [ 924.248731][ T5818] raw: 00fff00000000240 ffff88801babd8c0 ffff88801bab87c8 ffffea0001920e90 [ 924.257313][ T5818] raw: ffff88807e4ce380 0000000800120002 00000000f5000000 ffff88803457b401 [ 924.265895][ T5818] head: 00fff00000000240 ffff88801babd8c0 ffff88801bab87c8 ffffea0001920e90 [ 924.274565][ T5818] head: ffff88807e4ce380 0000000800120002 00000000f5000000 ffff88803457b401 [ 924.283237][ T5818] head: 00fff00000000001 ffffea0001f93381 00000000ffffffff 00000000ffffffff [ 924.291903][ T5818] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 924.300571][ T5818] page dumped because: kasan: bad access detected [ 924.306980][ T5818] page_owner tracks the page as allocated [ 924.312688][ T5818] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5816, tgid 5816 (syz-executor), ts 87331092760, free_ts 87286741650 [ 924.334145][ T5818] post_alloc_hook+0x231/0x280 [ 924.338917][ T5818] get_page_from_freelist+0x24dc/0x2580 [ 924.344464][ T5818] __alloc_frozen_pages_noprof+0x18d/0x380 [ 924.350284][ T5818] allocate_slab+0x77/0x660 [ 924.354784][ T5818] refill_objects+0x331/0x3c0 [ 924.359458][ T5818] __pcs_replace_empty_main+0x2b9/0x620 [ 924.365006][ T5818] kmem_cache_alloc_noprof+0x37d/0x650 [ 924.370469][ T5818] alloc_vfsmnt+0x23/0x420 [ 924.374876][ T5818] clone_mnt+0x4b/0x9a0 [ 924.379027][ T5818] copy_tree+0x3d4/0x930 [ 924.383278][ T5818] do_loopback+0x386/0x6c0 [ 924.387784][ T5818] __se_sys_mount+0x31d/0x420 [ 924.392461][ T5818] do_syscall_64+0x14d/0xf80 [ 924.397057][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.402940][ T5818] page last free pid 15 tgid 15 stack trace: [ 924.408901][ T5818] __free_frozen_pages+0xc2b/0xdb0 [ 924.414006][ T5818] rcu_core+0x7cd/0x1070 [ 924.418281][ T5818] handle_softirqs+0x22a/0x870 [ 924.423129][ T5818] run_ksoftirqd+0x36/0x60 [ 924.427547][ T5818] smpboot_thread_fn+0x541/0xa50 [ 924.432482][ T5818] kthread+0x388/0x470 [ 924.436627][ T5818] ret_from_fork+0x51e/0xb90 [ 924.441300][ T5818] ret_from_fork_asm+0x1a/0x30 [ 924.446065][ T5818] [ 924.448395][ T5818] Memory state around the buggy address: [ 924.454010][ T5818] ffff88807e4cdf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 924.462058][ T5818] ffff88807e4ce000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 924.470160][ T5818] >ffff88807e4ce080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 924.478294][ T5818] ^ [ 924.484178][ T5818] ffff88807e4ce100: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 924.492249][ T5818] ffff88807e4ce180: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 924.500296][ T5818] ================================================================== [ 924.509285][ T5818] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 924.516505][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 924.527540][ T5818] Tainted: [L]=SOFTLOCKUP [ 924.531878][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 924.541938][ T5818] Call Trace: [ 924.545243][ T5818] [ 924.548160][ T5818] vpanic+0x56c/0xa60 [ 924.552145][ T5818] ? __pfx_vpanic+0x10/0x10 [ 924.556673][ T5818] ? irqentry_exit+0x59e/0x620 [ 924.561432][ T5818] panic+0xc5/0xd0 [ 924.565144][ T5818] ? __pfx_panic+0x10/0x10 [ 924.569560][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 924.575886][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 924.582203][ T5818] check_panic_on_warn+0x89/0xb0 [ 924.587167][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 924.593480][ T5818] end_report+0x73/0x180 [ 924.597707][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 924.604028][ T5818] kasan_report+0x128/0x150 [ 924.608538][ T5818] ? __list_del_entry_valid_or_report+0x92/0x190 [ 924.614855][ T5818] __list_del_entry_valid_or_report+0x92/0x190 [ 924.620997][ T5818] bulk_make_private+0xd9/0x8b0 [ 924.625837][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.631549][ T5818] umount_tree+0x582/0xd90 [ 924.635955][ T5818] ? __pfx_umount_tree+0x10/0x10 [ 924.640880][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.646504][ T5818] ? deactivate_nsproxy+0x41/0x140 [ 924.651607][ T5818] put_mnt_ns+0x1d6/0x2f0 [ 924.655927][ T5818] deactivate_nsproxy+0x41/0x140 [ 924.660908][ T5818] do_exit+0x696/0x2320 [ 924.665061][ T5818] ? __pfx_do_exit+0x10/0x10 [ 924.669647][ T5818] ? do_raw_spin_lock+0x12b/0x2f0 [ 924.674665][ T5818] ? srso_alias_return_thunk+0x5/0xfbef5 [ 924.680342][ T5818] do_group_exit+0x21b/0x2d0 [ 924.684923][ T5818] ? _raw_spin_unlock_irq+0x23/0x50 [ 924.690120][ T5818] get_signal+0x1284/0x1330 [ 924.694626][ T5818] arch_do_signal_or_restart+0xbc/0x830 [ 924.700170][ T5818] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 924.706326][ T5818] ? ksys_read+0x1fc/0x270 [ 924.710740][ T5818] exit_to_user_mode_loop+0x86/0x480 [ 924.716030][ T5818] ? rcu_is_watching+0x15/0xb0 [ 924.720820][ T5818] do_syscall_64+0x32d/0xf80 [ 924.725423][ T5818] ? trace_irq_disable+0x3b/0x150 [ 924.730441][ T5818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.736498][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.742384][ T5818] RIP: 0033:0x7f150fb5cece [ 924.746786][ T5818] Code: Unable to access opcode bytes at 0x7f150fb5cea4. [ 924.753781][ T5818] RSP: 002b:00007ffcaa36e978 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 924.762180][ T5818] RAX: fffffffffffffe00 RBX: 000055557c855500 RCX: 00007f150fb5cece [ 924.770180][ T5818] RDX: 0000000000000030 RSI: 00007ffcaa36ea70 RDI: 00000000000000f9 [ 924.778139][ T5818] RBP: 00007ffcaa36ea1c R08: 0000000000000000 R09: 0000000000000000 [ 924.786106][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000258 [ 924.794235][ T5818] R13: 00000000000927c0 R14: 00000000000e16cf R15: 00007ffcaa36ea70 [ 924.802209][ T5818] [ 924.805555][ T5818] Kernel Offset: disabled [ 924.809917][ T5818] Rebooting in 86400 seconds..