last executing test programs: 4m43.266011955s ago: executing program 0 (id=490): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003c00)) 4m43.118163339s ago: executing program 0 (id=491): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') syz_fuse_handle_req(r2, &(0x7f00000004c0)="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", 0x2000, &(0x7f0000006c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m42.745650907s ago: executing program 0 (id=494): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 4m40.778901356s ago: executing program 0 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) 4m40.128754412s ago: executing program 0 (id=516): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000014}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 4m38.491471422s ago: executing program 0 (id=535): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, 0x0) 4m37.988599745s ago: executing program 32 (id=535): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, 0x0) 3m11.293917772s ago: executing program 5 (id=1101): socket(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 3m11.047802298s ago: executing program 5 (id=1102): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x100048c5) 3m9.975174966s ago: executing program 5 (id=1109): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 3m9.602256697s ago: executing program 5 (id=1114): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000016, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) 3m9.321726852s ago: executing program 5 (id=1116): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x10000000}) dup(0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = gettid() rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, &(0x7f0000000140)={0x0, 0x1e, 0x4, @tid=r2}, &(0x7f00000000c0)) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 3m8.318315814s ago: executing program 5 (id=1125): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xb, @private1={0xfc, 0x1, '\x00', 0x3}, 0x80000003}, 0x1c) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m7.452453204s ago: executing program 33 (id=1125): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0xb, @private1={0xfc, 0x1, '\x00', 0x3}, 0x80000003}, 0x1c) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m58.830211927s ago: executing program 3 (id=1178): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=""/127, 0x7f}, 0x1a83}], 0x2, 0x100, 0x0) 2m57.914874016s ago: executing program 3 (id=1186): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m57.914373433s ago: executing program 3 (id=1187): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket(0x22, 0x2, 0x23) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) socket(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m57.789014164s ago: executing program 3 (id=1188): r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x4e) close(r1) r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) mount$9p_fd(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 2m56.640353718s ago: executing program 3 (id=1195): socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) socket$nl_netfilter(0x10, 0x3, 0xc) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92F\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 2m53.396531985s ago: executing program 3 (id=1205): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0, 0x0, 0x0, 0x40000}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m38.238096911s ago: executing program 34 (id=1205): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"6b3bfb24a49cb307ac6500", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x82, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0, 0x0, 0x0, 0x40000}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13.744912381s ago: executing program 6 (id=1870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.705341323s ago: executing program 2 (id=1871): bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) 12.701259871s ago: executing program 4 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 10.707222205s ago: executing program 6 (id=1877): socket(0x2, 0x80805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10.518817601s ago: executing program 4 (id=1878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)="ad9ebf11ada0330a6c939a51d7", 0x0, 0xd, r0, 0x4}, 0x38) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = creat(&(0x7f0000000000)='./file1\x00', 0x0) io_setup(0x200, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r3}, &(0x7f00000008c0), &(0x7f0000000900)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x17, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x2, 0x0, &(0x7f0000000a00)=[{0x2, 0x1, 0xd, 0x2}, {0x2, 0x2, 0x4, 0x1}], 0x10, 0xffff}, 0x94) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 10.423126012s ago: executing program 2 (id=1880): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0xf0ff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x20000002}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) 9.07583788s ago: executing program 2 (id=1883): close(0xffffffffffffffff) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x49) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80000001}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16], 0x2c}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x20385655, 0x6, 0x0, [{0x8, 0xf}, {0xb, 0x7fffffff}, {0xd, 0x8}, {0x400, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x8409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x0, 0x3078182a3427730f, 0x1}}) openat$vcs(0xffffff9c, &(0x7f0000001100), 0x6a001, 0x0) 8.617172316s ago: executing program 4 (id=1884): socket$l2tp(0x2, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000080)='bpf\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x300}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0xc385fe8a6eaee6fb, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES32=r0], 0x20) 8.56904874s ago: executing program 6 (id=1885): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) statfs(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.490651355s ago: executing program 7 (id=1887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) landlock_restrict_self(r0, 0x0) close(r0) 8.489869165s ago: executing program 2 (id=1888): unshare(0x22020400) gettid() pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000022c0)=[{&(0x7f0000000000)='|', 0x61}], 0x1, 0x1) dup(0xffffffffffffffff) socket$inet6(0xa, 0x80003, 0xff) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000002) r3 = dup2(r2, r2) syz_fuse_handle_req(r3, &(0x7f0000000280)="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", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 8.269581661s ago: executing program 4 (id=1892): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000008009500f10100000000487591731cba12c07d57d995b61e89a4530f92344f242b416ae9eeefc0e9c6f203cb1276bfdbb4ddffffff7f82dc2b938189a7ca02f732e4c2eab72bf40c0682fd0a0c4ac106b29e220dc2880072599456d4c4e6f3fe684ab8373bb4df9d72876ef3834293812e927c01c7da1322da44c7f2ed1084a12f56d1cb39df9858037458a4ca037604007600b6be484e4c9517af216bd8ed42f7dd01008e49f4a94608c9a20819e02fc22e6be45574d4ed88b37ab8d7674c644dca2f1b4d745fd95c41f9dfc1adafd1e5a3e7f2e898961cb43e438c4e41ae43ea118e14ffffffffe4b8a80366ce5401ec61921a1b529cc8b99bffffb1ac006c67767b03b95151aeb89e6d4a43c625aa228504e4afd8c1cc3eb215ba22f43115f4d39dc7beedb130d9f2be90133a4500000058b8c9370634060105baa664953514605fba3973aa021945b985a8a66e0200000057033815717b4fdbe55b37cb8d7f41aacfbd4089ea1bd22440f64909a09b5a759a703e71f358e11ac8e13db15d792e604a4f279b3bd6621bdf2c17bc0400001000000000ff8d81006200607a9a76e5d9656a7154c75773902a1bdf399df3925130312d095e9c1f973d091c198c1a11edb6b3cc425fe203d2f2655a76865c2c34e2470fcfb1248c0add5431a7fbcb0ef4f66a09af93a09fab1daae4b518d7a5d95a017864010067d6bab101446ebfe3fdeed7ee7bb0749cacf56cf27409c60fca2e0004000000000000a9cb6f4a78444986f9b1ab61f9dab53038010000004abbfc59d6d1b18fe380df4bf024f120bd755d82033f2fb7d8fc9e0de834f7646c8dd27da1297d0c77b294e097e293db7f002c0024ab2fb4d32972cba6f49051cec1ff5d16231bbb90a2d201a500000000000000007700b06fa191ebd3a0c2ef0058ffebd7cc4cf80f74a7cdac01d998c24f34a5ba9a4a2039d0416e3f8107671141ffffffe0c7d8e94a27a06a4e3d9acee835fd0571e5bbb3e6d2b5eba505000000968983811f832dc5390f83e817c602c4f1f0d0504255c22ee8674053d0e160e5255366139bbe5863e23c3dd42d21f542816edf56a93d0a7e6f08f9ffffff64875fea6ff57ba6ae25c5e8ca4f78d5a01308243b08f1caa46be5244d64f8e875857f083144c642f71cdc8e5634c1360c056430fe77ee7ed7ac1f9743786b2fb8e0fcfcc3d36c93230b7b1da97c971c8c84a427edc3492b97e73d2060acfd8145e4a5851bc4d6fdc5ad939d7795f3879baa88bd194d48e50c84892c97c800d156b059a718f6b10274b077a710f27ab8ee953de70ea860b74a0f3c3dc11177b11cc2e62a95f1ecf607a8dc38e525f415a1bd46b38845ebca04061bacbf627f7975fe599678fee48f83b5989543729e3600000000bc86cd51704f309130f534741377ea7b7bea3c46c0c4c4b7c27c5d057d95ac85a41cdcee8e6fa31f7d2137ed1fb4b21c13b9a2c5e3f7c9ef9e45a35adbf0b9312be929863f000000000000004a82bc080de1f87808d0711dd76f2977ca7f2684bfa5c14a0cd6f1f561e34e4e8e51e81d4a355a7d00d917c16a2bb0cfb2b5f59dfead7ac6e7fa84746e2e425769b9ee2c8ff10e934847604d930f62924d0562ce17f6dadf5053ed8f33092a41bb46e1878c5295fecc27f9c6d1f62da58c0002ea00000000009aa38a05e70591d5cdab1c488ef3c1984c7c0a566cfc2a080000009ec206a54fb49056a555414178ef00d8b8f3c59f01eb5d83415994efcc6ec4b3c275cd6b1b5ff82ef7d7abb1d218e7a1d0afa285706841aac9ccc89df41c39dd58dd70569dde45f8adeaad7d3328fbb6e279f745d2872f0208635e465ca443c3a64c7803760880af23fb3f430a0311fffc96dd13b951642f1433f65b4e170a62a5f7b7d0f9d5cef0d17289c43d4aee0001f7a343899434594cc23e1c864164e130754b337e560f285dc670a31241bf657babf0615b85dc200a10294b7d5885b43ac62fc7f97a85586168483427072a535f2c7481ec261c00f725de74e48d9a86f7d4a5d28da3f099ca3e6472b9d7c86d961f525f799b4517141f018af0673b8296f867eca1ec07be11bc497a6f7d2b752bcf77c2908b64630e7fa0c2261bc2d5de32ab6bbcf296d36807544aa7c3d3301fe227b713a371414c98695e559f9cbf6b046184064a5f24a4cc6f41f21fc24a3ad7d20a89e00a9dc99a40f890869d35fba3ce6f297661d3f8ba21c65badf55d1859581f9e7ef3e2693b46a8fc85be061ce79a08002c04dc04de8b6536123b24be2ef80eb06b2db900fb30596c1574b2a31f81d61ccfd58080d2330b9c7b87b5d17d48c32daffead3414b91603e250eeedc7d601000000037426f643797be3e93da96b5643d3feed0b7c885d06006b830d7cbf3152f27522f5142dcc84a9e48a07518f0142167abf5d6685d09945cbc778bcc3e7dcfaee5d9c1689a3bafc0d3b51b5a3bfd6007954c36d532960964183842601e5364ecb6ad9168040388c7640bfa2f88643de7eebf4da8d1c3e76daace5217761d933d06bbe9609fcf5971aa1e77c3123910e63daaadd8878ad468eabaf78a96012a4ada1a9cd217fb2a0da2d521454ea9e8fcd3b5badfd6f00003a73345b841d04a02bf441955b932c59608a555bc44873272812e0fb874618a0b56b4cf44990f60000000000000000000000b20000da0ca6797590ed13b0bccf71a39e05e877893646d185a77882f866785af6b0149e336c31fb177e3e85f4c60cd4de4ce6ea73a95f434328620fa493937386ad2e2a0d60eb815aa05c33e02c32276dab36d14c63af66a31409ab2a403ec3c7a4e07bd745efa2835a8c932f22aa6da40af9bcdf808b916bc8deb37d5b8c422b65c42d17e61751c561ce775a31b52703d398d52694cfbb7d2b3791b030093b321d9f16b2f06676cf94d75cbba6491ae0b5a16ce92320321314d8d2e88d1cd7e7b1216bdaecba309a38e107103e649d46958cc6ba2d660dd41b78d832beb7206ae01508377273ea96e40760410aeed1866971e04f578e9d856d01000000045aea928f5f669be0636dc3f34f90c34531735f271527412d1ae755a9243da523d713071f9370b509a34eeb46415b2f0d271a7072cbd17e293f20132e6c15756e92776c6a0d7c3a9f512ce17edf3f1ea190853bbf93e220a6ce968b79d504c057000e7d8f8249a8158e68a90bbea8bfab2bd3c067c28e185fe62ce7020f5282cf045b9c790984c6fb65fd3187bd8bfcbe663df6b7770000f58fbad41e6eee5c9595950c4172b9c925403b2f99bbf3cb1981bb0d14bded8eae35e08278020a1ec7f508628056fd3d408a02a1cf8594bcbb21a88f477673442804f714212d000045b9f563b5352fe460a30489b1b6a6d37daead86151492f7fd4b5c64007b68a1b04027eac124478a2ef7f59fe472795785de83578cb96334e0f7c1370dc397d3aa42d937b5718b7610cdcdfe104db7801ec74980b8b111a2748321f81512e4204eb2b024b9fc9e0f257f8c6037b93b2caa236d4354b32434d5a6b01e00000000ee2ea723ea2e1accb97a200609c77e0000000000000000d3a54ccd6e13a966801e9341260d6cbce5fe03999214462cbaa297448677ab659102d0f430fbeae119a7ef2e962d2829d4dd2201c4b30d491269594c88252fbd09aced90609851bd9e5c307e7e0d39e73579c1f3563eff1a6237d3699d61acdc8e36010d76093ddd237df1c4181b0a0c4543b4249e9ff2f5e8b5e0ba2048d542de40f643fda4036124b8feb2dd45d0fa52300518c8052cc09ad73f89734fce82cc627356aa2c651ed2644f34cfbc32e8b29cf29e895e43b473ddb9a43421b4b25f8bbce8e2d7cb8547d156d5972021ae4c9e30f85413276ddebde55999d2ec3c524632b74d703147ba09e0dcb26c4b89636d28428b67e955f53bfd0c9eeb7a9d17000000000096cd8ecf1c511eea07aefa1c5cae1841efa9329d80eafefe00000000000000009111274a44c722ff9f5151aa7cb99ea3e8b2c51eadbd2d0ba1a25b08cc3e67cd186c12ea62a55ff905388bb30d1a63d42593c9aea3a84f5a6fc470d8aaaafeccb373ca26c3685679e6a048af19fca3fc5315a33687"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 8.245029156s ago: executing program 7 (id=1893): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 7.048251535s ago: executing program 7 (id=1895): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) accept4(r4, 0x0, 0x0, 0x0) 7.044445231s ago: executing program 4 (id=1896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xce7c1000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000540)=0x8, 0x4) recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 6.98697081s ago: executing program 2 (id=1897): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c060000) unshare(0x2c020400) 6.563946908s ago: executing program 6 (id=1899): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000004c0)="654e058d952c9c633095c882eafe756e378ac4b3bcadce72caf12f7e1a33d810f0173859b87b973cde8c6be39c5426a7353c68319a6bb03a0a9d1a18d8cb2fdd7dacda02ad5a8e2be7f704c078b65939b1396560008e353646e9890c0f42f662cf0a8565d5b2779df0f57d416735797642702dc82acf16345c13feccee6f630323537c760f25078a792645e1d9cf7fc282666df16971d502d9ae070d98b13412593ac0040b7192395fb059fc18c6e627d2bb56a96d3efe607c7ba3060328a8e7f188c4892b18fc374cb5495b246328224aa9a2", 0xd3}], 0x1, &(0x7f0000000700)=[@ip_retopts={{0x54, 0x0, 0x7, {[@noop, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x12, "e493a19c767218b19a65bcd0227be1ab"}, @end, @rr={0x7, 0x1f, 0x37, [@local, @remote, @remote, @empty, @private=0xa010101, @loopback, @local]}, @generic={0x88, 0x9, "75237306aada8f"}, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x3e}, @empty}}}], 0xd8}, 0x40) r4 = syz_io_uring_setup(0x45c5, &(0x7f0000000280)={0x0, 0xe388, 0x0, 0x1, 0x398}, &(0x7f0000000340), &(0x7f0000000400)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0xa4d4a7e9a48cd727, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0xe, &(0x7f0000000980)={0x3, 0x0, &(0x7f0000000800)=[{0x0}], 0x0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="b9ff05000000008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x2a) pselect6(0x40, &(0x7f0000000140)={0x6, 0xc92e, 0x1000, 0x2, 0x6, 0x180a, 0xffffffffffffffff, 0x9433}, &(0x7f0000000180)={0x10, 0x3, 0x0, 0x0, 0x2, 0xff, 0x4, 0x4}, &(0x7f00000001c0)={0xfffffffffffffffc, 0x1, 0x5, 0x0, 0x100000000, 0x7, 0x3, 0x9}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0x5]}, 0x8}) 5.668978532s ago: executing program 7 (id=1900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffff7}, {0x0, 0xc, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 3.890719434s ago: executing program 1 (id=1902): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c0", 0x24}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15000000ffffffff0900000001000000401400", @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYBLOB="020000000000000000004000fe437aa7a54bf42a747c44858e"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x4, 0xffff0001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)={{0x14, 0x10, 0x30}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.463769879s ago: executing program 7 (id=1903): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x101102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) 3.282967225s ago: executing program 1 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) 3.281985538s ago: executing program 4 (id=1905): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x3f, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1.260562865s ago: executing program 2 (id=1906): socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="4000000010000104000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="0131010000000000140012800b000100627269646765f022e7ca2b46006409000000000000000001b9ccc1738d6eb757c4962a1d4f42ff31d74b8613f6d2066952df177d71884b4aadc84bde8fa1b44bff467c088a265cb30ed5017d2e4a14cbbac0d3d4bf68de7231c7d8d53f8bc1b8dd003f91b25214bb61d8481da6b88fd8fb248834f04e8bdf644d96c77bffa8436396cfb89d77719e26e5df07ab0132b634df2b16c10b591cb49d84aecdc8d675b79605fe1fe3f6801a33404853959bf454df6518ebc16dc9e21d015c347314b26b11153b9aaf927444d5246125a18e4d85e87f170f9ebe292558f297233ae803d700"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysfs$2(0x2, 0x817fff, &(0x7f0000000300)=""/101) 1.195898608s ago: executing program 6 (id=1907): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYRESHEX], 0x54}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x20000000000002, 0x2) write$P9_RLINK(r1, &(0x7f00000005c0)={0x7, 0x47, 0x2}, 0x7) 1.147958942s ago: executing program 1 (id=1908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 575.275773ms ago: executing program 1 (id=1909): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2f, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x4004) r3 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r3, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 373.41663ms ago: executing program 7 (id=1910): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 275.928326ms ago: executing program 1 (id=1911): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) 1.041624ms ago: executing program 6 (id=1912): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0xc, 0x6, 0xd9, 0x40, 0x41, 0xfb, 0x5e, 0xc, 0x0, 0x8, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r3 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x3, 0x20002f7}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=1913): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c0", 0x24}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="15000000ffffffff0900000001000000401400", @ANYBLOB="0100"/17, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000004000fe"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x6, 0x4, 0xffff0001}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): ns: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 106.750145][ T6150] mmap: syz.2.97 (6150) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 106.998939][ T6157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 108.174860][ T6198] netlink: 'syz.3.115': attribute type 4 has an invalid length. [ 108.253859][ T6199] netlink: 'syz.3.115': attribute type 4 has an invalid length. [ 109.026305][ T6221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.154122][ T6225] netlink: 'syz.4.126': attribute type 10 has an invalid length. [ 109.223108][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.226690][ T6225] bond0: (slave team0): Enslaving as an active interface with an up link [ 109.871401][ T6241] loop2: detected capacity change from 0 to 7 [ 109.926137][ T6239] input: syz0 as /devices/virtual/input/input7 [ 109.936839][ T5973] Dev loop2: unable to read RDB block 7 [ 109.936881][ T5973] loop2: unable to read partition table [ 109.937133][ T5973] loop2: partition table beyond EOD, truncated [ 109.963149][ T6241] Dev loop2: unable to read RDB block 7 [ 109.963186][ T6241] loop2: unable to read partition table [ 109.966734][ T6241] loop2: partition table beyond EOD, truncated [ 109.966756][ T6241] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 110.450367][ T6256] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 111.647976][ T993] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.907723][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 111.911888][ T993] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 111.911919][ T993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 111.911942][ T993] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 111.911964][ T993] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.912004][ T993] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.912026][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.110377][ C1] Unknown status report in ack skb [ 112.166234][ T993] usb 3-1: GET_CAPABILITIES returned 0 [ 112.166284][ T993] usbtmc 3-1:16.0: can't read capabilities [ 112.195699][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 112.383053][ T5849] usb 3-1: USB disconnect, device number 3 [ 114.499627][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.182'. [ 116.955465][ T6427] vxcan0: tx address claim with different name [ 118.029182][ T6474] syz.1.229 uses obsolete (PF_INET,SOCK_PACKET) [ 118.208788][ T5116] Bluetooth: hci5: command 0x1003 tx timeout [ 118.208957][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 119.370947][ T5904] IPVS: starting estimator thread 0... [ 119.477876][ T6506] IPVS: using max 8 ests per chain, 19200 per kthread [ 120.156170][ T37] kauditd_printk_skb: 131 callbacks suppressed [ 120.156189][ T37] audit: type=1326 audit(1760795840.512:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156237][ T37] audit: type=1326 audit(1760795840.512:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156278][ T37] audit: type=1326 audit(1760795840.512:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156320][ T37] audit: type=1326 audit(1760795840.512:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156361][ T37] audit: type=1326 audit(1760795840.512:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156402][ T37] audit: type=1326 audit(1760795840.512:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156450][ T37] audit: type=1326 audit(1760795840.512:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156492][ T37] audit: type=1326 audit(1760795840.512:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff63dcfb099 code=0x7ffc0000 [ 120.156533][ T37] audit: type=1326 audit(1760795840.512:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd5efc9 code=0x7ffc0000 [ 120.156575][ T37] audit: type=1326 audit(1760795840.512:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6501 comm="syz.0.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd5efc9 code=0x7ffc0000 [ 121.757697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.441061][ T6569] process 'syz.2.266' launched '/dev/fd/3' with NULL argv: empty string added [ 124.249603][ T6592] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.251074][ T6592] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.185839][ T6642] netlink: 'syz.3.293': attribute type 10 has an invalid length. [ 125.475798][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.513095][ T6592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.989233][ T6642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.008279][ T6642] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 127.014262][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.027272][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.035064][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.035111][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.153645][ T5810] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 128.153690][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 128.153713][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.153725][ T5810] Workqueue: hci0 hci_rx_work [ 128.153772][ T5810] Call Trace: [ 128.153783][ T5810] [ 128.153792][ T5810] dump_stack_lvl+0x189/0x250 [ 128.153823][ T5810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.153845][ T5810] ? __pfx__printk+0x10/0x10 [ 128.153874][ T5810] ? kernfs_path_from_node+0x2c/0x280 [ 128.153899][ T5810] ? kernfs_path_from_node+0x243/0x280 [ 128.153922][ T5810] ? kernfs_path_from_node+0x2c/0x280 [ 128.153950][ T5810] sysfs_create_dir_ns+0x259/0x280 [ 128.153973][ T5810] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 128.153999][ T5810] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 128.154028][ T5810] ? rt_spin_unlock+0x161/0x200 [ 128.154055][ T5810] kobject_add_internal+0x5a5/0xb50 [ 128.154085][ T5810] kobject_add+0x155/0x220 [ 128.154113][ T5810] ? __pfx_kobject_add+0x10/0x10 [ 128.154141][ T5810] ? get_device_parent+0x370/0x3a0 [ 128.154171][ T5810] device_add+0x408/0xb50 [ 128.154199][ T5810] hci_conn_add_sysfs+0xd5/0x1e0 [ 128.154226][ T5810] le_conn_complete_evt+0xf39/0x1500 [ 128.154268][ T5810] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 128.154296][ T5810] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 128.154324][ T5810] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.154356][ T5810] ? skb_pull_data+0xfb/0x200 [ 128.154384][ T5810] hci_le_conn_complete_evt+0x187/0x450 [ 128.154419][ T5810] hci_event_packet+0x78f/0x1200 [ 128.154447][ T5810] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 128.154478][ T5810] ? __pfx_hci_event_packet+0x10/0x10 [ 128.154514][ T5810] ? hci_send_to_monitor+0xe2/0x570 [ 128.154537][ T5810] hci_rx_work+0x46a/0xe80 [ 128.154569][ T5810] ? process_scheduled_works+0x9ef/0x17b0 [ 128.154608][ T5810] process_scheduled_works+0xae1/0x17b0 [ 128.154671][ T5810] ? __pfx_process_scheduled_works+0x10/0x10 [ 128.154720][ T5810] worker_thread+0x8a0/0xda0 [ 128.154743][ T5810] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.154780][ T5810] ? __kthread_parkme+0x7b/0x200 [ 128.154812][ T5810] kthread+0x711/0x8a0 [ 128.154837][ T5810] ? __pfx_worker_thread+0x10/0x10 [ 128.154854][ T5810] ? __pfx_kthread+0x10/0x10 [ 128.154872][ T5810] ? rt_spin_unlock+0x150/0x200 [ 128.154904][ T5810] ? rt_spin_unlock+0x161/0x200 [ 128.154925][ T5810] ? __pfx_kthread+0x10/0x10 [ 128.154949][ T5810] ret_from_fork+0x4bc/0x870 [ 128.154981][ T5810] ? __pfx_ret_from_fork+0x10/0x10 [ 128.155017][ T5810] ? __switch_to_asm+0x39/0x70 [ 128.155039][ T5810] ? __switch_to_asm+0x33/0x70 [ 128.155062][ T5810] ? __pfx_kthread+0x10/0x10 [ 128.155085][ T5810] ret_from_fork_asm+0x1a/0x30 [ 128.155130][ T5810] [ 128.156857][ T5810] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 128.156901][ T5810] Bluetooth: hci0: failed to register connection device [ 128.632300][ T6722] capability: warning: `syz.1.326' uses deprecated v2 capabilities in a way that may be insecure [ 128.805800][ T6733] loop5: detected capacity change from 0 to 7 [ 128.841287][ T6733] Dev loop5: unable to read RDB block 7 [ 128.841318][ T6733] loop5: AHDI p3 [ 128.841350][ T6733] loop5: partition table partially beyond EOD, truncated [ 129.569658][ T6756] sctp: [Deprecated]: syz.1.338 (pid 6756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.569658][ T6756] Use struct sctp_sack_info instead [ 129.894037][ T6768] ip6tnl1: entered promiscuous mode [ 129.894062][ T6768] ip6tnl1: entered allmulticast mode [ 130.941974][ T6790] syz.2.355 (6790) used greatest stack depth: 17712 bytes left [ 130.995140][ T6805] netlink: 'syz.3.361': attribute type 2 has an invalid length. [ 130.995161][ T6805] netlink: 48 bytes leftover after parsing attributes in process `syz.3.361'. [ 132.361659][ T6845] input: syz0 as /devices/virtual/input/input9 [ 132.721373][ T6857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.858833][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858935][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.157819][ T5952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.311120][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 133.313780][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.313809][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.313846][ T5952] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 133.313867][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.320390][ T5952] usb 5-1: config 0 descriptor?? [ 133.782795][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.782823][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.782838][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.782853][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.782867][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.782881][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.782895][ T5952] ntrig 0003:1B96:0008.0001: unknown main item tag 0x0 [ 133.804695][ T5952] ntrig 0003:1B96:0008.0001: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.4-1/input0 [ 134.148432][ T5952] usb 5-1: USB disconnect, device number 2 [ 134.308659][ T6914] netlink: 'syz.2.411': attribute type 12 has an invalid length. [ 134.308679][ T6914] netlink: 'syz.2.411': attribute type 29 has an invalid length. [ 134.308691][ T6914] netlink: 148 bytes leftover after parsing attributes in process `syz.2.411'. [ 134.308728][ T6914] netlink: 'syz.2.411': attribute type 1 has an invalid length. [ 134.308740][ T6914] netlink: 'syz.2.411': attribute type 2 has an invalid length. [ 134.308752][ T6914] netlink: 39 bytes leftover after parsing attributes in process `syz.2.411'. [ 134.309007][ T6914] Zero length message leads to an empty skb [ 134.367832][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 134.959636][ T5952] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.026344][ T6942] team0: Device ipip0 is of different type [ 135.132544][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.132574][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.132598][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.132618][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.132657][ T5952] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.132678][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.214591][ T5952] usb 5-1: config 0 descriptor?? [ 135.685555][ T5952] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 135.685596][ T5952] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 135.685622][ T5952] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 135.721633][ T5952] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 135.986011][ T10] usb 5-1: USB disconnect, device number 3 [ 138.032771][ T7016] netlink: 'syz.2.453': attribute type 12 has an invalid length. [ 139.312801][ T37] kauditd_printk_skb: 389 callbacks suppressed [ 139.312819][ T37] audit: type=1326 audit(1760795859.682:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz.0.464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff63dd5efc9 code=0x0 [ 139.952903][ T7059] tipc: Failed to remove unknown binding: 66,1,1/0:53568575/53568577 [ 139.952940][ T7059] tipc: Failed to remove unknown binding: 66,1,1/0:53568575/53568577 [ 139.987518][ T7061] batman_adv: batadv0: Adding interface: gretap1 [ 139.987536][ T7061] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.987566][ T7061] batman_adv: batadv0: Interface activated: gretap1 [ 140.787315][ T7095] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 142.237751][ T37] audit: type=1326 audit(1760795862.602:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.237808][ T37] audit: type=1326 audit(1760795862.602:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.239838][ T37] audit: type=1326 audit(1760795862.612:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.247775][ T37] audit: type=1326 audit(1760795862.612:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.247825][ T37] audit: type=1326 audit(1760795862.612:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.247865][ T37] audit: type=1326 audit(1760795862.612:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.247904][ T37] audit: type=1326 audit(1760795862.612:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.247943][ T37] audit: type=1326 audit(1760795862.612:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 142.319350][ T37] audit: type=1326 audit(1760795862.672:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7143 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 144.193862][ T7167] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 145.547464][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.026572][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.410080][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.664611][ T7231] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 146.844937][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 146.866929][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 146.869982][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 146.873319][ T5810] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 146.876663][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 146.952554][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.047748][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.055120][ T7231] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 147.831350][ T12] bridge_slave_1: left allmulticast mode [ 147.831449][ T12] bridge_slave_1: left promiscuous mode [ 147.833575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.951264][ T12] bridge_slave_0: left allmulticast mode [ 147.951292][ T12] bridge_slave_0: left promiscuous mode [ 147.952007][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.007980][ T5810] Bluetooth: hci2: command tx timeout [ 150.407783][ T12] bond0 (unregistering): left promiscuous mode [ 150.407800][ T12] bond_slave_0: left promiscuous mode [ 150.408011][ T12] bond_slave_1: left promiscuous mode [ 150.435386][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.518360][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.560459][ T12] bond0 (unregistering): Released all slaves [ 150.703533][ T7308] gretap1: entered promiscuous mode [ 150.991195][ T7324] loop9: detected capacity change from 0 to 7 [ 151.004464][ T7324] Dev loop9: unable to read RDB block 7 [ 151.004509][ T7324] loop9: unable to read partition table [ 151.004741][ T7324] loop9: partition table beyond EOD, truncated [ 151.004758][ T7324] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.088018][ T5810] Bluetooth: hci2: command tx timeout [ 151.349666][ T5949] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.498472][ T5949] usb 3-1: Using ep0 maxpacket: 32 [ 151.509899][ T5949] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 151.509927][ T5949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.509945][ T5949] usb 3-1: Product: syz [ 151.509958][ T5949] usb 3-1: Manufacturer: syz [ 151.509971][ T5949] usb 3-1: SerialNumber: syz [ 151.552527][ T5949] usb 3-1: config 0 descriptor?? [ 151.584791][ T5949] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 151.777582][ T5949] gspca_ov534_9: reg_w failed -71 [ 152.177797][ T5949] gspca_ov534_9: Unknown sensor 0000 [ 152.177895][ T5949] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 152.183096][ T5949] usb 3-1: USB disconnect, device number 4 [ 152.227079][ T7233] chnl_net:caif_netlink_parms(): no params data found [ 152.258310][ T12] veth1_to_hsr: left promiscuous mode [ 152.299246][ T12] team0: left promiscuous mode [ 152.299265][ T12] team_slave_0: left promiscuous mode [ 152.299476][ T12] team_slave_1: left promiscuous mode [ 152.378910][ T7354] syz.2.581 (7354) used greatest stack depth: 17240 bytes left [ 152.489550][ T12] hsr_slave_0: left promiscuous mode [ 152.529763][ T12] hsr_slave_1: left promiscuous mode [ 152.530716][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.531003][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.615235][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.615270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.825074][ T12] veth1_macvtap: left promiscuous mode [ 152.825361][ T12] veth0_macvtap: left promiscuous mode [ 152.825660][ T12] veth1_vlan: left promiscuous mode [ 152.826005][ T12] veth0_vlan: left promiscuous mode [ 153.167786][ T5810] Bluetooth: hci2: command tx timeout [ 154.376828][ T10] hid_parser_main: 7 callbacks suppressed [ 154.376851][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 154.462088][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 155.065966][ T37] kauditd_printk_skb: 22 callbacks suppressed [ 155.065982][ T37] audit: type=1326 audit(1760795875.432:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.068056][ T37] audit: type=1326 audit(1760795875.442:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.068346][ T37] audit: type=1326 audit(1760795875.442:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.068987][ T37] audit: type=1326 audit(1760795875.442:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.069266][ T37] audit: type=1326 audit(1760795875.442:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.069944][ T37] audit: type=1326 audit(1760795875.442:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.070487][ T37] audit: type=1326 audit(1760795875.442:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.070813][ T37] audit: type=1326 audit(1760795875.442:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.072898][ T37] audit: type=1326 audit(1760795875.442:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 155.073326][ T37] audit: type=1326 audit(1760795875.442:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7423 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 155.082176][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.616'. [ 155.250042][ T5810] Bluetooth: hci2: command tx timeout [ 155.571678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 155.577726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.672438][ T7432] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 155.672452][ T7432] netlink: 'syz.1.618': attribute type 4 has an invalid length. [ 155.672458][ T7432] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.618'. [ 156.610384][ T12] team0 (unregistering): Port device team_slave_1 removed [ 156.958530][ T12] team0 (unregistering): Port device team_slave_0 removed [ 157.417663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 157.419419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 159.548049][ T7426] bridge_slave_1: left allmulticast mode [ 159.548078][ T7426] bridge_slave_1: left promiscuous mode [ 159.551067][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.638717][ T7426] bridge_slave_0: left allmulticast mode [ 159.638736][ T7426] bridge_slave_0: left promiscuous mode [ 159.638897][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.718993][ T7233] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.720177][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.720529][ T7233] bridge_slave_0: entered allmulticast mode [ 160.725057][ T7233] bridge_slave_0: entered promiscuous mode [ 160.736570][ T7233] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.736739][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.736941][ T7233] bridge_slave_1: entered allmulticast mode [ 160.749195][ T7233] bridge_slave_1: entered promiscuous mode [ 160.795731][ T7506] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 161.016699][ T7508] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 161.065482][ T7233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.084096][ T7233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.267672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.511541][ T7233] team0: Port device team_slave_0 added [ 161.733278][ T7233] team0: Port device team_slave_1 added [ 162.311935][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.311950][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.311968][ T7233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.313852][ T7233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.313864][ T7233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.313886][ T7233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.481527][ T6611] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 162.495369][ T6611] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 162.829753][ T7233] hsr_slave_0: entered promiscuous mode [ 162.856132][ T7233] hsr_slave_1: entered promiscuous mode [ 162.857014][ T7233] debugfs: 'hsr0' already exists in 'hsr' [ 162.857055][ T7233] Cannot create hsr debugfs directory [ 163.661148][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.662070][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.676556][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.676722][ T7559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.678206][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.678379][ T7559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.690898][ T7559] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 163.807920][ T5952] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.858262][ T7565] input: syz1 as /devices/virtual/input/input10 [ 163.935423][ T7233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.965629][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.965678][ T5952] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.965700][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.977286][ T5952] usb 5-1: config 0 descriptor?? [ 163.999257][ T7233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.112689][ T7233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.221864][ T7233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.425584][ T5952] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 164.455065][ T5952] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0005/input/input11 [ 164.573233][ T7233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.620668][ T7233] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.625631][ T7555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.626005][ T7555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.661655][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.661868][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.695868][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.695994][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.931368][ T5952] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 164.944287][ T5952] usb 5-1: USB disconnect, device number 4 [ 165.394400][ T7233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.787698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 166.387671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.514074][ T7233] veth0_vlan: entered promiscuous mode [ 167.559842][ T7233] veth1_vlan: entered promiscuous mode [ 167.659811][ T7233] veth0_macvtap: entered promiscuous mode [ 167.687980][ T7233] veth1_macvtap: entered promiscuous mode [ 167.742352][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.776221][ T7233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.802869][ T3600] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.803099][ T3600] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.803303][ T3600] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.841907][ T3600] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.198577][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.198609][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.275400][ T3541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.275420][ T3541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.847775][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.028308][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 169.032057][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.032087][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.032124][ T10] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 169.032145][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.057439][ T10] usb 5-1: config 0 descriptor?? [ 169.502213][ T7645] capability: warning: `syz.4.692' uses 32-bit capabilities (legacy support in use) [ 169.528793][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 169.528913][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 169.537538][ T10] usb 5-1: USB disconnect, device number 5 [ 170.272711][ T7664] serio: Serial port ptm0 [ 170.283241][ T7665] sg_write: process 324 (syz.4.700) changed security contexts after opening file descriptor, this is not allowed. [ 170.512374][ T7668] evm: overlay not supported [ 171.849111][ T7689] Invalid ELF header len 1 [ 172.188388][ T10] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 172.368686][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 172.368703][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.372308][ T10] usb 5-1: config 0 descriptor?? [ 173.118525][ T58] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.503904][ T58] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.722966][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 173.840424][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 173.840452][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 173.841105][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 173.903309][ T10] usb 5-1: USB disconnect, device number 6 [ 174.384755][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 174.396315][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 174.404820][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 174.416262][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 174.427961][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 175.542603][ T58] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.655618][ T7703] erspan0: entered promiscuous mode [ 175.655927][ T7703] macvtap1: entered promiscuous mode [ 175.656105][ T7703] macvtap1: entered allmulticast mode [ 175.656117][ T7703] erspan0: entered allmulticast mode [ 175.802557][ T7705] erspan0: left allmulticast mode [ 175.802800][ T7705] erspan0: left promiscuous mode [ 176.095052][ T58] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.527822][ T5810] Bluetooth: hci2: command tx timeout [ 177.076207][ T7707] chnl_net:caif_netlink_parms(): no params data found [ 177.644630][ T58] bridge_slave_1: left allmulticast mode [ 177.644655][ T58] bridge_slave_1: left promiscuous mode [ 177.644888][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.710269][ T7773] loop2: detected capacity change from 0 to 7 [ 177.718000][ T7773] Dev loop2: unable to read RDB block 7 [ 177.718115][ T7773] loop2: unable to read partition table [ 177.718341][ T7773] loop2: partition table beyond EOD, truncated [ 177.718358][ T7773] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.760469][ T58] bridge_slave_0: left allmulticast mode [ 177.760492][ T58] bridge_slave_0: left promiscuous mode [ 177.760807][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.198938][ T7786] Invalid ELF header magic: != ELF [ 178.620375][ T5810] Bluetooth: hci2: command tx timeout [ 180.349714][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.428414][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.480234][ T58] bond0 (unregistering): Released all slaves [ 180.697739][ T5810] Bluetooth: hci2: command tx timeout [ 181.306432][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.307105][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.307232][ T7707] bridge_slave_0: entered allmulticast mode [ 181.310164][ T7707] bridge_slave_0: entered promiscuous mode [ 181.334760][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.334890][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.335070][ T7707] bridge_slave_1: entered allmulticast mode [ 181.344046][ T7707] bridge_slave_1: entered promiscuous mode [ 182.064068][ T7707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.089631][ T7707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.586358][ T7707] team0: Port device team_slave_0 added [ 182.758502][ T58] hsr_slave_0: left promiscuous mode [ 182.773475][ T5810] Bluetooth: hci2: command tx timeout [ 182.801086][ T58] hsr_slave_1: left promiscuous mode [ 182.802101][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.802126][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.886223][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.886250][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.033084][ T58] veth1_macvtap: left promiscuous mode [ 183.033199][ T58] veth0_macvtap: left promiscuous mode [ 183.033472][ T58] veth1_vlan: left promiscuous mode [ 183.033646][ T58] veth0_vlan: left promiscuous mode [ 183.705092][ T7906] trusted_key: syz.2.788 sent an empty control message without MSG_MORE. [ 185.908425][ T58] team0 (unregistering): Port device team_slave_1 removed [ 186.118331][ T58] team0 (unregistering): Port device team_slave_0 removed [ 188.229918][ T7707] team0: Port device team_slave_1 added [ 189.103532][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.103550][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.103575][ T7707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.107496][ T7707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.107512][ T7707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.107535][ T7707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.482751][ T7707] hsr_slave_0: entered promiscuous mode [ 189.486362][ T7707] hsr_slave_1: entered promiscuous mode [ 189.487405][ T7707] debugfs: 'hsr0' already exists in 'hsr' [ 189.487429][ T7707] Cannot create hsr debugfs directory [ 189.574601][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.1.811'. [ 190.198104][ T6610] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 190.370066][ T6610] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 190.370091][ T6610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.374775][ T6610] usb 4-1: config 0 descriptor?? [ 191.023755][ T8002] block nbd1: NBD_DISCONNECT [ 191.024477][ T8002] block nbd1: Disconnected due to user request. [ 191.024494][ T8002] block nbd1: shutting down sockets [ 191.363010][ T7707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.401747][ T7707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.434219][ T7707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.485562][ T7707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.695754][ T7707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.751455][ T7707] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.771800][ T88] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.772394][ T88] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.798267][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.798374][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.025399][ T6610] pegasus 4-1:0.0: setup Pegasus II specific registers [ 192.157827][ T6610] pegasus 4-1:0.0: can't locate MII phy, using default [ 192.239376][ T6610] pegasus 4-1:0.0: eth5, ELECOM USB Ethernet LD-USB20, fe:1d:b1:75:25:12 [ 192.247538][ T6610] usb 4-1: USB disconnect, device number 2 [ 192.372916][ T7707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.397672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 193.817664][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 194.110770][ T7707] veth0_vlan: entered promiscuous mode [ 194.151482][ T7707] veth1_vlan: entered promiscuous mode [ 194.261018][ T7707] veth0_macvtap: entered promiscuous mode [ 194.285446][ T7707] veth1_macvtap: entered promiscuous mode [ 194.295094][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.295161][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.453268][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.482838][ T7707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.534752][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.536682][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.561565][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.582621][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.627734][ T6611] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 194.817209][ T6611] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 194.817246][ T6611] usb 4-1: config 0 has no interface number 0 [ 194.817297][ T6611] usb 4-1: config 0 interface 41 has no altsetting 0 [ 194.846873][ T6611] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 194.846900][ T6611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.846918][ T6611] usb 4-1: Product: syz [ 194.846931][ T6611] usb 4-1: Manufacturer: syz [ 194.846943][ T6611] usb 4-1: SerialNumber: syz [ 194.891303][ T6611] usb 4-1: config 0 descriptor?? [ 195.075257][ T8046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.075286][ T8046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.433984][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.434004][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.776705][ T6611] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 196.192851][ T6611] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 196.192877][ T6611] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 196.193146][ T6611] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 196.231495][ T6611] usb 4-1: USB disconnect, device number 3 [ 196.407526][ T8089] loop5: detected capacity change from 0 to 6231 [ 196.497817][ T993] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 196.651736][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.651769][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.651809][ T993] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 196.651831][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.661244][ T993] usb 2-1: config 0 descriptor?? [ 197.131885][ T8101] netlink: 'syz.3.856': attribute type 4 has an invalid length. [ 197.293061][ T993] usb 2-1: string descriptor 0 read error: -22 [ 197.512563][ T993] uclogic 0003:256C:006D.0006: interface is invalid, ignoring [ 197.713676][ T993] usb 2-1: USB disconnect, device number 5 [ 198.557707][ T5952] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 198.717679][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 198.720825][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.720862][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.720901][ T5952] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.720921][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.741806][ T5952] usb 4-1: config 0 descriptor?? [ 198.757112][ T5952] hub 4-1:0.0: USB hub found [ 198.969878][ T5952] hub 4-1:0.0: 1 port detected [ 199.593273][ T5952] hub 4-1:0.0: activate --> -90 [ 200.021508][ T5952] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 200.021534][ T5952] hub_port_connect: 1 callbacks suppressed [ 200.021546][ T5952] usb 4-1-port1: connect-debounce failed [ 200.022394][ T10] usb 4-1: USB disconnect, device number 4 [ 200.517781][ T8158] netlink: 'syz.2.877': attribute type 1 has an invalid length. [ 200.896430][ T8158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.040295][ T8165] bond1: (slave macvlan0): making interface the new active one [ 201.107489][ T8165] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 201.470364][ T5949] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 201.597770][ T5949] usb 6-1: device descriptor read/64, error -71 [ 201.597815][ T5952] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.767516][ T5952] usb 4-1: Using ep0 maxpacket: 32 [ 201.770399][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.770430][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.770465][ T5952] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 201.770485][ T5952] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.775660][ T5952] usb 4-1: config 0 descriptor?? [ 201.867782][ T5949] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 201.997796][ T5949] usb 6-1: device descriptor read/64, error -71 [ 202.108048][ T5949] usb usb6-port1: attempt power cycle [ 202.268238][ T5952] ft260 0003:0403:6030.0007: unknown main item tag 0x7 [ 202.427123][ T5952] ft260 0003:0403:6030.0007: chip code: 6424 8183 [ 202.477755][ T5949] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 202.498948][ T5949] usb 6-1: device descriptor read/8, error -71 [ 202.629027][ T5952] ft260 0003:0403:6030.0007: failed to retrieve system status [ 202.629648][ T5952] ft260 0003:0403:6030.0007: probe with driver ft260 failed with error -32 [ 202.737700][ T5949] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 202.758690][ T5949] usb 6-1: device descriptor read/8, error -71 [ 202.785421][ T8189] netlink: 'syz.4.886': attribute type 21 has an invalid length. [ 202.785549][ T8189] netlink: 156 bytes leftover after parsing attributes in process `syz.4.886'. [ 202.868909][ T5949] usb usb6-port1: unable to enumerate USB device [ 202.872441][ T8191] netlink: 'syz.4.886': attribute type 21 has an invalid length. [ 202.872461][ T8191] netlink: 6 bytes leftover after parsing attributes in process `syz.4.886'. [ 203.359878][ T8199] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.944657][ T8210] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.944897][ T8210] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.332145][ T993] usb 4-1: USB disconnect, device number 5 [ 204.656630][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 204.775994][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.818244][ T8210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.308690][ T6608] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 205.313819][ T6608] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.077457][ T8210] macvtap1: left promiscuous mode [ 206.077474][ T8210] macvtap1: left allmulticast mode [ 206.242717][ T8046] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.248642][ T8046] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.251359][ T8046] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.251401][ T8046] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.613963][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 206.614008][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 206.614032][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 206.883752][ T8264] tipc: Started in network mode [ 206.883770][ T8264] tipc: Node identity 4, cluster identity 4711 [ 206.883777][ T8264] tipc: Node number set to 4 [ 207.338126][ T8277] syz_tun: entered allmulticast mode [ 207.368339][ T8273] syz_tun: left allmulticast mode [ 208.469414][ T8296] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.469433][ T8296] IPv6: NLM_F_CREATE should be set when creating new route [ 209.671237][ T8315] vlan2: entered allmulticast mode [ 209.671257][ T8315] veth0_to_bond: entered allmulticast mode [ 210.801632][ T8323] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 212.733695][ T8355] overlayfs: failed to clone upperpath [ 212.878263][ T8360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.950'. [ 213.207553][ T8371] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 213.577186][ T8380] overlayfs: failed to clone upperpath [ 213.602174][ T8378] netlink: 80 bytes leftover after parsing attributes in process `syz.5.956'. [ 213.633872][ T8378] netlink: 80 bytes leftover after parsing attributes in process `syz.5.956'. [ 213.914488][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.961'. [ 214.099094][ T6610] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 214.238866][ T8392] tipc: Started in network mode [ 214.238895][ T8392] tipc: Node identity 6abc315d599a, cluster identity 4711 [ 214.239657][ T8392] tipc: Enabled bearer , priority 0 [ 214.247810][ T6610] usb 4-1: Using ep0 maxpacket: 8 [ 214.250888][ T6610] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 214.250912][ T6610] usb 4-1: config 0 has no interface number 0 [ 214.250954][ T6610] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 214.250975][ T6610] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 214.250998][ T6610] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.251021][ T6610] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 214.251164][ T6610] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 214.251185][ T6610] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.287502][ T6610] usb 4-1: config 0 descriptor?? [ 214.321408][ T6610] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 214.325383][ T8393] syzkaller0: entered promiscuous mode [ 214.325407][ T8393] syzkaller0: entered allmulticast mode [ 214.407920][ T8383] tipc: Resetting bearer [ 214.626799][ T8383] tipc: Disabling bearer [ 214.642301][ T6610] usb 4-1: USB disconnect, device number 6 [ 214.655985][ T6610] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 215.671168][ T6611] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 215.690345][ T8427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 215.821315][ T6611] usb 3-1: Using ep0 maxpacket: 32 [ 215.826561][ T6611] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 215.826586][ T6611] usb 3-1: config 0 has no interface number 0 [ 215.829740][ T6611] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 215.829766][ T6611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.829784][ T6611] usb 3-1: Product: syz [ 215.829797][ T6611] usb 3-1: Manufacturer: syz [ 215.829809][ T6611] usb 3-1: SerialNumber: syz [ 215.836744][ T6611] usb 3-1: config 0 descriptor?? [ 215.853750][ T6611] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 216.359775][ T6611] gspca_sn9c2028: read1 error -110 [ 216.360202][ T6611] gspca_sn9c2028: read1 error -32 [ 216.360605][ T6611] gspca_sn9c2028: read1 error -32 [ 216.360771][ T6611] sn9c2028 3-1:0.119: probe with driver sn9c2028 failed with error -32 [ 216.731678][ T6610] usb 3-1: USB disconnect, device number 5 [ 217.788731][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.789497][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.791034][ T8452] bridge0: entered allmulticast mode [ 217.839041][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.839319][ T8452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.839695][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.840317][ T8452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.845430][ T8452] bridge0: entered promiscuous mode [ 219.268096][ T8472] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 219.359738][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.992'. [ 219.359765][ T8479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.992'. [ 219.359781][ T8479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.992'. [ 219.374408][ T8479] netlink: 32 bytes leftover after parsing attributes in process `syz.3.992'. [ 219.433614][ T8481] veth1_to_bond: entered allmulticast mode [ 219.434989][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.993'. [ 219.629166][ T8481] bond0: (slave bond_slave_1): Releasing backup interface [ 219.719738][ T5952] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 219.820439][ T8481] veth1_to_bond (unregistering): left allmulticast mode [ 219.870059][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.870113][ T5952] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 219.870134][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.930043][ T5952] usb 6-1: config 0 descriptor?? [ 220.336314][ T8507] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.1003'. [ 220.336339][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1003'. [ 220.410116][ T5952] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 220.410151][ T5952] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 220.410175][ T5952] waterforce 0003:1044:7A4D.0009: unknown main item tag 0x0 [ 220.466951][ T5952] waterforce 0003:1044:7A4D.0009: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0 [ 220.561043][ T5952] waterforce 0003:1044:7A4D.0009: fw version request failed with -38 [ 220.611263][ T5952] usb 6-1: USB disconnect, device number 6 [ 221.382605][ T8519] netlink: 'syz.5.1010': attribute type 1 has an invalid length. [ 221.526689][ T8519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.701511][ T8522] bond1: (slave macvlan0): making interface the new active one [ 221.711651][ T8522] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 221.969546][ T37] audit: type=1326 audit(1760795942.342:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 221.969599][ T37] audit: type=1326 audit(1760795942.342:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 221.971130][ T37] audit: type=1326 audit(1760795942.342:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 221.971446][ T37] audit: type=1326 audit(1760795942.342:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 221.972104][ T37] audit: type=1326 audit(1760795942.342:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f575d730ee7 code=0x7ffc0000 [ 221.974915][ T37] audit: type=1326 audit(1760795942.342:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 222.003608][ T37] audit: type=1326 audit(1760795942.372:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 222.003670][ T37] audit: type=1326 audit(1760795942.372:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 222.003709][ T37] audit: type=1326 audit(1760795942.372:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 222.003748][ T37] audit: type=1326 audit(1760795942.372:594): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.2.1017" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 222.732594][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.876771][ T8526] netlink: 'syz.3.1014': attribute type 1 has an invalid length. [ 222.876793][ T8526] netlink: 'syz.3.1014': attribute type 4 has an invalid length. [ 222.876805][ T8526] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1014'. [ 225.700454][ T8599] wg2: entered promiscuous mode [ 225.700482][ T8599] wg2: entered allmulticast mode [ 225.762780][ T8606] overlayfs: failed to clone upperpath [ 227.945466][ T8640] overlayfs: failed to clone upperpath [ 230.639832][ T8700] netlink: 'syz.2.1077': attribute type 1 has an invalid length. [ 230.728689][ T8690] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 230.964759][ T8704] bond2: (slave veth3): Enslaving as an active interface with a down link [ 231.042272][ T8706] bond2 (unregistering): (slave veth3): Releasing active interface [ 231.125918][ T8706] bond2 (unregistering): Released all slaves [ 231.714787][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 232.094701][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1089'. [ 232.120078][ T8735] syz_tun: entered promiscuous mode [ 232.124034][ T8735] syz_tun: left promiscuous mode [ 232.434420][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1094'. [ 232.550868][ T8753] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 232.978217][ T8764] tipc: Failed to remove unknown binding: 66,1,1/0:2991362169/2991362171 [ 233.690882][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 233.690900][ T37] audit: type=1326 audit(1760795954.062:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.691056][ T37] audit: type=1326 audit(1760795954.062:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.730552][ T37] audit: type=1326 audit(1760795954.082:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.730612][ T37] audit: type=1326 audit(1760795954.102:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.730653][ T37] audit: type=1326 audit(1760795954.102:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.730692][ T37] audit: type=1326 audit(1760795954.102:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.830593][ T37] audit: type=1326 audit(1760795954.192:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8775 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcd59ac1885 code=0x7ffc0000 [ 233.832670][ T37] audit: type=1326 audit(1760795954.202:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.833941][ T37] audit: type=1326 audit(1760795954.202:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 233.856266][ T8774] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 233.909250][ T37] audit: type=1326 audit(1760795954.272:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8771 comm="syz.4.1105" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fcd59a8efc9 code=0x7ffc0000 [ 234.727182][ T8800] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 234.727207][ T8800] ref_ctr increment failed for inode: 0x52b offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802384dc00 [ 234.926930][ T8809] binder: 8805:8809 ioctl 40044591 0 returned -22 [ 234.993832][ T8807] binder: 8805:8807 ioctl c0306201 200000000040 returned -14 [ 236.557916][ T3600] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.917189][ T8844] netlink: 'syz.3.1131': attribute type 10 has an invalid length. [ 236.924370][ T3600] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.990135][ T8848] netlink: 'syz.3.1131': attribute type 10 has an invalid length. [ 237.043603][ T8844] team0: Port device dummy0 added [ 237.054170][ T8848] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.128456][ T8848] team0: Failed to send options change via netlink (err -105) [ 237.137920][ T8848] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 237.138455][ T8848] team0: Port device dummy0 removed [ 237.143241][ T8848] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.421323][ T3600] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.151143][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 238.169029][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 238.170374][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 238.171524][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 238.172772][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 238.322800][ T3600] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.846409][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.048503][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 239.165633][ T8872] macvlan0: entered promiscuous mode [ 239.165657][ T8872] macvlan0: entered allmulticast mode [ 239.575180][ T8882] ref_ctr_offset mismatch. inode: 0x552 offset: 0x0 ref_ctr_offset(old): 0xffffffff00000000 ref_ctr_offset(new): 0x0 [ 239.710640][ T8856] chnl_net:caif_netlink_parms(): no params data found [ 239.890632][ T3600] bridge_slave_1: left allmulticast mode [ 239.890651][ T3600] bridge_slave_1: left promiscuous mode [ 239.890810][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.965229][ T3600] bridge_slave_0: left allmulticast mode [ 239.965259][ T3600] bridge_slave_0: left promiscuous mode [ 239.965554][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.287910][ T5116] Bluetooth: hci2: command tx timeout [ 241.245333][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 241.245349][ T37] audit: type=1326 audit(1760795961.612:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8909 comm="syz.3.1154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f958f40efc9 code=0x0 [ 242.367970][ T5116] Bluetooth: hci2: command tx timeout [ 243.248330][ T3600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.309997][ T3600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.350477][ T3600] bond0 (unregistering): Released all slaves [ 244.192658][ T3600] bond1 (unregistering): (slave macvlan0): Releasing active interface [ 244.272870][ T3600] bond1 (unregistering): Released all slaves [ 244.447799][ T5116] Bluetooth: hci2: command tx timeout [ 244.873547][ T8856] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.874159][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.874371][ T8856] bridge_slave_0: entered allmulticast mode [ 244.877146][ T8856] bridge_slave_0: entered promiscuous mode [ 244.948057][ T8856] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.948194][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.948437][ T8856] bridge_slave_1: entered allmulticast mode [ 244.951617][ T8856] bridge_slave_1: entered promiscuous mode [ 245.629353][ T8988] warning: `syz.2.1175' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 245.653420][ T8856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.695792][ T8856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.272934][ T9019] delete_channel: no stack [ 246.449647][ T8856] team0: Port device team_slave_0 added [ 246.487474][ T8856] team0: Port device team_slave_1 added [ 246.527790][ T5116] Bluetooth: hci2: command tx timeout [ 246.632441][ T3600] hsr_slave_0: left promiscuous mode [ 246.667832][ T3600] hsr_slave_1: left promiscuous mode [ 246.668955][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.668980][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.979824][ T3600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.979852][ T3600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.203392][ T3600] veth1_macvtap: left promiscuous mode [ 247.203501][ T3600] veth0_macvtap: left promiscuous mode [ 247.204720][ T3600] veth1_vlan: left promiscuous mode [ 247.204908][ T3600] veth0_vlan: left promiscuous mode [ 247.405753][ T37] audit: type=1326 audit(1760795967.772:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9037 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 247.406028][ T37] audit: type=1326 audit(1760795967.772:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9037 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 247.406219][ T37] audit: type=1326 audit(1760795967.772:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9037 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 247.406488][ T37] audit: type=1326 audit(1760795967.772:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9037 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=40000003 syscall=94 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 247.406530][ T37] audit: type=1326 audit(1760795967.772:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9037 comm="syz.1.1193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x7ffc0000 [ 247.675690][ T37] audit: type=1326 audit(1760795968.042:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9039 comm="syz.1.1194" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8631dfefc9 code=0x0 [ 249.581585][ T9050] syz.1.1198 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 252.687896][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 252.891717][ T3600] team0 (unregistering): Port device team_slave_1 removed [ 252.921966][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.988313][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.199010][ T3600] team0 (unregistering): Port device team_slave_0 removed [ 255.733526][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.733607][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.053874][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.434176][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.434192][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.434214][ T8856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.637213][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.861001][ T8856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.861017][ T8856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.861041][ T8856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.039827][ T9141] wg2: left promiscuous mode [ 258.039853][ T9141] wg2: left allmulticast mode [ 258.102313][ T9149] binder: BINDER_SET_CONTEXT_MGR already set [ 258.102327][ T9149] binder: 9148:9149 ioctl 4018620d 200000004a80 returned -16 [ 258.121539][ T9144] wg2: entered promiscuous mode [ 258.121562][ T9144] wg2: entered allmulticast mode [ 258.417766][ T5952] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 258.492996][ T8856] hsr_slave_0: entered promiscuous mode [ 258.495431][ T8856] hsr_slave_1: entered promiscuous mode [ 258.496492][ T8856] debugfs: 'hsr0' already exists in 'hsr' [ 258.496515][ T8856] Cannot create hsr debugfs directory [ 258.567691][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 258.595572][ T5952] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 258.595599][ T5952] usb 3-1: config 1 has no interface number 1 [ 258.595646][ T5952] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 258.595666][ T5952] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 258.595704][ T5952] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.630347][ T5952] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.630375][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.630393][ T5952] usb 3-1: Product: syz [ 258.630405][ T5952] usb 3-1: Manufacturer: syz [ 258.630418][ T5952] usb 3-1: SerialNumber: syz [ 259.112735][ T5952] usb 3-1: 2:1 : format type 0 is detected, processed as PCM [ 260.367313][ T5952] usb 3-1: USB disconnect, device number 6 [ 261.154854][ T8856] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.203143][ T8856] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.271093][ T8856] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.314470][ T8856] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.861388][ T8856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.906612][ T8856] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.926200][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.926428][ T8962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.961698][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.961917][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.543181][ T8856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.341383][ T8856] veth0_vlan: entered promiscuous mode [ 265.457963][ T8856] veth1_vlan: entered promiscuous mode [ 265.488126][ T9233] syz_tun: entered allmulticast mode [ 265.638040][ T9232] syz_tun: left allmulticast mode [ 265.644325][ T8856] veth0_macvtap: entered promiscuous mode [ 265.671544][ T8856] veth1_macvtap: entered promiscuous mode [ 265.718304][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.742598][ T8856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.787276][ T3600] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.787553][ T3600] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.812722][ T3600] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.812764][ T3600] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.772855][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.772876][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.961740][ T8962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.961760][ T8962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.243103][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 267.312727][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 267.314105][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 267.314858][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 267.315414][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.833159][ T9255] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'. [ 268.149753][ T9255] hsr_slave_1 (unregistering): left promiscuous mode [ 268.876029][ T8970] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.281924][ T9288] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 269.407713][ T61] Bluetooth: hci5: command tx timeout [ 269.520798][ T8970] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.864013][ T8970] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.380774][ T8970] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.957546][ T9320] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 271.009656][ T9324] netlink: 'syz.2.1283': attribute type 10 has an invalid length. [ 271.009676][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1283'. [ 271.169418][ T9320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.177476][ T9320] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 271.178329][ T9324] batadv0: entered promiscuous mode [ 271.178352][ T9324] batadv0: entered allmulticast mode [ 271.218659][ T9324] bond0: (slave batadv0): Releasing backup interface [ 271.261628][ T9324] bridge0: port 3(batadv0) entered blocking state [ 271.261709][ T9324] bridge0: port 3(batadv0) entered disabled state [ 271.306054][ T7616] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 271.306066][ T7616] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 271.341181][ T9252] chnl_net:caif_netlink_parms(): no params data found [ 271.487819][ T61] Bluetooth: hci5: command tx timeout [ 271.914501][ T1245] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.067806][ T1245] usb 3-1: Using ep0 maxpacket: 32 [ 272.076004][ T1245] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.076028][ T1245] usb 3-1: config 0 has no interface number 0 [ 272.076074][ T1245] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 272.076093][ T1245] usb 3-1: config 0 interface 1 has no altsetting 0 [ 272.117948][ T1245] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 272.117976][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.117993][ T1245] usb 3-1: Product: syz [ 272.118007][ T1245] usb 3-1: Manufacturer: syz [ 272.118019][ T1245] usb 3-1: SerialNumber: syz [ 272.123572][ T1245] usb 3-1: config 0 descriptor?? [ 272.402646][ T1245] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 272.426881][ T1245] cx231xx 3-1:0.1: Failed to read PCB config [ 272.427237][ T1245] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 272.464443][ T1245] usb 3-1: USB disconnect, device number 7 [ 272.928469][ T1245] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 273.528266][ T1245] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.528291][ T1245] usb 3-1: config 0 has no interface number 0 [ 273.528336][ T1245] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 273.528355][ T1245] usb 3-1: config 0 interface 1 has no altsetting 0 [ 273.533147][ T1245] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 273.533175][ T1245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.533192][ T1245] usb 3-1: Product: syz [ 273.533205][ T1245] usb 3-1: Manufacturer: syz [ 273.533218][ T1245] usb 3-1: SerialNumber: syz [ 273.538838][ T1245] usb 3-1: config 0 descriptor?? [ 273.567806][ T61] Bluetooth: hci5: command tx timeout [ 273.780685][ T1245] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces [ 273.783231][ T1245] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 273.896533][ T1245] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 273.896902][ T1245] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 273.913528][ T1245] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 273.914020][ T1245] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 273.914461][ T1245] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 273.914480][ T1245] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 274.067954][ T1245] i2c i2c-2: Added multiplexed i2c bus 4 [ 274.072925][ T1245] i2c i2c-2: Added multiplexed i2c bus 5 [ 274.090578][ T1245] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 274.090600][ T1245] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 274.165373][ T1245] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 274.189164][ T1245] usb 3-1: USB disconnect, device number 8 [ 275.650365][ T61] Bluetooth: hci5: command tx timeout [ 276.342056][ T9383] netlink: 'syz.2.1305': attribute type 1 has an invalid length. [ 276.810499][ T8970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.889594][ T8970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.972179][ T8970] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 277.048412][ T8970] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 277.093844][ T8970] bond0 (unregistering): Released all slaves [ 277.215573][ T9383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.272384][ T9386] bond2: (slave gretap1): making interface the new active one [ 277.287384][ T9386] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 277.949669][ T9413] bridge0: entered allmulticast mode [ 278.612296][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.612412][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.612617][ T9252] bridge_slave_0: entered allmulticast mode [ 278.615077][ T9252] bridge_slave_0: entered promiscuous mode [ 278.652403][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.652542][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.652766][ T9252] bridge_slave_1: entered allmulticast mode [ 278.655547][ T9252] bridge_slave_1: entered promiscuous mode [ 279.511984][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1323'. [ 279.961823][ T9252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.278888][ T8970] hsr_slave_0: left promiscuous mode [ 280.318665][ T8970] hsr_slave_1: left promiscuous mode [ 280.321408][ T8970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.321426][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.354786][ T8970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.354873][ T8970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.481144][ T8970] veth1_macvtap: left promiscuous mode [ 280.481208][ T8970] veth0_macvtap: left promiscuous mode [ 280.481356][ T8970] veth1_vlan: left promiscuous mode [ 280.481454][ T8970] veth0_vlan: left promiscuous mode [ 281.130791][ T9462] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 281.130817][ T9462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 281.149910][ T9462] vhci_hcd vhci_hcd.0: Device attached [ 281.179348][ T9464] vhci_hcd: connection closed [ 281.190789][ T8965] vhci_hcd: stop threads [ 281.191756][ T8965] vhci_hcd: release socket [ 281.191859][ T8965] vhci_hcd: disconnect device [ 283.653322][ T9484] sctp: [Deprecated]: syz.1.1337 (pid 9484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.653322][ T9484] Use struct sctp_sack_info instead [ 285.708470][ T8970] team0 (unregistering): Port device team_slave_1 removed [ 286.131799][ T8970] team0 (unregistering): Port device team_slave_0 removed [ 288.561225][ T9252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.583242][ T9459] netlink: 'syz.4.1329': attribute type 3 has an invalid length. [ 288.585141][ T9459] netlink: 'syz.4.1329': attribute type 3 has an invalid length. [ 289.965172][ T9252] team0: Port device team_slave_0 added [ 289.992294][ T9252] team0: Port device team_slave_1 added [ 290.442170][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.442186][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.442210][ T9252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.457288][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.457303][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.457333][ T9252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.273565][ T9252] hsr_slave_0: entered promiscuous mode [ 291.274328][ T9252] hsr_slave_1: entered promiscuous mode [ 291.277706][ T9252] debugfs: 'hsr0' already exists in 'hsr' [ 291.277729][ T9252] Cannot create hsr debugfs directory [ 291.637309][ T9554] tipc: New replicast peer: 255.255.255.255 [ 291.640856][ T9554] tipc: Enabled bearer , priority 10 [ 292.550416][ T9575] netlink: 'syz.2.1369': attribute type 1 has an invalid length. [ 292.640637][ T10] tipc: Node number set to 858141021 [ 292.863692][ T9575] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.378758][ T9577] bond3: (slave ip6gretap1): making interface the new active one [ 294.420953][ T9577] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 294.528201][ T9578] veth5: entered promiscuous mode [ 294.542211][ T9578] bond3: (slave veth5): Enslaving as an active interface with a down link [ 294.937139][ T9252] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.952833][ T9252] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 295.022144][ T9252] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 295.078021][ T9252] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 295.457304][ T9615] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1377'. [ 296.245636][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.362174][ T9252] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.384349][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.384555][ T8974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.424043][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.424219][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.962749][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.554996][ T9665] netlink: 'syz.4.1391': attribute type 8 has an invalid length. [ 300.555017][ T9665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1391'. [ 301.715181][ T37] audit: type=1804 audit(1760796022.082:623): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1393" name="/newroot/337/file0" dev="fuse" ino=1 res=1 errno=0 [ 301.874052][ T9252] veth0_vlan: entered promiscuous mode [ 301.948421][ T9252] veth1_vlan: entered promiscuous mode [ 301.951413][ T9687] syz_tun: entered allmulticast mode [ 301.970615][ T9687] syz_tun: left allmulticast mode [ 302.072002][ T9252] veth0_macvtap: entered promiscuous mode [ 302.086811][ T9252] veth1_macvtap: entered promiscuous mode [ 302.154163][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.175374][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.209194][ T8974] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.209676][ T8974] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.209925][ T8974] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.210261][ T8974] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.588929][ T3600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.588949][ T3600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.648589][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.648609][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.171586][ T9719] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.320091][ T9719] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 304.389736][ T8046] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.493766][ T9733] bond1: option mode: unable to set because the bond device has slaves [ 304.497735][ T8046] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 304.685918][ T9733] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.715666][ T9733] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 305.448362][ T8970] bond1: (slave macvlan2): link status up again after 0 ms [ 305.452426][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 305.564208][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 305.779306][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.698135][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.823275][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 306.930744][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 307.040969][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 308.026924][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 309.609297][ T7616] net_ratelimit: 17 callbacks suppressed [ 309.609321][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 309.826785][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 309.902909][ T9812] kvm: pic: non byte read [ 309.903191][ T9812] kvm: pic: non byte read [ 309.903624][ T9812] kvm: pic: level sensitive irq not supported [ 309.903686][ T9812] kvm: pic: non byte read [ 309.903912][ T9812] kvm: pic: non byte read [ 309.908948][ T9812] kvm: pic: non byte read [ 309.909228][ T9812] kvm: pic: non byte read [ 309.927879][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 310.822382][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 310.936986][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.047683][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.157901][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.267753][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.377822][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 311.487755][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.631432][ T9878] overlayfs: failed to resolve './file1/file0': -2 [ 314.632004][ T3600] net_ratelimit: 25 callbacks suppressed [ 314.632020][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.738767][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.847911][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 314.959227][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 315.028168][ T9881] bond0: (slave bridge0): Releasing backup interface [ 315.041825][ T9884] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 315.041845][ T9884] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1458'. [ 315.089978][ T9881] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.090464][ T9881] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 315.091927][ T9881] bridge0: port 3(batadv0) entered disabled state [ 315.094990][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1458'. [ 315.219270][ T9881] bridge_slave_0: left allmulticast mode [ 315.219297][ T9881] bridge_slave_0: left promiscuous mode [ 315.219655][ T9881] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.299868][ T9881] bridge_slave_1: left allmulticast mode [ 315.299887][ T9881] bridge_slave_1: left promiscuous mode [ 315.300054][ T9881] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.388838][ T9881] bond0: (slave bond_slave_0): Releasing backup interface [ 315.468281][ T9881] bond0: (slave bond_slave_1): Releasing backup interface [ 315.592731][ T9881] team0: Port device team_slave_0 removed [ 315.638794][ T9881] team0: Port device team_slave_1 removed [ 315.639054][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.682300][ T9881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.721372][ T9881] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.721826][ T9884] team0: entered promiscuous mode [ 315.753682][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.754107][ T9884] bridge0: port 1(team0) entered blocking state [ 315.754240][ T9884] bridge0: port 1(team0) entered disabled state [ 315.754437][ T9884] team0: entered allmulticast mode [ 315.797194][ T9885] team0: left allmulticast mode [ 315.801185][ T9885] bridge0: port 1(team0) entered disabled state [ 315.987666][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.297809][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.408781][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.614140][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.730247][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 316.850975][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 317.177841][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177913][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.217939][ T9921] syz_tun: entered allmulticast mode [ 318.222867][ T9920] syz_tun: left allmulticast mode [ 318.433380][ T9927] netlink: 'syz.1.1471': attribute type 25 has an invalid length. [ 318.433401][ T9927] netlink: 'syz.1.1471': attribute type 7 has an invalid length. [ 319.568723][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880348d9800: rx timeout, send abort [ 319.779779][ T3600] net_ratelimit: 14 callbacks suppressed [ 319.779824][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 319.955701][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 320.793384][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880348d9400: rx timeout, send abort [ 320.795827][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880348d9800: abort rx timeout. Force session deactivation [ 320.819059][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1476'. [ 321.567822][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.681484][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.789895][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.910764][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 321.977804][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 322.028907][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.079293][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1487'. [ 322.124704][ T5809] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 322.145809][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 322.145838][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.145857][ T10] usb 2-1: Product: syz [ 322.145870][ T10] usb 2-1: Manufacturer: syz [ 322.145883][ T10] usb 2-1: SerialNumber: syz [ 322.155284][ T5809] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 322.317950][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.435417][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.541356][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 322.692356][ T9974] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 322.692382][ T9974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 322.694970][ T9974] vhci_hcd vhci_hcd.0: Device attached [ 322.897407][ T9988] vhci_hcd: connection closed [ 322.912339][ T7616] vhci_hcd: stop threads [ 322.912362][ T7616] vhci_hcd: release socket [ 322.928735][ T5949] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 322.949447][ T7616] vhci_hcd: disconnect device [ 323.069858][ T9991] random: crng reseeded on system resumption [ 324.911717][ T8974] net_ratelimit: 11 callbacks suppressed [ 324.911735][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 324.941967][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 324.942052][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 324.944974][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 325.030870][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.052202][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 325.089798][ T10] usb 2-1: USB disconnect, device number 6 [ 325.143493][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.250068][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.359328][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.401459][ T6608] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 325.481979][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.568017][ T6608] usb 7-1: Using ep0 maxpacket: 32 [ 325.585611][ T6608] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 325.585638][ T6608] usb 7-1: config 0 has no interface number 0 [ 325.585673][ T6608] usb 7-1: config 0 interface 184 has no altsetting 0 [ 325.587796][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.633896][ T6608] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 325.633926][ T6608] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.633951][ T6608] usb 7-1: Product: syz [ 325.633964][ T6608] usb 7-1: Manufacturer: syz [ 325.633971][ T6608] usb 7-1: SerialNumber: syz [ 325.680485][ T6608] usb 7-1: config 0 descriptor?? [ 325.698732][ T6608] smsc75xx v1.0.0 [ 325.698745][ T6608] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 325.698895][ T6608] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 325.731043][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.838155][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 325.916479][ T37] audit: type=1326 audit(1760796046.282:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 325.916617][ T37] audit: type=1326 audit(1760796046.282:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 325.963903][ T37] audit: type=1326 audit(1760796046.332:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 325.964385][ T37] audit: type=1326 audit(1760796046.332:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 325.964430][ T37] audit: type=1326 audit(1760796046.332:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 325.966966][ T37] audit: type=1326 audit(1760796046.332:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 326.067092][ T37] audit: type=1326 audit(1760796046.432:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 326.067144][ T37] audit: type=1326 audit(1760796046.432:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 326.067183][ T37] audit: type=1326 audit(1760796046.432:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 326.137289][ T37] audit: type=1326 audit(1760796046.502:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10027 comm="syz.7.1503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 329.667754][ T5949] vhci_hcd: vhci_device speed not set [ 329.939847][ T8965] net_ratelimit: 13 callbacks suppressed [ 329.939867][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.050531][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.217282][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.317880][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.489219][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.625623][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 330.770611][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 331.047717][ T6611] usb 7-1: USB disconnect, device number 2 [ 332.147711][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.257747][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 332.367824][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.451322][ T5809] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 335.475443][ T7616] net_ratelimit: 12 callbacks suppressed [ 335.475465][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.596446][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.681251][ T5809] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 335.681272][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.681282][ T5809] usb 3-1: Product: syz [ 335.681289][ T5809] usb 3-1: Manufacturer: syz [ 335.681296][ T5809] usb 3-1: SerialNumber: syz [ 335.721125][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.830785][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 335.947481][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.978300][T10135] team0: Port device bond0 added [ 335.997903][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 336.113395][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 336.217935][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 336.329821][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 336.447770][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 336.563031][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 338.377856][ T993] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 338.528345][ T993] usb 8-1: Using ep0 maxpacket: 8 [ 338.572059][ T993] usb 8-1: unable to get BOS descriptor or descriptor too short [ 338.574136][ T993] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 338.574159][ T993] usb 8-1: can't read configurations, error -71 [ 338.913718][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 338.913746][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 338.957320][ T5809] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 338.998983][ T5809] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 339.050550][ T5809] usb 3-1: USB disconnect, device number 9 [ 339.252215][T10194] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1568'. [ 339.650681][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.785932][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.303251][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.465719][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.513955][ T8965] net_ratelimit: 24 callbacks suppressed [ 340.514011][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.631734][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.742321][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.877620][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.881205][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 340.995812][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.099333][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.214954][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.317894][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.428309][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 341.486972][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.239809][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.317675][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 343.951893][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.666456][ T8962] net_ratelimit: 13 callbacks suppressed [ 345.666476][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.799742][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 345.944576][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.062254][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.178386][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.290122][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.398144][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.578409][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.732121][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 346.738987][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1612'. [ 346.854103][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 349.834974][ T37] kauditd_printk_skb: 57 callbacks suppressed [ 349.834992][ T37] audit: type=1326 audit(1760796070.202:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10365 comm="syz.6.1631" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ef195efc9 code=0x0 [ 349.935733][ T37] audit: type=1326 audit(1760796070.302:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 349.964205][ T37] audit: type=1326 audit(1760796070.302:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 349.966486][ T37] audit: type=1326 audit(1760796070.332:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 349.966809][ T37] audit: type=1326 audit(1760796070.332:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 349.967062][ T37] audit: type=1326 audit(1760796070.332:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 350.032647][ T37] audit: type=1326 audit(1760796070.402:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 350.032698][ T37] audit: type=1326 audit(1760796070.402:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 350.032738][ T37] audit: type=1326 audit(1760796070.402:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 350.049202][ T37] audit: type=1326 audit(1760796070.422:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10375 comm="syz.7.1634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f984c48efc9 code=0x7ffc0000 [ 350.517748][ T5809] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 351.630994][ T8974] net_ratelimit: 26 callbacks suppressed [ 351.631010][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.672437][ T5809] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 351.672459][ T5809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.672469][ T5809] usb 8-1: Product: syz [ 351.672476][ T5809] usb 8-1: Manufacturer: syz [ 351.672483][ T5809] usb 8-1: SerialNumber: syz [ 351.740309][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.852269][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 351.960023][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.131837][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.239994][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.348960][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.475780][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.579583][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 352.768679][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 353.234163][T10413] netlink: 'syz.6.1644': attribute type 1 has an invalid length. [ 353.234184][T10413] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1644'. [ 353.234210][T10413] netlink: 'syz.6.1644': attribute type 1 has an invalid length. [ 353.475850][T10421] tipc: Started in network mode [ 353.475872][T10421] tipc: Node identity 4, cluster identity 4711 [ 353.475886][T10421] tipc: Node number set to 4 [ 355.641432][ T5809] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 355.641462][ T5809] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 355.642271][ T5809] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 355.690120][ T5809] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 355.718836][ T5809] usb 8-1: USB disconnect, device number 4 [ 357.234476][ T8962] net_ratelimit: 31 callbacks suppressed [ 357.234492][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.347717][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.461957][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.567887][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.809454][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 357.949099][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.036834][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 358.168036][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.176208][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 358.309726][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 358.427100][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 358.529710][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 358.828017][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.335285][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.345555][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.841074][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.436390][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.462601][ T8965] net_ratelimit: 15 callbacks suppressed [ 362.462623][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 362.602105][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.629850][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 363.555477][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.556816][T10515] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.427300][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 365.472423][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.505605][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.099525][T10562] uprobe: syz.6.1705:10562 failed to unregister, leaking uprobe [ 371.218726][ T7616] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.227255][ T7616] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.543611][ T7616] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.112300][ T7616] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.117727][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 376.227736][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 376.337657][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 378.706990][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 378.707009][ T37] audit: type=1326 audit(1760796099.072:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.707058][ T37] audit: type=1326 audit(1760796099.072:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.707110][ T37] audit: type=1326 audit(1760796099.072:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.786990][ T37] audit: type=1326 audit(1760796099.072:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.810255][ T37] audit: type=1326 audit(1760796099.182:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.810946][ T37] audit: type=1326 audit(1760796099.182:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.863883][ T37] audit: type=1326 audit(1760796099.232:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.891719][ T37] audit: type=1326 audit(1760796099.232:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.892079][ T37] audit: type=1326 audit(1760796099.262:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.939858][ T37] audit: type=1326 audit(1760796099.312:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10692 comm="syz.6.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef195efc9 code=0x7ffc0000 [ 378.968773][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.968847][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.110762][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 379.433010][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.091641][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.230128][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.346267][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.455129][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 380.567940][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.181841][ T1113] net_ratelimit: 1 callbacks suppressed [ 383.181860][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.546892][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 383.599490][T10764] overlayfs: failed to clone upperpath [ 384.325004][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.431553][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.538925][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.648567][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.757751][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.819989][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 384.820013][ T37] audit: type=1326 audit(1760796105.192:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10789 comm="syz.7.1788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984c48efc9 code=0x0 [ 384.867876][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 384.977735][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 385.154126][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 386.396227][T10811] bridge1: entered allmulticast mode [ 390.483953][ T8975] net_ratelimit: 7 callbacks suppressed [ 390.483972][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 390.808305][ T37] audit: type=1326 audit(1760796111.182:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 390.808632][ T37] audit: type=1326 audit(1760796111.182:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 390.809020][ T37] audit: type=1326 audit(1760796111.182:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 390.809332][ T37] audit: type=1326 audit(1760796111.182:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 390.813616][ T37] audit: type=1326 audit(1760796111.182:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f575d72efc9 code=0x7ffc0000 [ 390.817609][ T37] audit: type=1326 audit(1760796111.182:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f575d730ee7 code=0x7ffc0000 [ 390.817658][ T37] audit: type=1326 audit(1760796111.182:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f575d730e5c code=0x7ffc0000 [ 390.817700][ T37] audit: type=1326 audit(1760796111.182:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f575d730d94 code=0x7ffc0000 [ 390.817741][ T37] audit: type=1326 audit(1760796111.182:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f575d730d94 code=0x7ffc0000 [ 390.818066][ T37] audit: type=1326 audit(1760796111.192:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10837 comm="syz.2.1804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f575d72dc2a code=0x7ffc0000 [ 391.264308][ T8975] bond1: (slave macvlan2): failed to get link speed/duplex [ 391.470244][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.534706][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 392.583242][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.697738][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.809634][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 392.919901][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.030696][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.140716][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 393.250884][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.564518][ T8974] net_ratelimit: 12 callbacks suppressed [ 395.564563][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.680659][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.890049][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 395.982614][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 395.982628][ T37] audit: type=1804 audit(1760796116.352:769): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1820" name="file0" dev="tmpfs" ino=1973 res=1 errno=0 [ 395.997887][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 396.251961][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 397.122631][ T8962] bond1: (slave macvlan2): failed to get link speed/duplex [ 397.292084][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 397.401175][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 397.609574][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 398.216358][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 400.834234][ T1113] net_ratelimit: 10 callbacks suppressed [ 400.834256][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 401.143958][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 401.431347][ T8970] bond1: (slave macvlan2): failed to get link speed/duplex [ 401.930087][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.023170][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.132512][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.249221][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 403.586587][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 404.241161][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 405.133265][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.180232][ T8973] net_ratelimit: 3 callbacks suppressed [ 406.180254][ T8973] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.288557][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.397984][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.633184][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.750569][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 406.990201][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 407.103147][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 407.244941][ T1113] bond1: (slave macvlan2): failed to get link speed/duplex [ 407.348160][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 407.458628][ T7616] bond1: (slave macvlan2): failed to get link speed/duplex [ 407.825287][T10998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1861'. [ 410.669343][T11025] IPVS: Error connecting to the multicast addr [ 411.008933][T11031] overlayfs: failed to clone upperpath [ 411.315752][ T3600] net_ratelimit: 11 callbacks suppressed [ 411.315772][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.437967][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 411.888024][ T8968] bond1: (slave macvlan2): failed to get link speed/duplex [ 412.410805][ T3600] bond1: (slave macvlan2): failed to get link speed/duplex [ 413.268286][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 413.388175][ T8973] bond1: (slave macvlan2): failed to get link speed/duplex [ 413.553488][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 413.669124][T11051] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1877'. [ 415.487900][ T8968] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.600240][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 415.709276][ T8973] bond1: (slave macvlan2): failed to get link speed/duplex [ 416.631737][ T8046] net_ratelimit: 3 callbacks suppressed [ 416.631821][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 416.740623][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 417.072285][ T8968] bond1: (slave macvlan2): failed to get link speed/duplex [ 417.179467][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 417.559063][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 418.463309][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.589889][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.772377][ T8046] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.877794][ T8968] bond1: (slave macvlan2): failed to get link speed/duplex [ 420.990669][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 422.592598][ T8974] net_ratelimit: 2 callbacks suppressed [ 422.592620][ T8974] bond1: (slave macvlan2): failed to get link speed/duplex [ 422.769893][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 422.879178][ T8965] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.018523][ T8968] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.130508][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.278992][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.397703][ T58] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.507842][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.621712][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 423.728808][ T8971] bond1: (slave macvlan2): failed to get link speed/duplex [ 425.257937][ C1] ------------[ cut here ]------------ [ 425.257952][ C1] refcount_t: addition on 0; use-after-free. [ 425.258449][ C1] WARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 425.258489][ C1] Modules linked in: [ 425.258516][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.258541][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.258555][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 425.258579][ C1] Code: 00 00 e8 a9 f5 3d fd 5b 41 5e e9 d1 67 49 06 cc e8 9b f5 3d fd c6 05 02 a9 60 0a 01 90 48 c7 c7 20 a5 3e 8b e8 07 3e 02 fd 90 <0f> 0b 90 90 eb d7 e8 7b f5 3d fd c6 05 e3 a8 60 0a 01 90 48 c7 c7 [ 425.258599][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 425.258618][ C1] RAX: a73c15b0a6c74200 RBX: 0000000000000002 RCX: ffff88801c2b1e00 [ 425.258635][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 425.258649][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 425.258663][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 425.258680][ C1] R13: ffff888027454f58 R14: ffff888027454b80 R15: dffffc0000000000 [ 425.258697][ C1] FS: 0000000000000000(0000) GS:ffff888126cc6000(0000) knlGS:0000000000000000 [ 425.258716][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.258731][ C1] CR2: 0000001b2f516ff8 CR3: 0000000058d82000 CR4: 00000000003526f0 [ 425.258751][ C1] Call Trace: [ 425.258759][ C1] [ 425.258770][ C1] mptcp_schedule_work+0x164/0x1a0 [ 425.258802][ C1] mptcp_tout_timer+0x21/0xa0 [ 425.258834][ C1] call_timer_fn+0x17e/0x5f0 [ 425.258858][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 425.258913][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 425.258943][ C1] ? call_timer_fn+0xbe/0x5f0 [ 425.258965][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 425.258997][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 425.259034][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 425.259066][ C1] __run_timer_base+0x648/0x970 [ 425.259155][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 425.259209][ C1] run_timer_softirq+0xb7/0x180 [ 425.259231][ C1] handle_softirqs+0x22f/0x710 [ 425.259276][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 425.259322][ C1] run_ktimerd+0xcf/0x190 [ 425.259345][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 425.259365][ C1] ? schedule+0x91/0x360 [ 425.259403][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 425.259423][ C1] smpboot_thread_fn+0x542/0xa60 [ 425.259446][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 425.259478][ C1] kthread+0x711/0x8a0 [ 425.259508][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 425.259528][ C1] ? __pfx_kthread+0x10/0x10 [ 425.259550][ C1] ? rt_spin_unlock+0x150/0x200 [ 425.259582][ C1] ? rt_spin_unlock+0x161/0x200 [ 425.259606][ C1] ? __pfx_kthread+0x10/0x10 [ 425.259633][ C1] ret_from_fork+0x4bc/0x870 [ 425.259669][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 425.259710][ C1] ? __switch_to_asm+0x39/0x70 [ 425.259736][ C1] ? __switch_to_asm+0x33/0x70 [ 425.259762][ C1] ? __pfx_kthread+0x10/0x10 [ 425.259789][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.259837][ C1] [ 425.259853][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 425.259869][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 425.259894][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 425.259907][ C1] Call Trace: [ 425.259915][ C1] [ 425.259924][ C1] dump_stack_lvl+0x99/0x250 [ 425.259950][ C1] ? __asan_memcpy+0x40/0x70 [ 425.259981][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.260007][ C1] ? __pfx__printk+0x10/0x10 [ 425.260050][ C1] vpanic+0x237/0x6d0 [ 425.260071][ C1] ? __pfx_vpanic+0x10/0x10 [ 425.260106][ C1] panic+0xb9/0xc0 [ 425.260132][ C1] ? __pfx_panic+0x10/0x10 [ 425.260174][ C1] __warn+0x31b/0x4b0 [ 425.260194][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 425.260221][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 425.260243][ C1] report_bug+0x2be/0x4f0 [ 425.260273][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 425.260297][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 425.260319][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 425.260341][ C1] handle_bug+0x84/0x160 [ 425.260366][ C1] exc_invalid_op+0x1a/0x50 [ 425.260388][ C1] asm_exc_invalid_op+0x1a/0x20 [ 425.260409][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 425.260432][ C1] Code: 00 00 e8 a9 f5 3d fd 5b 41 5e e9 d1 67 49 06 cc e8 9b f5 3d fd c6 05 02 a9 60 0a 01 90 48 c7 c7 20 a5 3e 8b e8 07 3e 02 fd 90 <0f> 0b 90 90 eb d7 e8 7b f5 3d fd c6 05 e3 a8 60 0a 01 90 48 c7 c7 [ 425.260450][ C1] RSP: 0018:ffffc90000a3f830 EFLAGS: 00010246 [ 425.260468][ C1] RAX: a73c15b0a6c74200 RBX: 0000000000000002 RCX: ffff88801c2b1e00 [ 425.260483][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 425.260494][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 425.260507][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: 1ffff92000147f18 [ 425.260523][ C1] R13: ffff888027454f58 R14: ffff888027454b80 R15: dffffc0000000000 [ 425.260563][ C1] mptcp_schedule_work+0x164/0x1a0 [ 425.260593][ C1] mptcp_tout_timer+0x21/0xa0 [ 425.260625][ C1] call_timer_fn+0x17e/0x5f0 [ 425.260647][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 425.260675][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 425.260703][ C1] ? call_timer_fn+0xbe/0x5f0 [ 425.260725][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 425.260757][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 425.260793][ C1] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 425.260825][ C1] __run_timer_base+0x648/0x970 [ 425.260877][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 425.260930][ C1] run_timer_softirq+0xb7/0x180 [ 425.260952][ C1] handle_softirqs+0x22f/0x710 [ 425.260995][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 425.261041][ C1] run_ktimerd+0xcf/0x190 [ 425.261063][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 425.261084][ C1] ? schedule+0x91/0x360 [ 425.261124][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 425.261143][ C1] smpboot_thread_fn+0x542/0xa60 [ 425.261165][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 425.261196][ C1] kthread+0x711/0x8a0 [ 425.261225][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 425.261245][ C1] ? __pfx_kthread+0x10/0x10 [ 425.261267][ C1] ? rt_spin_unlock+0x150/0x200 [ 425.261296][ C1] ? rt_spin_unlock+0x161/0x200 [ 425.261321][ C1] ? __pfx_kthread+0x10/0x10 [ 425.261346][ C1] ret_from_fork+0x4bc/0x870 [ 425.261378][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 425.261419][ C1] ? __switch_to_asm+0x39/0x70 [ 425.261444][ C1] ? __switch_to_asm+0x33/0x70 [ 425.261467][ C1] ? __pfx_kthread+0x10/0x10 [ 425.261493][ C1] ret_from_fork_asm+0x1a/0x30 [ 425.261541][ C1] [ 425.261804][ C1] Kernel Offset: disabled