last executing test programs: 24m39.237248927s ago: executing program 2 (id=1045): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) r4 = semget$private(0x0, 0x6, 0x0) semop(r4, &(0x7f00000000c0)=[{0x4}, {}], 0x2) semctl$IPC_RMID(r4, 0x0, 0x0) 24m36.516956631s ago: executing program 2 (id=1047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18cddce17aa0e643a7871a2fee0f2ce8b04f3fa6e5ce385ddd2cfa50e38c11b825444fce4c2dd6a1474b97c2667e3ce2a3012290ba5342bfd8b1f58b086e89fe670b890e86d5205c8785b9a68f37fc0", &(0x7f0000000a40)="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"}}, &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0002000000000000000000000004000000000080524dad7cc1d2c8af6b47c0124e25d7c3896a6b137eb205eb830e62ddef0b85145c8d31e0d0706ca4e449eadc6bc217b996b175aa8012a65b3c1cfe0ff6276a427cbdbb2ad46a52c0c4e87e2889e16d625285a6adfc8dbe7b73d613a4b449d9170600a763cbfe8ba56c13327e9ecef8a07148a5e8bbed00a4cb2d0fd1e0383864c253bbd6d8ba430eef1950a05bd0cdd08ac59f42ab709b", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) 24m35.591982902s ago: executing program 2 (id=1051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) timer_create(0x2, &(0x7f0000000000)={0x0, 0x29, 0x1, @thr={&(0x7f0000000300)="d97d558b8ba9e84ffba0e98de77a68864c0787ed520a217ccfb85fe46df9d1f9acc6aa3979705bcd885cbb2309209a9c2cc828c01c0139274a660b3fe7ba1c6c1fffcda18cddce17aa0e643a7871a2fee0f2ce8b04f3fa6e5ce385ddd2cfa50e38c11b825444fce4c2dd6a1474b97c2667e3ce2a3012290ba5342bfd8b1f58b086e89fe670b890e86d5205c8785b9a68f37fc0", &(0x7f0000000a40)="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"}}, &(0x7f0000000040)=0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_create(0x3, &(0x7f0000000240)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000004c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) gettid() mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180)=0x2, &(0x7f00000000c0)=r4}, 0x20) 24m34.664584053s ago: executing program 2 (id=1055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x4, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r4, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendto$inet(r5, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r5, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 24m29.274365931s ago: executing program 2 (id=1067): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) 24m27.991041537s ago: executing program 2 (id=1069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendto$inet(r6, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 24m11.672775588s ago: executing program 32 (id=1069): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendto$inet(r6, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 22m50.902816093s ago: executing program 4 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) 22m49.830517226s ago: executing program 4 (id=1263): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$hiddev(r6, &(0x7f0000000100)=""/100, 0x64) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) fsmount(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x69}]}}}]}, 0x3c}}, 0x24008040) 22m48.180737134s ago: executing program 4 (id=1267): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r5, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r6 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffe}, @TCA_CT_LABELS={0x14, 0x7, "0feee70ca9233ab46fd74f02750a5ede"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x10000000) sendto$inet(r6, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 22m46.026306199s ago: executing program 4 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = open(0x0, 0x60840, 0x1d2) fcntl$setlease(r4, 0x400, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f0000000180)={0x80, 0x7, 0x3, 0x8, 0xb, "b8a5a42327f8600b"}) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$hiddev(r5, &(0x7f0000000100)=""/100, 0x64) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000480)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @cond}, {0x0, 0x0, 0x0, {}, {}, @ramp}}) fsmount(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x69}]}}}]}, 0x3c}}, 0x24008040) 22m42.824284479s ago: executing program 4 (id=1276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) shutdown(r0, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x160, 0xa, 0x148, 0x0, 0x60, 0x1f8, 0x2a8, 0x2a8, 0x1f8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x39}, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00', {}, {}, 0x33}, 0x0, 0xf0, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x2, 0x0, 0x2, 0x9, 0x9c89e3a, 0xbeaf, 0x7d0, 0x0, 0x18}}}, @common=@unspec=@cgroup0={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f20000000013fa9bf7e30000000000ca4ea6e7bf904adc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb053a5089830cc46172cf81d3e86d5af300"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2f0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x1, &(0x7f0000000080)=0x7fffffff, 0x4) getsockopt$inet_int(r4, 0x10d, 0xae, &(0x7f0000000000), &(0x7f0000000240)=0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x19) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 22m41.664248844s ago: executing program 4 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 22m24.137248864s ago: executing program 33 (id=1278): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) gettid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}, {}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f00000002c0)={0xc, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000340)={0x28, 0x4, r3, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m26.306203298s ago: executing program 3 (id=6972): r0 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) 3m25.628258905s ago: executing program 3 (id=6973): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m24.506656599s ago: executing program 3 (id=6974): r0 = syz_io_uring_setup(0xd3f, &(0x7f00000003c0)={0x0, 0x8000000, 0x100, 0x0, 0x220}, 0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x1800, 0x0, 0x0, 0x0) 3m24.335794991s ago: executing program 3 (id=6978): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 3m24.164048476s ago: executing program 3 (id=6981): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_delete(0x0) 3m23.463646521s ago: executing program 3 (id=6985): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="44d0cbda107d9bdbc780ba17dfe47724e8230253e06790c71d71a2ad98f7c116eba3ee62a6052dfaec6eecfdc9d00acd85c13edf2ede41abecfee1ad38ae7d06cf2624ab7f7e8304864daf4cc7f6605eeff966ea0b130a688d", @ANYRES16, @ANYRES16, @ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m6.760772131s ago: executing program 34 (id=6985): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYBLOB="44d0cbda107d9bdbc780ba17dfe47724e8230253e06790c71d71a2ad98f7c116eba3ee62a6052dfaec6eecfdc9d00acd85c13edf2ede41abecfee1ad38ae7d06cf2624ab7f7e8304864daf4cc7f6605eeff966ea0b130a688d", @ANYRES16, @ANYRES16, @ANYRES16], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) 3m0.111262915s ago: executing program 1 (id=7077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x22, 0x33, @data_frame={@msdu=@type11={{}, {}, @device_b, @device_a, @broadcast, {}, @device_b}, @a_msdu}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}]}, 0x54}}, 0x0) 3m0.030546524s ago: executing program 1 (id=7078): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) unshare(0x40060080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x80000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private=0xa010102, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) recvmmsg(r3, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 2m54.562900537s ago: executing program 1 (id=7093): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = eventfd2(0x0, 0x0) read$eventfd(r1, &(0x7f0000000040), 0x8) 2m53.423718819s ago: executing program 1 (id=7096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) userfaultfd(0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8008}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r2, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x17, &(0x7f00000000c0)=0xfffffffd, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r1], 0xbc}, 0x1, 0x0, 0x0, 0x40004000}, 0x20000000) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 2m50.125316285s ago: executing program 1 (id=7101): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000300)={0x0, 0x1c, 0x2, "a66d"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m46.226190826s ago: executing program 1 (id=7108): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m29.473295802s ago: executing program 35 (id=7108): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) 7.175867376s ago: executing program 7 (id=7722): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 5.803102062s ago: executing program 7 (id=7726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) 4.733741763s ago: executing program 7 (id=7738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, 0x0, 0x40) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) userfaultfd(0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3.979199222s ago: executing program 7 (id=7743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.405120125s ago: executing program 7 (id=7749): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1}, 0x0) 3.372236281s ago: executing program 8 (id=7750): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x198, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x150, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x7}}, @TCA_ROUTE4_ACT={0x134, 0x6, [@m_nat={0xfc, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0xd1, 0x6, "3eaed48f5023f5c36bc9d8619f3e2af20800000000000000a40bc384135c74eb813bf1cf69dbeaddd76b564e92dc41f8de6392fb42903838dda4a8bcd9ea2a7ef200b02fb961cc3dddbb717e88bb314bbce94391f87d06a838a9957ccce7feaaf32e9d14398b60f4b34967f32f57c2d3d6939ab4bb4f2ac96daa3247403e773d7b7b15514a5fdc891227676c981222abfb6fffff71541e4446e5f84c25e6f1726ead4d745a9f2873238be9c01f079bd0570908230594952760f061e6a9b1d33407bf97206ff710133b30ea75d7"}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.303693709s ago: executing program 5 (id=7751): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500)={0x0, 0x0, 0x2e, "41156dc219d29d522809727f797c9fc941336ad7c6657b1eb8a3291094377d2d538aa5381f4ebebeb81018a4bc86"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.165702008s ago: executing program 8 (id=7753): ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x82000, 0x8, 0xe, 0xd9ee, 0x14, "fcf217ad89e348d462365c108fd29b19722acf"}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3}}, 0xe8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32=r2, @ANYBLOB="100000000002000008000d00c3000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.89194575s ago: executing program 7 (id=7755): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x0, 0x800}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x61, 0x33, 0x39, 0x65, 0x61, 0x66, 0x31], 0x2d, [0x36, 0x36, 0x36, 0x35], 0x2d, [0x56, 0x31, 0x63, 0x35], 0x2d, [0x61, 0x64, 0x64, 0x65], 0x2d, [0x33, 0x62, 0x35, 0x38, 0x34, 0x36, 0x61, 0x31]}}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '@'}}, {@permit_directio}, {@audit}]}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x200000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r5, &(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x3938700}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.768409679s ago: executing program 0 (id=7756): unshare(0x2040400) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x210}], 0x1, 0x80) 2.435708107s ago: executing program 0 (id=7757): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, @void, @value}, 0x94) r1 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0x8}, {0x6d, 0x9, 0x3, 0x7902921a}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x60}}, 0x40808c4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.427211867s ago: executing program 6 (id=7758): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "0015dd0e285ec9fd318cb2951836d4c1bb6e4057664b86922f8ac3e1cdd20061ad7c801f832c11d1fd5f35c15dae25a862f5ae14710046e3df68e1abc4832963", 0x2c}, 0x48, 0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x7, 0x7800, 0x7, 0x200, {{0x15, 0x4, 0x0, 0xf, 0x54, 0x65, 0x0, 0xb3, 0x4, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0xe2, 0x0, 0x0, [0x5, 0xfffffff4, 0x7]}, @noop, @timestamp={0x44, 0x2c, 0x5d, 0x0, 0x4, [0x2, 0x3a3a9bef, 0x6, 0x1ff, 0x2, 0xfff, 0x10001, 0x100, 0x8, 0x3]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', r2, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x41e990ca, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.267672131s ago: executing program 0 (id=7759): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000008cc0)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000a00)="ca59ae74f81daebf", 0x8}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 2.123803264s ago: executing program 8 (id=7760): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xb0, 0x3ff, 0x34325241, 0x0, [], [0x2b8, 0x200000], [0x0, 0x9, 0x0, 0x3]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.049884916s ago: executing program 6 (id=7761): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="280000001300f5d10300"/20, @ANYRES32, @ANYBLOB="100000000002000008000d00c3000003"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.891296191s ago: executing program 6 (id=7762): dup(0xffffffffffffffff) unshare(0x22020600) fsopen(0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.784590773s ago: executing program 8 (id=7763): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) mlock(&(0x7f0000e96000/0x3000)=nil, 0x3000) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 1.615916742s ago: executing program 6 (id=7764): syz_usb_connect(0x0, 0x0, 0x0, 0x0) 1.580570916s ago: executing program 8 (id=7765): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1}, 0x0) 1.437664227s ago: executing program 8 (id=7766): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0x9) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4401, 0x8, 0x80000002, 0x6, 0x1ff}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x4, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x4, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x1, 0xffff73cc, 0x81, 0x5, 0x0, 0x3, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x5, 0x4, 0x5, 0x3, 0xfffb, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x1, 0x1, 0x3, 0x9, 0x8, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x105, 0x6, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x2, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x4, 0x100, 0xb, 0xca6, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0xfffffffe, 0x7, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x46, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x2007, 0x8002, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x4, 0xd58, 0x4, 0x422dd3f4, 0x4, 0x20000008, 0x796a, 0x8, 0x10000, 0xea, 0x0, 0x45ba, 0x9, 0xa3, 0x0, 0x2, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x800, 0xb, 0xffffff80, 0x43, 0xc22, 0x1, 0x2, 0x5, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0xffff, 0xb, 0x2, 0x10001, 0x40000000, 0x78, 0x4, 0x400, 0x501, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x6, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0xa, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0xb, 0x4, 0x9, 0x7, 0x4, 0x8, 0x1, 0x6, 0x4, 0x1, 0x7, 0x4, 0x9, 0x8, 0xfffffffc, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffa, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x59, 0x1000000, 0x7, 0x656, 0x8, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x400, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 1.374841218s ago: executing program 5 (id=7767): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0x2040400) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f0000000200)=[{r0, 0x210}], 0x1, 0x80) 1.167806078s ago: executing program 0 (id=7768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x3, 0x0, 0x0, 0x18, 0xb, 0x81, 0x0, 0x152}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) 1.135723924s ago: executing program 5 (id=7769): r0 = io_uring_setup(0x2caf, &(0x7f0000000000)={0x0, 0x580a, 0x1, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet(r1, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f0000000200)="e2", 0x100000}], 0x1}, 0x700}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}], 0x2, 0x0) 805.566743ms ago: executing program 6 (id=7770): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x7c, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x2, 0x1, 0x4}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x8000, 0x1, 0x4}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, 0xffffffffffffffff, 0x0, 0x8000002b) 627.651892ms ago: executing program 6 (id=7771): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) epoll_create(0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x4000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', r2, @fallback=0x14, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x10, 0x0, 0x4) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) recvmsg$kcm(r3, 0x0, 0x100) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000002100), 0x20101, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x1001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.events\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000180)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x14, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8bfc541265406c7f306003d8a0f4bd00", [0x2, 0x8]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c07, 0xffffffffffffffff) 597.402841ms ago: executing program 5 (id=7772): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)) write$dsp(r0, &(0x7f00000001c0), 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) close(r0) 467.262781ms ago: executing program 5 (id=7773): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x7) 135.894916ms ago: executing program 0 (id=7774): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000140), 0x253, 0x0) 782.997µs ago: executing program 0 (id=7775): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) mlock(&(0x7f0000e96000/0x3000)=nil, 0x3000) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) 0s ago: executing program 5 (id=7776): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) unshare(0x22020600) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.6.6869'. [ 1703.924362][T26832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6869'. [ 1704.165588][T26836] syzkaller0: entered promiscuous mode [ 1704.203456][T26836] syzkaller0: entered allmulticast mode [ 1708.666214][T26870] IPv6: Can't replace route, no match found [ 1708.830193][T26877] bridge0: port 3(vlan2) entered blocking state [ 1708.854359][T26877] bridge0: port 3(vlan2) entered disabled state [ 1708.887927][T26877] vlan2: entered allmulticast mode [ 1708.910968][T26877] team0: entered allmulticast mode [ 1708.917022][T26877] team_slave_0: entered allmulticast mode [ 1708.938151][T26877] team_slave_1: entered allmulticast mode [ 1708.956845][T26877] vlan2: entered promiscuous mode [ 1708.970981][T26877] team0: entered promiscuous mode [ 1708.983158][T26877] team_slave_0: entered promiscuous mode [ 1708.997652][T26877] team_slave_1: entered promiscuous mode [ 1709.014607][T26877] bridge0: port 3(vlan2) entered blocking state [ 1709.021065][T26877] bridge0: port 3(vlan2) entered forwarding state [ 1709.031995][T26891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6890'. [ 1709.081814][T26891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6890'. [ 1709.142619][T26875] syzkaller0: entered promiscuous mode [ 1709.160384][T26875] syzkaller0: entered allmulticast mode [ 1710.765265][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1715.154345][T26931] netlink: 'syz.1.6902': attribute type 10 has an invalid length. [ 1715.239277][T26935] pim6reg1: entered promiscuous mode [ 1715.400184][T26935] pim6reg1: entered allmulticast mode [ 1716.944791][T26944] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1716.954853][T26944] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1717.431108][T13449] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1717.479507][T26954] Bluetooth: MGMT ver 1.23 [ 1717.593406][T13449] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1717.609227][T13449] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1717.624441][T13449] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1717.633672][T13449] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1717.645569][T13449] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1717.658871][T13449] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1717.668379][T13449] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1717.676567][T13449] usb 4-1: Product: syz [ 1717.681499][T13449] usb 4-1: Manufacturer: syz [ 1717.691153][T13449] cdc_wdm 4-1:1.0: skipping garbage [ 1717.696531][T13449] cdc_wdm 4-1:1.0: skipping garbage [ 1717.710475][T13449] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1717.716436][T13449] cdc_wdm 4-1:1.0: Unknown control protocol [ 1717.938922][ T8] usb 4-1: USB disconnect, device number 62 [ 1718.008553][T13449] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1718.135515][T26979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1718.176209][T13449] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 1718.190157][T13449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.216302][T13449] usb 2-1: Product: syz [ 1718.220564][T13449] usb 2-1: Manufacturer: syz [ 1718.225873][T13449] usb 2-1: SerialNumber: syz [ 1718.240744][T13449] usb 2-1: config 0 descriptor?? [ 1718.262971][T13449] comedi comedi0: This driver needs USB 2.0 to operate. Aborting... [ 1718.272381][T13449] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 1718.404159][T26981] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1718.410744][T26981] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1718.441518][T26981] vhci_hcd vhci_hcd.0: Device attached [ 1718.485517][ T8] usb 2-1: USB disconnect, device number 73 [ 1718.488029][T26985] vhci_hcd: connection closed [ 1718.500268][ T6222] vhci_hcd: stop threads [ 1718.542488][ T6222] vhci_hcd: release socket [ 1718.551429][ T6222] vhci_hcd: disconnect device [ 1718.612113][T26990] pim6reg1: entered promiscuous mode [ 1718.617475][T26990] pim6reg1: entered allmulticast mode [ 1720.901937][T27013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6930'. [ 1721.382245][T27027] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1722.231261][ T5868] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1722.336494][T27041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6941'. [ 1722.415207][ T5868] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1722.443732][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 1722.541267][ T973] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1722.585261][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 1722.683624][ T5868] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1722.716756][ T973] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1722.771073][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1722.780845][ T973] usb 7-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1722.852708][ T5868] usb 2-1: Product: syz [ 1722.857073][ T5868] usb 2-1: Manufacturer: syz [ 1722.862071][ T5868] usb 2-1: SerialNumber: syz [ 1722.877045][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.944864][ T5868] usb 2-1: config 0 descriptor?? [ 1722.991668][T27026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1723.013851][ T973] usb 7-1: config 0 descriptor?? [ 1723.129212][ T5868] rc_core: IR keymap rc-streamzap not found [ 1723.138424][ T5868] Registered IR keymap rc-empty [ 1723.173921][ T5868] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1723.226933][ T5868] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input63 [ 1723.272484][ T5868] usb 2-1: USB disconnect, device number 74 [ 1723.446402][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 1723.446424][ T29] audit: type=1326 audit(1734736355.895:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27060 comm="syz.3.6946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e2a185d29 code=0x0 [ 1723.467307][ T973] pantherlord 0003:0810:0001.001F: unknown global tag 0xd [ 1723.482355][ T973] pantherlord 0003:0810:0001.001F: item 0 0 1 13 parsing failed [ 1723.514761][ T973] pantherlord 0003:0810:0001.001F: parse failed [ 1723.521120][ T973] pantherlord 0003:0810:0001.001F: probe with driver pantherlord failed with error -22 [ 1723.619340][T27069] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1723.882769][ T5868] usb 7-1: USB disconnect, device number 54 [ 1725.780416][T27107] bridge0: port 4(syz_tun) entered blocking state [ 1725.791156][T27107] bridge0: port 4(syz_tun) entered disabled state [ 1725.802056][T27107] bridge0: port 4(syz_tun) entered blocking state [ 1725.808606][T27107] bridge0: port 4(syz_tun) entered forwarding state [ 1725.859434][T27108] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1726.120746][T27113] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6966'. [ 1726.230409][T27116] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6964'. [ 1726.937897][T27115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6967'. [ 1727.037392][T27117] /dev/nullb0: Can't lookup blockdev [ 1727.064077][T27117] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1727.119907][T27126] bridge0: port 4(vlan3) entered blocking state [ 1727.529811][T27126] bridge0: port 4(vlan3) entered disabled state [ 1727.575131][T27126] vlan3: entered allmulticast mode [ 1727.670597][T27126] bond0: entered allmulticast mode [ 1727.701213][T27126] bond_slave_0: entered allmulticast mode [ 1727.728828][T27126] bond_slave_1: entered allmulticast mode [ 1727.750137][T27126] vxlan0: entered allmulticast mode [ 1727.781696][T27126] vlan3: entered promiscuous mode [ 1727.787017][T27126] bond0: entered promiscuous mode [ 1727.792773][T27126] bond_slave_0: entered promiscuous mode [ 1727.802588][T27126] bond_slave_1: entered promiscuous mode [ 1727.841241][T27126] vxlan0: entered promiscuous mode [ 1727.979196][T27126] bridge0: port 4(vlan3) entered blocking state [ 1727.985662][T27126] bridge0: port 4(vlan3) entered forwarding state [ 1729.138275][T27146] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1729.333892][T27149] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6979'. [ 1730.558992][T27168] netlink: 'syz.1.6984': attribute type 1 has an invalid length. [ 1730.567685][T27168] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6984'. [ 1731.517663][T27177] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6989'. [ 1732.421941][T27197] xt_TCPMSS: Only works on TCP SYN packets [ 1732.643497][T27199] 9pnet_fd: Insufficient options for proto=fd [ 1734.423525][T27225] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7006'. [ 1738.171359][T13147] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1739.088994][T13147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.101223][T13147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.111254][T13147] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1739.128017][T13147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.418522][T13147] usb 6-1: config 0 descriptor?? [ 1740.301508][T27276] netlink: 'syz.0.7024': attribute type 1 has an invalid length. [ 1740.314068][T27276] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7024'. [ 1740.370097][T13147] arvo 0003:1E7D:30D4.0020: unknown main item tag 0x0 [ 1740.417305][T13147] arvo 0003:1E7D:30D4.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 1740.583006][T13147] arvo 0003:1E7D:30D4.0020: couldn't init struct arvo_device [ 1740.597957][T13147] arvo 0003:1E7D:30D4.0020: couldn't install keyboard [ 1740.620526][T13147] arvo 0003:1E7D:30D4.0020: probe with driver arvo failed with error -5 [ 1741.220437][T13147] usb 6-1: USB disconnect, device number 53 [ 1741.463188][T27285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input64 [ 1742.046285][T27309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7037'. [ 1742.661422][T13147] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 1742.838054][T13147] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1742.847025][T13147] usb 7-1: config 0 has no interface number 0 [ 1742.873375][T13147] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1742.884672][T13147] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1742.897372][T27320] veth0_to_team: entered promiscuous mode [ 1742.903231][T27320] veth0_to_team: entered allmulticast mode [ 1742.909227][T13147] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1742.909262][T13147] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.911553][T13147] usb 7-1: config 0 descriptor?? [ 1742.939637][T27315] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1742.951645][T13147] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1744.040541][ T973] usb 7-1: USB disconnect, device number 55 [ 1744.194469][T27332] bridge0: port 3(vlan2) entered blocking state [ 1744.201148][T27332] bridge0: port 3(vlan2) entered disabled state [ 1744.207761][T27332] vlan2: entered allmulticast mode [ 1744.222452][T27332] bond0: entered allmulticast mode [ 1744.231405][T27332] bond_slave_0: entered allmulticast mode [ 1744.274555][T27332] bond_slave_1: entered allmulticast mode [ 1744.306715][T27332] geneve0: entered allmulticast mode [ 1744.355690][T27332] batadv0: entered allmulticast mode [ 1744.388734][T27332] vlan2: entered promiscuous mode [ 1744.408440][T27332] bond0: entered promiscuous mode [ 1744.420615][T27332] bond_slave_0: entered promiscuous mode [ 1744.430306][T27332] bond_slave_1: entered promiscuous mode [ 1744.449946][T27332] batadv0: entered promiscuous mode [ 1744.461753][T27332] bridge0: port 3(vlan2) entered blocking state [ 1744.468214][T27332] bridge0: port 3(vlan2) entered forwarding state [ 1745.214410][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7049'. [ 1745.675262][T27353] lo speed is unknown, defaulting to 1000 [ 1745.700355][T27353] lo speed is unknown, defaulting to 1000 [ 1745.709048][T27353] lo speed is unknown, defaulting to 1000 [ 1746.261059][T27353] infiniband sz1: set down [ 1746.265676][T27353] infiniband sz1: added lo [ 1746.341029][T13147] lo speed is unknown, defaulting to 1000 [ 1746.537933][T27353] RDS/IB: sz1: added [ 1746.542078][T27353] smc: adding ib device sz1 with port count 1 [ 1746.548257][T27353] smc: ib device sz1 port 1 has pnetid [ 1746.554599][T27353] lo speed is unknown, defaulting to 1000 [ 1746.632878][T27353] lo speed is unknown, defaulting to 1000 [ 1746.737961][T27353] lo speed is unknown, defaulting to 1000 [ 1746.794977][T27353] lo speed is unknown, defaulting to 1000 [ 1746.856677][T27353] lo speed is unknown, defaulting to 1000 [ 1746.916705][T27353] lo speed is unknown, defaulting to 1000 [ 1746.975248][T27353] lo speed is unknown, defaulting to 1000 [ 1747.035882][T27353] lo speed is unknown, defaulting to 1000 [ 1747.094650][T27353] lo speed is unknown, defaulting to 1000 [ 1747.154039][T27353] lo speed is unknown, defaulting to 1000 [ 1747.212194][T27353] lo speed is unknown, defaulting to 1000 [ 1747.271625][T27353] lo speed is unknown, defaulting to 1000 [ 1747.382044][ T973] lo speed is unknown, defaulting to 1000 [ 1748.250013][T27369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7055'. [ 1748.390022][T27371] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1749.896849][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1749.921404][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1749.953063][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1749.962877][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1749.972853][ T5829] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1749.983364][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1750.079978][T27378] lo speed is unknown, defaulting to 1000 [ 1750.829131][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7064'. [ 1750.830869][T27378] chnl_net:caif_netlink_parms(): no params data found [ 1750.880622][T27383] netlink: 'syz.5.7054': attribute type 8 has an invalid length. [ 1750.903438][T27383] netlink: 236 bytes leftover after parsing attributes in process `syz.5.7054'. [ 1751.003452][T27392] bridge0: port 4(vlan4) entered blocking state [ 1751.009996][T27392] bridge0: port 4(vlan4) entered disabled state [ 1751.032205][T27392] vlan4: entered allmulticast mode [ 1751.042667][T27392] bond0: entered allmulticast mode [ 1751.047844][T27392] bond_slave_0: entered allmulticast mode [ 1751.063929][T27392] bond_slave_1: entered allmulticast mode [ 1751.069737][T27392] batadv0: entered allmulticast mode [ 1751.104555][T27392] vlan4: entered promiscuous mode [ 1751.131473][T27392] bond0: entered promiscuous mode [ 1751.136580][T27392] bond_slave_0: entered promiscuous mode [ 1751.160236][T27392] bond_slave_1: entered promiscuous mode [ 1751.181797][T27392] batadv0: entered promiscuous mode [ 1751.190073][T27392] bridge0: port 4(vlan4) entered blocking state [ 1751.196491][T27392] bridge0: port 4(vlan4) entered forwarding state [ 1751.446679][T27378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.468195][T27378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1751.480956][T27378] bridge_slave_0: entered allmulticast mode [ 1751.488137][T27378] bridge_slave_0: entered promiscuous mode [ 1751.521964][T27378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.537070][T27378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.544387][T27378] bridge_slave_1: entered allmulticast mode [ 1751.562534][T27378] bridge_slave_1: entered promiscuous mode [ 1751.595662][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 1751.604161][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 1751.613769][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x3 [ 1751.633999][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1751.646592][T27378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1751.656380][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1751.673139][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1751.692139][T27378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1751.703977][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1751.732445][T13147] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x0 [ 1751.782907][T13147] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 1751.828912][T27378] team0: Port device team_slave_0 added [ 1751.868875][T27378] team0: Port device team_slave_1 added [ 1751.946856][T27378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.968683][T27378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.142864][T27378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1752.349478][T18177] Bluetooth: hci3: command tx timeout [ 1752.550161][T27378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1752.572793][T27378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1752.648635][T27378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1752.724464][ T29] audit: type=1326 audit(1734736383.283:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27414 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1752.752249][ T29] audit: type=1326 audit(1734736383.311:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27414 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1752.799357][ T29] audit: type=1326 audit(1734736383.311:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27414 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1752.864994][ T29] audit: type=1326 audit(1734736383.311:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27414 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1752.886825][ T29] audit: type=1326 audit(1734736383.311:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27414 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1752.937428][T27378] hsr_slave_0: entered promiscuous mode [ 1752.951309][T27421] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1752.982435][T27378] hsr_slave_1: entered promiscuous mode [ 1752.995863][T27378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1753.005663][T27378] Cannot create hsr debugfs directory [ 1754.240176][ T29] audit: type=1326 audit(1734736384.705:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27414 comm="syz.0.7071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7fc00000 [ 1754.383770][T27378] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1754.450453][T27378] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1754.466309][T27378] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1754.495118][T27445] lo speed is unknown, defaulting to 1000 [ 1754.495969][T27378] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1754.570696][T18177] Bluetooth: hci3: command tx timeout [ 1754.615761][T27378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.633911][T27378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1754.646318][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1754.653449][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1754.673244][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1754.680462][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.514491][T27462] netlink: 'syz.5.7083': attribute type 10 has an invalid length. [ 1755.689990][T27378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1755.768334][T27469] lo speed is unknown, defaulting to 1000 [ 1757.003054][T18177] Bluetooth: hci3: command tx timeout [ 1757.017800][ T976] IPVS: starting estimator thread 0... [ 1757.287528][T27480] IPVS: using max 23 ests per chain, 55200 per kthread [ 1758.490420][T27378] veth0_vlan: entered promiscuous mode [ 1758.584950][T27378] veth1_vlan: entered promiscuous mode [ 1758.706053][ T29] audit: type=1326 audit(1734736388.877:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1758.720809][ T976] IPVS: starting estimator thread 0... [ 1758.742073][T27495] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 1758.763437][T27378] veth0_macvtap: entered promiscuous mode [ 1758.788638][ T29] audit: type=1326 audit(1734736388.924:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1758.789062][T27378] veth1_macvtap: entered promiscuous mode [ 1758.827250][ T29] audit: type=1326 audit(1734736388.924:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1758.850467][T27496] IPVS: using max 41 ests per chain, 98400 per kthread [ 1758.871965][ T29] audit: type=1326 audit(1734736388.924:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1758.875197][T27502] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1758.914691][ T29] audit: type=1326 audit(1734736388.924:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1758.944585][ T29] audit: type=1326 audit(1734736388.924:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2cd3f85d29 code=0x7ffc0000 [ 1758.984705][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.995594][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.005787][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.016692][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.026869][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.037375][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.047297][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.057792][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.068819][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.080210][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.090332][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.100903][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.110833][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.121300][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.131195][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.141791][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.151681][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.162164][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.172143][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.183726][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.195636][T27378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.203262][T18177] Bluetooth: hci3: command tx timeout [ 1759.239693][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.250829][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.261856][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.273559][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.288873][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.300156][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.310764][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.322045][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.336160][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.348558][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.359403][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.370626][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.380646][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.391760][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.404919][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.415704][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.426042][T27378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.436955][T27378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.458516][T27378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1759.493814][T27378] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.508068][T27378] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.525348][T27378] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.536710][T27378] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.568142][ T29] audit: type=1326 audit(1734736389.681:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cd3f85d29 code=0x7fc00000 [ 1759.678942][ T29] audit: type=1326 audit(1734736389.681:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27491 comm="syz.0.7091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2cd3f85d29 code=0x7fc00000 [ 1759.760698][T18055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.907891][T18055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.622219][T18057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.663528][T18057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.382953][T27534] netlink: 'syz.0.7099': attribute type 10 has an invalid length. [ 1763.537359][ T5829] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1763.549632][ T5829] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1763.559263][ T5829] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1763.569859][ T5829] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1763.579577][ T5829] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1763.586981][ T5829] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1763.622467][T27535] lo speed is unknown, defaulting to 1000 [ 1764.347974][ T973] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1764.737172][ T973] usb 2-1: Using ep0 maxpacket: 32 [ 1764.774571][T20254] bridge0: port 4(syz_tun) entered disabled state [ 1764.786718][ T973] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 1764.855174][ T973] usb 2-1: config 0 has no interface number 0 [ 1764.915113][T20254] bridge0: port 3(vlan2) entered disabled state [ 1764.962255][ T973] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1765.244149][ T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1765.252468][ T973] usb 2-1: Product: syz [ 1765.256768][ T973] usb 2-1: Manufacturer: syz [ 1765.261737][ T973] usb 2-1: SerialNumber: syz [ 1765.262566][T20254] syz_tun (unregistering): left allmulticast mode [ 1765.275159][ T973] usb 2-1: config 0 descriptor?? [ 1765.279201][T20254] syz_tun (unregistering): left promiscuous mode [ 1765.296897][T20254] bridge0: port 4(syz_tun) entered disabled state [ 1765.411488][ T973] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1765.554424][T20254] vlan2 (unregistering): left allmulticast mode [ 1765.561820][T20254] vlan2 (unregistering): left promiscuous mode [ 1765.581859][T20254] bridge0: port 3(vlan2) entered disabled state [ 1765.607480][T27535] chnl_net:caif_netlink_parms(): no params data found [ 1765.865514][ T5829] Bluetooth: hci6: command tx timeout [ 1766.835081][ T973] gspca_topro: reg_w err -110 [ 1766.864936][ T973] gspca_topro: Sensor soi763a [ 1767.088011][T27569] binder: 27567:27569 ioctl c0306201 200001c0 returned -22 [ 1767.241309][ T973] usb 2-1: USB disconnect, device number 75 [ 1767.263578][T27535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.302871][T27535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.310234][T27535] bridge_slave_0: entered allmulticast mode [ 1767.336458][T27535] bridge_slave_0: entered promiscuous mode [ 1767.459138][T27573] netlink: 'syz.0.7109': attribute type 7 has an invalid length. [ 1767.467188][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7109'. [ 1767.710720][T27535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.749596][T27535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.831452][T27535] bridge_slave_1: entered allmulticast mode [ 1768.171161][T27535] bridge_slave_1: entered promiscuous mode [ 1768.382767][T27535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.784798][T27535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.919375][ T5829] Bluetooth: hci6: command tx timeout [ 1769.059583][T27535] team0: Port device team_slave_0 added [ 1769.095741][T27535] team0: Port device team_slave_1 added [ 1769.218172][T27535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.234696][T27535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.289621][T27535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.307588][T27535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.315872][T27535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.365099][T27535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1769.446436][T27535] hsr_slave_0: entered promiscuous mode [ 1769.453673][T27535] hsr_slave_1: entered promiscuous mode [ 1769.468131][T27535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1769.477276][T27535] Cannot create hsr debugfs directory [ 1769.658224][T27535] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.759217][T27535] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.841079][T27535] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.909080][T27535] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.134299][T27535] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1770.153600][T27535] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1770.171710][T27535] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1770.187841][T27535] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1770.357873][T27535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1770.403592][T27535] 8021q: adding VLAN 0 to HW filter on device team0 [ 1770.425554][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.432674][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1770.477445][T18070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.484630][T18070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.825820][T27535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1771.142163][ T5829] Bluetooth: hci6: command tx timeout [ 1771.256066][T27535] veth0_vlan: entered promiscuous mode [ 1771.275921][T27535] veth1_vlan: entered promiscuous mode [ 1771.373502][T27535] veth0_macvtap: entered promiscuous mode [ 1771.411950][T27535] veth1_macvtap: entered promiscuous mode [ 1771.445228][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.470514][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.522927][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.568530][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.589444][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.621845][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.648315][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.707440][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.717312][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.771532][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.781441][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.836674][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.867884][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.910752][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1771.920652][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1771.974557][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.004125][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.039510][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.081431][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.091929][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.145678][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1772.156172][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.210448][T27535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1772.264875][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.306137][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.338539][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.370099][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.379985][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.417588][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.430339][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.441005][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.514931][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.540801][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.560351][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.590619][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.624237][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1772.680546][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1772.691234][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.094875][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.247904][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.316232][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.342982][T27535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1773.353474][T27535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1773.365852][T27626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7120'. [ 1773.374842][ T5829] Bluetooth: hci6: command tx timeout [ 1773.397541][T27535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1773.423122][T27535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.439155][T27535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.447913][T27535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.492646][T27535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1773.703704][T27626] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1773.813471][ T29] audit: type=1326 audit(1734736403.001:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1773.924700][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.938336][T18064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1774.102242][ T29] audit: type=1326 audit(1734736403.001:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1774.153782][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.862736][T18064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.983231][ T29] audit: type=1326 audit(1734736403.001:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1775.245904][ T29] audit: type=1326 audit(1734736403.030:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1775.299359][ T29] audit: type=1326 audit(1734736404.002:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1775.299406][ T29] audit: type=1326 audit(1734736404.002:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1775.299438][ T29] audit: type=1326 audit(1734736404.002:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4462b84690 code=0x7ffc0000 [ 1775.299468][ T29] audit: type=1326 audit(1734736404.002:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4462b87557 code=0x7ffc0000 [ 1775.299499][ T29] audit: type=1326 audit(1734736404.002:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1775.299529][ T29] audit: type=1326 audit(1734736404.002:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27628 comm="syz.5.7121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4462b87557 code=0x7ffc0000 [ 1775.576748][T27643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7123'. [ 1775.649169][T27644] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1776.567151][T27638] tty tty30: ldisc open failed (-12), clearing slot 29 [ 1777.052866][ T976] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1777.259519][ T976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1777.270218][ T976] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1777.280977][ T976] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1777.290538][ T976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1777.299028][ T976] usb 6-1: SerialNumber: syz [ 1778.357626][ T976] usb 6-1: cannot find UAC_HEADER [ 1778.423962][ T976] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1778.459589][ T976] usb 6-1: USB disconnect, device number 54 [ 1779.792626][T27671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7132'. [ 1780.504803][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1780.504821][ T29] audit: type=1326 audit(1734736409.259:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.542656][ T29] audit: type=1326 audit(1734736409.259:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.584738][ T29] audit: type=1326 audit(1734736409.259:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.645144][T27676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7133'. [ 1780.695202][ T29] audit: type=1326 audit(1734736409.259:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.717106][ T29] audit: type=1326 audit(1734736409.259:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.746599][ T29] audit: type=1326 audit(1734736409.343:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.768603][ T29] audit: type=1326 audit(1734736409.343:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.790452][ T29] audit: type=1326 audit(1734736409.372:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.812592][ T29] audit: type=1326 audit(1734736409.372:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1780.834499][ T29] audit: type=1326 audit(1734736409.372:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27673 comm="syz.7.7134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0x7ffc0000 [ 1784.604387][T27710] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7144'. [ 1785.150102][T27711] 9pnet_fd: Insufficient options for proto=fd [ 1786.272120][T18177] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1786.285275][T18177] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1786.296098][T18177] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1786.307008][T18177] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1786.315115][T18177] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1786.322845][T18177] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1786.370027][T27721] bridge0: port 3(vlan2) entered blocking state [ 1786.376577][T27721] bridge0: port 3(vlan2) entered disabled state [ 1786.383642][T27721] vlan2: entered allmulticast mode [ 1786.389261][T27721] team0: entered allmulticast mode [ 1786.394416][T27721] team_slave_0: entered allmulticast mode [ 1786.402198][T27721] team_slave_1: entered allmulticast mode [ 1786.410059][T27721] vlan2: entered promiscuous mode [ 1786.415267][T27721] team0: entered promiscuous mode [ 1786.420548][T27721] team_slave_0: entered promiscuous mode [ 1786.431551][T27721] team_slave_1: entered promiscuous mode [ 1786.441472][T27721] bridge0: port 3(vlan2) entered blocking state [ 1786.447874][T27721] bridge0: port 3(vlan2) entered forwarding state [ 1786.460105][T27716] lo speed is unknown, defaulting to 1000 [ 1788.723962][T18177] Bluetooth: hci0: command tx timeout [ 1789.617702][T27716] chnl_net:caif_netlink_parms(): no params data found [ 1790.043628][T27716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.072536][T27716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.102703][T27716] bridge_slave_0: entered allmulticast mode [ 1790.137481][T27716] bridge_slave_0: entered promiscuous mode [ 1790.178762][T27716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.226699][T27716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.270518][T27716] bridge_slave_1: entered allmulticast mode [ 1790.301895][T27716] bridge_slave_1: entered promiscuous mode [ 1790.347371][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1790.347389][ T29] audit: type=1326 audit(1734736418.473:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27774 comm="syz.5.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1790.399477][T27716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1790.414793][ T29] audit: type=1326 audit(1734736418.501:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27774 comm="syz.5.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1790.420831][T27716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.446729][ T29] audit: type=1326 audit(1734736418.501:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27774 comm="syz.5.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1790.507313][T27776] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1790.539039][ T29] audit: type=1326 audit(1734736418.501:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27774 comm="syz.5.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4462b85d29 code=0x7ffc0000 [ 1790.628711][T27716] team0: Port device team_slave_0 added [ 1790.648174][T27716] team0: Port device team_slave_1 added [ 1790.694381][T27782] netlink: 'syz.7.7162': attribute type 10 has an invalid length. [ 1790.817881][T27782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1790.834911][T27782] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1790.857603][T27716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1790.864674][T27716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.897533][T18177] Bluetooth: hci0: command tx timeout [ 1790.912689][T27716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1790.932088][T27716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.046708][T27716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.077509][T27716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1791.299246][ T29] audit: type=1326 audit(1734736419.352:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27774 comm="syz.5.7161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4462b85d29 code=0x7fc00000 [ 1791.879694][T27716] hsr_slave_0: entered promiscuous mode [ 1791.924080][T27716] hsr_slave_1: entered promiscuous mode [ 1791.931332][T27716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1791.940153][T27716] Cannot create hsr debugfs directory [ 1792.409835][T27716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1792.448494][T27716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1792.483193][T27716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1792.547537][T27716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1792.574080][T27809] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1792.698423][T27716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.737012][T27716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.913239][T18070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.920491][T18070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1792.968425][T27814] pim6reg1: entered promiscuous mode [ 1792.974744][T27814] pim6reg1: entered allmulticast mode [ 1793.258694][T18177] Bluetooth: hci0: command tx timeout [ 1793.913561][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.920798][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.567368][T27834] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7179'. [ 1795.707957][T18177] Bluetooth: hci0: command tx timeout [ 1796.154007][T27841] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7183'. [ 1796.221962][T27716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.987416][T27863] pim6reg1: entered promiscuous mode [ 1798.008379][T27863] pim6reg1: entered allmulticast mode [ 1798.682996][T27870] bridge1: entered promiscuous mode [ 1798.688421][T27870] bridge1: entered allmulticast mode [ 1799.229075][T27716] veth0_vlan: entered promiscuous mode [ 1799.269448][T27716] veth1_vlan: entered promiscuous mode [ 1799.297672][T27886] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1799.324019][T27716] veth0_macvtap: entered promiscuous mode [ 1799.334846][T27716] veth1_macvtap: entered promiscuous mode [ 1799.349751][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.375266][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.385147][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.395687][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.405592][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.428083][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.437991][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.465627][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.514404][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.560247][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.604701][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.644664][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.673978][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.704540][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.736045][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1799.753871][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.778123][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.208576][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.218473][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.251365][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.261257][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.273880][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.284120][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.299079][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.311057][T27716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.357137][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.393903][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.432564][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.448231][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.475892][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.502349][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.515912][T27896] binder: 27895:27896 ioctl c0306201 200001c0 returned -22 [ 1800.540037][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.572030][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.581925][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.657817][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.711148][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.771883][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.782700][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.793861][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.803964][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.814627][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.824985][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.967732][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.043666][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1801.205949][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.710672][T27716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1801.754104][T27716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1801.807914][T27716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1801.857445][T27913] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1801.867939][T27716] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.923977][T27716] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.951110][T27716] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.971692][T27716] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.212803][T27920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7208'. [ 1802.231235][T18064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.239123][T18064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.268638][T27920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7208'. [ 1802.286483][T18064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.303932][T18064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.166501][T27936] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7212'. [ 1805.488909][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1805.538532][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1805.818403][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1805.878169][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1805.915307][ T5829] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1805.941866][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1806.323874][T27943] lo speed is unknown, defaulting to 1000 [ 1806.477261][T27956] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7220'. [ 1806.692844][ T5868] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1806.766183][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7220'. [ 1806.955681][ T5868] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1806.965789][ T5868] usb 7-1: config 0 has no interface number 0 [ 1807.002684][ T5868] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.080998][ T5868] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.147236][ T5868] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1807.175178][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.196008][ T5868] usb 7-1: config 0 descriptor?? [ 1807.521257][T27968] fuse: Bad value for 'group_id' [ 1807.526281][T27968] fuse: Bad value for 'group_id' [ 1807.625138][T27969] bridge0: port 3(vlan2) entered blocking state [ 1807.639157][T27969] bridge0: port 3(vlan2) entered disabled state [ 1807.657738][T27969] vlan2: entered allmulticast mode [ 1807.716610][T27969] bond0: entered allmulticast mode [ 1807.733359][T27969] bond_slave_0: entered allmulticast mode [ 1807.813458][T27969] bond_slave_1: entered allmulticast mode [ 1807.865591][T27969] vlan2: entered promiscuous mode [ 1807.904165][ T5868] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0022/input/input65 [ 1807.936219][T27969] bond0: entered promiscuous mode [ 1807.957908][T27969] bond_slave_0: entered promiscuous mode [ 1808.037152][T27969] bond_slave_1: entered promiscuous mode [ 1808.043531][T27969] bridge0: port 3(vlan2) entered blocking state [ 1808.049979][T27969] bridge0: port 3(vlan2) entered forwarding state [ 1808.094250][ T5868] holtek_kbd 0003:04D9:A055.0022: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 1808.112233][ T5868] usb 7-1: USB disconnect, device number 56 [ 1808.259605][ T5829] Bluetooth: hci2: command tx timeout [ 1808.442573][T27943] chnl_net:caif_netlink_parms(): no params data found [ 1809.418663][T27986] 9pnet_virtio: no channels available for device qY3aK [ 1810.479538][T27943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.487316][T27943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.507023][ T5829] Bluetooth: hci2: command tx timeout [ 1810.513066][T27943] bridge_slave_0: entered allmulticast mode [ 1810.547578][T27943] bridge_slave_0: entered promiscuous mode [ 1810.562581][T27993] veth0_to_team: entered promiscuous mode [ 1810.566560][T27997] binder: BINDER_SET_CONTEXT_MGR already set [ 1810.574706][T27997] binder: 27995:27997 ioctl 4018620d 20000040 returned -16 [ 1810.576689][T27993] veth0_to_team: entered allmulticast mode [ 1810.583549][T27997] binder: 27995:27997 ioctl c0306201 200001c0 returned -22 [ 1810.782599][T27943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.790274][T27943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.800011][T27943] bridge_slave_1: entered allmulticast mode [ 1810.817883][T27943] bridge_slave_1: entered promiscuous mode [ 1811.217412][T28001] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7232'. [ 1811.235972][T28001] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7232'. [ 1811.248782][T28005] fuse: Bad value for 'group_id' [ 1811.254147][T28005] fuse: Bad value for 'group_id' [ 1811.695543][T27943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.741083][T27943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.988245][T27943] team0: Port device team_slave_0 added [ 1812.003910][T27943] team0: Port device team_slave_1 added [ 1813.540035][T18177] Bluetooth: hci2: command tx timeout [ 1813.608053][T28023] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7240'. [ 1813.620792][T27943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.646570][T27943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.677506][T28023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7240'. [ 1813.687467][T27943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.704919][T27943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.712425][T27943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.739176][T27943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1814.371823][T27943] hsr_slave_0: entered promiscuous mode [ 1814.435637][T27943] hsr_slave_1: entered promiscuous mode [ 1814.442491][T27943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1814.453698][T27943] Cannot create hsr debugfs directory [ 1814.642473][T27943] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1814.654931][T27943] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.706783][ T973] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 1814.765745][T27943] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1814.789698][T27943] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.858935][T27943] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1814.869791][T27943] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1814.881589][ T973] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1814.900270][ T973] usb 7-1: config 0 has no interface number 0 [ 1814.912689][ T973] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1814.924426][ T973] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1814.937260][ T973] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1814.938240][T28041] netlink: 'syz.7.7247': attribute type 10 has an invalid length. [ 1814.953517][ T973] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.967995][T27943] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1815.008813][ T973] usb 7-1: config 0 descriptor?? [ 1815.015446][T27943] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.029903][T28033] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1815.052049][ T973] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1815.417945][ T973] usb 7-1: USB disconnect, device number 57 [ 1815.711402][ T5829] Bluetooth: hci2: command tx timeout [ 1815.833824][T27943] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1815.873359][T27943] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1815.900854][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7252'. [ 1815.906217][T27943] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1815.917667][T28053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7252'. [ 1815.933273][T27943] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1816.035135][T27943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.103762][T27943] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.115721][T28047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.122858][T28047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1816.270937][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1816.325275][T18055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.332517][T18055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1816.658382][T27943] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1816.675273][T27943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1816.869679][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1816.887675][ T9] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1816.888758][T28064] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7255'. [ 1816.977035][T28066] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1817.147245][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.437315][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1817.665627][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1817.676669][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.687439][ T9] usb 9-1: Product: syz [ 1817.692907][ T9] usb 9-1: Manufacturer: syz [ 1817.694256][T27943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.697669][ T9] usb 9-1: SerialNumber: syz [ 1818.947933][ T9] usb 9-1: 0:2 : does not exist [ 1818.957030][ T9] usb 9-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1818.986380][ T9] usb 9-1: USB disconnect, device number 2 [ 1819.136584][T27943] veth0_vlan: entered promiscuous mode [ 1819.178126][T27943] veth1_vlan: entered promiscuous mode [ 1819.256124][T27943] veth0_macvtap: entered promiscuous mode [ 1819.273580][T27943] veth1_macvtap: entered promiscuous mode [ 1819.292720][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.303304][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.313306][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.323816][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.333679][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.344329][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.354294][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.364896][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.375350][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.388040][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.399650][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.410757][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.420721][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.431251][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.441187][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.451766][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.461951][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.472588][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.482972][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.494383][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.506151][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.517444][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.527376][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.537928][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.548484][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1819.559029][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.570338][T27943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.582664][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.593225][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.605222][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.616870][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.626978][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.637661][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.647655][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.658234][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.668146][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.680501][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.690477][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.701029][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.710950][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.723331][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.734755][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.745288][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.755231][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.765876][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.775794][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.786318][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.796281][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.807063][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.818647][T27943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1819.830885][T27943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1819.843640][T27943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1819.854102][T27943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.863123][T27943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.871908][T27943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1819.880962][T27943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.204409][T28112] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7269'. [ 1821.042539][T28116] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7271'. [ 1821.100697][T18057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.102341][T18070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.119975][T18070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.276965][T18057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.528001][T28124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1821.549806][T28124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1821.560070][T28126] binder: 28125:28126 ioctl c0306201 200001c0 returned -22 [ 1821.630180][T28124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1821.883127][T28124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1822.670257][T16162] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1823.356509][T16162] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.366988][T16162] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1823.376712][T16162] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.446381][T16162] usb 7-1: config 0 descriptor?? [ 1823.517275][T16162] pwc: Askey VC010 type 2 USB webcam detected. [ 1824.172738][T16162] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1824.187543][T16162] pwc: recv_control_msg error -32 req 02 val 2700 [ 1824.198472][T16162] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1824.207251][T16162] pwc: recv_control_msg error -32 req 04 val 1000 [ 1824.214985][T16162] pwc: recv_control_msg error -32 req 04 val 1300 [ 1824.241916][T16162] pwc: recv_control_msg error -32 req 04 val 1400 [ 1824.249707][T16162] pwc: recv_control_msg error -32 req 02 val 2000 [ 1824.342480][T16162] pwc: recv_control_msg error -32 req 02 val 2100 [ 1824.351489][T16162] pwc: recv_control_msg error -32 req 04 val 1500 [ 1824.358924][T16162] pwc: recv_control_msg error -32 req 02 val 2500 [ 1824.366372][T16162] pwc: recv_control_msg error -32 req 02 val 2400 [ 1824.374106][T16162] pwc: recv_control_msg error -32 req 02 val 2600 [ 1824.383157][T16162] pwc: recv_control_msg error -32 req 02 val 2900 [ 1824.391439][T16162] pwc: recv_control_msg error -32 req 02 val 2800 [ 1824.498677][T28174] syzkaller0: entered promiscuous mode [ 1824.504278][T28174] syzkaller0: entered allmulticast mode [ 1824.624836][T16162] pwc: recv_control_msg error -71 req 04 val 1200 [ 1824.632845][T16162] pwc: Registered as video103. [ 1824.644155][T16162] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input66 [ 1824.657140][T16162] usb 7-1: USB disconnect, device number 58 [ 1824.850545][ T5868] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1825.054363][ T5868] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1825.065179][ T5868] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1825.074408][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.110874][ T5868] usb 9-1: config 0 descriptor?? [ 1825.143324][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1825.589617][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1825.596853][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1825.604582][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1825.619599][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1825.630170][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1825.640081][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1825.647484][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1825.655510][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1825.667630][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1825.675934][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1825.683560][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1825.695695][ T5868] pwc: recv_control_msg error -32 req 02 val 2600 [ 1825.708944][ T5868] pwc: recv_control_msg error -32 req 02 val 2900 [ 1825.727305][ T5868] pwc: recv_control_msg error -32 req 02 val 2800 [ 1825.961012][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 1825.985645][ T5868] pwc: Registered as video103. [ 1826.011914][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input67 [ 1826.030361][ T5868] usb 9-1: USB disconnect, device number 3 [ 1828.483377][T28217] netlink: 'syz.6.7306': attribute type 4 has an invalid length. [ 1829.635719][T28221] xt_TCPMSS: Only works on TCP SYN packets [ 1830.670963][ T5868] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1830.860514][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1830.876525][ T5868] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1830.902117][ T5868] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1830.911668][ T5868] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.937313][ T5868] usb 9-1: config 0 descriptor?? [ 1831.448954][ T5868] hid (null): global environment stack underflow [ 1831.459115][ T5868] asus 0003:0B05:17E0.0023: global environment stack underflow [ 1831.466723][ T5868] asus 0003:0B05:17E0.0023: item 0 0 1 11 parsing failed [ 1831.623156][ T5868] asus 0003:0B05:17E0.0023: Asus hid parse failed: -22 [ 1831.630331][ T5868] asus 0003:0B05:17E0.0023: probe with driver asus failed with error -22 [ 1832.045228][T28238] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1833.187580][T28239] lo speed is unknown, defaulting to 1000 [ 1833.647100][T28260] netlink: 'syz.6.7320': attribute type 4 has an invalid length. [ 1833.956353][T28257] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7319'. [ 1833.967645][T28257] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7319'. [ 1834.225110][T16162] usb 9-1: USB disconnect, device number 4 [ 1836.435038][T28301] lo speed is unknown, defaulting to 1000 [ 1840.343001][ T29] audit: type=1326 audit(1734736465.224:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28352 comm="syz.6.7356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90f6385d29 code=0x0 [ 1840.473385][T28360] lo speed is unknown, defaulting to 1000 [ 1840.550792][T28356] 9pnet_virtio: no channels available for device syz [ 1841.849148][T16162] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 1841.938582][T28383] fuse: Unknown parameter 'grou00000000000000000000' [ 1841.988589][T16162] usb 9-1: device descriptor read/64, error -71 [ 1842.048989][T28387] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7370'. [ 1842.436788][T16162] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 1843.597253][T28403] binder: 28402:28403 ioctl 4018620d 0 returned -22 [ 1843.633529][T28403] binder: 28402:28403 ioctl c0306201 200001c0 returned -22 [ 1843.641021][T16162] usb 9-1: device descriptor read/64, error -71 [ 1843.777150][T16162] usb usb9-port1: attempt power cycle [ 1844.472720][T28418] fuse: Unknown parameter 'group_i00000000000000000000' [ 1846.039136][ T9] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 1846.178204][ T9] usb 8-1: device descriptor read/64, error -71 [ 1846.428086][T28451] fuse: Unknown parameter 'group_i00000000000000000000' [ 1846.443232][ T9] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 1846.591154][ T29] audit: type=1326 audit(1734736471.080:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28452 comm="syz.6.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f6385d29 code=0x7ffc0000 [ 1846.631490][ T29] audit: type=1326 audit(1734736471.117:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28452 comm="syz.6.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f90f6385d29 code=0x7ffc0000 [ 1846.637935][ T9] usb 8-1: device descriptor read/64, error -71 [ 1846.707544][ T29] audit: type=1326 audit(1734736471.117:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28452 comm="syz.6.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90f6385d29 code=0x7ffc0000 [ 1846.762687][ T29] audit: type=1326 audit(1734736471.117:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28452 comm="syz.6.7394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f90f6385d29 code=0x7ffc0000 [ 1846.784290][T28456] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1846.794072][ T9] usb usb8-port1: attempt power cycle [ 1846.794180][ T29] audit: type=1326 audit(1734736471.173:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28454 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1846.850762][ T29] audit: type=1326 audit(1734736471.173:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28454 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1846.879708][ T29] audit: type=1326 audit(1734736471.173:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28454 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1846.902817][ T29] audit: type=1326 audit(1734736471.173:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28454 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1846.927202][ T29] audit: type=1326 audit(1734736471.173:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28454 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1846.951072][ T29] audit: type=1326 audit(1734736471.173:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28454 comm="syz.5.7396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1847.162183][ T9] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 1847.185516][ T9] usb 8-1: device descriptor read/8, error -71 [ 1847.452675][ T9] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 1848.222529][ T9] usb 8-1: device descriptor read/8, error -71 [ 1848.366377][ T9] usb usb8-port1: unable to enumerate USB device [ 1848.532085][T28468] syzkaller1: entered promiscuous mode [ 1848.565446][T28468] syzkaller1: entered allmulticast mode [ 1850.068779][T28486] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7408'. [ 1850.089891][T28486] bridge_slave_1: left allmulticast mode [ 1850.100696][T28486] bridge_slave_1: left promiscuous mode [ 1850.120377][T28486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.184380][T28486] bridge_slave_0: left allmulticast mode [ 1850.200660][T28486] bridge_slave_0: left promiscuous mode [ 1850.218950][T28486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1852.795891][T13147] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 1853.249013][T28512] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7415'. [ 1853.252887][T13147] usb 9-1: device descriptor read/64, error -71 [ 1853.459358][T28516] kvm: pic: non byte read [ 1853.522558][T13147] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1853.661618][T13147] usb 9-1: device descriptor read/64, error -71 [ 1853.735284][T28523] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7421'. [ 1853.790430][T13147] usb usb9-port1: attempt power cycle [ 1854.164034][T13147] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 1854.186577][T13147] usb 9-1: device descriptor read/8, error -71 [ 1854.440612][T28527] fuse: Unknown parameter 'group_id00000000000000000000' [ 1854.452713][T13147] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 1854.658149][T13147] usb 9-1: device descriptor read/8, error -71 [ 1854.838814][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1854.838857][ T29] audit: type=1326 audit(1734736478.797:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28531 comm="syz.7.7425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb340985d29 code=0xffff0000 [ 1855.474207][T13147] usb usb9-port1: unable to enumerate USB device [ 1856.206240][T28541] usb usb7: usbfs: process 28541 (syz.8.7428) did not claim interface 0 before use [ 1856.761953][ T9] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1856.997678][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1857.091288][ T9] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1857.191873][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.199947][ T9] usb 6-1: Product: syz [ 1857.285842][ T9] usb 6-1: Manufacturer: syz [ 1857.290514][ T9] usb 6-1: SerialNumber: syz [ 1857.301440][ T9] usb 6-1: config 0 descriptor?? [ 1857.311357][ T9] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1857.422731][T28555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7434'. [ 1857.534001][ T9] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 1857.541380][ T9] visor 6-1:0.0: probe with driver visor failed with error -71 [ 1857.587355][ T9] usb 6-1: USB disconnect, device number 55 [ 1857.855130][T28557] fuse: Bad value for 'user_id' [ 1857.860508][T28557] fuse: Bad value for 'user_id' [ 1858.536497][ T46] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 1858.878756][ T46] usb 6-1: device descriptor read/64, error -71 [ 1859.819355][ T46] usb 6-1: new low-speed USB device number 57 using dummy_hcd [ 1859.969181][ T46] usb 6-1: device descriptor read/64, error -71 [ 1860.102574][ T46] usb usb6-port1: attempt power cycle [ 1860.578767][ T46] usb 6-1: new low-speed USB device number 58 using dummy_hcd [ 1860.640543][ T46] usb 6-1: device descriptor read/8, error -71 [ 1860.653188][ T9] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 1860.803747][ T9] usb 8-1: device descriptor read/64, error -71 [ 1860.822934][T28580] @: renamed from vlan0 (while UP) [ 1861.006166][ T46] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 1861.041995][ T46] usb 6-1: device descriptor read/8, error -71 [ 1861.156761][ T46] usb usb6-port1: unable to enumerate USB device [ 1861.604674][ T9] usb 8-1: new low-speed USB device number 7 using dummy_hcd [ 1861.747342][ T9] usb 8-1: device descriptor read/64, error -71 [ 1861.872295][ T9] usb usb8-port1: attempt power cycle [ 1861.989601][ T46] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1862.045236][T28604] pim6reg1: entered promiscuous mode [ 1862.050824][T28604] pim6reg1: entered allmulticast mode [ 1862.235810][ T9] usb 8-1: new low-speed USB device number 8 using dummy_hcd [ 1862.258331][ T9] usb 8-1: device descriptor read/8, error -71 [ 1862.299843][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 1862.354097][ T46] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1862.362242][ T46] usb 7-1: config 0 has no interface number 0 [ 1862.377734][T28606] lo speed is unknown, defaulting to 1000 [ 1862.396759][ T46] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1862.405872][ T46] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.420821][ T46] usb 7-1: Product: syz [ 1862.425038][ T46] usb 7-1: Manufacturer: syz [ 1862.443388][ T46] usb 7-1: SerialNumber: syz [ 1862.477828][ T46] usb 7-1: config 0 descriptor?? [ 1862.500406][ T46] smsc95xx v2.0.0 [ 1862.705905][ T9] usb 8-1: new low-speed USB device number 9 using dummy_hcd [ 1862.739187][ T9] usb 8-1: device descriptor read/8, error -71 [ 1862.856137][ T9] usb usb8-port1: unable to enumerate USB device [ 1863.469809][ T46] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1863.536073][T28619] pim6reg1: entered promiscuous mode [ 1863.559693][T28619] pim6reg1: entered allmulticast mode [ 1863.700539][ T46] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1863.716219][ T46] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1863.763889][ T46] usb 7-1: USB disconnect, device number 59 [ 1866.790092][T27873] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 1866.974216][T27873] usb 9-1: device descriptor read/64, error -71 [ 1867.238957][T27873] usb 9-1: new low-speed USB device number 13 using dummy_hcd [ 1867.457557][T27873] usb 9-1: device descriptor read/64, error -71 [ 1867.623505][T27873] usb usb9-port1: attempt power cycle [ 1868.457777][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1868.467585][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.477687][T28673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1868.487563][T28673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1868.499865][T28673] dummy0: entered promiscuous mode [ 1868.510024][T28673] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1868.896336][T27873] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 1868.932725][T27873] usb 9-1: device descriptor read/8, error -71 [ 1869.228513][T27873] usb 9-1: new low-speed USB device number 15 using dummy_hcd [ 1869.390699][T27873] usb 9-1: device descriptor read/8, error -71 [ 1869.683757][T27873] usb usb9-port1: unable to enumerate USB device [ 1870.889782][T28695] netlink: zone id is out of range [ 1872.594026][T28713] @: renamed from vlan0 (while UP) [ 1876.443176][T28744] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7504'. [ 1876.452438][T28744] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7504'. [ 1877.050293][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7506'. [ 1878.288640][T18177] Bluetooth: hci1: command 0x0406 tx timeout [ 1878.929421][T27873] usb 7-1: new low-speed USB device number 60 using dummy_hcd [ 1879.214039][T27873] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1879.406736][T27873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.490208][T27873] usb 7-1: config 0 has no interface number 0 [ 1879.496893][T27873] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1879.506485][T27873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.553510][T27873] usb 7-1: config 0 descriptor?? [ 1879.652085][T27873] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1880.464275][T13147] usb 7-1: USB disconnect, device number 60 [ 1882.843061][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 1884.667130][T28836] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1884.791880][T28839] binder: 28838:28839 ioctl c0306201 200001c0 returned -22 [ 1885.788265][ T46] usb 7-1: new low-speed USB device number 61 using dummy_hcd [ 1886.308776][ T46] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1886.318952][ T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1886.564692][ T46] usb 7-1: config 0 has no interface number 0 [ 1886.808150][ T46] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1886.827708][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1886.852480][ T46] usb 7-1: config 0 descriptor?? [ 1886.871044][ T46] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 1887.070871][T28873] veth0_to_team: entered promiscuous mode [ 1887.076663][T28873] veth0_to_team: entered allmulticast mode [ 1887.090341][T13147] usb 7-1: USB disconnect, device number 61 [ 1887.198346][ T46] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1887.363048][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1887.384295][ T46] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1887.414810][ T46] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1887.432343][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.449464][ T46] usb 9-1: config 0 descriptor?? [ 1888.485091][ T46] hid (null): global environment stack underflow [ 1888.493897][ T46] asus 0003:0B05:17E0.0024: global environment stack underflow [ 1888.501520][ T46] asus 0003:0B05:17E0.0024: item 0 0 1 11 parsing failed [ 1888.509300][ T46] asus 0003:0B05:17E0.0024: Asus hid parse failed: -22 [ 1888.516369][ T46] asus 0003:0B05:17E0.0024: probe with driver asus failed with error -22 [ 1888.593869][ T46] usb 9-1: USB disconnect, device number 16 [ 1888.779609][T28901] xt_TCPMSS: Only works on TCP SYN packets [ 1889.952687][ T29] audit: type=1326 audit(1734736511.620:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28908 comm="syz.8.7561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1890.031952][ T29] audit: type=1326 audit(1734736511.620:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28908 comm="syz.8.7561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1890.184146][ T29] audit: type=1326 audit(1734736511.620:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28908 comm="syz.8.7561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1890.239474][ T29] audit: type=1326 audit(1734736511.620:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28908 comm="syz.8.7561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1890.250588][T28915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7562'. [ 1891.456175][T28920] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1892.501951][T28932] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7570'. [ 1893.123129][T28939] fuse: Bad value for 'rootmode' [ 1893.430742][ T976] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1893.595166][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1893.622508][ T976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1893.674978][ T976] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1893.845751][ T976] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.928477][ T976] usb 9-1: config 0 descriptor?? [ 1894.410487][ T976] hid (null): global environment stack underflow [ 1894.431647][T28970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7583'. [ 1894.443915][T28970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7583'. [ 1894.459231][ T976] asus 0003:0B05:17E0.0025: global environment stack underflow [ 1894.466832][ T976] asus 0003:0B05:17E0.0025: item 0 0 1 11 parsing failed [ 1894.511132][ T976] asus 0003:0B05:17E0.0025: Asus hid parse failed: -22 [ 1894.518124][ T976] asus 0003:0B05:17E0.0025: probe with driver asus failed with error -22 [ 1894.629415][T13147] usb 9-1: USB disconnect, device number 17 [ 1894.667502][T28976] fuse: Bad value for 'rootmode' [ 1895.470686][T28990] veth0_to_team: entered promiscuous mode [ 1895.494099][T28990] veth0_to_team: entered allmulticast mode [ 1895.861825][T28999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7595'. [ 1895.915650][T28999] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7595'. [ 1896.238565][T29008] fuse: Bad value for 'rootmode' [ 1896.263916][ T9] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1896.649537][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1896.700810][ T9] usb 6-1: no configurations [ 1896.833540][ T9] usb 6-1: can't read configurations, error -22 [ 1897.097631][ T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1897.256962][T29020] syzkaller0: entered promiscuous mode [ 1897.277579][T29020] syzkaller0: entered allmulticast mode [ 1897.290143][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1897.296204][ T9] usb 6-1: no configurations [ 1897.301086][ T9] usb 6-1: can't read configurations, error -22 [ 1897.318964][ T9] usb usb6-port1: attempt power cycle [ 1897.375758][T13147] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1897.542200][T18177] Bluetooth: hci6: Malformed Event: 0x02 [ 1897.559298][T13147] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.570430][T13147] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.580323][T13147] usb 8-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1897.589729][T13147] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.600904][T13147] usb 8-1: config 0 descriptor?? [ 1897.686194][ T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1897.739745][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1897.776271][ T9] usb 6-1: no configurations [ 1897.780961][ T9] usb 6-1: can't read configurations, error -22 [ 1897.927471][ T9] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1897.942381][ T46] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1898.048968][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1898.058709][T13147] hid (null): global environment stack underflow [ 1898.067932][T13147] asus 0003:0B05:17E0.0026: global environment stack underflow [ 1898.088292][ T9] usb 6-1: no configurations [ 1898.093230][ T9] usb 6-1: can't read configurations, error -22 [ 1898.097614][T13147] asus 0003:0B05:17E0.0026: item 0 0 1 11 parsing failed [ 1898.118421][T13147] asus 0003:0B05:17E0.0026: Asus hid parse failed: -22 [ 1898.120574][ T9] usb usb6-port1: unable to enumerate USB device [ 1898.133141][T13147] asus 0003:0B05:17E0.0026: probe with driver asus failed with error -22 [ 1898.183253][ T46] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.194497][ T46] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1898.210103][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.223205][ T46] usb 7-1: config 0 descriptor?? [ 1898.231999][ T46] pwc: Askey VC010 type 2 USB webcam detected. [ 1898.309207][T13147] usb 8-1: USB disconnect, device number 10 [ 1898.678067][ T46] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1898.719073][ T46] pwc: recv_control_msg error -32 req 02 val 2700 [ 1898.733982][ T46] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1898.751893][ T46] pwc: recv_control_msg error -32 req 04 val 1000 [ 1899.050784][ T46] pwc: recv_control_msg error -71 req 04 val 1400 [ 1899.147522][ T46] pwc: recv_control_msg error -71 req 02 val 2000 [ 1899.179642][ T46] pwc: recv_control_msg error -71 req 02 val 2100 [ 1899.269413][ T46] pwc: recv_control_msg error -71 req 04 val 1500 [ 1899.293444][T18177] Bluetooth: hci6: command 0x0406 tx timeout [ 1899.301294][ T46] pwc: recv_control_msg error -71 req 02 val 2500 [ 1899.313906][ T46] pwc: recv_control_msg error -71 req 02 val 2400 [ 1899.339125][ T46] pwc: recv_control_msg error -71 req 02 val 2600 [ 1899.350491][ T46] pwc: recv_control_msg error -71 req 02 val 2900 [ 1899.374872][ T46] pwc: recv_control_msg error -71 req 02 val 2800 [ 1899.392357][ T46] pwc: recv_control_msg error -71 req 04 val 1100 [ 1899.542596][ T46] pwc: recv_control_msg error -71 req 04 val 1200 [ 1899.604484][ T5836] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 1899.604598][ T5836] Bluetooth: hci2: Unknown advertising packet type: 0x1e [ 1899.613445][ T5836] Bluetooth: hci2: Unknown advertising packet type: 0x30 [ 1899.620733][ T5836] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1899.666572][ T46] pwc: Registered as video103. [ 1899.672472][ T46] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input68 [ 1899.687132][ T46] usb 7-1: USB disconnect, device number 62 [ 1899.695680][T13147] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1899.860232][T13147] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.893925][T13147] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.966020][T13147] usb 8-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 1900.028829][T13147] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.042145][T13147] usb 8-1: config 0 descriptor?? [ 1900.061580][ T29] audit: type=1326 audit(1734736521.105:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29045 comm="syz.5.7613" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x0 [ 1900.381355][ T5836] Bluetooth: hci1: Malformed Event: 0x02 [ 1900.487161][T13147] hid (null): global environment stack underflow [ 1900.496819][T13147] asus 0003:0B05:17E0.0027: global environment stack underflow [ 1900.508076][T13147] asus 0003:0B05:17E0.0027: item 0 0 1 11 parsing failed [ 1900.519027][T13147] asus 0003:0B05:17E0.0027: Asus hid parse failed: -22 [ 1900.526200][T13147] asus 0003:0B05:17E0.0027: probe with driver asus failed with error -22 [ 1901.388320][ T29] audit: type=1326 audit(1734736522.302:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1901.411091][ T29] audit: type=1326 audit(1734736522.302:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1901.435217][ T29] audit: type=1326 audit(1734736522.302:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1901.457962][ T29] audit: type=1326 audit(1734736522.302:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1901.512728][ T29] audit: type=1326 audit(1734736522.302:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1901.534434][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.541673][ T29] audit: type=1326 audit(1734736522.302:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4dd784690 code=0x7ffc0000 [ 1901.564510][ T29] audit: type=1326 audit(1734736522.302:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc4dd787557 code=0x7ffc0000 [ 1901.586229][ C0] vkms_vblank_simulate: vblank timer overrun [ 1901.593887][ T29] audit: type=1326 audit(1734736522.302:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc4dd785d29 code=0x7ffc0000 [ 1901.668001][ T29] audit: type=1326 audit(1734736522.302:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29060 comm="syz.5.7618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc4dd787557 code=0x7ffc0000 [ 1904.979640][T29058] lo speed is unknown, defaulting to 1000 [ 1906.259941][T13147] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1906.373291][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1906.373310][ T29] audit: type=1326 audit(1734736527.007:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.401780][ T29] audit: type=1326 audit(1734736527.007:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.424520][ T29] audit: type=1326 audit(1734736527.007:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.447199][ T29] audit: type=1326 audit(1734736527.007:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.469033][ T29] audit: type=1326 audit(1734736527.007:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.475059][T13147] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1906.490915][ T29] audit: type=1326 audit(1734736527.007:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.490959][ T29] audit: type=1326 audit(1734736527.007:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3be584690 code=0x7ffc0000 [ 1906.490992][ T29] audit: type=1326 audit(1734736527.007:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3be587557 code=0x7ffc0000 [ 1906.491023][ T29] audit: type=1326 audit(1734736527.007:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3be585d29 code=0x7ffc0000 [ 1906.491054][ T29] audit: type=1326 audit(1734736527.007:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29092 comm="syz.8.7631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff3be587557 code=0x7ffc0000 [ 1906.623011][T13147] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1906.646455][T13147] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1906.664552][T13147] usb 7-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 1906.673844][T13147] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.708964][T13147] usb 7-1: Product: syz [ 1906.729841][T13147] usb 7-1: Manufacturer: syz [ 1906.734516][T13147] usb 7-1: SerialNumber: syz [ 1906.762689][T13147] usb 7-1: config 0 descriptor?? [ 1906.772803][ T46] usb 6-1: new low-speed USB device number 64 using dummy_hcd [ 1906.782483][T13147] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 1906.804554][T13147] em28xx 7-1:0.0: Video interface 0 found: isoc [ 1906.809693][T29097] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7633'. [ 1906.903059][T29097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7633'. [ 1906.938654][ T5868] usb 8-1: USB disconnect, device number 11 [ 1906.951806][ T46] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1906.960571][ T46] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.978858][ T46] usb 6-1: config 0 has no interface number 0 [ 1906.997728][ T46] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1907.010989][ T46] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1907.020474][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.031332][ T46] usb 6-1: config 0 descriptor?? [ 1907.043676][ T46] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1907.282323][ T976] usb 6-1: USB disconnect, device number 64 [ 1907.386794][T29103] netlink: 'syz.8.7636': attribute type 4 has an invalid length. [ 1908.100062][T13147] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1908.179930][T13147] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1908.193302][T13147] em28xx 7-1:0.0: board has no eeprom [ 1908.279977][T13147] em28xx 7-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 1908.316291][T13147] em28xx 7-1:0.0: analog set to isoc mode. [ 1908.322736][ T9] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1908.357722][ T5868] em28xx 7-1:0.0: Registering V4L2 extension [ 1908.382707][T13147] usb 7-1: USB disconnect, device number 63 [ 1908.403290][T13147] em28xx 7-1:0.0: Disconnecting em28xx [ 1908.422533][ T5868] em28xx 7-1:0.0: Config register raw data: 0xffffffed [ 1908.452649][ T5868] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1908.461575][ T9] usb 8-1: device descriptor read/64, error -71 [ 1908.468107][ T5868] em28xx 7-1:0.0: No AC97 audio processor [ 1908.532429][ T5868] usb 7-1: Decoder not found [ 1908.541612][ T5868] em28xx 7-1:0.0: failed to create media graph [ 1908.552223][ T5868] em28xx 7-1:0.0: V4L2 device video103 deregistered [ 1908.586170][ T5868] em28xx 7-1:0.0: Remote control support is not available for this card. [ 1908.595360][T13147] em28xx 7-1:0.0: Closing input extension [ 1908.629831][T13147] em28xx 7-1:0.0: Freeing device [ 1908.739785][ T9] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1908.900184][ T9] usb 8-1: device descriptor read/64, error -71 [ 1909.017992][ T9] usb usb8-port1: attempt power cycle [ 1909.929563][ T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1910.054816][ T9] usb 8-1: device descriptor read/8, error -71 [ 1910.129946][ T5819] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1910.197892][T29136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1910.405943][ T9] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1910.516457][ T9] usb 8-1: device descriptor read/8, error -71 [ 1910.527591][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1910.541416][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1910.659207][ T9] usb usb8-port1: unable to enumerate USB device [ 1910.726602][T29139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7645'. [ 1910.728164][ T5819] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1910.771001][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.821955][ T5819] usb 6-1: config 0 descriptor?? [ 1911.275169][ T5819] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1911.300093][ T5819] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1911.488002][ T5819] cp2112 0003:10C4:EA90.0028: Part Number: 0x82 Device Version: 0xFE [ 1911.875184][ T8] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1912.246036][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 1912.268638][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.279121][ T8] usb 8-1: config 0 has no interfaces? [ 1912.313145][ T8] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1912.405521][ T8] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1912.640016][ T8] usb 8-1: Product: syz [ 1912.721868][ T8] usb 8-1: Manufacturer: syz [ 1912.749873][ T5819] usb 6-1: reset high-speed USB device number 65 using dummy_hcd [ 1912.815612][ T8] usb 8-1: SerialNumber: syz [ 1913.007027][ T8] usb 8-1: config 0 descriptor?? [ 1913.034837][T29171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7658'. [ 1913.047658][T29171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7658'. [ 1913.237564][ T5868] usb 8-1: USB disconnect, device number 16 [ 1913.822927][ T976] usb 6-1: USB disconnect, device number 65 [ 1913.886817][T29186] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7664'. [ 1914.209224][T29192] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7666'. [ 1914.241007][T29192] netlink: 'syz.7.7666': attribute type 10 has an invalid length. [ 1914.241642][T29194] netlink: 'syz.6.7667': attribute type 4 has an invalid length. [ 1915.015424][T29217] binder: 29216:29217 ioctl c0306201 200001c0 returned -22 [ 1915.199662][T29222] netlink: 'syz.8.7679': attribute type 10 has an invalid length. [ 1915.249230][T29222] dummy0: entered promiscuous mode [ 1915.280361][T29222] dummy0: entered allmulticast mode [ 1915.302072][T29222] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1915.475440][T29230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1915.881119][ T5868] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1916.071093][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 1916.104179][ T5868] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1916.134408][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1916.241597][ T5868] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1916.251354][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1916.277768][ T5868] usb 8-1: Product: syz [ 1916.304328][ T5868] usb 8-1: Manufacturer: syz [ 1916.341992][ T5868] usb 8-1: SerialNumber: syz [ 1916.369783][ T5868] usb 8-1: config 0 descriptor?? [ 1916.381252][ T5868] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1916.394506][ T5868] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1917.100498][ T5868] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1917.328103][ T5868] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1918.438562][ T5868] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1918.533212][ T5868] em28xx 8-1:0.0: No AC97 audio processor [ 1918.875934][T13147] usb 8-1: USB disconnect, device number 17 [ 1918.882830][T13147] em28xx 8-1:0.0: Disconnecting em28xx [ 1918.971393][T13147] em28xx 8-1:0.0: Freeing device [ 1919.149344][T29279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7696'. [ 1920.877045][T29296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1921.141261][T18177] Bluetooth: hci0: command 0x0406 tx timeout [ 1921.321713][T29296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1921.357632][T29296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 1921.368456][T29296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1923.000899][T13147] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 1923.179955][T29318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7710'. [ 1923.199299][ T5819] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1923.493088][ T5819] usb 7-1: Using ep0 maxpacket: 16 [ 1923.538824][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.554493][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1923.665033][ T5819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1923.856660][ T5819] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1923.866423][ T5819] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1923.884963][ T5819] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1923.915131][ T5819] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1923.921521][T13147] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1923.928120][ T5819] usb 7-1: Manufacturer: syz [ 1923.949836][ T5819] usb 7-1: config 0 descriptor?? [ 1923.957472][T13147] usb 8-1: config 0 has no interface number 0 [ 1923.984455][T13147] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1924.003143][T13147] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1924.021834][T13147] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1924.063004][T13147] usb 8-1: config 0 descriptor?? [ 1924.071240][T13147] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 1924.294218][ T5819] rc_core: IR keymap rc-hauppauge not found [ 1924.300809][ T5819] Registered IR keymap rc-empty [ 1924.342270][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.447430][T13147] usb 8-1: USB disconnect, device number 18 [ 1924.604493][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.698111][ T5819] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1924.774531][ T5819] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input69 [ 1924.801583][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.839830][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.861450][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.882530][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.914708][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.935951][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.967928][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1924.989415][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1925.010739][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1925.032124][ T5819] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1925.065676][ T5819] mceusb 7-1:0.0: Registered р with mce emulator interface version 1 [ 1925.085648][ T5819] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1925.107331][ T5819] usb 7-1: USB disconnect, device number 64 [ 1926.339961][T29351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7721'. [ 1927.860540][T29360] bridge0: port 4(vlan0) entered blocking state [ 1927.890909][T29360] bridge0: port 4(vlan0) entered disabled state [ 1927.912974][T29360] vlan0: entered allmulticast mode [ 1927.924944][T29360] bond0: entered allmulticast mode [ 1927.935242][T29360] bond_slave_0: entered allmulticast mode [ 1927.944973][T29360] bond_slave_1: entered allmulticast mode [ 1927.953388][T29360] vlan0: entered promiscuous mode [ 1927.958552][T29360] bond0: entered promiscuous mode [ 1927.964087][T29360] bond_slave_0: entered promiscuous mode [ 1927.970464][T29360] bond_slave_1: entered promiscuous mode [ 1927.977011][T29360] bridge0: port 4(vlan0) entered blocking state [ 1927.983419][T29360] bridge0: port 4(vlan0) entered forwarding state [ 1928.175136][ T5868] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1928.184591][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7732'. [ 1928.359783][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1928.382138][ T5868] usb 6-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 1928.410459][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.444510][ T5868] usb 6-1: config 0 descriptor?? [ 1928.840379][T29399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7740'. [ 1929.105476][ T5868] usbhid 6-1:0.0: can't add hid device: -71 [ 1929.131825][ T5868] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1929.213642][ T5868] usb 6-1: USB disconnect, device number 66 [ 1929.929130][T29415] syz_tun: refused to change device tx_queue_len [ 1930.398751][ T8] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1930.523984][T29433] @: renamed from vlan0 (while UP) [ 1930.561441][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1930.583403][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1930.614986][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1930.640732][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1930.672355][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1930.696308][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1930.721520][ T8] usb 6-1: config 0 descriptor?? [ 1930.988066][ T8] hdpvr 6-1:0.0: firmware version 0x15 dated mҝR( ry|A3je{)7}-S8N [ 1931.492503][ T8] hdpvr 6-1:0.0: Could not setup controls [ 1931.524761][ T8] hdpvr 6-1:0.0: registering videodev failed [ 1931.581495][ T8] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 1931.644113][ T8] usb 6-1: USB disconnect, device number 67 [ 1932.196414][T29470] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 1932.730369][T29477] syz.6.7770 (29477) used greatest stack depth: 18168 bytes left [ 1933.811282][ T30] INFO: task syz.1.7108:27586 blocked for more than 143 seconds. [ 1933.819226][ T30] Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 1933.903890][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1934.037852][ T30] task:syz.1.7108 state:D stack:26096 pid:27586 tgid:27574 ppid:24602 flags:0x00000004 [ 1934.247465][ T30] Call Trace: [ 1934.264276][ T30] [ 1934.284379][ T30] __schedule+0x17fb/0x4be0 [ 1934.300524][ T30] ? __pfx___schedule+0x10/0x10 [ 1934.316645][ T30] ? __pfx_lock_release+0x10/0x10 [ 1934.321759][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1934.338748][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1934.360322][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1934.370659][ T30] ? schedule+0x90/0x320 [ 1934.375177][ T30] schedule+0x14b/0x320 [ 1934.401593][ T30] schedule_preempt_disabled+0x13/0x30 [ 1934.461266][ T30] __mutex_lock+0x7e7/0xee0 [ 1934.474139][ T30] ? __mutex_lock+0x5ef/0xee0 [ 1934.489861][ T30] ? nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1934.500648][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1934.522748][ T30] ? __asan_memset+0x23/0x50 [ 1934.533215][ T30] ? netlink_unicast+0x7f6/0x990 [ 1934.538847][ T30] ? netlink_sendmsg+0x8e4/0xcb0 [ 1934.591392][ T30] ? __sock_sendmsg+0x221/0x270 [ 1934.652854][ T30] ? __sys_sendmsg+0x269/0x350 [ 1934.660433][ T30] nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1934.673802][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 1934.696095][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1934.708412][ T30] ? __nla_parse+0x40/0x60 [ 1934.719087][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 1934.740779][ T30] genl_rcv_msg+0xb14/0xec0 [ 1934.783999][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1934.797477][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1934.811787][ T30] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1934.820039][ T30] ? __pfx___might_resched+0x10/0x10 [ 1934.825724][ T30] netlink_rcv_skb+0x1e3/0x430 [ 1934.830533][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1934.835736][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1934.842813][ T30] genl_rcv+0x28/0x40 [ 1934.848245][ T30] netlink_unicast+0x7f6/0x990 [ 1934.854515][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 1934.861457][ T30] ? __virt_addr_valid+0x45f/0x530 [ 1934.867655][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 1934.873943][ T30] ? __check_object_size+0x47a/0x730 [ 1934.899947][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 1934.905775][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1934.922435][ T30] ? futex_wait_queue+0x27/0x1d0 [ 1934.927865][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1934.940535][ T30] __sock_sendmsg+0x221/0x270 [ 1934.946859][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 1934.964862][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1934.974524][ T30] __sys_sendmsg+0x269/0x350 [ 1934.979225][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 1935.011729][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1935.027114][ T30] ? do_syscall_64+0x100/0x230 [ 1935.038201][ T30] ? do_syscall_64+0xb6/0x230 [ 1935.047968][ T30] do_syscall_64+0xf3/0x230 [ 1935.065908][ T30] ? clear_bhb_loop+0x35/0x90 [ 1935.101126][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1935.152956][ T30] RIP: 0033:0x7f50ddb85d29 [ 1935.185107][ T30] RSP: 002b:00007f50de8e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1935.194261][ T30] RAX: ffffffffffffffda RBX: 00007f50ddd76080 RCX: 00007f50ddb85d29 [ 1935.203112][ T30] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 1935.232228][ T30] RBP: 00007f50ddc01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1935.249566][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1935.262059][ T30] R13: 0000000000000000 R14: 00007f50ddd76080 R15: 00007ffce0544ed8 [ 1935.284140][ T30] [ 1935.296738][ T30] [ 1935.296738][ T30] Showing all locks held in the system: [ 1935.341822][ T30] 1 lock held by khungtaskd/30: [ 1935.357910][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1935.382270][ T30] 2 locks held by getty/5575: [ 1935.387850][ T30] #0: ffff88803569a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1935.409207][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1935.421867][ T30] 2 locks held by syz.3.6985/27162: [ 1935.441837][ T30] #0: ffffffff8fd03250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1935.464680][ T30] #1: ffffffff8ec00408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1935.487506][ T30] 2 locks held by syz.1.7108/27586: [ 1935.493531][ T30] #0: ffffffff8fd03250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1935.510718][ T30] #1: ffffffff8ec00408 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 1935.542188][ T30] 1 lock held by syz.7.7738/29397: [ 1935.557491][ T30] [ 1935.564257][ T30] ============================================= [ 1935.564257][ T30] [ 1935.582668][ T30] NMI backtrace for cpu 0 [ 1935.587058][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 1935.597553][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1935.607607][ T30] Call Trace: [ 1935.610923][ T30] [ 1935.613853][ T30] dump_stack_lvl+0x241/0x360 [ 1935.618533][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1935.623731][ T30] ? __pfx__printk+0x10/0x10 [ 1935.628324][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1935.633276][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1935.638731][ T30] ? _printk+0xd5/0x120 [ 1935.642895][ T30] ? __pfx__printk+0x10/0x10 [ 1935.647486][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1935.652343][ T30] ? __pfx__printk+0x10/0x10 [ 1935.656928][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1935.661946][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1935.667925][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1935.673912][ T30] watchdog+0xff6/0x1040 [ 1935.678149][ T30] ? watchdog+0x1ea/0x1040 [ 1935.682560][ T30] ? __pfx_watchdog+0x10/0x10 [ 1935.687250][ T30] kthread+0x2f0/0x390 [ 1935.691328][ T30] ? __pfx_watchdog+0x10/0x10 [ 1935.696028][ T30] ? __pfx_kthread+0x10/0x10 [ 1935.700611][ T30] ret_from_fork+0x4b/0x80 [ 1935.705030][ T30] ? __pfx_kthread+0x10/0x10 [ 1935.709643][ T30] ret_from_fork_asm+0x1a/0x30 [ 1935.714450][ T30] [ 1935.718581][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1935.724258][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 1935.741487][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1935.748362][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 1935.758873][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1935.769024][ T30] Call Trace: [ 1935.772307][ T30] [ 1935.775242][ T30] dump_stack_lvl+0x241/0x360 [ 1935.779926][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1935.785144][ T30] ? __pfx__printk+0x10/0x10 [ 1935.789754][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1935.795759][ T30] ? vscnprintf+0x5d/0x90 [ 1935.800101][ T30] panic+0x349/0x880 [ 1935.804012][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1935.810173][ T30] ? __pfx_panic+0x10/0x10 [ 1935.814588][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1935.819963][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1935.825502][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1935.830869][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1935.837021][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1935.843172][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1935.849326][ T30] watchdog+0x1035/0x1040 [ 1935.853663][ T30] ? watchdog+0x1ea/0x1040 [ 1935.858093][ T30] ? __pfx_watchdog+0x10/0x10 [ 1935.862795][ T30] kthread+0x2f0/0x390 [ 1935.866878][ T30] ? __pfx_watchdog+0x10/0x10 [ 1935.871551][ T30] ? __pfx_kthread+0x10/0x10 [ 1935.876219][ T30] ret_from_fork+0x4b/0x80 [ 1935.880658][ T30] ? __pfx_kthread+0x10/0x10 [ 1935.885254][ T30] ret_from_fork_asm+0x1a/0x30 [ 1935.890043][ T30] [ 1935.893356][ T30] Kernel Offset: disabled [ 1935.897681][ T30] Rebooting in 86400 seconds..