last executing test programs: 5m50.565025051s ago: executing program 2 (id=590): socket$inet_sctp(0x2, 0x5, 0x84) msgget$private(0x0, 0x174) msgsnd(0x0, &(0x7f0000001b00)=ANY=[], 0x107, 0x0) gettid() msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x1f00}) 5m48.203684737s ago: executing program 2 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xf6ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x62, 0x5, 0x448, 0x188, 0x0, 0xffffffff, 0x2b8, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @remote, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @port=0x4e21}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00', {}, {}, 0x8}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 5m45.849681s ago: executing program 2 (id=599): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$tipc(0x1e, 0x5, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x37, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000ff00000007426003080000008510000001000000950000000000000018400000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) creat(&(0x7f00000056c0)='./file0\x00', 0x0) socket$inet6(0x10, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) userfaultfd(0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 5m45.054021134s ago: executing program 2 (id=604): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) 5m44.304484406s ago: executing program 2 (id=607): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="f2ad5a12434f7527840a840089f1d6ba1301796452504186e122195494bec1b0105ad9f9945b9e3e4605ff663dc43a05907757effdb7f427c742851cd8cef289265e65e0595240697d3b7403b07d4a0b716505e900000000000000000000000000000000000856b20a8b564aa8b7a1d3a75358a45888818880b0139238007da7ec3d19", @ANYRES16, @ANYRES64], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 5m43.539434664s ago: executing program 2 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x37f, 0x148, 0x110, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket$igmp6(0xa, 0x3, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x2, 0x2000, 0x0, 'queue0\x00', 0x401}) 5m28.363662553s ago: executing program 32 (id=613): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x6, 0x400008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0x37f, 0x148, 0x110, 0x148, 0x1c0, 0x240, 0x240, 0x1c0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6, 0x0, 0x70}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) socket$igmp6(0xa, 0x3, 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000400)={0x2, 0x2000, 0x0, 'queue0\x00', 0x401}) 3m42.088525543s ago: executing program 0 (id=836): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)="8b", 0x1, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000680)="495f3b3dee0000962612c44906d9b7e5cb0f19d0be77d28289ead3a9133ed2e5670275a86f05f9348754177cf35357c2cf03efa1b47db4fbe73e4b5c973652d9e0ed1a84fe25f80f29b02c7a71b309f8eef2de66b2b74e1cfdcc751b21a40b5f64aa20533898fd76a736f169f4cc4c9d477eec008adce4dd4a2487b287377e0d987501c837bec60849e8bc843b7655057c1ecad719dff5aff033358306b4904a6f3dfe324f3d9b792e380e5c0657e663bf452d62314003d320d45f5b32ffb368", 0xc0, r4) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r2, r5, r2}, &(0x7f0000000300)=""/171, 0xab, &(0x7f0000000400)={&(0x7f0000000180)={'sha384-generic\x00'}}) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x2, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r6, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f00000002c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 3m41.23507625s ago: executing program 0 (id=838): r0 = syz_clone3(&(0x7f0000000700)={0x800, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580), {0xc}, &(0x7f00000005c0)=""/190, 0xbe, &(0x7f0000000680)=""/41, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 3m39.718010555s ago: executing program 0 (id=843): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80801) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000516ec7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) 3m38.292686788s ago: executing program 0 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x802, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r2, &(0x7f0000000040)=""/4122, 0x101a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r3, 0x9, 0x0) 3m36.968521412s ago: executing program 0 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x11, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1c1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x7f, 0x1c, &(0x7f00000003c0)=""/28, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xe, 0xc, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r3, r3, r3, r3, r3, r3, r3], &(0x7f00000004c0)=[{0x1, 0x2, 0xe, 0x5}, {0x2, 0x2, 0xb, 0x3}, {0x1, 0x5, 0xe, 0x7}, {0x4, 0x2, 0x2, 0x6}], 0x10, 0x0, @void, @value}, 0x94) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x5d, 0xfffffffffffffffe) utime(&(0x7f0000000140)='./file0\x00', 0x0) r5 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r5, r5}, &(0x7f0000000180)=""/82, 0x52, &(0x7f00000000c0)={&(0x7f0000000100)={'md5-generic\x00'}}) 3m32.777139084s ago: executing program 0 (id=854): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x20000) unshare(0x40000000) 3m17.314661498s ago: executing program 33 (id=854): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x20000) unshare(0x40000000) 2m1.178926151s ago: executing program 4 (id=1014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000007000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r6, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 1m58.055702238s ago: executing program 4 (id=1020): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20003) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000780)={0xfff, 0x8000, 0x7fffffff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd2(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0800050009"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000040)=0x8000, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r9, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xc, 0x21}}}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x44}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) userfaultfd(0x800) 1m49.545898757s ago: executing program 4 (id=1034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000b"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x102, 0x48001050, r5, 0x0) 1m48.540296844s ago: executing program 4 (id=1037): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 1m46.874522206s ago: executing program 4 (id=1039): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x6, 0x0}, 0x3}, {0xa, 0x4, 0x0, @private2, 0x80000000}, r6, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4, @empty}, @in={0x2, 0x4f24, @remote={0xac, 0xc}}}}, 0x118) 1m45.335242772s ago: executing program 4 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001300)=0x1b) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1m44.751713503s ago: executing program 34 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000001300)=0x1b) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0xa, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 22.296960666s ago: executing program 3 (id=1193): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setsig(r2, 0xa, 0x21) ioctl$KVM_GET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee2, &(0x7f00000000c0)=@attr_pmu_init) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) syz_emit_vhci(0x0, 0x7) syz_emit_ethernet(0x5a, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xdea, 0x7, 0x0, 0x0, {}, {0x0, 0x8001}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20}) 20.699200532s ago: executing program 3 (id=1200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x200008d0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x6}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 18.843437114s ago: executing program 5 (id=1202): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x260079e92e484ee) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/65, 0x41) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x12) finit_module(r0, 0x0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000340)='uid_map\x00') read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) 16.46463999s ago: executing program 5 (id=1204): socket$nl_generic(0x10, 0x3, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10) connect$phonet_pipe(r3, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x500) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, 0x0, 0x310) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 16.463843257s ago: executing program 6 (id=1205): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 14.469707231s ago: executing program 5 (id=1206): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) gettid() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000200)={0xa000000a}) finit_module(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x1, 0x2, 0x301, 0x0, 0x0, {}, [@CTA_EXPECT_ID={0x8}]}, 0x1c}}, 0x0) 13.499732991s ago: executing program 3 (id=1208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) recvmmsg(r6, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xffc1) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) 12.084383021s ago: executing program 5 (id=1209): socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xdef0, 0x8000000000000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r3, 0x84, 0x81, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) 12.047050834s ago: executing program 1 (id=1210): set_mempolicy(0x6002, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') read(r4, &(0x7f0000001a00)=""/177, 0xb1) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f0000000400)={@llc={0x1a, 0x102, 0x8, 0x0, 0x9, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, {&(0x7f0000000300)=""/153, 0x99}, &(0x7f00000003c0), 0x8}, 0xa0) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) 12.046484909s ago: executing program 7 (id=1211): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="613697", 0x3}], 0x1}}], 0x1, 0x40000) 11.989397465s ago: executing program 3 (id=1213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file1\x00', 0x0, 0x2804, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 11.951548311s ago: executing program 6 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xf2) fanotify_init(0x200, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x9, 0x270, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x270, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x39, 0x3, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, @remote, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @dev, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xae9cf20772c2f5d8, 0x5, 0xd, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 11.104559447s ago: executing program 1 (id=1215): mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) io_uring_setup(0xdac, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x8, 0x5, 0x380, 0x188, 0xd0, 0xffffffff, 0x230, 0x188, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x15, @multicast2, @loopback, @port, @icmp_id}}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'vlan1\x00', 'geneve1\x00'}, 0x3f5, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @icmp_id}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'syzkaller0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@loopback, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 10.972547349s ago: executing program 7 (id=1216): sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000340)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x404, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f00000001c0)={0xa}) 9.754181114s ago: executing program 5 (id=1217): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000040)=')#\'+3\x00', 0x6) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) signalfd(r1, &(0x7f0000000240)={[0x17f]}, 0x8) sendfile(r6, r5, 0x0, 0x67f) 8.781144948s ago: executing program 6 (id=1218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x150, 0x150, 0x270, 0xf8010000, 0x340, 0x238, 0x238, 0x340, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'veth0_to_team\x00', 'macvlan1\x00', {}, {}, 0x84}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x1, 0x0, 0x0, {0x2}}}, @common=@inet=@sctp={{0x148}, {[0x4e21], [], [0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0xfd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, [], 0x0, 0x2000000}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x1, 0x0, 'snmp\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x30}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r6, &(0x7f0000000180)="bcfc7650b30052add7d3dc73ec8e34729f8604037254d5af17", &(0x7f00000001c0)=""/228, 0x4}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@private=0xa010101, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in=@multicast2, 0x0, 0x3c}, @in6=@remote, {0x0, 0x0, 0xfffffffffffffffe}, {}, {}, 0x0, 0x3503, 0xa, 0x2, 0xfd, 0x2c}, [@coaddr={0x14, 0xe, @in=@broadcast}]}, 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8.779097182s ago: executing program 7 (id=1219): ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 7.041541084s ago: executing program 1 (id=1220): creat(&(0x7f00000001c0)='./file0\x00', 0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x127c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10f, &(0x7f00000004c0)={0x0, 0x932c, 0x80, 0x3}, &(0x7f0000000240), &(0x7f00000000c0)) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000040)={0x8, @pix_mp={0x3, 0x708, 0x0, 0x4, 0x1, [{0x6, 0x1}, {0x0, 0x75f7eb8a}, {0x4, 0x9ea9}, {0x6, 0x1}, {0xffffffdf, 0xffffffff}, {0x5, 0x20}, {0xe5a9, 0x5}, {0x3e92, 0x401}], 0x1f, 0x3, 0x4, 0x0, 0x3}}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.771664171s ago: executing program 6 (id=1221): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, 0x5b0291e5, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f0000001f00)) sendmmsg(r5, &(0x7f0000001cc0), 0x400000000000026, 0x0) 6.771037571s ago: executing program 5 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sysinfo(0x0) mount$fuse(0x0, 0x0, 0x0, 0x40, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x0) 6.723366805s ago: executing program 3 (id=1223): mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xfffffffffffdffff) shutdown(r3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bind$inet6(0xffffffffffffffff, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0xc001, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) 4.690835199s ago: executing program 1 (id=1224): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv2(r3, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(r3, &(0x7f0000000480)={@val={0x0, 0x884c}, @val={0x5, 0x80, 0x7800, 0xc4, 0x40, 0xc}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xb}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @private0}}, 0x42) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 3.4642289s ago: executing program 7 (id=1225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x200000000000008f, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT2(r3, &(0x7f0000000040), 0x6) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x8000, 0x0) 3.315129466s ago: executing program 6 (id=1226): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x108}}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'wg2\x00', 0x2000}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$kcm(0x10, 0x2, 0x0) ioperm(0x9, 0x378, 0xf) sendmsg$kcm(r4, 0x0, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x3) 1.923307666s ago: executing program 7 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00 \x00', @ANYRES16], 0x40}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SOUND_MIXER_READ_CAPS(0xffffffffffffffff, 0x80044dfc, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 1.787409182s ago: executing program 1 (id=1228): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r1, 0x31f}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001bc0), r2) sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f00000004c0)={0x14, r3, 0x5dc11da65e0fe929}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000005c0), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x14, r7, 0xb27}, 0x14}}, 0x0) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r7, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x48}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x50}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x6008044) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r8, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x28004040) 368.783891ms ago: executing program 3 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xf2) fanotify_init(0x200, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000017c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x168, 0x9, 0x270, 0xa, 0x388, 0x250, 0x250, 0x388, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x270, 0x0, {0x0, 0x28e}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x39, 0x3, [@ipv4={'\x00', '\xff\xff', @broadcast}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, @remote, @local, @ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}, @dev, @loopback, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xae9cf20772c2f5d8, 0x5, 0xd, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 349.450408ms ago: executing program 7 (id=1230): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r8, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 55.774696ms ago: executing program 1 (id=1231): r0 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x0, r6, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r6, 0x0, 0x4, 0x0) 0s ago: executing program 6 (id=1232): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x1, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xe, 0x0, 0x3, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa]}) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) close(0x3) kernel console output (not intermixed with test programs): ck-stop error: local softirq work is pending, handler #40!!! [ 69.163800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.172446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.803133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 71.692888][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.730890][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.455951][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 76.545324][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 77.774719][ T6022] Bluetooth: MGMT ver 1.23 [ 78.143544][ T6028] Zero length message leads to an empty skb [ 78.413596][ T46] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 78.479972][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 79.360124][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 79.370970][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.387999][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.405943][ T25] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 79.416158][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.435822][ T25] usb 1-1: config 0 descriptor?? [ 79.576673][ T6042] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 79.583866][ T6042] PKCS7: Only support pkcs7_signedData type [ 80.029794][ T25] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 80.039636][ T25] sony 0003:054C:0268.0001: unknown main item tag 0x7 [ 80.052233][ T25] sony 0003:054C:0268.0001: unknown main item tag 0x5 [ 80.059343][ T25] sony 0003:054C:0268.0001: unknown global tag 0xe [ 80.151603][ T25] sony 0003:054C:0268.0001: item 0 2 1 14 parsing failed [ 80.167474][ T25] sony 0003:054C:0268.0001: parse failed [ 80.174295][ T25] sony 0003:054C:0268.0001: probe with driver sony failed with error -22 [ 80.335464][ T25] usb 1-1: USB disconnect, device number 2 [ 82.347305][ T58] cfg80211: failed to load regulatory.db [ 83.185488][ T6058] block device autoloading is deprecated and will be removed. [ 83.236131][ T6058] syz.2.44: attempt to access beyond end of device [ 83.236131][ T6058] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.047971][ T6076] netlink: 165 bytes leftover after parsing attributes in process `syz.2.48'. [ 85.490051][ T46] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.585813][ C1] Unknown status report in ack skb [ 85.662901][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.688176][ T46] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.742936][ T46] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.771241][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.816530][ T46] usb 3-1: config 0 descriptor?? [ 87.269573][ T46] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 87.305532][ T46] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.600716][ T5908] usb 3-1: USB disconnect, device number 2 [ 91.238060][ T6149] capability: warning: `syz.1.66' uses deprecated v2 capabilities in a way that may be insecure [ 92.385927][ T6165] bridge1: entered allmulticast mode [ 94.155212][ T6176] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 95.150037][ T58] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.336041][ T5830] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 95.346846][ T5830] CPU: 1 UID: 0 PID: 5830 Comm: kworker/u9:5 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 95.347823][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 95.357721][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.357765][ T5830] Workqueue: hci0 hci_rx_work [ 95.357828][ T5830] Call Trace: [ 95.357839][ T5830] [ 95.357850][ T5830] dump_stack_lvl+0x241/0x360 [ 95.357883][ T5830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.357905][ T5830] ? __pfx__printk+0x10/0x10 [ 95.357932][ T5830] ? __kmalloc_cache_noprof+0x243/0x390 [ 95.357952][ T5830] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 95.357981][ T5830] sysfs_create_dir_ns+0x2ce/0x3a0 [ 95.376508][ T29] audit: type=1326 audit(1733619386.007:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6201 comm="syz.0.83" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0b8b7fed9 code=0x0 [ 95.377819][ T5830] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 95.377864][ T5830] kobject_add_internal+0x435/0x8d0 [ 95.377893][ T5830] kobject_add+0x152/0x220 [ 95.377920][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 95.377946][ T5830] ? device_add+0x3e7/0xbf0 [ 95.377968][ T5830] ? __pfx_kobject_add+0x10/0x10 [ 95.377996][ T5830] ? _raw_spin_unlock+0x28/0x50 [ 95.378023][ T5830] ? get_device_parent+0x165/0x410 [ 95.378046][ T5830] device_add+0x4e5/0xbf0 [ 95.378074][ T5830] hci_conn_add_sysfs+0xe8/0x200 [ 95.378104][ T5830] le_conn_complete_evt+0xc9f/0x12e0 [ 95.378135][ T5830] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 95.378157][ T5830] ? __mutex_unlock_slowpath+0x21e/0x790 [ 95.378185][ T5830] ? __pfx___mutex_lock+0x10/0x10 [ 95.378208][ T5830] ? skb_pull_data+0x112/0x230 [ 95.378237][ T5830] hci_le_conn_complete_evt+0x18c/0x420 [ 95.378265][ T5830] hci_event_packet+0xa55/0x1540 [ 95.378296][ T5830] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 95.378322][ T5830] ? __pfx_hci_event_packet+0x10/0x10 [ 95.378348][ T5830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 95.378380][ T5830] ? hci_send_to_monitor+0xd8/0x7f0 [ 95.542278][ T5830] ? kcov_remote_start+0x97/0x7d0 [ 95.547320][ T5830] hci_rx_work+0x3f3/0xdb0 [ 95.551747][ T5830] ? process_scheduled_works+0x976/0x1840 [ 95.557475][ T5830] process_scheduled_works+0xa66/0x1840 [ 95.563050][ T5830] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.569040][ T5830] ? assign_work+0x364/0x3d0 [ 95.573638][ T5830] worker_thread+0x870/0xd30 [ 95.578244][ T5830] ? __kthread_parkme+0x169/0x1d0 [ 95.583271][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 95.588382][ T5830] kthread+0x2f0/0x390 [ 95.592457][ T5830] ? __pfx_worker_thread+0x10/0x10 [ 95.597567][ T5830] ? __pfx_kthread+0x10/0x10 [ 95.602166][ T5830] ret_from_fork+0x4b/0x80 [ 95.606578][ T5830] ? __pfx_kthread+0x10/0x10 [ 95.611177][ T5830] ret_from_fork_asm+0x1a/0x30 [ 95.615956][ T5830] [ 95.623873][ T5830] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 95.637946][ T5830] Bluetooth: hci0: failed to register connection device [ 95.694979][ T58] usb 5-1: config 0 has an invalid descriptor of length 123, skipping remainder of the config [ 95.716293][ T58] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.725925][ T58] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 95.735405][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.758735][ T58] usb 5-1: config 0 descriptor?? [ 96.086051][ T58] usb 5-1: string descriptor 0 read error: -71 [ 96.106753][ T58] usb 5-1: USB disconnect, device number 2 [ 97.199728][ T6217] bond1: entered promiscuous mode [ 97.941805][ T6217] bond1: entered allmulticast mode [ 98.054815][ T6217] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.123335][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.4.85'. [ 98.185737][ T6222] tipc: Invalid UDP bearer configuration [ 98.185788][ T6222] tipc: Enabling of bearer rejected, failed to enable media [ 98.430066][ T5905] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.610014][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 98.648209][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.677074][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.713007][ T5905] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.744364][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.780095][ T5905] usb 5-1: Product: syz [ 98.796520][ T5905] usb 5-1: Manufacturer: syz [ 98.824742][ T5905] usb 5-1: SerialNumber: syz [ 99.529542][ T5905] usb 5-1: 0:2 : does not exist [ 99.588131][ T5905] usb 5-1: USB disconnect, device number 3 [ 99.911591][ T5827] Bluetooth: hci4: Malformed Event: 0x02 [ 99.952842][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.660158][ T5908] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 100.985901][ T5908] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 101.172536][ T5908] usb 2-1: config 0 has no interface number 0 [ 101.196928][ T5908] usb 2-1: config 0 interface 128 has no altsetting 0 [ 101.238630][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.262890][ T5908] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 101.279939][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.308949][ T5908] usb 2-1: Product: syz [ 101.333932][ T5908] usb 2-1: Manufacturer: syz [ 101.338598][ T5908] usb 2-1: SerialNumber: syz [ 101.380592][ T5908] usb 2-1: config 0 descriptor?? [ 101.465226][ T6273] evm: overlay not supported [ 101.515656][ T5908] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 101.524216][ T5908] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 101.533825][ T5908] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 101.665419][ T6263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.699737][ T6263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.736558][ T5908] usb 2-1: USB disconnect, device number 2 [ 102.250279][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 103.078897][ T6286] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.207013][ T29] audit: type=1326 audit(1733619395.877:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207255][ T29] audit: type=1326 audit(1733619395.877:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207370][ T29] audit: type=1326 audit(1733619395.877:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207460][ T29] audit: type=1326 audit(1733619395.877:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207571][ T29] audit: type=1326 audit(1733619395.877:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207676][ T29] audit: type=1326 audit(1733619395.877:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207808][ T29] audit: type=1326 audit(1733619395.877:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207927][ T29] audit: type=1326 audit(1733619395.877:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.207964][ T29] audit: type=1326 audit(1733619395.877:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 105.208952][ T29] audit: type=1326 audit(1733619395.877:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6301 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x7ffc0000 [ 106.189197][ T6311] delete_channel: no stack [ 106.265386][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.348132][ C0] vkms_vblank_simulate: vblank timer overrun [ 106.450054][ T5908] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.608451][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 106.620353][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.631692][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.651336][ T5908] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 106.679940][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.701355][ T5908] usb 5-1: config 0 descriptor?? [ 107.130339][ T5908] smartjoyplus 0003:6666:8804.0003: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.4-1/input0 [ 107.142235][ T5908] smartjoyplus 0003:6666:8804.0003: Force feedback for SmartJoy PLUS PS2/USB adapter [ 107.994313][ T5905] usb 5-1: USB disconnect, device number 4 [ 108.206403][ T6332] PKCS7: Unknown OID: [4] 2.19.13055.170809666(bad) [ 108.213544][ T6332] PKCS7: Only support pkcs7_signedData type [ 108.948574][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 111.184340][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 111.361501][ T6354] binder: 6341:6354 ioctl c0306201 20000780 returned -14 [ 111.458084][ T6362] input: syz1 as /devices/virtual/input/input6 [ 116.195384][ T6371] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 117.559981][ T5872] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 117.735564][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.767387][ T5872] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.845666][ T5872] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.855069][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.697509][ T5872] usb 5-1: config 0 descriptor?? [ 119.759797][ T5872] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 120.438299][ T5872] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 120.463886][ T5872] usb 5-1: USB disconnect, device number 5 [ 120.521805][ T6419] xt_CT: No such helper "snmp_trap" [ 126.169993][ T6468] Cannot find set identified by id 0 to match [ 127.381115][ T6483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.079581][ T6485] proc: Bad value for 'gid' [ 128.314928][ T6498] netlink: 'syz.1.160': attribute type 10 has an invalid length. [ 128.530663][ T5908] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 128.652272][ T6498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.710019][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 128.727778][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.757580][ T5908] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 129.386825][ T5908] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 129.396205][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.405386][ T5908] usb 4-1: Product: syz [ 129.409597][ T5908] usb 4-1: Manufacturer: syz [ 129.414911][ T5908] usb 4-1: SerialNumber: syz [ 129.432134][ T5908] usb 4-1: config 0 descriptor?? [ 129.442803][ T6493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.470602][ T5908] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.043335][ T6519] ======================================================= [ 131.043335][ T6519] WARNING: The mand mount option has been deprecated and [ 131.043335][ T6519] and is ignored by this kernel. Remove the mand [ 131.043335][ T6519] option from the mount to silence this warning. [ 131.043335][ T6519] ======================================================= [ 131.078801][ T6519] fuse: Bad value for 'fd' [ 131.531665][ T5908] usb 4-1: USB disconnect, device number 3 [ 133.250840][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.258144][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.840483][ T6544] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 134.925505][ T6544] kvm: pic: single mode not supported [ 134.928147][ T6544] kvm: pic: non byte read [ 135.009347][ T6544] kvm: pic: level sensitive irq not supported [ 135.009433][ T6544] kvm: pic: non byte read [ 135.110189][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 135.831666][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.849196][ T5872] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 135.887989][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.972059][ T5872] usb 2-1: config 0 descriptor?? [ 136.027257][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 137.296878][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 137.305990][ T6572] fuse: Bad value for 'fd' [ 137.756588][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 137.783080][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 137.896405][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 138.216558][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 138.224190][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 139.365828][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 139.401364][ T6593] 9p: Unknown Cache mode or invalid value l [ 139.444136][ T5872] pwc: recv_control_msg error -71 req 02 val 2100 [ 139.451594][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 139.459982][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 139.468708][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 139.475814][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 139.495941][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 139.549575][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 139.550011][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 139.560228][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 139.580737][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 139.612698][ T5872] pwc: Registered as video103. [ 139.627394][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 139.658869][ T5872] usb 2-1: USB disconnect, device number 3 [ 140.013467][ T6603] xt_TPROXY: Can be used only with -p tcp or -p udp [ 143.154281][ T6641] fuse: Bad value for 'fd' [ 143.651698][ T6638] vxcan2: entered allmulticast mode [ 144.457228][ T6652] process 'syz.1.208' launched './file0' with NULL argv: empty string added [ 145.398479][ T5908] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.812908][ T5908] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.837611][ T5908] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.856290][ T5908] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.859685][ T6670] Attempt to restore checkpoint with obsolete wellknown handles [ 145.897034][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.933579][ T6654] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.959280][ T5908] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 146.648659][ T5908] usb 1-1: USB disconnect, device number 3 [ 146.779983][ T5870] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 147.209593][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 147.209636][ T29] audit: type=1326 audit(1733619437.877:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6653 comm="syz.0.210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0b8b7fed9 code=0x0 [ 147.258059][ T6688] Option 'TX¼÷Æ®€' to dns_resolver key: bad/missing value [ 147.452336][ T6691] warning: `syz.2.221' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 147.773984][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.862984][ T5870] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 147.871178][ T5870] usb 5-1: config 1 interface 0 has no altsetting 0 [ 147.879526][ T5870] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 147.888948][ T5870] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 147.897191][ T5870] usb 5-1: Product: syz [ 147.901414][ T5870] usb 5-1: Manufacturer: syz [ 148.138740][ T5870] usb 5-1: SerialNumber: syz [ 148.627103][ T6701] fuse: Bad value for 'fd' [ 149.063226][ T5870] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 149.671158][ T5870] usb 5-1: USB disconnect, device number 6 [ 149.711763][ T5870] usblp0: removed [ 150.586852][ T5908] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 151.204220][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 151.369938][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.228'. [ 151.789235][ T5908] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 151.800601][ T5908] usb 4-1: config 0 has no interface number 0 [ 153.368782][ T6730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 153.722994][ T5908] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.754978][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.763124][ T5908] usb 4-1: Product: syz [ 153.767323][ T5908] usb 4-1: Manufacturer: syz [ 153.772343][ T5908] usb 4-1: SerialNumber: syz [ 153.827726][ T6724] kvm: kvm [6719]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 153.874370][ T6724] kvm: kvm [6719]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x250000f7ff [ 153.878228][ T5908] usb 4-1: config 0 descriptor?? [ 153.930604][ T6724] kvm: kvm [6719]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x250000ffff [ 153.970007][ T5908] usb 4-1: can't set config #0, error -71 [ 153.980235][ T5908] usb 4-1: USB disconnect, device number 4 [ 155.590145][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.811416][ T5908] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 155.901425][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 156.047321][ T5870] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 156.108920][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.250406][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.277757][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.331726][ T5870] usb 3-1: Product: syz [ 156.338852][ T5870] usb 3-1: Manufacturer: syz [ 156.344279][ T5870] usb 3-1: SerialNumber: syz [ 156.354096][ T5870] usb 3-1: config 0 descriptor?? [ 156.361519][ T5908] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.381492][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.390573][ T5908] usb 4-1: SerialNumber: syz [ 156.570724][ T5870] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 157.562428][ T5908] usb 4-1: 0:2 : does not exist [ 157.567416][ T5908] usb 4-1: unit 255 not found! [ 157.582069][ T5908] usb 4-1: USB disconnect, device number 5 [ 157.658506][ T1331] usb 3-1: Failed to submit usb control message: -110 [ 157.690265][ T1331] usb 3-1: unable to send the bmi data to the device: -110 [ 157.697642][ T1331] usb 3-1: unable to get target info from device [ 157.724239][ T1331] usb 3-1: could not get target info (-110) [ 157.730804][ T1331] usb 3-1: could not probe fw (-110) [ 158.097852][ T5905] usb 3-1: USB disconnect, device number 3 [ 158.518492][ T29] audit: type=1804 audit(1733619449.187:18): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.247" name="/newroot/46/bus/file0" dev="overlay" ino=280 res=1 errno=0 [ 158.651204][ T6186] udevd[6186]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.802145][ T6784] NILFS (loop4): device size too small [ 165.479690][ T5827] Bluetooth: hci4: Malformed Event: 0x02 [ 165.612045][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 166.552414][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.570119][ T8] usb 2-1: New USB device found, idVendor=04d5, idProduct=0001, bcdDevice= 0.00 [ 166.592133][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.851685][ T8] usb 2-1: config 0 descriptor?? [ 167.231652][ T8] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 168.374184][ T5870] usb 2-1: USB disconnect, device number 4 [ 170.191096][ T5905] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 170.351286][ T5905] usb 4-1: Using ep0 maxpacket: 16 [ 170.371116][ T5905] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 170.380816][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.388850][ T5905] usb 4-1: Product: syz [ 170.394373][ T5905] usb 4-1: Manufacturer: syz [ 170.399022][ T5905] usb 4-1: SerialNumber: syz [ 170.431377][ T5905] r8152-cfgselector 4-1: Unknown version 0x0000 [ 170.445896][ T5905] r8152-cfgselector 4-1: config 0 descriptor?? [ 170.579392][ T5870] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.873516][ T5870] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.016117][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.382641][ T25] r8152-cfgselector 4-1: USB disconnect, device number 6 [ 171.408561][ T5870] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.418739][ T5870] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.458081][ T5870] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.469624][ T5870] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.488619][ T5870] usb 2-1: Manufacturer: syz [ 171.606667][ T5870] usb 2-1: config 0 descriptor?? [ 172.816722][ T5870] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 172.833233][ T5870] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 172.913480][ T5870] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 173.435477][ T25] usb 2-1: USB disconnect, device number 5 [ 173.463200][ T6946] netlink: 'syz.3.288': attribute type 1 has an invalid length. [ 173.616134][ T6946] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 173.674471][ T6948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.700595][ T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 173.862603][ T63] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.851946][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.872792][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.895530][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.019071][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 176.136909][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.212449][ T6975] 9pnet_fd: Insufficient options for proto=fd [ 176.219450][ T25] usb 4-1: config 0 descriptor?? [ 177.198893][ T25] isku 0003:1E7D:319C.0006: item fetching failed at offset 3/7 [ 177.207188][ T25] isku 0003:1E7D:319C.0006: parse failed [ 177.213107][ T25] isku 0003:1E7D:319C.0006: probe with driver isku failed with error -22 [ 179.129005][ T25] usb 4-1: USB disconnect, device number 7 [ 180.781681][ T7010] netlink: 72 bytes leftover after parsing attributes in process `syz.3.306'. [ 181.176554][ T7016] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 181.190121][ T5871] IPVS: starting estimator thread 0... [ 181.742174][ T7022] IPVS: using max 26 ests per chain, 62400 per kthread [ 182.339898][ T7024] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 182.366687][ T7024] CIFS mount error: No usable UNC path provided in device string! [ 182.366687][ T7024] [ 182.379014][ T7024] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 185.968000][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.023395][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.147464][ T7104] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 186.151587][ T7123] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.154373][ T7104] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 186.238309][ T7104] vhci_hcd vhci_hcd.0: Device attached [ 186.391530][ T7104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.497281][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.529993][ T25] vhci_hcd: vhci_device speed not set [ 186.569283][ T7104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.757265][ T25] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 187.074041][ T7116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 187.237067][ T7116] vhci_hcd vhci_hcd.0: port 0 already used [ 187.349203][ T7136] hsr0: entered promiscuous mode [ 187.480595][ T7136] hsr0: left promiscuous mode [ 188.097228][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 188.104022][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 188.111476][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 188.119717][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 188.240723][ T7113] vhci_hcd: connection reset by peer [ 188.296745][ T991] vhci_hcd: stop threads [ 188.309018][ T991] vhci_hcd: release socket [ 188.359302][ T991] vhci_hcd: disconnect device [ 188.752047][ T7160] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 192.451670][ T25] vhci_hcd: vhci_device speed not set [ 193.828743][ T7208] tipc: Failed to remove unknown binding: 66,2,2/0:2583178686/2583178690 [ 194.736028][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.743220][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.442158][ T7228] cgroup: No subsys list or none specified [ 195.780606][ T29] audit: type=1326 audit(1733619486.107:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 195.829697][ T29] audit: type=1326 audit(1733619486.107:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 195.883214][ T29] audit: type=1326 audit(1733619486.117:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 195.944473][ T29] audit: type=1326 audit(1733619486.117:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 195.966458][ T29] audit: type=1326 audit(1733619486.117:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 195.988039][ T29] audit: type=1326 audit(1733619486.117:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 196.009447][ T29] audit: type=1326 audit(1733619486.117:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 196.031518][ T29] audit: type=1326 audit(1733619486.117:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 196.053669][ T29] audit: type=1326 audit(1733619486.117:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 196.075562][ T29] audit: type=1326 audit(1733619486.117:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7221 comm="syz.1.346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4ed7fed9 code=0x7ffc0000 [ 201.411325][ T7295] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.570249][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 202.837511][ T5870] usb 3-1: config 0 has no interfaces? [ 203.020656][ T5870] usb 3-1: language id specifier not provided by device, defaulting to English [ 203.212596][ T7316] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 203.223796][ T5870] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 203.238254][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.246574][ T5870] usb 3-1: Product: syz [ 203.250940][ T5870] usb 3-1: Manufacturer: é°ï»¥å‚–ᅅ㞴岼먊ߧᚨ筨鴴ã®î¡ˆë ƒèˆŠé™Œç¬Ù¶å¯¥æ·´é§–켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱 [ 203.299582][ T5870] usb 3-1: SerialNumber: syz [ 203.317621][ T5870] usb 3-1: config 0 descriptor?? [ 203.362507][ T7316] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 203.541613][ T5908] usb 3-1: USB disconnect, device number 4 [ 205.033789][ T7342] netlink: 'syz.2.377': attribute type 32 has an invalid length. [ 205.139393][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 205.860296][ T7342] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 210.080572][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 210.431461][ T5870] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.445578][ T5870] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.460301][ T5870] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.490008][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.498065][ T5870] usb 3-1: SerialNumber: syz [ 210.586714][ T7398] vlan2: entered promiscuous mode [ 210.613679][ T7398] bond0: entered promiscuous mode [ 210.636014][ T7398] bond_slave_0: entered promiscuous mode [ 210.650378][ T7398] bond_slave_1: entered promiscuous mode [ 210.674375][ T7398] bond0: left promiscuous mode [ 210.690030][ T7398] bond_slave_0: left promiscuous mode [ 210.702596][ T7398] bond_slave_1: left promiscuous mode [ 211.235393][ T5870] usb 3-1: 0:2 : does not exist [ 211.465422][ T5899] usb 3-1: USB disconnect, device number 5 [ 211.669616][ T7408] pim6reg1: entered promiscuous mode [ 211.712117][ T7408] pim6reg1: entered allmulticast mode [ 212.064203][ T7408] syzkaller0: entered allmulticast mode [ 215.368068][ T7442] usb usb8: usbfs: process 7442 (syz.0.402) did not claim interface 0 before use [ 217.041461][ T7455] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.826606][ T7461] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.835830][ T7461] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.846281][ T7461] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.855819][ T7461] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.887253][ T7461] team0: Port device vxlan0 added [ 217.915139][ T7462] 9pnet: bogus RREAD count (69 > 41) [ 217.939422][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 217.939441][ T29] audit: type=1800 audit(1733619508.607:31): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.409" name="/" dev="9p" ino=2 res=0 errno=0 [ 219.546869][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 219.700009][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 219.922720][ T8] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 219.932101][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.943160][ T8] usb 2-1: config 0 descriptor?? [ 221.142118][ T8] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 221.252918][ T8] gspca_sunplus: reg_w_riv err -71 [ 221.259400][ T8] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 221.273316][ T8] usb 2-1: USB disconnect, device number 6 [ 224.460081][ T29] audit: type=1800 audit(1733619515.127:32): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.425" name="/" dev="9p" ino=2 res=0 errno=0 [ 224.538317][ T7515] syz.0.425 (7515) used greatest stack depth: 17232 bytes left [ 224.933536][ T7524] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 226.160424][ T7536] syz.1.429: attempt to access beyond end of device [ 226.160424][ T7536] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 226.174082][ T7536] gfs2: error -5 reading superblock [ 231.829973][ T5908] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 232.150076][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 232.183158][ T5908] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 232.210424][ T5908] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42119, setting to 1024 [ 232.233628][ T5908] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 232.246207][ T7599] netlink: 168 bytes leftover after parsing attributes in process `syz.4.451'. [ 232.255806][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.306041][ T7588] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 232.321120][ T5908] hub 2-1:4.0: USB hub found [ 232.427575][ T29] audit: type=1326 audit(1733619523.097:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7601 comm="syz.0.448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe0b8b7fed9 code=0x0 [ 232.522812][ T7609] capability: warning: `syz.0.448' uses 32-bit capabilities (legacy support in use) [ 232.542881][ T5908] hub 2-1:4.0: 7 ports detected [ 233.214435][ T5908] hub 2-1:4.0: config failed, can't get hub status (err -5) [ 233.268011][ T5908] usb 2-1: USB disconnect, device number 7 [ 233.506704][ T7619] pim6reg: entered allmulticast mode [ 233.515178][ T7619] pim6reg: left allmulticast mode [ 236.650180][ T29] audit: type=1326 audit(1733619527.247:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.3.460" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x0 [ 239.186490][ T7679] QAT: failed to copy from user cfg_data. [ 243.901723][ T7716] binder: 7711:7716 ioctl 4018620d 0 returned -22 [ 244.374696][ T7719] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.499284][ T7729] syz.4.480 (7729): drop_caches: 2 [ 246.312463][ T7733] trusted_key: syz.2.479 sent an empty control message without MSG_MORE. [ 248.224540][ T7746] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 248.236293][ T7746] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.315264][ T7746] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 248.333838][ T7746] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 248.387177][ T7746] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 248.683501][ T7746] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 248.812956][ T7746] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 249.092240][ T7746] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 249.098848][ T7746] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 249.159137][ T7746] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 249.184232][ T7746] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 249.209818][ T7746] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 250.252015][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 250.415796][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 250.559987][ T5908] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 250.711769][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.722931][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 250.778848][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 250.788554][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.814504][ T5908] usb 2-1: config 0 descriptor?? [ 251.134851][ T5132] Bluetooth: hci3: command 0x0406 tx timeout [ 251.207288][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 251.220971][ T5132] Bluetooth: hci4: command 0x0405 tx timeout [ 252.169009][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 253.163132][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 253.169258][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 253.175563][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 253.221965][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 253.337258][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 253.349105][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 253.928301][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 254.200717][ T5908] pwc: recv_control_msg error -71 req 04 val 1000 [ 254.207852][ T5908] pwc: recv_control_msg error -71 req 04 val 1300 [ 254.214934][ T5908] pwc: recv_control_msg error -71 req 04 val 1400 [ 254.222073][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 254.229092][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 254.595860][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 254.705686][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 255.235909][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 255.260106][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 255.372765][ T5132] Bluetooth: hci4: command 0x0405 tx timeout [ 255.467394][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 255.610026][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 256.253561][ T7828] virtio-fs: tag <(null)> not found [ 256.585757][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.592519][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.248730][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 257.256258][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 257.263470][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 257.323865][ T5908] pwc: Registered as video103. [ 257.346267][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 258.450970][ T7842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.509'. [ 258.460094][ T7842] netlink: 'syz.1.509': attribute type 2 has an invalid length. [ 258.468167][ T7842] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 258.475900][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 259.108502][ T5908] usb 2-1: USB disconnect, device number 8 [ 259.158383][ T7848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 259.159999][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 260.463980][ T8] usb 1-1: device not accepting address 4, error -71 [ 262.340150][ T5899] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 262.542710][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.672804][ T5899] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.832570][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.882431][ T5899] usb 2-1: config 0 descriptor?? [ 262.925180][ T5899] pwc: Askey VC010 type 2 USB webcam detected. [ 263.306608][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.316399][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.330809][ T5899] pwc: recv_control_msg error -32 req 02 val 2b00 [ 263.340593][ T5899] pwc: recv_control_msg error -32 req 02 val 2700 [ 263.355817][ T5899] pwc: recv_control_msg error -32 req 02 val 2c00 [ 263.413812][ T5899] pwc: recv_control_msg error -32 req 04 val 1000 [ 263.431666][ T5899] pwc: recv_control_msg error -32 req 04 val 1300 [ 263.448204][ T5899] pwc: recv_control_msg error -32 req 04 val 1400 [ 263.466709][ T5899] pwc: recv_control_msg error -32 req 02 val 2000 [ 263.489360][ T5899] pwc: recv_control_msg error -32 req 02 val 2100 [ 263.517327][ T5899] pwc: recv_control_msg error -32 req 04 val 1500 [ 263.601521][ T5899] pwc: recv_control_msg error -32 req 02 val 2500 [ 263.710590][ T5899] pwc: recv_control_msg error -32 req 02 val 2400 [ 264.734714][ T5899] pwc: recv_control_msg error -71 req 02 val 2900 [ 264.746268][ T5899] pwc: recv_control_msg error -71 req 02 val 2800 [ 264.885678][ T5899] pwc: recv_control_msg error -71 req 04 val 1100 [ 264.944635][ T5899] pwc: recv_control_msg error -71 req 04 val 1200 [ 265.045645][ T5899] pwc: Registered as video103. [ 265.071767][ T7907] x_tables: ip_tables: ah match: only valid for protocol 51 [ 265.075249][ T5899] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 265.310267][ T5899] usb 2-1: USB disconnect, device number 9 [ 268.328546][ T7943] xt_nat: multiple ranges no longer supported [ 268.944741][ T5908] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 269.994593][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 270.004787][ T5908] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 270.014103][ T5908] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 270.028866][ T5908] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 270.056095][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.015950][ T5908] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 271.026616][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 271.040866][ T5908] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 271.050038][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.121903][ T5908] usb 1-1: config 0 descriptor?? [ 271.960077][ T5908] usb 1-1: can't set config #0, error -71 [ 271.967259][ T5908] usb 1-1: USB disconnect, device number 6 [ 274.976668][ T7993] binder: BINDER_SET_CONTEXT_MGR already set [ 274.983314][ T7993] binder: 7992:7993 ioctl 4018620d 20000040 returned -16 [ 276.651090][ T29] audit: type=1804 audit(1733619567.317:35): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.554" name="/newroot/116/bus/file1" dev="overlay" ino=692 res=1 errno=0 [ 276.831751][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.204147][ T8022] IPVS: sync thread started: state = MASTER, mcast_ifn = wg1, syncid = 262145, id = 0 [ 279.830892][ T5908] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 279.950559][ T8038] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 279.959608][ T8038] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 279.969259][ T8038] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 279.977290][ T8038] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 280.569980][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 280.600019][ T5908] usb 4-1: device descriptor read/all, error -71 [ 280.757106][ T25] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 281.040916][ T25] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.268771][ T8045] vlan2: entered promiscuous mode [ 281.276755][ T8045] vlan2: entered allmulticast mode [ 281.282402][ T8045] hsr_slave_1: entered allmulticast mode [ 281.446816][ T8053] netlink: 'syz.0.568': attribute type 1 has an invalid length. [ 281.470116][ T8053] netlink: 224 bytes leftover after parsing attributes in process `syz.0.568'. [ 281.502571][ T25] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 281.740273][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 281.782421][ T25] usb 3-1: no configurations [ 281.791210][ T25] usb 3-1: can't read configurations, error -22 [ 283.550723][ T8075] input: syz0 as /devices/virtual/input/input13 [ 284.727470][ T8075] netlink: 'syz.4.577': attribute type 1 has an invalid length. [ 284.994276][ T8075] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.577'. [ 286.040128][ T8099] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 288.383682][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.587'. [ 291.156602][ T8132] ISOFS: Unable to identify CD-ROM format. [ 291.790087][ T8133] veth1_to_bridge: entered promiscuous mode [ 291.796707][ T8133] veth1_to_bridge: entered allmulticast mode [ 291.904333][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.939160][ T8135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.950132][ T8138] input: syz1 as /devices/virtual/input/input14 [ 292.585224][ T8149] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 295.133355][ T5132] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 295.942700][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.607'. [ 296.587106][ T8198] syz.4.609: attempt to access beyond end of device [ 296.587106][ T8198] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 296.710446][ T8210] xt_cgroup: xt_cgroup: no path or classid specified [ 297.204078][ T5836] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 297.223105][ T5836] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 297.248086][ T5132] Bluetooth: hci1: command 0x0406 tx timeout [ 298.420884][ T8216] [U] ^C [ 298.603429][ T5132] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 299.876792][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 299.884470][ T5836] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 299.893239][ T5132] Bluetooth: hci0: command 0x0406 tx timeout [ 302.692255][ T5132] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 302.854080][ T5132] Bluetooth: hci3: Injecting HCI hardware error event [ 302.863921][ T5132] Bluetooth: hci3: hardware error 0x00 [ 303.005647][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 303.263571][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.282098][ T5836] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 303.288239][ T5836] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 303.298109][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.058196][ T8271] team_slave_0: entered promiscuous mode [ 304.065753][ T8271] team_slave_1: entered promiscuous mode [ 304.082675][ T8271] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 304.153344][ T8271] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 304.418405][ T8273] bond0: entered promiscuous mode [ 304.451604][ T8273] bond_slave_0: entered promiscuous mode [ 304.502076][ T8273] bond_slave_1: entered promiscuous mode [ 304.534084][ T8273] macvlan2: entered promiscuous mode [ 304.554652][ T8273] team0: entered promiscuous mode [ 304.594020][ T8275] kvm: kvm [8274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x6d00000800 [ 304.644381][ T8275] kvm: kvm [8274]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x14500000800 [ 304.890742][ T5132] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 306.970212][ T5132] Bluetooth: hci4: command 0x0405 tx timeout [ 307.242282][ T5836] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 307.249015][ T5836] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 308.599964][ T29] audit: type=1326 audit(1733619599.257:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8336 comm="syz.4.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b0797fed9 code=0x0 [ 311.756611][ T8375] netlink: 772 bytes leftover after parsing attributes in process `syz.0.644'. [ 313.532210][ T8381] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 314.830128][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.890356][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.910301][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.937188][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.945966][ T5827] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 314.954097][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.070695][ T25] IPVS: starting estimator thread 0... [ 315.963398][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.318181][ T8405] IPVS: using max 22 ests per chain, 52800 per kthread [ 316.422096][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.481298][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.527016][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.535063][ T5132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 316.548933][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.810242][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 316.995261][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 317.263557][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 317.298130][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 317.610336][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.619922][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.630036][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.649456][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.460510][ T25] usb 5-1: Product: syz [ 318.465123][ T25] usb 5-1: Manufacturer: syz [ 318.470030][ T25] usb 5-1: SerialNumber: syz [ 318.601104][ T8401] chnl_net:caif_netlink_parms(): no params data found [ 318.675476][ T5827] Bluetooth: hci5: command tx timeout [ 319.997600][ T25] usb 5-1: can't set config #1, error -71 [ 320.005757][ T25] usb 5-1: USB disconnect, device number 7 [ 320.746659][ T5827] Bluetooth: hci5: command tx timeout [ 321.045830][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.220643][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.229919][ T8401] bridge_slave_0: entered allmulticast mode [ 321.365176][ T8401] bridge_slave_0: entered promiscuous mode [ 322.464355][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.650113][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.657544][ T8401] bridge_slave_1: entered allmulticast mode [ 322.683395][ T8401] bridge_slave_1: entered promiscuous mode [ 322.810247][ T5827] Bluetooth: hci5: command tx timeout [ 324.930101][ T5827] Bluetooth: hci5: command tx timeout [ 325.254893][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.319632][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.452565][ T8492] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 326.911571][ T8401] team0: Port device team_slave_0 added [ 327.011188][ T8401] team0: Port device team_slave_1 added [ 328.746183][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.788786][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.881092][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.894702][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.902907][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.929482][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.109626][ T8401] hsr_slave_0: entered promiscuous mode [ 329.220775][ T8401] hsr_slave_1: entered promiscuous mode [ 330.508634][ T8401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.650062][ T8401] Cannot create hsr debugfs directory [ 331.792297][ T8546] syz.4.680 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 333.396184][ T8401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.511458][ T8401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 333.682563][ T8401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.072055][ T8401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 335.336925][ T8623] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 336.023219][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.037862][ T8401] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.060480][ T8401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.071219][ T8401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.174065][ T6146] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.181285][ T6146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.699170][ T6146] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.706709][ T6146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.827824][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.954542][ T29] audit: type=1400 audit(1733619629.607:37): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7082 comm="kworker/u8:16" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 339.251952][ T29] audit: type=1400 audit(1733619629.837:38): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7082 comm="kworker/u8:16" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 339.497865][ T29] audit: type=1400 audit(1733619630.057:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24 comm="ksoftirqd/1" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 340.259948][ T29] audit: type=1400 audit(1733619630.487:40): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8650 comm="syz.0.693" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 340.730526][ T29] audit: type=1400 audit(1733619631.407:41): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24 comm="ksoftirqd/1" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 342.082368][ T8401] veth0_vlan: entered promiscuous mode [ 342.117957][ T8401] veth1_vlan: entered promiscuous mode [ 342.287523][ T8401] veth0_macvtap: entered promiscuous mode [ 342.297939][ T8401] veth1_macvtap: entered promiscuous mode [ 343.202609][ T29] audit: type=1400 audit(1733619633.167:42): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8671 comm="syz.4.699" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 344.871372][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.909897][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.919770][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.293422][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.309975][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.321087][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.332570][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.343821][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.354299][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.375893][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.939227][ T29] audit: type=1400 audit(1733619636.607:43): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8679 comm="syz.4.700" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 346.040758][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.121784][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.156939][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.174376][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.186587][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.202006][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.212794][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.493961][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.543395][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.569500][ T8401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.226540][ T8401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.242030][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 347.259447][ T8401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.275941][ T8688] bridge0: entered promiscuous mode [ 347.282352][ T8688] macvtap1: entered promiscuous mode [ 347.287823][ T8688] macvtap1: entered allmulticast mode [ 347.296758][ T8688] bridge0: entered allmulticast mode [ 347.338459][ T8698] xt_policy: neither incoming nor outgoing policy selected [ 347.380602][ T8691] bridge0: left allmulticast mode [ 347.385979][ T8691] bridge0: left promiscuous mode [ 347.438224][ T8401] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.454658][ T8401] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.465624][ T8401] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.491646][ T8401] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.674184][ T8704] o2cb: This node has not been configured. [ 347.680744][ T8704] o2cb: Cluster check failed. Fix errors before retrying. [ 347.688569][ T8704] (syz.0.703,8704,0):user_dlm_register:674 ERROR: status = -22 [ 347.696368][ T8704] (syz.0.703,8704,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 348.187077][ T5905] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 348.377951][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 348.535512][ T5905] usb 2-1: New USB device found, idVendor=2013, idProduct=0248, bcdDevice=75.43 [ 348.544888][ T7079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.629422][ T7079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.629520][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.830880][ T5905] usb 2-1: Product: syz [ 348.845397][ T5905] usb 2-1: Manufacturer: syz [ 348.852381][ T7120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.860632][ T5905] usb 2-1: SerialNumber: syz [ 348.867090][ T7120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.914913][ T5905] usb 2-1: config 0 descriptor?? [ 350.730427][ T5905] dvb-usb: found a 'Pinnacle PCTV 282e' in cold state, will try to load a firmware [ 350.826344][ T5905] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 350.989427][ T5905] dib0700: firmware download failed at 7 with -22 [ 351.063278][ T5905] usb 2-1: USB disconnect, device number 10 [ 353.457155][ T29] audit: type=1400 audit(1733619643.977:44): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8732 comm="syz.5.713" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 354.945906][ T8754] infiniband syz2: set active [ 354.951099][ T8754] infiniband syz2: added team_slave_1 [ 354.959111][ T8754] syz2: rxe_create_cq: returned err = -12 [ 354.966032][ T8754] infiniband syz2: Couldn't create ib_mad CQ [ 354.972451][ T8754] infiniband syz2: Couldn't open port 1 [ 355.063493][ T8754] RDS/IB: syz2: added [ 355.068688][ T8754] smc: adding ib device syz2 with port count 1 [ 355.075384][ T8754] smc: ib device syz2 port 1 has pnetid [ 357.702403][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.724'. [ 357.732874][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.724'. [ 359.284760][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'. [ 364.483881][ T7087] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.488696][ T7087] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.765770][ T8801] bridge0: port 3(vlan4) entered blocking state [ 367.772341][ T8801] bridge0: port 3(vlan4) entered disabled state [ 367.779725][ T8801] vlan4: entered allmulticast mode [ 368.700145][ T29] audit: type=1400 audit(1733619658.047:45): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8892 comm="syz.0.739" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 368.733434][ T8801] bond0: entered allmulticast mode [ 368.864854][ T8801] bond_slave_0: entered allmulticast mode [ 368.881043][ T8801] bond_slave_1: entered allmulticast mode [ 368.924908][ T8801] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 368.987051][ T8908] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 368.995208][ T8908] netlink: 'syz.0.743': attribute type 3 has an invalid length. [ 369.002899][ T8908] netlink: 216 bytes leftover after parsing attributes in process `syz.0.743'. [ 369.011925][ T8908] NCSI netlink: No device for ifindex 813332851 [ 369.046255][ T8801] vlan4: entered promiscuous mode [ 369.087851][ T8801] bond0: entered promiscuous mode [ 369.142482][ T8801] bond_slave_0: entered promiscuous mode [ 369.173376][ T8801] bond_slave_1: entered promiscuous mode [ 369.200990][ T8801] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 369.236918][ T8801] bridge0: port 3(vlan4) entered blocking state [ 369.244894][ T8801] bridge0: port 3(vlan4) entered forwarding state [ 369.602898][ T7087] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.678861][ T8910] kvm: kvm [8903]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x34500000000 [ 369.730269][ T8910] kvm: kvm [8903]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x34600000080 [ 369.892618][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 369.903749][ T29] audit: type=1400 audit(1733619660.577:46): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=8913 comm="syz.0.747" saddr=172.20.20.170 src=20002 daddr=172.20.20.170 dest=58752 netif=lo [ 371.071165][ T7087] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.549239][ T8932] sp0: Synchronizing with TNC [ 371.586468][ T8932] sp0: Found TNC [ 372.260444][ T8927] [U] è` [ 372.605062][ T8929] nlmon0: Master is either lo or non-ether device [ 373.324862][ T8945] mkiss: ax0: crc mode is auto. [ 373.381256][ T5827] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 373.388014][ T5827] Bluetooth: Wrong link type (-22) [ 373.396738][ T5827] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 373.415732][ T5827] Bluetooth: Wrong link type (-22) [ 373.421201][ T5827] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 373.427729][ T5827] Bluetooth: Wrong link type (-22) [ 373.440025][ T5827] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 373.446563][ T5827] Bluetooth: Wrong link type (-22) [ 373.460276][ T5827] Bluetooth: hci5: link tx timeout [ 373.465792][ T5827] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.470272][ T8947] netlink: 'syz.0.751': attribute type 32 has an invalid length. [ 374.765518][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 374.820032][ T7087] bridge_slave_1: left allmulticast mode [ 374.826269][ T7087] bridge_slave_1: left promiscuous mode [ 374.917042][ T7087] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.084504][ T7087] bridge_slave_0: left allmulticast mode [ 375.090307][ T7087] bridge_slave_0: left promiscuous mode [ 375.096139][ T7087] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.710818][ T5132] Bluetooth: hci5: command 0x0406 tx timeout [ 377.186715][ T8976] syz.4.757: attempt to access beyond end of device [ 377.186715][ T8976] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 377.210348][ T8976] syz.4.757: attempt to access beyond end of device [ 377.210348][ T8976] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 377.226768][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 377.247438][ T8976] syz.4.757: attempt to access beyond end of device [ 377.247438][ T8976] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 377.266112][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 377.291080][ T8976] syz.4.757: attempt to access beyond end of device [ 377.291080][ T8976] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 377.309908][ T8976] syz.4.757: attempt to access beyond end of device [ 377.309908][ T8976] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 377.325219][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 377.338396][ T8976] syz.4.757: attempt to access beyond end of device [ 377.338396][ T8976] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 377.353069][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 377.367375][ T8976] syz.4.757: attempt to access beyond end of device [ 377.367375][ T8976] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 377.385877][ T8976] syz.4.757: attempt to access beyond end of device [ 377.385877][ T8976] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 377.400037][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 377.410575][ T8976] syz.4.757: attempt to access beyond end of device [ 377.410575][ T8976] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 377.425229][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 377.439732][ T8976] syz.4.757: attempt to access beyond end of device [ 377.439732][ T8976] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 377.453870][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 377.464461][ T8976] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 377.474307][ T8976] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 378.893605][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.900842][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.989667][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.5.760'. [ 382.532279][ T7087] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.631743][ T7087] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.062300][ T7087] bond0 (unregistering): Released all slaves [ 383.075490][ T7087] bond1 (unregistering): Released all slaves [ 383.134153][ T8947] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 383.143556][ T8947] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 383.364161][ T8987] bridge_slave_1: left allmulticast mode [ 383.407360][ T8987] bridge_slave_1: left promiscuous mode [ 383.460219][ T8987] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.719594][ T9016] x_tables: duplicate entry at hook 1 [ 385.331555][ T7087] IPVS: stopping master sync thread 8022 ... [ 387.491089][ T9042] Mount JFS Failure: -22 [ 387.495722][ T9042] jfs_mount failed w/return code = -22 [ 390.893094][ T9080] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 391.271824][ T9084] binder_alloc: 9081: binder_install_single_page failed to insert page at offset 0 with -14 [ 391.691585][ T9092] ip6t_srh: unknown srh match flags 4000 [ 393.417577][ T9108] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 393.850418][ T7087] hsr_slave_0: left promiscuous mode [ 394.044604][ T7087] hsr_slave_1: left promiscuous mode [ 394.172228][ T7087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.179809][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.229484][ T9117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 395.244253][ T7087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.360137][ T29] audit: type=1400 audit(1733619685.567:47): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9112 comm="syz.5.786" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 395.384030][ T7087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.401354][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.787'. [ 395.554177][ T7087] veth1_macvtap: left promiscuous mode [ 395.570155][ T29] audit: type=1400 audit(1733619685.567:48): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9112 comm="syz.5.786" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 395.621750][ T7087] veth0_macvtap: left promiscuous mode [ 395.657806][ T7087] veth1_vlan: left promiscuous mode [ 395.683205][ T29] audit: type=1400 audit(1733619685.567:49): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9112 comm="syz.5.786" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 395.751834][ T7087] veth0_vlan: left promiscuous mode [ 395.847814][ T9126] kvm: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x55 [ 395.860535][ T29] audit: type=1400 audit(1733619685.567:50): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9115 comm="syz.0.788" saddr=172.20.20.10 src=42494 daddr=172.20.20.187 dest=16385 netif=lo [ 395.926256][ T9126] kvm: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xa0 [ 395.996649][ T9126] kvm: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x6 [ 396.118922][ T9126] kvm_intel: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 396.234613][ T9126] kvm_intel: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 396.374978][ T9126] kvm_intel: kvm [9120]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x851 [ 400.030955][ T9162] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.768959][ T9181] binder: 9180:9181 ioctl c018aa3f 0 returned -22 [ 403.846758][ T7087] team0 (unregistering): Port device team_slave_1 removed [ 404.159002][ T7087] team0 (unregistering): Port device team_slave_0 removed [ 405.305073][ T25] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 405.377171][ T9199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.807'. [ 405.395473][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.807'. [ 405.407164][ T9199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.807'. [ 405.416604][ T9199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.807'. [ 405.475657][ T9192] kvm: kvm [9189]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 405.509571][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.545793][ T25] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 405.561325][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.592859][ T25] usb 6-1: config 0 descriptor?? [ 405.603264][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 406.012666][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 406.025346][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 406.065052][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 406.095042][ T25] pwc: recv_control_msg error -32 req 04 val 1000 [ 406.125250][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 406.168102][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 406.223411][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 406.312063][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 406.390284][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 406.397425][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 406.431555][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 406.440054][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 406.459116][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 406.473033][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.480666][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.677510][ T25] pwc: recv_control_msg error -71 req 04 val 1100 [ 406.698587][ T25] pwc: recv_control_msg error -71 req 04 val 1200 [ 406.857512][ T25] pwc: Registered as video103. [ 406.911734][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 407.167121][ T25] usb 6-1: USB disconnect, device number 2 [ 408.410028][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 408.600195][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 408.694062][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.804065][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.815098][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.919174][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.213157][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.222963][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.305003][ T25] usb 6-1: GET_CAPABILITIES returned 0 [ 411.310856][ T25] usbtmc 6-1:16.0: can't read capabilities [ 411.719964][ T46] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 411.816354][ T9257] ipt_rpfilter: unknown options [ 411.935429][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 412.035483][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 51, changing to 9 [ 412.318269][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 33540, setting to 1024 [ 412.509967][ T5913] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 412.539914][ T46] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 412.557981][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.581492][ T46] usb 4-1: config 0 descriptor?? [ 412.646593][ T5905] usb 6-1: USB disconnect, device number 3 [ 412.719200][ T46] usb 4-1: can't set config #0, error -71 [ 412.753567][ T5913] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 412.762837][ T5913] usb 1-1: config 0 has no interface number 0 [ 412.769748][ T5913] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 412.791592][ T46] usb 4-1: USB disconnect, device number 10 [ 412.803113][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.818928][ T5913] usb 1-1: config 0 descriptor?? [ 412.826103][ T5913] ttusbir 1-1:0.83: cannot find expected altsetting [ 412.869714][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 412.880003][ T9272] netlink: 16 bytes leftover after parsing attributes in process `syz.3.824'. [ 412.889516][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 412.899798][ T9272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.824'. [ 412.969165][ T9272] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.010814][ T9268] syz.5.823 uses obsolete (PF_INET,SOCK_PACKET) [ 413.246306][ T9264] kvm: kvm [9263]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 414.490425][ T9288] binder: BINDER_SET_CONTEXT_MGR already set [ 414.496662][ T9288] binder: 9287:9288 ioctl 4018620d 20000040 returned -16 [ 414.536472][ T5871] usb 1-1: USB disconnect, device number 7 [ 419.644248][ T9352] netlink: 165 bytes leftover after parsing attributes in process `syz.0.838'. [ 423.045174][ T9384] lo: entered allmulticast mode [ 423.054574][ T9384] tunl0: entered allmulticast mode [ 423.063641][ T9384] gre0: entered allmulticast mode [ 427.420280][ T9384] gretap0: entered allmulticast mode [ 427.445160][ T9384] erspan0: entered allmulticast mode [ 427.490659][ T9384] ip_vti0: entered allmulticast mode [ 427.772468][ T9384] ip6_vti0: entered allmulticast mode [ 428.099012][ T5872] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 428.135437][ T9384] sit0: entered allmulticast mode [ 428.163557][ T9384] ip6tnl0: entered allmulticast mode [ 428.241230][ T9384] ip6gre0: entered allmulticast mode [ 428.283539][ T9384] syz_tun: entered allmulticast mode [ 428.303459][ T9384] ip6gretap0: entered allmulticast mode [ 428.317164][ T9384] bridge0: entered allmulticast mode [ 428.328605][ T9384] vcan0: entered allmulticast mode [ 428.341742][ T9384] bond0: left promiscuous mode [ 428.346779][ T9384] bond_slave_0: left promiscuous mode [ 428.350077][ T5872] usb 6-1: Using ep0 maxpacket: 16 [ 428.360182][ T5872] usb 6-1: config 6 has an invalid interface number: 4 but max is 0 [ 428.368417][ T5872] usb 6-1: config 6 has no interface number 0 [ 428.374958][ T5872] usb 6-1: config 6 interface 4 has no altsetting 0 [ 428.390384][ T9384] bond_slave_1: left promiscuous mode [ 428.392302][ T5872] usb 6-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=44.03 [ 428.405521][ T9384] macvlan2: left promiscuous mode [ 428.412434][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.419908][ T9384] team0: left promiscuous mode [ 428.426083][ T9384] bond0: entered allmulticast mode [ 428.431405][ T5872] usb 6-1: Product: syz [ 428.431426][ T5872] usb 6-1: Manufacturer: syz [ 428.431441][ T5872] usb 6-1: SerialNumber: syz [ 428.465627][ T9384] bond_slave_0: entered allmulticast mode [ 428.475792][ T9384] bond_slave_1: entered allmulticast mode [ 428.485498][ T9384] macvlan2: entered allmulticast mode [ 428.498517][ T9384] team0: entered allmulticast mode [ 428.507150][ T9384] team_slave_0: entered allmulticast mode [ 428.515427][ T9384] team_slave_1: entered allmulticast mode [ 428.530415][ T9384] team_slave_0: left promiscuous mode [ 428.538546][ T9384] team_slave_1: left promiscuous mode [ 428.563283][ T9384] dummy0: entered allmulticast mode [ 428.585783][ T9384] nlmon0: entered allmulticast mode [ 428.594961][ T9384] caif0: entered allmulticast mode [ 428.603562][ T9384] batadv0: entered allmulticast mode [ 428.633779][ T9384] vxcan0: entered allmulticast mode [ 428.647129][ T9384] vxcan1: entered allmulticast mode [ 428.673605][ T9384] veth0: entered allmulticast mode [ 428.722658][ T9384] veth1: entered allmulticast mode [ 428.749326][ T9384] wg0: entered allmulticast mode [ 428.767674][ T9384] wg1: entered allmulticast mode [ 428.771794][ T9425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.852'. [ 428.784243][ T9384] wg2: entered allmulticast mode [ 428.804168][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.5.852'. [ 428.815051][ T9384] veth0_to_bridge: entered allmulticast mode [ 428.829962][ T9425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.852'. [ 428.850028][ T9425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.852'. [ 428.932589][ T9384] veth1_to_bridge: entered allmulticast mode [ 428.953796][ T9384] veth0_to_bond: entered allmulticast mode [ 428.969544][ T9384] veth1_to_bond: entered allmulticast mode [ 428.983607][ T9384] veth0_to_team: entered allmulticast mode [ 429.008952][ T9384] veth1_to_team: entered allmulticast mode [ 429.038769][ T9422] kvm: kvm [9421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xff [ 429.049389][ T9384] veth0_to_batadv: entered allmulticast mode [ 429.063088][ T9422] kvm: kvm [9421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8ff [ 429.078303][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.086428][ T9422] kvm: kvm [9421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff [ 429.097736][ T9384] batadv_slave_0: entered allmulticast mode [ 429.098624][ T9422] kvm_intel: kvm [9421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x8ff [ 429.161562][ T9422] kvm: kvm [9421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x8ff [ 429.268053][ T9422] kvm: kvm [9421]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff [ 429.299326][ T9384] veth1_to_batadv: entered allmulticast mode [ 430.025423][ T9384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.070560][ T9384] batadv_slave_1: entered allmulticast mode [ 430.111643][ T9384] xfrm0: entered allmulticast mode [ 430.147300][ T9384] veth0_to_hsr: entered allmulticast mode [ 430.173417][ T9384] hsr_slave_0: entered allmulticast mode [ 430.219287][ T9384] veth1_to_hsr: entered allmulticast mode [ 430.258530][ T9384] hsr_slave_1: entered allmulticast mode [ 430.281002][ T9384] hsr0: entered allmulticast mode [ 430.541332][ T9436] xt_bpf: check failed: parse error [ 430.853461][ T5872] keyspan 6-1:6.4: Keyspan 1 port adapter converter detected [ 430.865918][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 87 [ 430.881077][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 7 [ 430.898686][ T9384] veth1_virt_wifi: entered allmulticast mode [ 430.913978][ T9384] veth0_virt_wifi: entered allmulticast mode [ 431.007115][ T9444] netlink: 'syz.4.859': attribute type 2 has an invalid length. [ 431.656055][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 81 [ 431.664313][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 1 [ 431.672167][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 2 [ 431.679968][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 85 [ 431.687942][ T5872] keyspan 6-1:6.4: found no endpoint descriptor for endpoint 5 [ 431.695763][ T9384] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 431.872645][ T9384] veth1_vlan: entered allmulticast mode [ 431.879236][ T5872] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 431.897720][ T9384] veth0_vlan: entered allmulticast mode [ 431.903528][ T5872] usb 6-1: USB disconnect, device number 4 [ 432.582173][ T5872] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 432.592661][ T5872] keyspan 6-1:6.4: device disconnected [ 432.653219][ T9384] vlan1: entered allmulticast mode [ 432.702852][ T9384] macvlan0: entered allmulticast mode [ 432.836461][ T9384] macvlan1: entered allmulticast mode [ 432.843626][ T9384] ipvlan0: entered allmulticast mode [ 432.849071][ T9384] ipvlan1: entered allmulticast mode [ 432.855369][ T9384] veth1_macvtap: entered allmulticast mode [ 432.961704][ T9452] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 433.500553][ T9384] veth0_macvtap: entered allmulticast mode [ 433.525837][ T9384] macvtap0: entered allmulticast mode [ 433.596284][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 433.646586][ T9384] macsec0: entered allmulticast mode [ 433.654699][ T9384] geneve0: entered allmulticast mode [ 433.672047][ T9384] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.689968][ T9384] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.699441][ T9384] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.709584][ T9384] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.724721][ T9384] geneve1: entered allmulticast mode [ 433.733860][ T9384] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 433.751769][ T9456] ISOFS: Unable to identify CD-ROM format. [ 433.767660][ T9384] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 433.785273][ T9384] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 433.796439][ T9384] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 433.807019][ T9384] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 433.815615][ T9384] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 433.824519][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.838017][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.852854][ T5872] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 433.863171][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 433.874348][ T9384] bond1: entered allmulticast mode [ 433.879996][ T5872] usb 6-1: SerialNumber: syz [ 433.880033][ T9384] ip6gretap1: entered allmulticast mode [ 433.898764][ T9384] macvtap1: left promiscuous mode [ 433.947264][ T9444] fþ: entered promiscuous mode [ 434.013148][ T5872] usb 6-1: can't set config #1, error -71 [ 434.026061][ T5872] usb 6-1: USB disconnect, device number 5 [ 440.399433][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.399504][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.508781][ T9491] overlayfs: failed to get inode (-116) [ 440.522895][ T9491] overlayfs: failed to get inode (-116) [ 443.100893][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.113466][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.046199][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.122023][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.135404][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 444.145796][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.244740][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.883'. [ 446.330081][ T5827] Bluetooth: hci2: command tx timeout [ 447.344692][ T9574] kvm: kvm [9573]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 447.444250][ T9574] kvm: kvm [9573]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 448.424041][ T5827] Bluetooth: hci2: command tx timeout [ 448.672603][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 449.968240][ T9610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.511230][ T5827] Bluetooth: hci2: command tx timeout [ 452.116918][ T9626] usb usb7: usbfs: process 9626 (syz.4.894) did not claim interface 0 before use [ 452.162776][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.213019][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.249567][ T9541] bridge_slave_0: entered allmulticast mode [ 452.299150][ T9541] bridge_slave_0: entered promiscuous mode [ 452.557254][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.570052][ T5827] Bluetooth: hci2: command tx timeout [ 452.756004][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.933330][ T9541] bridge_slave_1: entered allmulticast mode [ 453.161248][ T9541] bridge_slave_1: entered promiscuous mode [ 453.687253][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.648327][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.387081][ T9541] team0: Port device team_slave_0 added [ 456.516336][ T9541] team0: Port device team_slave_1 added [ 457.402793][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.410150][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.470355][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.500859][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.507978][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.626516][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.507791][ T9541] hsr_slave_0: entered promiscuous mode [ 459.421214][ T9541] hsr_slave_1: entered promiscuous mode [ 459.442254][ T9541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.450562][ T9541] Cannot create hsr debugfs directory [ 459.450582][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 460.075955][ T9689] overlayfs: missing 'workdir' [ 464.937811][ T9738] netdevsim netdevsim1: Direct firmware load for — failed with error -2 [ 464.947562][ T9738] netdevsim netdevsim1: Falling back to sysfs fallback for: — [ 465.831061][ T9541] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.006497][ T9541] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 469.003104][ T9541] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 469.570973][ T9541] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 470.816275][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.858662][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.737025][ T9541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.748250][ T9541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.935428][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.942644][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.966704][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.975521][ T7071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.790242][ T25] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 473.858155][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.010555][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 474.029726][ T25] usb 6-1: config 0 has no interfaces? [ 474.422629][ T25] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 474.432708][ T25] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 474.441944][ T25] usb 6-1: Manufacturer: syz [ 474.450697][ T25] usb 6-1: config 0 descriptor?? [ 475.387357][ T9796] vlan2: entered promiscuous mode [ 475.617453][ T9835] netlink: 'syz.4.937': attribute type 21 has an invalid length. [ 476.365141][ T25] usb 6-1: USB disconnect, device number 6 [ 476.460765][ T9541] veth0_vlan: entered promiscuous mode [ 476.480520][ T9541] veth1_vlan: entered promiscuous mode [ 476.521730][ T5827] block nbd3: Receive control failed (result -32) [ 476.540757][ T5827] block nbd3: Receive control failed (result -32) [ 476.588903][ T9541] veth0_macvtap: entered promiscuous mode [ 476.598071][ T9541] veth1_macvtap: entered promiscuous mode [ 476.621690][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.632507][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.642614][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.653386][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.663691][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.674421][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.684676][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.696247][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.707633][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.727955][ T9843] block nbd3: shutting down sockets [ 476.792536][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.805690][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.846604][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.922503][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.973921][ T9852] xt_connbytes: Forcing CT accounting to be enabled [ 476.980986][ T9852] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 476.992548][ T9852] xt_bpf: check failed: parse error [ 477.079184][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.184347][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.238761][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.252007][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.271490][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.329597][ T9541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.357777][ T9541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.432883][ T9541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.472568][ T9541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.643415][ T9862] Cannot find add_set index 0 as target [ 478.557015][ T7071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.565354][ T7071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.602484][ T7087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.615780][ T7087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.302579][ T9888] random: crng reseeded on system resumption [ 486.379396][ T9949] Bluetooth: MGMT ver 1.23 [ 487.688836][ T9964] netlink: 112 bytes leftover after parsing attributes in process `syz.4.962'. [ 491.659616][T10017] vlan2: entered promiscuous mode [ 491.665319][T10017] vlan2: entered allmulticast mode [ 491.670707][T10017] hsr_slave_1: entered allmulticast mode [ 492.827746][ T29] audit: type=1400 audit(1733619784.501:51): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=7087 comm="kworker/u8:18" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 492.850088][ C0] vkms_vblank_simulate: vblank timer overrun [ 493.655177][ T29] audit: type=1400 audit(1733619784.761:52): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10014 comm="syz.6.972" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 493.730007][ T29] audit: type=1400 audit(1733619785.021:53): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10014 comm="syz.6.972" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 494.029551][ T29] audit: type=1400 audit(1733619785.511:54): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10028 comm="syz.1.978" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 494.819510][ T29] audit: type=1400 audit(1733619786.491:55): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10028 comm="syz.1.978" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 496.913111][ T29] audit: type=1400 audit(1733619788.501:56): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10040 comm="syz.4.981" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 500.772101][ T29] audit: type=1400 audit(1733619792.411:57): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10118 comm="syz.6.986" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 501.817575][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.379988][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.202457][ T29] audit: type=1400 audit(1733619800.491:58): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=0 comm="swapper/1" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 524.128832][T10278] 9pnet_fd: p9_fd_create_unix (10278): problem connecting socket: ./file1: -2 [ 524.829455][ T29] audit: type=1400 audit(1733619816.501:59): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=5826 comm="syz-executor" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 524.870047][ T5871] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 527.243571][ T5871] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.527683][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.646567][ T5871] usb 5-1: config 0 descriptor?? [ 528.321096][ T5871] cp210x 5-1:0.0: cp210x converter detected [ 530.453496][ T5871] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 530.462317][ T5871] cp210x 5-1:0.0: querying part number failed [ 530.496620][ T5871] usb 5-1: cp210x converter now attached to ttyUSB0 [ 531.039612][ T5871] usb 5-1: USB disconnect, device number 8 [ 531.077978][ T5871] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 531.092203][ T5871] cp210x 5-1:0.0: device disconnected [ 534.433410][T10377] netlink: 'syz.1.1040': attribute type 2 has an invalid length. [ 534.441412][T10377] netlink: 'syz.1.1040': attribute type 8 has an invalid length. [ 534.449298][T10377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1040'. [ 535.242808][ T991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.253954][ T991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.417932][ T991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.431250][ T5872] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 535.485590][ T991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.591612][ T5872] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 535.601083][ T5872] usb 2-1: config 0 has no interface number 0 [ 535.634499][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 535.646573][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 535.656199][ T5872] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 535.851195][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 535.867490][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 535.888717][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 535.908676][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 536.274513][ T991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.310123][ T991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.319791][ T5871] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 536.328687][ T5872] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 536.341201][ T5872] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 536.355601][ T5872] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 536.365445][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.379346][ T5872] usb 2-1: Product: syz [ 536.439920][ T5872] usb 2-1: Manufacturer: syz [ 536.444586][ T5872] usb 2-1: SerialNumber: syz [ 536.461741][ T5872] usb 2-1: config 0 descriptor?? [ 536.467434][T10384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.490300][T10384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 536.499955][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 536.511137][ T5872] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 536.539450][ T5871] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 536.571776][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 536.594248][ T5872] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 536.612578][ T5871] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 536.622199][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.639497][ T5871] usb 4-1: Product: syz [ 536.644333][ T5871] usb 4-1: Manufacturer: syz [ 536.648965][ T5871] usb 4-1: SerialNumber: syz [ 536.699462][ T5871] usb 4-1: config 0 descriptor?? [ 536.762340][ T991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.779492][ T991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.162945][ T5871] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 537.345202][ T5871] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 537.367055][T10384] input: syz0 as /devices/virtual/input/input23 [ 537.595794][ T5905] usb 2-1: USB disconnect, device number 11 [ 538.267638][ T5905] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 538.278912][ T5905] cyberjack 2-1:0.69: device disconnected [ 538.336119][ T5827] Bluetooth: hci0: command tx timeout [ 538.367792][ T5871] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 538.382943][ T5871] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 538.644260][ T991] bridge_slave_1: left allmulticast mode [ 538.710968][ T991] bridge_slave_1: left promiscuous mode [ 538.716867][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.785607][ T991] bridge_slave_0: left allmulticast mode [ 538.826459][ T991] bridge_slave_0: left promiscuous mode [ 538.870332][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.001944][T10433] Bluetooth: MGMT ver 1.23 [ 539.602000][ T5871] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 539.640272][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 539.671016][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 539.679776][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 539.700812][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 539.712099][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 540.418682][ T5827] Bluetooth: hci0: command tx timeout [ 540.661379][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 20 [ 540.677207][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 16 [ 542.106429][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 12 [ 542.115619][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 14 [ 542.122480][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 18 [ 542.129321][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 22 [ 542.136846][T10457] kvm: kvm [10453]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 542.170042][ T5871] em28xx 4-1:0.0: couldn't setup AC97 register 24 [ 542.180810][ T5871] em28xx 4-1:0.0: Binding audio extension [ 542.199934][ T5871] em28xx 4-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 542.237272][ T5871] em28xx 4-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 542.286744][ T5871] em28xx 4-1:0.0: alt 0 doesn't exist on interface 7 [ 542.514799][ T5827] Bluetooth: hci0: command tx timeout [ 542.530637][ T5871] usb 4-1: USB disconnect, device number 11 [ 542.546635][ T5871] em28xx 4-1:0.0: Disconnecting em28xx [ 542.553422][ T5871] em28xx 4-1:0.0: Closing audio extension [ 542.594460][ T5871] em28xx 4-1:0.0: Freeing device [ 543.312984][ T991] team0: Port device vxlan0 removed [ 544.588258][ T5827] Bluetooth: hci0: command tx timeout [ 545.311161][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.325376][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.345764][ T991] bond0 (unregistering): Released all slaves [ 545.796642][ T991] bond1 (unregistering): Released all slaves [ 545.998436][ T991] fþ: left promiscuous mode [ 546.347051][T10488] tipc: Enabling of bearer rejected, failed to enable media [ 547.449997][ T29] audit: type=1326 audit(1733619838.361:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 547.471532][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.756330][ T29] audit: type=1326 audit(1733619838.361:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.149444][ T29] audit: type=1326 audit(1733619838.361:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.171206][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.252949][ T29] audit: type=1326 audit(1733619838.361:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.275070][ T29] audit: type=1326 audit(1733619838.361:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.303654][T10393] chnl_net:caif_netlink_parms(): no params data found [ 548.310242][ T29] audit: type=1326 audit(1733619838.361:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.336105][ T29] audit: type=1326 audit(1733619838.361:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.367023][ T29] audit: type=1326 audit(1733619838.361:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.388581][ C0] vkms_vblank_simulate: vblank timer overrun [ 548.396510][ T29] audit: type=1326 audit(1733619838.361:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.418456][ T29] audit: type=1326 audit(1733619838.361:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10487 comm="syz.3.1066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9537fed9 code=0x7fc00000 [ 548.439919][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.561220][T10510] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 549.982913][T10522] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.870839][ T991] hsr_slave_0: left promiscuous mode [ 550.919556][ T991] hsr_slave_1: left promiscuous mode [ 552.066221][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.077060][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.782819][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.952573][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 554.244379][ T991] veth1_macvtap: left promiscuous mode [ 554.361101][ T991] veth0_macvtap: left promiscuous mode [ 554.366931][ T991] veth1_vlan: left promiscuous mode [ 555.544543][ T991] veth0_vlan: left promiscuous mode [ 556.207213][ T29] kauditd_printk_skb: 2481 callbacks suppressed [ 556.207236][ T29] audit: type=1400 audit(1733619847.851:2551): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=10553 comm="syz.5.1081" saddr=172.20.20.10 src=33808 daddr=172.20.20.187 dest=16385 netif=lo [ 558.305561][ T991] team0 (unregistering): Port device team_slave_1 removed [ 559.167761][ T991] team0 (unregistering): Port device team_slave_0 removed [ 560.743672][T10582] rtc_cmos 00:00: Alarms can be up to one day in the future [ 561.496356][T10393] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.515279][T10393] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.526021][T10393] bridge_slave_0: entered allmulticast mode [ 561.539382][T10393] bridge_slave_0: entered promiscuous mode [ 561.648667][T10393] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.655922][T10393] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.664437][T10393] bridge_slave_1: entered allmulticast mode [ 561.672665][T10393] bridge_slave_1: entered promiscuous mode [ 561.870928][T10560] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 561.948418][T10560] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 562.362648][T10393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.379255][T10393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.550751][T10560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.567740][T10560] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 562.655156][T10560] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 562.927983][T10560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 562.968120][T10560] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 563.076572][T10560] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 563.348747][T10393] team0: Port device team_slave_0 added [ 563.355384][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.361902][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.422324][T10393] team0: Port device team_slave_1 added [ 564.518061][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 564.729950][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 565.039970][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 565.086462][T10609] kAFS: No cell specified [ 565.166572][T10393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.342218][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.686609][T10393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.765182][T10393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.890026][T10393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.954963][T10393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.976605][ T991] IPVS: stop unused estimator thread 0... [ 566.995721][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 567.001889][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 567.060194][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 567.453375][T10393] hsr_slave_0: entered promiscuous mode [ 567.548457][T10393] hsr_slave_1: entered promiscuous mode [ 567.567690][T10393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.612696][T10393] Cannot create hsr debugfs directory [ 567.674209][T10628] random: crng reseeded on system resumption [ 569.130434][ T5830] Bluetooth: hci2: command 0x0c1a tx timeout [ 569.137101][ T5830] Bluetooth: hci0: command 0x0c1a tx timeout [ 569.572737][T10393] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 569.646858][T10393] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 569.872440][T10393] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.228859][T10393] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 572.076509][T10393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.099713][T10393] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.121585][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.128808][ T8607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.301365][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.308561][ T8607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.486858][T10651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.250534][T10652] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1105'. [ 573.382791][T10393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.213439][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.032449][T10701] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 579.587792][T10393] veth0_vlan: entered promiscuous mode [ 579.652250][T10393] veth1_vlan: entered promiscuous mode [ 579.871813][T10393] veth0_macvtap: entered promiscuous mode [ 580.628108][T10393] veth1_macvtap: entered promiscuous mode [ 580.824205][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.864274][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.875015][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.013749][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.119610][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.263899][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.315288][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.336023][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.449422][T10393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.477715][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1115'. [ 581.492805][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.503990][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.620365][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.659764][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.811522][T10720] usb usb1: usbfs: process 10720 (syz.1.1121) did not claim interface 0 before use [ 581.869960][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.884263][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.268457][T10393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.716657][T10393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.827030][T10393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.862380][T10393] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.882242][T10393] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.941790][T10393] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.980393][T10393] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.248742][ T7079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.272497][ T7079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.357208][ T7079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.391848][ T7079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.060321][T10756] Invalid ELF header type: 0 != 1 [ 589.709986][T10783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 590.477816][T10789] xt_nat: multiple ranges no longer supported [ 591.558857][T10794] input: syz1 as /devices/virtual/input/input30 [ 593.252708][T10804] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 598.130274][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 598.280075][ T46] usb 2-1: device descriptor read/64, error -71 [ 598.807870][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 602.764963][T10923] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22) [ 603.054817][T10924] netlink: 'syz.3.1168': attribute type 15 has an invalid length. [ 604.511867][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1168'. [ 607.384728][T10973] rtc_cmos 00:00: Alarms can be up to one day in the future [ 607.397709][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1169'. [ 610.713491][ T29] audit: type=1400 audit(1733619902.391:2552): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10994 comm="syz.6.1177" saddr=172.30.0.7 daddr=172.20.20.170 netif=wpan0 [ 610.742113][T10996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.766439][T11017] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1182'. [ 612.973759][T11015] netlink: 'syz.6.1181': attribute type 4 has an invalid length. [ 617.459294][T11047] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1188'. [ 617.956083][T11057] usb usb7: selecting invalid altsetting 6 [ 618.000106][T11060] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 618.006230][T11060] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.029957][T11062] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 618.046173][T11060] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 618.227253][T11067] xt_CONNSECMARK: invalid mode: 0 [ 619.424240][T11080] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 619.784089][T11082] xt_hashlimit: max too large, truncated to 1048576 [ 620.772982][ T5827] Bluetooth: hci2: command 0x0c1a tx timeout [ 620.779089][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 622.396888][T11095] input: syz1 as /devices/virtual/input/input32 [ 625.021151][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.030381][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.374769][T11132] vxfs: WRONG superblock magic 00000000 at 1 [ 628.383733][T11132] vxfs: WRONG superblock magic 00000000 at 8 [ 628.390116][T11132] vxfs: can't find superblock. [ 637.233645][T11193] No source specified [ 639.473531][T11194] block device autoloading is deprecated and will be removed. [ 639.878995][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1230'. [ 639.888288][T11205] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1230'. [ 639.908202][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1230'. [ 639.927708][T11205] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1230'. [ 640.200871][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 640.213510][ C1] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 640.221938][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc1-syzkaller-00337-g7503345ac5f5 #0 [ 640.232278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 640.242320][ C1] RIP: 0010:put_page+0x23/0x260 [ 640.247164][ C1] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 28 b6 12 f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 4f 77 7a f8 48 8b 1b 48 89 de 48 83 [ 640.266785][ C1] RSP: 0018:ffffc90000a17d50 EFLAGS: 00010202 [ 640.272902][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88801d2c8000 [ 640.280901][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.288898][ C1] RBP: dffffc0000000000 R08: ffffffff898c4ebd R09: 1ffff1100badd44c [ 640.296908][ C1] R10: dffffc0000000000 R11: ffffed100badd44d R12: 0000000000000007 [ 640.304991][ C1] R13: ffff88805d6ea242 R14: 0000000000000000 R15: 0000000000000000 [ 640.312991][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 640.321942][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.328543][ C1] CR2: 00007f7fcaf101a9 CR3: 000000005ef2e000 CR4: 00000000003526f0 [ 640.339139][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.347168][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 640.355164][ C1] Call Trace: [ 640.358465][ C1] [ 640.361328][ C1] ? __die_body+0x5f/0xb0 [ 640.365686][ C1] ? die_addr+0xb0/0xe0 [ 640.369896][ C1] ? exc_general_protection+0x3dd/0x5d0 [ 640.375488][ C1] ? asm_exc_general_protection+0x26/0x30 [ 640.381250][ C1] ? skb_release_data+0x46d/0x8a0 [ 640.386308][ C1] ? put_page+0x23/0x260 [ 640.390583][ C1] skb_release_data+0x483/0x8a0 [ 640.395446][ C1] __kfree_skb+0x55/0x70 [ 640.399675][ C1] tcp_ack+0x2442/0x6bc0 [ 640.403911][ C1] ? __pfx_tcp_ack+0x10/0x10 [ 640.408488][ C1] ? __lock_acquire+0x1397/0x2100 [ 640.413504][ C1] tcp_rcv_state_process+0x8eb/0x44e0 [ 640.418935][ C1] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 640.424750][ C1] ? sk_filter_trim_cap+0x5bf/0xa80 [ 640.429946][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 640.435072][ C1] ? __pfx_tcp_inbound_hash+0x10/0x10 [ 640.440520][ C1] tcp_v4_do_rcv+0x77d/0xc70 [ 640.445153][ C1] tcp_v4_rcv+0x2dc0/0x37f0 [ 640.449708][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 640.454591][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 640.459478][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 640.464358][ C1] ip_protocol_deliver_rcu+0x22e/0x440 [ 640.470207][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 640.475875][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 640.481363][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 640.487535][ C1] NF_HOOK+0x3a4/0x450 [ 640.491620][ C1] ? NF_HOOK+0x9a/0x450 [ 640.495788][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 640.500393][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 640.506387][ C1] ? ip_rcv_finish+0x406/0x560 [ 640.511168][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 640.516297][ C1] NF_HOOK+0x3a4/0x450 [ 640.520378][ C1] ? __lock_acquire+0x1397/0x2100 [ 640.525412][ C1] ? NF_HOOK+0x9a/0x450 [ 640.529579][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 640.534191][ C1] ? ip_rcv_core+0x801/0xd10 [ 640.538800][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 640.543932][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 640.548544][ C1] __netif_receive_skb+0x2bf/0x650 [ 640.553692][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 640.558727][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 640.564373][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 640.570380][ C1] ? __pfx_lock_release+0x10/0x10 [ 640.575413][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 640.580542][ C1] process_backlog+0x662/0x15b0 [ 640.585412][ C1] ? process_backlog+0x33b/0x15b0 [ 640.590452][ C1] ? __pfx_process_backlog+0x10/0x10 [ 640.595750][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 640.601745][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 640.608088][ C1] __napi_poll+0xcb/0x490 [ 640.612435][ C1] net_rx_action+0x89b/0x1240 [ 640.617237][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 640.622385][ C1] ? __run_timer_base+0x178/0x8e0 [ 640.627527][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 640.633282][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 640.639636][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 640.644873][ C1] handle_softirqs+0x2d4/0x9b0 [ 640.649800][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 640.654584][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 640.659875][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 640.665092][ C1] __irq_exit_rcu+0xf7/0x220 [ 640.669685][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 640.674882][ C1] irq_exit_rcu+0x9/0x30 [ 640.679146][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 640.685063][ C1] [ 640.688005][ C1] [ 640.690957][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 640.696954][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 640.702248][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d b5 40 a0 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 640.721846][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 640.727929][ C1] RAX: ffff88801d2c8000 RBX: ffff888021298064 RCX: 0000000000ba0189 [ 640.735889][ C1] RDX: 0000000000000001 RSI: ffff888021298000 RDI: ffff888021298064 [ 640.743866][ C1] RBP: 000000000003a878 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 640.751827][ C1] R10: dffffc0000000000 R11: ffffffff8bc81fc0 R12: ffff888021b50000 [ 640.759810][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f10ca20 [ 640.767794][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 640.773103][ C1] acpi_idle_enter+0xe4/0x140 [ 640.777788][ C1] cpuidle_enter_state+0x109/0x470 [ 640.782908][ C1] ? __pfx_menu_select+0x10/0x10 [ 640.787836][ C1] cpuidle_enter+0x5d/0xa0 [ 640.792239][ C1] do_idle+0x372/0x5c0 [ 640.796296][ C1] ? __pfx_do_idle+0x10/0x10 [ 640.800879][ C1] cpu_startup_entry+0x42/0x60 [ 640.805648][ C1] start_secondary+0x102/0x110 [ 640.810403][ C1] common_startup_64+0x13e/0x147 [ 640.815334][ C1] [ 640.818427][ C1] Modules linked in: [ 640.822411][ C1] ---[ end trace 0000000000000000 ]--- [ 640.827917][ C1] RIP: 0010:put_page+0x23/0x260 [ 640.832796][ C1] Code: 90 90 90 90 90 90 90 55 41 57 41 56 53 49 89 fe 48 bd 00 00 00 00 00 fc ff df e8 28 b6 12 f8 49 8d 5e 08 48 89 d8 48 c1 e8 03 <80> 3c 28 00 74 08 48 89 df e8 4f 77 7a f8 48 8b 1b 48 89 de 48 83 [ 640.852495][ C1] RSP: 0018:ffffc90000a17d50 EFLAGS: 00010202 [ 640.858601][ C1] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88801d2c8000 [ 640.866622][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 640.874650][ C1] RBP: dffffc0000000000 R08: ffffffff898c4ebd R09: 1ffff1100badd44c [ 640.882759][ C1] R10: dffffc0000000000 R11: ffffed100badd44d R12: 0000000000000007 [ 640.890868][ C1] R13: ffff88805d6ea242 R14: 0000000000000000 R15: 0000000000000000 [ 640.898899][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 640.907865][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.914478][ C1] CR2: 00007f7fcaf101a9 CR3: 000000005ef2e000 CR4: 00000000003526f0 [ 640.922483][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 640.930479][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 640.938502][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 640.945969][ C1] Kernel Offset: disabled [ 640.950303][ C1] Rebooting in 86400 seconds..