last executing test programs: 9m23.759799657s ago: executing program 2 (id=58): openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) 9m20.096844179s ago: executing program 2 (id=64): ioctl$CEC_ADAP_S_PHYS_ADDR(0xffffffffffffffff, 0x40026102, &(0x7f0000000440)=0xfff) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f0000000300)={0x3d, 0x802a, 0x7f}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='ntfs3\x00', 0x0, &(0x7f0000000400)='sched_switch\x00') madvise(&(0x7f0000540000/0x4000)=nil, 0x4000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 9m18.791231421s ago: executing program 2 (id=67): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a841d0014060000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P\x00\x00'], 0x0) socket$nl_route(0x10, 0x3, 0x0) dup2(r1, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 9m15.769932341s ago: executing program 2 (id=71): syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$caif_seqpacket(0x25, 0x5, 0x3) getpid() syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix={0x800, 0x6494, 0x33424752, 0x3, 0x6, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x6}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040044}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) 9m11.995774105s ago: executing program 2 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x4000000000001ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00') openat$binfmt(0xffffff9c, r3, 0x41, 0x1ff) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000001280)={[&(0x7f0000000080)='#! ', 0x0]}) 9m10.527747633s ago: executing program 2 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x100008) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000020004000004001a8008001b000000000036903a7e56e71f6a87a3104a65606c8bdd4c3b68fe21ee164041e8ab895a804b6c136f17b7fabefabf35fdeb0bf211e0048807f7b4ebd325dee3738ad52f74473257ecd072934187cd1fdadb3e29b1d5eeed8f4dca344b890d9094ab271320221073a0b74fc246cdb6ca37b7b75a4eec0c68c3332ce55f5c1319", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 8m55.312202176s ago: executing program 32 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r3, 0x0, 0x0, 0x100008) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000020004000004001a8008001b000000000036903a7e56e71f6a87a3104a65606c8bdd4c3b68fe21ee164041e8ab895a804b6c136f17b7fabefabf35fdeb0bf211e0048807f7b4ebd325dee3738ad52f74473257ecd072934187cd1fdadb3e29b1d5eeed8f4dca344b890d9094ab271320221073a0b74fc246cdb6ca37b7b75a4eec0c68c3332ce55f5c1319", @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 6m18.08121508s ago: executing program 5 (id=357): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) ioperm(0xb6c, 0xf1, 0x7) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xb, 0x1, 0x0, "861b90d8067cc0ad972ce8180af53890303b3d001b4ca78dcc0934e618938ad1"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {0x0, 0xc8}}}) 6m16.669613898s ago: executing program 5 (id=359): socket$can_raw(0x1d, 0x3, 0x1) socket$unix(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102398, 0x18ffe}, {0x0}], 0x2, 0x0, 0x0) socket(0xb, 0x5, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200), 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f045}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x2011}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') epoll_create1(0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e0b06c8000200000000000000e464d15cc659da231717d5ba1f5bb8b6801a62a1f8b5842c4bacf3bedff9fec6f81ed64dd4d57a59c36821b6"], 0xe) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) 6m14.533678332s ago: executing program 5 (id=362): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) close_range(r3, 0xffffffffffffffff, 0x0) 6m12.402200894s ago: executing program 5 (id=364): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x7c, 0x5, 0x6, 0xdd5, 0x1, 0x4}) close(0xffffffffffffffff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x1200008, &(0x7f0000000400)=ANY=[]) syz_fuse_handle_req(r1, &(0x7f00000061c0)="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", 0x2000, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='devices.list\x00', 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=""/112) fchdir(r0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 6m9.072990199s ago: executing program 5 (id=370): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) getpid() setuid(0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 6m5.685811578s ago: executing program 5 (id=374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x9aL\x82\x9f2o`47k\xf7\"\xd9\xd6\x8a\xca\xa5q\xb9\xcb\xc4\xf5\xa1\xd1\x05\x19O\xbf\xealc\x19`\xef+\xa3TZK\xf1\xe0\v\xf3\x0e\xd2\x12o\xc3\x80+y\xb7\a\xc8J\x93\xb4)\xe9\xe6~\vR\xf2P\x15\xbdH\xd2p\xec\xbf\x01\x16\xd0\x1f\x91\x03\xf7\xac\xc3WC\xd5\xdc\xd1\xa8\xf4\xb8\a^\x8e\x14\xdb\ri\xfc\xbciX\x93\xac\xd9') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xe000001a}) close(r0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ptrace(0x10, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e63, 0xecf9, @private0, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) sendmsg$nl_route_sched(r2, 0x0, 0x0) 5m50.199445691s ago: executing program 33 (id=374): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x9aL\x82\x9f2o`47k\xf7\"\xd9\xd6\x8a\xca\xa5q\xb9\xcb\xc4\xf5\xa1\xd1\x05\x19O\xbf\xealc\x19`\xef+\xa3TZK\xf1\xe0\v\xf3\x0e\xd2\x12o\xc3\x80+y\xb7\a\xc8J\x93\xb4)\xe9\xe6~\vR\xf2P\x15\xbdH\xd2p\xec\xbf\x01\x16\xd0\x1f\x91\x03\xf7\xac\xc3WC\xd5\xdc\xd1\xa8\xf4\xb8\a^\x8e\x14\xdb\ri\xfc\xbciX\x93\xac\xd9') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0xe000001a}) close(r0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(r0, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) ptrace(0x10, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e63, 0xecf9, @private0, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) sendmsg$nl_route_sched(r2, 0x0, 0x0) 8.694746924s ago: executing program 0 (id=1082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="011000000000000000001a00000007002100626210001c0022800400008004"], 0x38}}, 0x0) 8.286038286s ago: executing program 0 (id=1085): syz_open_dev$vim2m(&(0x7f0000000200), 0x90, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @vbi={0x0, 0x1, 0x1, 0x30314752, [0xfffffffb, 0x7], [0xfff, 0x5], 0x1}}) 7.802952407s ago: executing program 0 (id=1087): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xae}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 7.396324978s ago: executing program 0 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x282000, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 6.139010672s ago: executing program 1 (id=1099): unshare(0x20000400) r0 = mq_open(&(0x7f00000007c0)='eti0\x00\x16\xd2\x90\x06t|\xc8JK\xd7M\x15\xca\x13Vn\xa3+\x85\x8a\xa0\x9b\xa9U\xdbk!\xd9\xa9i\xea0\x93\xc5V\x05\x01\xb706?\xf2\xdf\xd3\x9e\xf5\x7fze.c\xfb\xa27\xed\x90\x1b\x7fE}\xa81\xd5?\xcb\xefC\xac\xac}\xb8\x00\x97\xdf\x1au\x848bk\x02\x9cm\x93\xec\xcf~\x9f\xe0q/\x9b\xc4\xd7k\xf7\xf6\x13\xf5\x12}5l\xf6\xc7\x1aH\x1cMK\xfe2\x92\x19U \xfb`3\xe0\x1am\xd5h\x95E`+\xd2\xcb\xe61\xb2m\xde\xe3\x91\x97\x9bQH>[k\xfc\x89\xb4\xe5l\xd8(\xbc\xe0i=\xec\xb6K\x85;\x9a\x8a!\xfe\xfex\x91\xea\x91\xc3\xa9w\x1a\xaa\x1a\x7f/ZUl=\x18\xef\x8d\x06\xb5\xd1m\xd4\x04\xca\x82\x0e\x17\xfe\xf2\xc5eYaDF\x93\xbbs\xe3\x14\\\x87K9\xa1\xef\xd3\xd0\x84S\xdb\v\xf2\xac\xaa\xea\xf42\xa9\xc6d\x93\b\x9dr\xffc]z\xed\xc2w`\xebA`&\xe1\x82\x92`K\x8bG-\xe6|\xcf-1\xc0_r\x8fX<\xe9\xd6 \x9c\x8e\x90\x19e\x05\xcaz\xc4\xfb*!n\xbc\x81\xe5\n\xe8zx\x80\x97]*\xb5\xd4\xe8\x0er\xef\xbe\x99\x13\x1f\x9aC\xe9yhH\xa8d8\xc9\xa0\x98\"\x9dIV\x86\xdeO\xb5\t\x00\x00\x00\x8ei9\xd5f\x96\xda\xd6ms\xcc\x17\xea\x8e\xddRE\xe7\xf1w\xac\xb2\xb6\'\'\xf6p)\xd9Fj\x8c\x8d\xaa\x88yx?Z\x9ahDk\x99NP*\x00\x00\x00=h\x15rJ\x8c\xed\x85\x9b\xe5v\xafx\xf1\xa6\x10\x1a\xc8r}]\xd3\xd0\xd4\x01J\xc4\x87y\x97\n\xda\x91\xbe\xaa?8\xc7E\x1e?\x9c\x1cG\xe7\xff\x92\b/\xc5\x90\x98\xae\xb5\xb8\x9b9|\xbdo\n{*\xc2\x95\x89\xb29bA\xc6\xd0\xb9?+\xea\x8e\xd9\xfd\xeeC\xf8\xe5\x95,\x9e\t\xf2', 0x42, 0x48, 0x0) mq_timedsend(r0, 0x0, 0xf00, 0x0, 0x0) 5.998354348s ago: executing program 1 (id=1101): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(r5, &(0x7f0000000080), 0xd) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010a010400000000000000000700000608000240000000820900010073790900000000000900010073797a300c0000000000000073797a3100030000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000002200), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x3, 0x7, 0x52424752, 0x0, 0x8000, 0x3, 0x6, 0xf, 0x1, 0x7, 0x0, 0x1}}) 4.87789348s ago: executing program 4 (id=1107): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000007400), 0x282500) flock(r0, 0xc) 4.81253166s ago: executing program 1 (id=1109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 4.763607122s ago: executing program 4 (id=1110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0xffffffffffffff0f, &(0x7f0000000440)={&(0x7f00000006c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x200000000000000}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 4.669792241s ago: executing program 6 (id=1111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) bind$ax25(r3, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r3) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/nf_conntrack\x00') symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f00000024c0)='./file0\x00') 4.658960075s ago: executing program 1 (id=1112): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x0) 4.508937772s ago: executing program 1 (id=1113): unshare(0x68040200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) 4.393978524s ago: executing program 4 (id=1114): r0 = syz_open_dev$vim2m(&(0x7f0000000380), 0x400000f7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x7, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x83, 0x81, "ff0200"}, 0x0, 0x1, {0x0}}) 4.382992301s ago: executing program 0 (id=1115): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x1) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x85, 0x7]) 3.643507746s ago: executing program 6 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f00000014c0), 0x0}, 0x20) 3.470018567s ago: executing program 4 (id=1118): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x17, 0x1, "01"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)={0x0, 0x17, 0x3, "0b7e89"}, 0x0, 0x0}) 3.469740894s ago: executing program 6 (id=1119): unshare(0xa000400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 3.460273095s ago: executing program 3 (id=1120): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(r5, &(0x7f0000000080), 0xd) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010a010400000000000000000700000608000240000000820900010073790900000000000900010073797a300c0000000000000073797a3100030000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000002200), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x3, 0x7, 0x52424752, 0x0, 0x8000, 0x3, 0x6, 0xf, 0x1, 0x7, 0x0, 0x1}}) 3.42048088s ago: executing program 6 (id=1121): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(r5, &(0x7f0000000080), 0xd) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000010a010400000000000000000700000608000240000000820900010073790900000000000900010073797a300c0000000000000073797a3100030000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x4044010) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r1, 0x0, 0xd7cc5d556c3ede87) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000002200), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x3, 0x7, 0x52424752, 0x0, 0x8000, 0x3, 0x6, 0xf, 0x1, 0x7, 0x0, 0x1}}) 2.535500421s ago: executing program 6 (id=1122): unshare(0x24020400) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.530329125s ago: executing program 3 (id=1123): syz_open_dev$media(&(0x7f0000000200), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f0000000300)={0x10, 0x7ff, 0x1, 0x1, 0x1, 0x9, 0x9, 0x6}, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0) 2.434041432s ago: executing program 6 (id=1124): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x170e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.433555448s ago: executing program 3 (id=1125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x282000, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r5, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 1.487996738s ago: executing program 3 (id=1126): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r5, 0x2}}, 0x18) 1.411697788s ago: executing program 4 (id=1127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x100, 0x9f7b}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8) bind$ax25(r3, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r3) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/nf_conntrack\x00') symlinkat(&(0x7f0000000240)='./file0\x00', r5, &(0x7f00000024c0)='./file0\x00') 1.329972813s ago: executing program 1 (id=1128): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0xcf, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x2b}}, @IFLA_GRE_REMOTE={0x8, 0x7, @multicast1=0xe000030a}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x48}}, 0x0) 279.910933ms ago: executing program 3 (id=1129): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_emit_vhci(&(0x7f00000006c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0xc0, 0xf, 0x3, 0x3ba}}}}, 0x15) 176.297ms ago: executing program 0 (id=1130): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffffffffedb, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x2c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r2, 0x2, 0x2100}, [@IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 99.716456ms ago: executing program 4 (id=1131): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5b0, 0x0, 0x438, 0x320, 0x230, 0x320, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x4, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x8, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv4=@local, 0x14, 0x26, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc, 0x35, 0xfffb}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff000000, 0x0, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 'tunl0\x00', 'veth0_to_team\x00', {}, {}, 0xd9, 0x80, 0x0, 0x16}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff, 0xff000000], [0xff, 0xff000000, 0xffffff00, 0xffffff00], 'nr0\x00', 'netpci0\x00', {}, {}, 0x67, 0xfd, 0x3, 0x14}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@remote, 0x2f, 0x1, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000150109023d00020000000009049c00030103510009050a000000ec0000090503130100000000072501"], 0x0) socket$inet_udp(0x2, 0x2, 0x0) 0s ago: executing program 3 (id=1132): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e20, 0xa, 0x4e21, 0xff4e, 0xa, 0x0, 0x0, 0x2e}, {0x83, 0xfffffffffffffffa, 0x6, 0x0, 0xc32, 0xfffffffffffffffc, 0x1, 0x80}, {0x401, 0x7fffffffffffffff, 0x2, 0x100}, 0x9, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x6c}, 0x2, @in=@empty, 0x0, 0x3, 0x1, 0x3, 0x4f91b143, 0x5, 0x7dff093b}}, 0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) kernel console output (not intermixed with test programs): 2] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.039390][ T5882] usb 5-1: config 0 descriptor?? [ 162.055045][ T5882] usb 5-1: can't set config #0, error -71 [ 162.082723][ T5882] usb 5-1: USB disconnect, device number 6 [ 163.601511][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 163.681903][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 163.764517][ T5918] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.954589][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 163.961420][ T5918] usb 5-1: config 0 has no interfaces? [ 163.975980][ T5918] usb 5-1: New USB device found, idVendor=1199, idProduct=6820, bcdDevice=32.c3 [ 164.003012][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.025124][ T5918] usb 5-1: Product: syz [ 164.029351][ T5918] usb 5-1: Manufacturer: syz [ 164.049285][ T5918] usb 5-1: SerialNumber: syz [ 164.065626][ T5918] usb 5-1: config 0 descriptor?? [ 164.490266][ T6352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.520653][ T6506] chnl_net:caif_netlink_parms(): no params data found [ 164.795898][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.813361][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.827107][ T6506] bridge_slave_0: entered allmulticast mode [ 164.847476][ T6506] bridge_slave_0: entered promiscuous mode [ 164.867244][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.902540][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.938562][ T6506] bridge_slave_1: entered allmulticast mode [ 164.956382][ T6506] bridge_slave_1: entered promiscuous mode [ 165.054231][ T6506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.095130][ T6506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.217134][ T6506] team0: Port device team_slave_0 added [ 165.247768][ T6506] team0: Port device team_slave_1 added [ 166.405371][ T29] audit: type=1804 audit(1732037297.738:15): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.172" name="/newroot/44/file0/bus" dev="ramfs" ino=10136 res=1 errno=0 [ 166.426073][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.837825][ T6054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.957083][ T6352] veth0_vlan: entered promiscuous mode [ 167.022829][ T6506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.049385][ T5928] usb 5-1: USB disconnect, device number 7 [ 167.067702][ T6506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.093604][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.299045][ T6506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.919857][ T6352] veth1_vlan: entered promiscuous mode [ 168.173870][ T6054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.190868][ T29] audit: type=1800 audit(1732037300.238:16): pid=6658 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.172" name="bus" dev="ramfs" ino=10136 res=0 errno=0 [ 168.226052][ T6506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.233116][ T6506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.259075][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.279015][ T6506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.623331][ T6352] veth0_macvtap: entered promiscuous mode [ 169.038958][ T6054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.305816][ T6352] veth1_macvtap: entered promiscuous mode [ 169.376516][ T5873] IPVS: starting estimator thread 0... [ 169.399144][ T6506] hsr_slave_0: entered promiscuous mode [ 169.441620][ T6506] hsr_slave_1: entered promiscuous mode [ 169.478067][ T6671] IPVS: using max 33 ests per chain, 79200 per kthread [ 169.886568][ T6054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.416440][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.426963][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.436847][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.447587][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.457763][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.468229][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.478147][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.488678][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.499848][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.509489][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.520015][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.530335][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.540808][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.550952][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.561633][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.571519][ T6352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.581999][ T6352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.594088][ T6352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.604221][ T6352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.613006][ T6352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.621787][ T6352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.630544][ T6352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.506326][ T6054] bridge_slave_1: left allmulticast mode [ 172.512489][ T6054] bridge_slave_1: left promiscuous mode [ 172.529137][ T6054] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.540438][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.563565][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.574840][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.590991][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.610625][ T6054] bridge_slave_0: left allmulticast mode [ 172.616999][ T6054] bridge_slave_0: left promiscuous mode [ 172.627924][ T6054] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.527710][ T5837] Bluetooth: hci1: command 0x0405 tx timeout [ 176.051243][ T6054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.071341][ T6054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.088279][ T6054] bond0 (unregistering): Released all slaves [ 178.369725][ T6739] input: syz1 as /devices/virtual/input/input6 [ 178.904825][ T6506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.911202][ T29] audit: type=1326 audit(1732037310.958:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6736 comm="syz.4.188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x0 [ 178.940403][ T6506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.979121][ T6506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.647649][ T6506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.353998][ T6762] ubi0: attaching mtd0 [ 181.358433][ T6762] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 181.371367][ T6762] x_tables: ip_tables: osf match: only valid for protocol 6 [ 183.836443][ T6054] hsr_slave_1: left promiscuous mode [ 183.880112][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.894562][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.986880][ T6054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.994554][ T6054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.043238][ T6054] veth1_macvtap: left promiscuous mode [ 184.051184][ T6054] veth0_macvtap: left promiscuous mode [ 184.057385][ T6054] veth1_vlan: left promiscuous mode [ 184.062837][ T6054] veth0_vlan: left promiscuous mode [ 184.815277][ T6798] Falling back ldisc for ptm0. [ 186.284631][ T5846] Bluetooth: hci0: command 0x0406 tx timeout [ 186.291891][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 186.298174][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 189.922151][ T6054] team0 (unregistering): Port device team_slave_1 removed [ 190.221267][ T6054] team0 (unregistering): Port device team_slave_0 removed [ 192.612612][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.871135][ T6506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.450088][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.462534][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.811634][ T6506] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.899700][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.906908][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.131238][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.138446][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.694502][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 198.655871][ T6922] xt_cgroup: xt_cgroup: no path or classid specified [ 198.925158][ T6506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.041162][ T6506] veth0_vlan: entered promiscuous mode [ 199.052912][ T6506] veth1_vlan: entered promiscuous mode [ 199.076722][ T6506] veth0_macvtap: entered promiscuous mode [ 199.085721][ T6506] veth1_macvtap: entered promiscuous mode [ 199.100818][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.111380][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.122212][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.136475][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.146514][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.157009][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.167206][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.177703][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.569235][ T6506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.982277][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.039422][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.194630][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.234416][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.274502][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.294682][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.323942][ T6506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.344479][ T6506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.370375][ T6506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.407338][ T6506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.424570][ T6506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.433293][ T6506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.465052][ T6506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.690412][ T6959] tipc: Started in network mode [ 203.695415][ T6959] tipc: Node identity da418ece0424, cluster identity 4711 [ 203.703633][ T6959] tipc: Enabled bearer , priority 10 [ 204.820338][ T969] tipc: Node number set to 3731197646 [ 206.178791][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.679507][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.691517][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.731833][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.743070][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 206.750526][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.804660][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 207.984962][ T5928] usb 2-1: config 0 has no interfaces? [ 207.990505][ T5928] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 208.004545][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.096041][ T5928] usb 2-1: config 0 descriptor?? [ 208.400400][ T6971] chnl_net:caif_netlink_parms(): no params data found [ 209.381808][ T5838] Bluetooth: hci4: command tx timeout [ 210.177144][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.192614][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.294224][ T6971] bridge_slave_0: entered allmulticast mode [ 210.686832][ T6971] bridge_slave_0: entered promiscuous mode [ 210.772567][ T5883] usb 2-1: USB disconnect, device number 3 [ 210.782098][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.853141][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.894706][ T6971] bridge_slave_1: entered allmulticast mode [ 210.930192][ T6971] bridge_slave_1: entered promiscuous mode [ 212.089033][ T3483] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.248900][ T5838] Bluetooth: hci4: command tx timeout [ 213.077109][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.616489][ T3483] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.287648][ T5839] Bluetooth: hci4: command tx timeout [ 214.465000][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.783275][ T7068] binder: 7058:7068 ioctl 400c620e 0 returned -14 [ 216.762510][ T5839] Bluetooth: hci4: command tx timeout [ 217.948705][ T7046] syz.4.251 (7046) used greatest stack depth: 16952 bytes left [ 218.221471][ T3483] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.254215][ T6971] team0: Port device team_slave_0 added [ 218.936770][ T6971] team0: Port device team_slave_1 added [ 218.947969][ T5839] Bluetooth: hci4: command tx timeout [ 220.281790][ T7112] x_tables: ip_tables: osf match: only valid for protocol 6 [ 223.280393][ T3483] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.365276][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.487098][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.023489][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.144278][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.183491][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.246706][ T7143] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.271'. [ 224.258333][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.523825][ T972] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 226.668631][ T3483] bridge_slave_1: left allmulticast mode [ 226.674324][ T3483] bridge_slave_1: left promiscuous mode [ 226.696281][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.764792][ T3483] bridge_slave_0: left allmulticast mode [ 226.770503][ T3483] bridge_slave_0: left promiscuous mode [ 226.782264][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.811801][ T972] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.829792][ T972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.910739][ T972] usb 2-1: config 0 descriptor?? [ 226.976211][ T972] cp210x 2-1:0.0: cp210x converter detected [ 227.575803][ T7167] nvme_fabrics: missing parameter 'transport=%s' [ 227.582526][ T7167] nvme_fabrics: missing parameter 'nqn=%s' [ 229.707878][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.852771][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.992396][ T3483] bond0 (unregistering): Released all slaves [ 230.441822][ T972] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 230.563721][ T972] cp210x 2-1:0.0: querying part number failed [ 230.667924][ T7198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.282'. [ 231.349804][ T972] usb 2-1: cp210x converter now attached to ttyUSB0 [ 231.361162][ T6971] hsr_slave_0: entered promiscuous mode [ 231.374261][ T972] usb 2-1: USB disconnect, device number 4 [ 231.442344][ T972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 231.450720][ T972] cp210x 2-1:0.0: device disconnected [ 231.470661][ T6971] hsr_slave_1: entered promiscuous mode [ 231.486369][ T6971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.494238][ T6971] Cannot create hsr debugfs directory [ 232.797638][ T3483] hsr_slave_0: left promiscuous mode [ 235.000508][ T3483] hsr_slave_1: left promiscuous mode [ 236.156884][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.115801][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.376796][ T7233] hub 9-0:1.0: USB hub found [ 237.382007][ T7233] hub 9-0:1.0: 1 port detected [ 237.394430][ T7233] ptrace attach of "./syz-executor exec"[5827] was attempted by "./syz-executor exec"[7233] [ 237.408130][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.582450][ T7238] netlink: 'syz.1.290': attribute type 2 has an invalid length. [ 238.135649][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.438620][ T3483] veth1_macvtap: left promiscuous mode [ 238.847837][ T3483] veth0_macvtap: left promiscuous mode [ 238.848076][ T3483] veth1_vlan: left promiscuous mode [ 238.848184][ T3483] veth0_vlan: left promiscuous mode [ 239.283096][ T7256] ip6t_srh: unknown srh match flags FDC7 [ 241.090400][ T29] audit: type=1804 audit(1732037373.128:18): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.294" name="/newroot/80/file0/bus" dev="ramfs" ino=14475 res=1 errno=0 [ 243.102671][ T29] audit: type=1800 audit(1732037375.148:19): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.294" name="bus" dev="ramfs" ino=14475 res=0 errno=0 [ 244.633539][ T3483] team0 (unregistering): Port device team_slave_1 removed [ 244.683824][ T3483] team0 (unregistering): Port device team_slave_0 removed [ 246.289185][ T7298] syz.3.304 uses obsolete (PF_INET,SOCK_PACKET) [ 249.415541][ T6971] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.451553][ T6971] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.463615][ T6971] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.487383][ T6971] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.764192][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.812360][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.840459][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.847696][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.907429][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.914628][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.467318][ T7355] syz.3.311: attempt to access beyond end of device [ 250.467318][ T7355] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 251.355215][ T7350] syz.5.310: attempt to access beyond end of device [ 251.355215][ T7350] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 251.368255][ T7350] syz.5.310: attempt to access beyond end of device [ 251.368255][ T7350] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 251.381170][ T7350] Mount JFS Failure: -5 [ 251.385383][ T7350] jfs_mount failed w/return code = -5 [ 251.778618][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.891280][ T6971] veth0_vlan: entered promiscuous mode [ 252.088488][ T7367] dlm: no locking on control device [ 252.108670][ T7367] program syz.4.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.979982][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 252.986162][ T5928] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 253.076984][ T6971] veth1_vlan: entered promiscuous mode [ 253.974940][ T5928] usb 4-1: device descriptor read/64, error -71 [ 254.182977][ T6971] veth0_macvtap: entered promiscuous mode [ 254.266646][ T6971] veth1_macvtap: entered promiscuous mode [ 254.373038][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.412256][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.432576][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.454976][ T5928] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 254.601497][ T5928] usb 4-1: device descriptor read/64, error -71 [ 254.627181][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.637307][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.686128][ T29] audit: type=1804 audit(1732037387.738:20): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.318" name="/newroot/85/file0/bus" dev="ramfs" ino=14839 res=1 errno=0 [ 256.470989][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.503046][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.513567][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.746226][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.760657][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.776353][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.782695][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.523610][ T5928] usb usb4-port1: attempt power cycle [ 259.148969][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.556932][ T29] audit: type=1800 audit(1732037391.608:21): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.318" name="bus" dev="ramfs" ino=14839 res=0 errno=0 [ 259.584489][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.632438][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.662414][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.673851][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.683970][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.694549][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.705698][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.799503][ T6971] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.834471][ T6971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.843667][ T6971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.880718][ T6971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.241828][ T1044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.250973][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.262024][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.306571][ T1044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.168444][ T7486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.186550][ T7484] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 269.738665][ T7486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.477689][ T7485] netlink: 108 bytes leftover after parsing attributes in process `syz.4.332'. [ 270.919443][ T7505] 9pnet_fd: Insufficient options for proto=fd [ 271.327516][ T7509] netlink: 25 bytes leftover after parsing attributes in process `syz.3.334'. [ 271.575291][ T7505] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 275.340104][ T7551] Invalid ELF header magic: != ELF [ 277.153939][ T7569] [U] [ 277.156948][ T7569] [U] [ 277.159630][ T7569] [U] [ 277.162302][ T7569] [U] [ 277.986081][ T7569] [U] [ 277.988851][ T7569] [U] [ 277.991555][ T7569] [U] [ 277.994238][ T7569] [U] [ 278.041282][ T7572] Smack: duplicate mount options [ 278.083167][ T7569] [U] [ 278.085933][ T7569] [U] [ 278.088615][ T7569] [U] [ 278.091296][ T7569] [U] [ 278.352309][ T7576] IPVS: persistence engine module ip_vs_pe_si not found [ 278.755196][ T7572] [U] [ 280.202664][ T7600] evm: overlay not supported [ 282.904541][ T29] audit: type=1804 audit(1732037412.938:22): pid=7601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.352" name="/newroot/79/file0/bus" dev="ramfs" ino=15463 res=1 errno=0 [ 284.120044][ T7616] IPVS: length: 198 != 24 [ 288.737249][ T7657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.641175][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 290.402845][ T7671] binder: 7663:7671 ioctl c0306201 200001c0 returned -22 [ 294.678413][ T7707] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 299.113843][ T29] audit: type=1804 audit(1732037429.788:23): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.375" name="/newroot/83/file0/bus" dev="ramfs" ino=16452 res=1 errno=0 [ 299.654478][ T29] audit: type=1800 audit(1732037431.658:24): pid=7736 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.375" name="bus" dev="ramfs" ino=16452 res=0 errno=0 [ 301.311934][ T7763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 301.872311][ T7762] netlink: 52 bytes leftover after parsing attributes in process `syz.4.381'. [ 301.891237][ T7762] nbd: must specify at least one socket [ 301.994648][ T7756] Cannot find del_set index 286 as target [ 302.187937][ T7773] vxcan3: entered promiscuous mode [ 302.193190][ T7773] vxcan3: entered allmulticast mode [ 304.259424][ T7796] overlayfs: failed to resolve './file0': -2 [ 304.284192][ T7792] netlink: 256 bytes leftover after parsing attributes in process `syz.4.385'. [ 304.299235][ T7792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.385'. [ 304.678669][ T7801] program syz.3.383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 304.705224][ T7801] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 304.799347][ T7801] ubi0: attaching mtd0 [ 306.127028][ T7801] ubi0: scanning is finished [ 306.131649][ T7801] ubi0: empty MTD device detected [ 307.351178][ T7826] netlink: 'syz.1.392': attribute type 27 has an invalid length. [ 308.124554][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 308.131842][ T5838] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 308.141823][ T7801] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 308.207605][ T7801] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 308.215177][ T7801] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 308.222152][ T7801] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 308.230253][ T7801] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 308.237404][ T7801] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 308.245974][ T7801] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2631800273 [ 308.289326][ T7801] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 308.377659][ T7831] ubi0: background thread "ubi_bgt0d" started, PID 7831 [ 308.385214][ T7821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.390'. [ 308.437739][ T29] audit: type=1326 audit(1732037440.488:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7819 comm="syz.4.390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa80e97e759 code=0x0 [ 309.662494][ T29] audit: type=1804 audit(1732037440.918:26): pid=7847 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.393" name="/newroot/12/file0/bus" dev="ramfs" ino=16602 res=1 errno=0 [ 312.642427][ T7867] mmap: syz.1.395 (7867) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 313.321543][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.334474][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.830479][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.851133][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.861370][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 313.870180][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.907107][ T7877] sp0: Synchronizing with TNC [ 315.839198][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 315.984828][ T5838] Bluetooth: hci1: command tx timeout [ 317.359013][ T29] audit: type=1804 audit(1732037448.638:27): pid=7905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.404" name="/newroot/88/file0/bus" dev="ramfs" ino=16694 res=1 errno=0 [ 317.381570][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.387977][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.396200][ T7882] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 318.072715][ T5838] Bluetooth: hci1: command tx timeout [ 319.488601][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.891897][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.908224][ T7868] bridge_slave_0: entered allmulticast mode [ 319.930695][ T7868] bridge_slave_0: entered promiscuous mode [ 320.067961][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.091574][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.715265][ T5839] Bluetooth: hci1: command tx timeout [ 320.896239][ T7868] bridge_slave_1: entered allmulticast mode [ 320.914901][ T7931] netlink: 'syz.1.407': attribute type 1 has an invalid length. [ 320.968419][ T7868] bridge_slave_1: entered promiscuous mode [ 321.311363][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.870403][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.780904][ T29] audit: type=1804 audit(1732037454.448:28): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.410" name="/newroot/15/file0/bus" dev="ramfs" ino=16721 res=1 errno=0 [ 322.920929][ T5839] Bluetooth: hci1: command tx timeout [ 325.824625][ T29] audit: type=1800 audit(1732037457.788:29): pid=7953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.410" name="bus" dev="ramfs" ino=16721 res=0 errno=0 [ 326.127594][ T29] audit: type=1326 audit(1732037458.178:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7965 comm="syz.3.413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x0 [ 326.196488][ T7868] team0: Port device team_slave_0 added [ 327.274545][ T64] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.463715][ T7976] xt_limit: Overflow, try lower: 0/0 [ 328.089495][ T64] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.909699][ T7868] team0: Port device team_slave_1 added [ 329.799082][ T64] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.879367][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.894196][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.094955][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.126336][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.133599][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.138220][ T7999] binder: 7998:7999 ioctl c0306201 0 returned -14 [ 330.178035][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.322154][ T64] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.472619][ T8001] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.481725][ T8001] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.490935][ T8001] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.499968][ T8001] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.536827][ T8001] vxlan0: entered promiscuous mode [ 331.542445][ T8001] vxlan0: entered allmulticast mode [ 331.728967][ T8001] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.737992][ T8001] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.746967][ T8001] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.755876][ T8001] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.549254][ T8018] overlayfs: missing 'lowerdir' [ 334.723994][ T64] bridge_slave_1: left allmulticast mode [ 334.724032][ T64] bridge_slave_1: left promiscuous mode [ 334.724132][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.726725][ T64] bridge_slave_0: left allmulticast mode [ 334.726748][ T64] bridge_slave_0: left promiscuous mode [ 334.726843][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.857047][ T8042] program syz.0.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.158987][ T8031] tty tty22: ldisc open failed (-12), clearing slot 21 [ 336.322968][ T29] audit: type=1804 audit(1732037468.368:31): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.422" name="/newroot/93/file0/bus" dev="ramfs" ino=17450 res=1 errno=0 [ 337.245231][ T29] audit: type=1800 audit(1732037469.298:32): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.422" name="bus" dev="ramfs" ino=17450 res=0 errno=0 [ 337.897279][ T8065] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.433'. [ 337.906698][ T8065] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 339.587704][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.616371][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.630727][ T64] bond0 (unregistering): Released all slaves [ 339.653368][ T7868] hsr_slave_0: entered promiscuous mode [ 339.660342][ T7868] hsr_slave_1: entered promiscuous mode [ 339.695303][ T8063] netlink: 'syz.0.432': attribute type 3 has an invalid length. [ 339.705301][ T8063] netlink: 3 bytes leftover after parsing attributes in process `syz.0.432'. [ 343.721013][ T8117] kAFS: unparsable volume name [ 344.754093][ T7868] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.891734][ T8128] overlayfs: failed to resolve './file0': -2 [ 346.349137][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 346.433159][ T64] hsr_slave_0: left promiscuous mode [ 346.439688][ T64] hsr_slave_1: left promiscuous mode [ 346.468027][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.481392][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.493510][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.504212][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.668397][ T64] veth1_macvtap: left promiscuous mode [ 346.673986][ T64] veth0_macvtap: left promiscuous mode [ 346.680284][ T64] veth1_vlan: left promiscuous mode [ 346.685808][ T64] veth0_vlan: left promiscuous mode [ 347.858666][ T9] usb 2-1: device not accepting address 5, error -71 [ 348.910012][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.449'. [ 349.490272][ T8160] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 350.799568][ T64] team0 (unregistering): Port device team_slave_1 removed [ 351.634482][ T29] audit: type=1804 audit(1732037483.538:33): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.453" name="/newroot/122/file0/bus" dev="ramfs" ino=17120 res=1 errno=0 [ 352.645697][ T64] team0 (unregistering): Port device team_slave_0 removed [ 353.976525][ T29] audit: type=1800 audit(1732037485.978:34): pid=8176 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.453" name="bus" dev="ramfs" ino=17120 res=0 errno=0 [ 355.576723][ T7868] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.682069][ T7868] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 355.705477][ T7868] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 355.982560][ T8198] 9pnet_fd: Insufficient options for proto=fd [ 356.738556][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.834016][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.848071][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.855268][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.876795][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.885013][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.192767][ T8207] syz.1.460[8207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.193232][ T8207] syz.1.460[8207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.205529][ T8207] syz.1.460[8207] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.995236][ T8212] netlink: 44 bytes leftover after parsing attributes in process `syz.3.464'. [ 358.369210][ T8222] netlink: 'syz.3.464': attribute type 4 has an invalid length. [ 358.377374][ T8222] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.464'. [ 358.543608][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.895245][ T8234] 9pnet_fd: p9_fd_create_tcp (8234): problem connecting socket to 127.0.0.1 [ 362.629532][ T8254] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 362.716882][ T8255] syz.0.468 (8255): drop_caches: 0 [ 363.940164][ T7868] veth0_vlan: entered promiscuous mode [ 365.216839][ T7868] veth1_vlan: entered promiscuous mode [ 365.238996][ T7868] veth0_macvtap: entered promiscuous mode [ 365.248296][ T7868] veth1_macvtap: entered promiscuous mode [ 365.371193][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.382055][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.392222][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.403022][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.413542][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.424507][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.434947][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.446557][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.485801][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.535141][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.546156][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.556441][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.567365][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.577487][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.588176][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.598413][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.609202][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.627990][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.911996][ T7868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.673665][ T7868] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.682895][ T7868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.693256][ T7868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.276137][ T8317] 9pnet_fd: Insufficient options for proto=fd [ 370.347638][ T8341] block nbd4: shutting down sockets [ 370.402006][ T3483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.456431][ T3483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.595715][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.605048][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.926354][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 371.926369][ T8369] binder_alloc: binder_alloc_mmap_handler: 8367 20ffd000-21000000 already mapped failed -16 [ 373.158403][ T8370] [U] ^C [ 374.940075][ T8388] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 375.443279][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.457229][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.465649][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.473866][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.483936][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 375.491998][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.347084][ T8412] syz.0.491: attempt to access beyond end of device [ 376.347084][ T8412] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 376.392404][ T8412] trusted_key: encrypted_key: key user:syz not found [ 376.919911][ T3483] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.177961][ T3483] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.412400][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.0.492'. [ 377.438376][ T8420] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 377.859674][ T5838] Bluetooth: hci1: command tx timeout [ 378.808597][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.828640][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.463323][ T3483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.885056][ T5838] Bluetooth: hci1: command tx timeout [ 380.086213][ T3483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.872696][ T8464] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 382.517166][ T5838] Bluetooth: hci1: command tx timeout [ 384.464044][ T8398] chnl_net:caif_netlink_parms(): no params data found [ 384.534592][ T5839] Bluetooth: hci1: command tx timeout [ 384.781767][ T9] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 385.457916][ T5918] IPVS: starting estimator thread 0... [ 386.664696][ T8472] IPVS: using max 21 ests per chain, 50400 per kthread [ 388.081152][ T8398] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.123424][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.234593][ T8398] bridge_slave_0: entered allmulticast mode [ 388.241640][ T8398] bridge_slave_0: entered promiscuous mode [ 388.717131][ T8398] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.724693][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.732184][ T8398] bridge_slave_1: entered allmulticast mode [ 388.740146][ T8398] bridge_slave_1: entered promiscuous mode [ 390.139007][ T8398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.174151][ T3483] bridge_slave_1: left allmulticast mode [ 390.180265][ T3483] bridge_slave_1: left promiscuous mode [ 390.190107][ T3483] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.597286][ T3483] bridge_slave_0: left allmulticast mode [ 390.605985][ T3483] bridge_slave_0: left promiscuous mode [ 390.688731][ T3483] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.617633][ T8567] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 393.783077][ T8575] capability: warning: `syz.4.516' uses 32-bit capabilities (legacy support in use) [ 393.810094][ T8575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.417072][ T5928] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 394.484646][ T5928] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 394.674838][ T8585] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 396.036718][ T29] audit: type=1326 audit(1732037527.608:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8576 comm="syz.3.517" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f742e77e759 code=0x0 [ 398.017893][ T3483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.038391][ T3483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.070743][ T3483] bond0 (unregistering): Released all slaves [ 398.093309][ T8398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.135148][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.517'. [ 398.166242][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.517'. [ 398.782307][ T8398] team0: Port device team_slave_0 added [ 399.037566][ T8398] team0: Port device team_slave_1 added [ 400.034012][ T5839] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 401.044019][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.044078][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.044104][ T8398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.048734][ T8398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.048774][ T8398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.048820][ T8398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.692116][ T8611] tty tty2: ldisc open failed (-12), clearing slot 1 [ 403.213380][ T8638] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 403.223425][ T8638] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 403.237816][ T8638] overlayfs: failed to set uuid (122/file1, err=-13); falling back to uuid=null. [ 403.267378][ T29] audit: type=1400 audit(1732037535.288:36): lsm=SMACK fn=smack_inode_setxattr action=denied subject="w" object="_" requested=w pid=8626 comm="syz.3.527" name="file1" dev="tmpfs" ino=687 [ 403.683377][ T8398] hsr_slave_0: entered promiscuous mode [ 403.724674][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 403.751126][ T8398] hsr_slave_1: entered promiscuous mode [ 403.774562][ T8398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.792940][ T8398] Cannot create hsr debugfs directory [ 407.030404][ T3483] hsr_slave_0: left promiscuous mode [ 407.071597][ T3483] hsr_slave_1: left promiscuous mode [ 407.090668][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.264510][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.233579][ T3483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.241271][ T3483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.286966][ T3483] veth1_macvtap: left promiscuous mode [ 409.962345][ T3483] veth0_macvtap: left promiscuous mode [ 410.099890][ T3483] veth1_vlan: left promiscuous mode [ 410.108387][ T3483] veth0_vlan: left promiscuous mode [ 412.960168][ T3483] team0 (unregistering): Port device team_slave_1 removed [ 413.055997][ T3483] team0 (unregistering): Port device team_slave_0 removed [ 413.193099][ T8713] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 413.739768][ T5928] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 413.965485][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 414.604102][ T8717] xt_CT: No such helper "syz1" [ 415.713519][ T8683] team0 (unregistering): Port device team_slave_0 removed [ 415.727081][ T8683] team0 (unregistering): Port device team_slave_1 removed [ 416.441555][ T8732] 9pnet_fd: Insufficient options for proto=fd [ 419.886865][ T8738] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.547'. [ 421.294909][ T8770] netlink: 10 bytes leftover after parsing attributes in process `syz.4.550'. [ 423.078108][ T9] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 424.241750][ T8804] delete_channel: no stack [ 424.515568][ T8780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 424.533273][ T5882] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 424.542933][ T5873] IPVS: starting estimator thread 0... [ 425.114824][ T8805] IPVS: using max 16 ests per chain, 38400 per kthread [ 425.590735][ T5873] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 427.024973][ T8398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 427.052298][ T5873] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 427.071983][ T8398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 427.083993][ T8398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 427.105934][ T8398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.385705][ T8832] syz.1.561 (8832): drop_caches: 2 [ 428.401000][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 428.741722][ T8398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.757090][ T8398] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.838734][ T8845] 9pnet_fd: Insufficient options for proto=fd [ 428.894157][ T8398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.904839][ T8398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.550422][ T5873] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 429.705068][ T5839] Bluetooth: hci4: unexpected event for opcode 0x2026 [ 429.785275][ T8850] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 429.793140][ T8850] netlink: 244 bytes leftover after parsing attributes in process `syz.1.565'. [ 430.139065][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.146268][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.405924][ T3483] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.413215][ T3483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.665285][ T972] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 430.673356][ T5982] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 430.974474][ T8847] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 430.982223][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 430.989607][ T8847] IPv6: NLM_F_CREATE should be set when creating new route [ 431.949009][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 431.953256][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 432.174340][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.566'. [ 432.997949][ T9] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 433.008206][ T8875] [U] ^R [ 433.185991][ T8398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.219493][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 433.229879][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 434.256891][ T5839] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 434.265575][ T5839] Bluetooth: hci4: Injecting HCI hardware error event [ 434.274645][ T5839] Bluetooth: hci4: hardware error 0x00 [ 434.383199][ T5982] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 434.398978][ T29] audit: type=1804 audit(1732037566.378:37): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.569" name="/newroot/136/file0/bus" dev="ramfs" ino=20196 res=1 errno=0 [ 435.379344][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 437.356661][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 437.372933][ T5839] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 437.424215][ T29] audit: type=1800 audit(1732037569.398:38): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.569" name="bus" dev="ramfs" ino=20196 res=0 errno=0 [ 437.731747][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 437.742884][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 437.820074][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.011595][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.023807][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 438.735745][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 438.746863][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 438.755165][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.171013][ T5982] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 440.267753][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274101][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.594947][ T8932] netlink: 48 bytes leftover after parsing attributes in process `syz.4.576'. [ 441.984935][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 441.998739][ T5838] Bluetooth: hci5: command tx timeout [ 442.055897][ T5982] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 442.085689][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 442.944928][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 443.466586][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 444.050094][ T8948] bridge0: port 3(syz_tun) entered blocking state [ 444.057099][ T8948] bridge0: port 3(syz_tun) entered disabled state [ 444.063919][ T8948] syz_tun: entered allmulticast mode [ 444.071433][ T8948] syz_tun: entered promiscuous mode [ 444.077657][ T8948] bridge0: port 3(syz_tun) entered blocking state [ 444.085702][ T8948] bridge0: port 3(syz_tun) entered forwarding state [ 444.280306][ T5838] Bluetooth: hci5: command tx timeout [ 444.286343][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 444.472222][ T8963] 9pnet_fd: Insufficient options for proto=fd [ 446.125484][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 446.164725][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 446.483711][ T8964] bridge0: port 3(erspan0) entered blocking state [ 446.491046][ T8964] bridge0: port 3(erspan0) entered disabled state [ 446.497865][ T8964] erspan0: entered allmulticast mode [ 446.504432][ T8964] erspan0: entered promiscuous mode [ 446.510227][ T8964] bridge0: port 3(erspan0) entered blocking state [ 446.517093][ T8964] bridge0: port 3(erspan0) entered forwarding state [ 446.587315][ T29] audit: type=1800 audit(1732037578.518:39): pid=8962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.579" name="/" dev="fuse" ino=1 res=0 errno=0 [ 446.625110][ T5838] Bluetooth: hci5: command tx timeout [ 446.926264][ T8971] netlink: 'syz.4.581': attribute type 12 has an invalid length. [ 446.934119][ T8971] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.581'. [ 446.964568][ T29] audit: type=1326 audit(1732037579.008:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.010582][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.026522][ T29] audit: type=1326 audit(1732037579.048:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.068493][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.098127][ T8900] bridge_slave_0: entered allmulticast mode [ 447.114587][ T29] audit: type=1326 audit(1732037579.058:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.136824][ T29] audit: type=1326 audit(1732037579.058:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.151334][ T8900] bridge_slave_0: entered promiscuous mode [ 447.173584][ T5982] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 447.223815][ T29] audit: type=1326 audit(1732037579.058:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.810439][ T5881] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 447.821226][ T29] audit: type=1326 audit(1732037579.078:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.847346][ T29] audit: type=1326 audit(1732037579.078:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 447.890936][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.031391][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.064670][ T8900] bridge_slave_1: entered allmulticast mode [ 448.074770][ T29] audit: type=1326 audit(1732037579.078:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7ffc0000 [ 448.118029][ T8900] bridge_slave_1: entered promiscuous mode [ 448.134399][ T5881] usb 5-1: Using ep0 maxpacket: 16 [ 448.144208][ T5881] usb 5-1: config 32 has an invalid interface number: 161 but max is 1 [ 448.162400][ T29] audit: type=1326 audit(1732037579.078:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f742e77d0f0 code=0x7ffc0000 [ 448.164337][ T5881] usb 5-1: config 32 has an invalid interface descriptor of length 2, skipping [ 448.691844][ T5838] Bluetooth: hci5: command tx timeout [ 448.736331][ T5881] usb 5-1: config 32 has an invalid interface number: 61 but max is 1 [ 448.894469][ T5881] usb 5-1: config 32 has no interface number 0 [ 448.914436][ T5881] usb 5-1: config 32 has no interface number 1 [ 448.923154][ T5881] usb 5-1: config 32 interface 61 has no altsetting 0 [ 448.987025][ T5881] usb 5-1: New USB device found, idVendor=083a, idProduct=5501, bcdDevice=be.86 [ 448.996613][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.004773][ T5881] usb 5-1: Product: syz [ 449.009211][ T5881] usb 5-1: Manufacturer: syz [ 449.013820][ T5881] usb 5-1: SerialNumber: syz [ 449.201219][ T5881] usb 5-1: can't set config #32, error -71 [ 450.052856][ T5881] usb 5-1: USB disconnect, device number 9 [ 450.652798][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 451.711396][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.817372][ T9021] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 452.469054][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 452.488545][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 452.528080][ T9016] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 452.586656][ T1044] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 452.600741][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.863480][ T8900] team0: Port device team_slave_0 added [ 455.040478][ T8900] team0: Port device team_slave_1 added [ 455.414562][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.421575][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.499950][ T9033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.514552][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.526689][ T9033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 455.598030][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.640289][ T9033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.674549][ T9033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 455.691632][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.096805][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.141747][ T9033] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 456.173567][ T9033] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 456.357188][ T9033] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 456.442804][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 456.442820][ T29] audit: type=1800 audit(1732037588.488:95): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.592" name="/" dev="fuse" ino=1 res=0 errno=0 [ 457.125901][ T8900] hsr_slave_0: entered promiscuous mode [ 457.134934][ T8900] hsr_slave_1: entered promiscuous mode [ 457.308531][ T9073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.599'. [ 457.678021][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 457.684556][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 458.138429][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 458.214389][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.740843][ T9086] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 459.931971][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 459.938738][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 460.419938][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 462.002584][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 462.459515][ T5838] Bluetooth: hci5: command 0x0c1a tx timeout [ 462.734448][ T9101] netlink: 40 bytes leftover after parsing attributes in process `syz.3.603'. [ 464.633224][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 467.335804][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 467.419354][ T6088] bridge_slave_1: left allmulticast mode [ 467.428076][ T6088] bridge_slave_1: left promiscuous mode [ 467.436675][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.506042][ T6088] bridge_slave_0: left allmulticast mode [ 467.511971][ T6088] bridge_slave_0: left promiscuous mode [ 467.536726][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.013974][ T29] audit: type=1800 audit(1732037601.998:96): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.612" name="/" dev="fuse" ino=1 res=0 errno=0 [ 470.605064][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 471.653564][ T29] audit: type=1107 audit(1732037603.668:97): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 471.908818][ T29] audit: type=1326 audit(1732037603.828:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 471.931338][ T29] audit: type=1326 audit(1732037603.948:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 471.955138][ T29] audit: type=1326 audit(1732037603.948:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 471.977005][ T29] audit: type=1326 audit(1732037603.948:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 472.004866][ T29] audit: type=1326 audit(1732037603.948:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 472.027186][ T29] audit: type=1326 audit(1732037603.948:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 472.049255][ T29] audit: type=1326 audit(1732037603.948:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 472.072267][ T29] audit: type=1326 audit(1732037603.948:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9154 comm="syz.4.615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 472.424433][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 474.434590][ T6088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.495917][ T6088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.537086][ T6088] bond0 (unregistering): Released all slaves [ 475.160922][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 475.160944][ T29] audit: type=1804 audit(1732037607.078:166): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.619" name="/newroot/163/file0/bus" dev="ramfs" ino=21960 res=1 errno=0 [ 476.000214][ T9185] xt_ecn: cannot match TCP bits for non-tcp packets [ 476.109971][ T6088] hsr_slave_0: left promiscuous mode [ 476.204765][ T6088] hsr_slave_1: left promiscuous mode [ 476.701691][ T1044] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 476.782417][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.809569][ T6088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.826641][ T9187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.620'. [ 477.864188][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 479.585602][ T6088] team0 (unregistering): Port device team_slave_1 removed [ 479.988945][ T6088] team0 (unregistering): Port device team_slave_0 removed [ 481.250419][ T9214] sch_tbf: peakrate 7 is lower than or equals to rate 62733 ! [ 481.595050][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 483.790038][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 483.799157][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 484.993846][ T8900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 485.107522][ T8900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 485.163231][ T8900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 485.318656][ T8900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 486.171881][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.190356][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.227162][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.234354][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.266455][ T1044] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.273612][ T1044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.576429][ T9276] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.165101][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 487.232597][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.449092][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 489.147954][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 489.484954][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 489.535799][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 489.862335][ T9312] No control pipe specified [ 490.150308][ T8900] veth0_vlan: entered promiscuous mode [ 490.191268][ T8900] veth1_vlan: entered promiscuous mode [ 490.223815][ T8900] veth0_macvtap: entered promiscuous mode [ 490.232985][ T8900] veth1_macvtap: entered promiscuous mode [ 490.249098][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.259696][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.269620][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.280227][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.290311][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.300851][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.310758][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.321421][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.332792][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.342628][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.353176][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.363058][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.373797][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.383734][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.394298][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.404133][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.414682][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.426006][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.435958][ T8900] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.444920][ T8900] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.453644][ T8900] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.462811][ T8900] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.668653][ T5982] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 491.020700][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.314947][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.991178][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 492.402839][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.426524][ T9335] block device autoloading is deprecated and will be removed. [ 492.444509][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.595300][ T969] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 494.030188][ T9345] binder: BINDER_SET_CONTEXT_MGR already set [ 494.035352][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 494.036743][ T9345] binder: 9342:9345 ioctl 4018620d 20000040 returned -16 [ 494.044003][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 494.687811][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 494.784984][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 495.033558][ T9353] pim6reg1: entered allmulticast mode [ 495.131553][ T9356] netlink: 104 bytes leftover after parsing attributes in process `syz.1.643'. [ 495.821017][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 496.342306][ T9364] binder: 9351:9364 ioctl c0306201 0 returned -14 [ 497.628858][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 497.850799][ T9378] netlink: 104 bytes leftover after parsing attributes in process `syz.3.647'. [ 498.120159][ T9381] netlink: 76 bytes leftover after parsing attributes in process `syz.6.648'. [ 498.234336][ T9381] Κό: entered promiscuous mode [ 498.695019][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 499.780655][ T9388] binder_alloc: binder_alloc_mmap_handler: 9377 20ffd000-21000000 already mapped failed -16 [ 499.815237][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.650'. [ 499.847726][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 500.366551][ T6836] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 500.378098][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 501.123366][ T9399] [U] ^C [ 501.224707][ T5982] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 501.648197][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 501.767824][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 501.927272][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.950127][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.295480][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 503.392352][ T8858] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 504.432589][ T9423] tty tty21: ldisc open failed (-12), clearing slot 20 [ 504.641103][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 504.861410][ T9433] input: syz0 as /devices/virtual/input/input8 [ 505.370636][ T9409] tty tty23: ldisc open failed (-12), clearing slot 22 [ 505.386733][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.6.659'. [ 505.430976][ T9425] tty tty1: ldisc open failed (-12), clearing slot 0 [ 505.439403][ T9432] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 505.599974][ T9442] Invalid source name [ 506.134356][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 506.238413][ T5882] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 506.425703][ T29] audit: type=1326 audit(1732037638.478:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9431 comm="syz.3.660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f742e77e759 code=0x0 [ 506.450566][ T9436] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 506.959235][ T9452] netlink: 112 bytes leftover after parsing attributes in process `syz.4.661'. [ 506.968335][ T9452] openvswitch: netlink: Message has 13 unknown bytes. [ 507.137614][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 507.334039][ T29] audit: type=1326 audit(1732037639.148:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9450 comm="syz.4.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e97e759 code=0x7fc00000 [ 507.545025][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 508.641553][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 508.837019][ T9480] Illegal XDP return value 4294967282 on prog (id 215) dev N/A, expect packet loss! [ 509.341786][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 510.355321][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 511.315953][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 511.419425][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 511.468573][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 511.969469][ T9506] bridge0: port 4(erspan0) entered blocking state [ 511.977056][ T9506] bridge0: port 4(erspan0) entered disabled state [ 511.987393][ T9506] erspan0: entered allmulticast mode [ 512.016805][ T9506] erspan0: entered promiscuous mode [ 512.024448][ T9506] bridge0: port 4(erspan0) entered blocking state [ 512.032264][ T9506] bridge0: port 4(erspan0) entered forwarding state [ 512.710172][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 512.718464][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 513.174506][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 513.754849][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 513.863304][ T9521] netlink: 52 bytes leftover after parsing attributes in process `syz.6.670'. [ 514.106162][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 514.415886][ T9515] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 514.494937][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.672'. [ 515.231607][ T9525] : entered promiscuous mode [ 515.283798][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 516.310408][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 516.505638][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 516.540963][ T5839] Bluetooth: hci1: command 0xfc11 tx timeout [ 516.608785][ T5838] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 517.015297][ T5883] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 517.040606][ T1044] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 517.484739][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 518.623133][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 519.496012][ T9594] 9pnet_virtio: no channels available for device syz [ 520.160697][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 520.194178][ T8614] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 522.355276][ T9598] fuse: Bad value for 'fd' [ 522.360509][ T5881] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 522.734904][ T5918] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 522.862804][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 526.477363][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 529.434747][ T9641] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 529.865605][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 531.877971][ T9666] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 531.896108][ T9665] overlayfs: failed to resolve './bus': -2 [ 532.027356][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 533.699073][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 533.864003][ T9696] Smack: duplicate mount options [ 534.031323][ T9697] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 534.041560][ T9697] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 534.050947][ T9697] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 535.565216][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 538.041774][ T9716] 9pnet: Found fid 0 not clunked [ 538.068093][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 538.336064][ T29] audit: type=1804 audit(1732037670.388:169): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.703" name="/newroot/167/file0/bus" dev="ramfs" ino=23912 res=1 errno=0 [ 538.793437][ T9724] input: syz0 as /devices/virtual/input/input9 [ 538.906064][ T29] audit: type=1800 audit(1732037670.938:170): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.703" name="bus" dev="ramfs" ino=23912 res=0 errno=0 [ 540.056638][ T9738] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 541.252410][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 542.625290][ T9761] netlink: 64 bytes leftover after parsing attributes in process `syz.0.710'. [ 544.783443][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 545.149594][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 547.737972][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 547.962038][ T9794] input: syz0 as /devices/virtual/input/input10 [ 550.697804][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 553.450639][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 554.891206][ T9845] delete_channel: no stack [ 555.150665][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 556.249933][ T9862] Cannot find set identified by id 0 to match [ 556.258777][ T9862] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.727'. [ 556.269757][ T9862] netlink: 8280 bytes leftover after parsing attributes in process `syz.1.727'. [ 557.325173][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 559.539431][ T1044] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 561.892949][ T9903] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 562.060166][ T9904] netlink: 36 bytes leftover after parsing attributes in process `syz.3.736'. [ 562.250423][ T29] audit: type=1326 audit(1732037694.148:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.3.736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x0 [ 563.228953][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 563.241705][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.248908][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.399530][ T5881] kernel write not supported for file bpf-prog (pid: 5881 comm: kworker/0:3) [ 564.188563][ T9940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 565.014057][ T1044] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 565.188410][ T9943] mkiss: ax0: crc mode is auto. [ 566.560957][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 566.666769][ T9967] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 0, id = 0 [ 566.683722][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.746'. [ 568.191754][ T9979] hub 2-0:1.0: USB hub found [ 568.205875][ T9979] hub 2-0:1.0: 1 port detected [ 568.984826][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 570.857753][T10008] netlink: 'syz.3.749': attribute type 7 has an invalid length. [ 570.865610][T10008] netlink: 'syz.3.749': attribute type 8 has an invalid length. [ 570.873334][T10008] netlink: 224 bytes leftover after parsing attributes in process `syz.3.749'. [ 570.891786][T10006] input: syz1 as /devices/virtual/input/input12 [ 570.947605][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 571.047292][T10012] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 571.759338][T10019] netlink: 'syz.1.756': attribute type 7 has an invalid length. [ 571.767237][T10019] netlink: 'syz.1.756': attribute type 8 has an invalid length. [ 571.775504][T10019] netlink: 224 bytes leftover after parsing attributes in process `syz.1.756'. [ 572.067791][T10016] input: syz1 as /devices/virtual/input/input13 [ 572.125631][T10012] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.472748][T10021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.664701][T10021] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 572.880558][T10021] bond1: (slave vcan1): Error -95 calling set_mac_address [ 573.318402][T10023] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 573.445042][T10023] bond1: (slave batadv1): making interface the new active one [ 573.513544][T10023] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 573.710699][ T5841] Bluetooth: hci5: unexpected event for opcode 0x0406 [ 573.797660][T10040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.760'. [ 574.629410][T10035] kvm: emulating exchange as write [ 574.659461][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 576.150236][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 576.703492][T10098] trusted_key: encrypted_key: insufficient parameters specified [ 576.846523][T10097] block device autoloading is deprecated and will be removed. [ 577.943849][T10111] binder: 10099:10111 ioctl c0306201 200003c0 returned -22 [ 578.946868][T10119] dccp_invalid_packet: P.Data Offset(100) too large [ 580.486779][T10150] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 581.427016][ T5982] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 581.675498][ T5982] usb 7-1: Using ep0 maxpacket: 32 [ 581.713251][ T5982] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 581.854656][ T1044] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 581.910601][ T5982] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.104929][ T5982] usb 7-1: Product: syz [ 582.196381][ T5982] usb 7-1: Manufacturer: syz [ 582.225789][ T5982] usb 7-1: SerialNumber: syz [ 582.252981][ T5982] usb 7-1: config 0 descriptor?? [ 582.352121][ T5982] usb 7-1: selecting invalid altsetting 3 [ 582.401399][ T5982] comedi comedi0: could not set alternate setting 3 in high speed [ 582.444712][ T5982] usbdux 7-1:0.0: driver 'usbdux' failed to auto-configure device. [ 582.466358][ T5982] usbdux 7-1:0.0: probe with driver usbdux failed with error -22 [ 582.557266][ T5882] usb 7-1: USB disconnect, device number 2 [ 582.790730][ T5982] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 583.576351][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 583.833524][ T5982] usb 2-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 583.854456][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.862523][ T5982] usb 2-1: Product: syz [ 583.873843][ T5982] usb 2-1: Manufacturer: syz [ 583.880709][ T5982] usb 2-1: SerialNumber: syz [ 583.940186][ T5982] usb 2-1: config 0 descriptor?? [ 584.347297][T10220] x_tables: unsorted entry at hook 3 [ 584.904935][ T5982] hub 2-1:0.0: bad descriptor, ignoring hub [ 584.910914][ T5982] hub 2-1:0.0: probe with driver hub failed with error -5 [ 584.920116][ T5982] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 584.956194][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 585.908472][ T5982] gspca_vc032x: reg_w err -110 [ 585.908624][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908662][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908698][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908734][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908770][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908805][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908841][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908876][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908912][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908948][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.908983][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909019][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909087][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909124][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909160][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909195][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909257][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909317][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909361][ T5982] gspca_vc032x: I2c Bus Busy Wait 00 [ 585.909425][ T5982] gspca_vc032x: Unknown sensor... [ 585.909724][ T5982] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 586.281466][T10224] tty tty32: ldisc open failed (-12), clearing slot 31 [ 586.509640][ T5883] usb 2-1: USB disconnect, device number 7 [ 586.892963][T10243] netlink: 'syz.4.801': attribute type 7 has an invalid length. [ 586.900865][T10243] netlink: 'syz.4.801': attribute type 8 has an invalid length. [ 586.908665][T10243] netlink: 224 bytes leftover after parsing attributes in process `syz.4.801'. [ 586.952588][T10243] input: syz1 as /devices/virtual/input/input14 [ 587.409920][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 587.788585][T10254] Invalid source name [ 587.792780][T10254] UBIFS error (pid: 10254): cannot open "./file0", error -22 [ 590.065284][ T29] audit: type=1804 audit(1732037721.508:172): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.802" name="/newroot/183/file0/bus" dev="ramfs" ino=25753 res=1 errno=0 [ 591.077119][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 591.508915][ T29] audit: type=1804 audit(1732037723.218:173): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.802" name="/newroot/183/file0/bus" dev="ramfs" ino=25753 res=1 errno=0 [ 591.667285][ T29] audit: type=1800 audit(1732037723.708:174): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.802" name="bus" dev="ramfs" ino=25753 res=0 errno=0 [ 591.771133][ T29] audit: type=1800 audit(1732037723.718:175): pid=10237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.802" name="bus" dev="ramfs" ino=25753 res=0 errno=0 [ 591.950555][ T29] audit: type=1804 audit(1732037723.738:176): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.811" name="/newroot/206/file1" dev="fuse" ino=1 res=1 errno=0 [ 592.052419][ T29] audit: type=1804 audit(1732037723.738:177): pid=10276 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.811" name="/newroot/206/file1" dev="fuse" ino=1 res=1 errno=0 [ 593.567222][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 595.071711][T10300] 9pnet_fd: p9_fd_create_unix (10300): problem connecting socket: ./file0: -111 [ 596.566921][T10325] tmpfs: Bad value for 'mpol' [ 597.015109][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 597.496660][ T8614] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 597.654318][ T8614] usb 4-1: Using ep0 maxpacket: 8 [ 597.676327][ T8614] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 597.685007][ T8614] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 597.695862][ T8614] usb 4-1: config 135 has no interface number 0 [ 597.702160][ T8614] usb 4-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 597.716326][ T8614] usb 4-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 597.739891][ T8614] usb 4-1: config 135 interface 230 has no altsetting 0 [ 597.756377][ T8614] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 597.774258][ T8614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.782332][ T8614] usb 4-1: Product: syz [ 597.787221][ T8614] usb 4-1: Manufacturer: syz [ 597.791851][ T8614] usb 4-1: SerialNumber: syz [ 597.811618][ T8614] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 597.820251][ T8614] usb 4-1: No valid video chain found. [ 598.155411][ T8614] usb 4-1: USB disconnect, device number 6 [ 599.230060][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 600.174853][ T969] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 600.304838][ T5873] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 600.504433][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 600.528879][ T5873] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 600.637992][ T969] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=3f.cb [ 600.647195][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.655532][ T969] usb 2-1: Product: syz [ 600.659691][ T969] usb 2-1: Manufacturer: syz [ 600.664557][ T5873] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.673068][ T969] usb 2-1: SerialNumber: syz [ 600.715026][ T969] usb 2-1: config 0 descriptor?? [ 600.724574][ T5873] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 600.768620][ T5873] usb 4-1: config 1 has no interface number 1 [ 600.801531][ T5873] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 600.854129][ T5873] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 600.884972][ T5873] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16430, setting to 1024 [ 601.077857][ T5873] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 601.103617][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.112331][ T5873] usb 4-1: Product: syz [ 601.116857][ T5873] usb 4-1: Manufacturer: syz [ 601.121649][ T5873] usb 4-1: SerialNumber: syz [ 601.361964][ T969] usb 2-1: USB disconnect, device number 8 [ 601.755451][ T5873] usb 4-1: USB disconnect, device number 7 [ 602.038528][T10322] udevd[10322]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 602.134975][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 603.386847][ T5882] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 603.996480][T10412] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 604.005911][T10412] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 604.017237][T10412] overlayfs: failed to set uuid (213/file1, err=-13); falling back to uuid=null. [ 604.314656][ T29] audit: type=1400 audit(1732037736.068:178): lsm=SMACK fn=smack_inode_setxattr action=denied subject="w" object="_" requested=w pid=10401 comm="syz.4.845" name="file1" dev="tmpfs" ino=1199 [ 604.322160][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 604.344910][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 604.356731][ T5882] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 604.367057][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.415123][ T5882] usb 4-1: config 0 descriptor?? [ 604.435163][T10395] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 604.480901][T10418] sp0: Synchronizing with TNC [ 604.690609][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 604.886805][ T5882] ath6kl: Failed to submit usb control message: -71 [ 604.894123][ T5882] ath6kl: unable to send the bmi data to the device: -71 [ 604.901749][ T5882] ath6kl: Unable to send get target info: -71 [ 604.923399][ T5882] ath6kl: Failed to init ath6kl core: -71 [ 605.367559][T10416] [U] θ` [ 605.525768][ T5882] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 605.688836][ T5882] usb 4-1: USB disconnect, device number 8 [ 605.745372][ T29] audit: type=1326 audit(1732037737.788:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 605.834343][ T29] audit: type=1326 audit(1732037737.788:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 605.925880][ T29] audit: type=1326 audit(1732037737.798:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 606.084284][ T29] audit: type=1326 audit(1732037737.798:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 606.105941][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.114274][ T29] audit: type=1326 audit(1732037737.798:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10439 comm="syz.1.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 606.819616][T10474] trusted_key: encrypted_key: insufficient parameters specified [ 609.308498][ T29] audit: type=1804 audit(1732037739.698:184): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.869" name="/newroot/219/file0/bus" dev="ramfs" ino=26625 res=1 errno=0 [ 609.412482][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 610.170846][T10517] netlink: zone id is out of range [ 610.229172][T10517] netlink: zone id is out of range [ 610.345331][ T29] audit: type=1800 audit(1732037742.388:185): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.869" name="bus" dev="ramfs" ino=26625 res=0 errno=0 [ 610.424733][T10517] netlink: zone id is out of range [ 610.430486][T10517] netlink: zone id is out of range [ 610.455433][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 610.499137][T10517] netlink: set zone limit has 4 unknown bytes [ 611.147885][T10550] netlink: 768 bytes leftover after parsing attributes in process `syz.1.888'. [ 611.156990][T10550] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 611.173710][T10550] delete_channel: no stack [ 611.192974][T10517] netlink: 14 bytes leftover after parsing attributes in process `syz.0.876'. [ 612.199395][ T29] audit: type=1804 audit(1732037743.378:186): pid=10553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.886" name="/newroot/51/file0/bus" dev="ramfs" ino=26237 res=1 errno=0 [ 613.032386][T10520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 613.534583][ T969] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 613.704447][ T969] usb 2-1: Using ep0 maxpacket: 8 [ 613.738978][ T969] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.789953][ T969] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.865876][ T969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 613.938611][ T969] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 614.015796][ T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.078367][ T969] usb 2-1: Product: syz [ 614.107923][ T969] usb 2-1: Manufacturer: syz [ 614.157354][ T969] usb 2-1: SerialNumber: syz [ 614.187213][ T969] usb 2-1: config 0 descriptor?? [ 614.231308][ T969] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 614.320762][ T29] audit: type=1800 audit(1732037746.368:187): pid=10553 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.886" name="bus" dev="ramfs" ino=26237 res=0 errno=0 [ 614.449910][ T969] usb 2-1: USB disconnect, device number 9 [ 615.809704][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 615.830268][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 615.839913][ T29] audit: type=1804 audit(1732037747.318:188): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.897" name="/newroot/122/file0/bus" dev="ramfs" ino=26283 res=1 errno=0 [ 617.574577][ T29] audit: type=1800 audit(1732037749.628:189): pid=10584 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.897" name="bus" dev="ramfs" ino=26283 res=0 errno=0 [ 620.328464][ T29] audit: type=1107 audit(1732037752.148:190): pid=10626 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 620.789861][ T29] audit: type=1326 audit(1732037752.668:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 620.882770][ T29] audit: type=1326 audit(1732037752.798:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 620.943540][ T29] audit: type=1326 audit(1732037752.798:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.113655][ T29] audit: type=1326 audit(1732037752.798:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.210798][ T29] audit: type=1326 audit(1732037752.798:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.250065][ T969] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 621.324831][ T3483] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 621.373226][ T29] audit: type=1326 audit(1732037752.798:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.444293][ T29] audit: type=1326 audit(1732037752.798:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.444568][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 621.466270][ T29] audit: type=1326 audit(1732037752.798:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.493118][ T29] audit: type=1326 audit(1732037752.798:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.515201][ T29] audit: type=1326 audit(1732037752.798:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.519444][ T969] usb 5-1: unable to get BOS descriptor or descriptor too short [ 621.536920][ T29] audit: type=1326 audit(1732037752.798:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10626 comm="syz.3.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742e77e759 code=0x7fc00000 [ 621.621619][ T969] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 621.632791][ T969] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 621.648582][ T969] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 621.658143][ T969] usb 5-1: config 128 has no interface number 0 [ 621.664648][ T969] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 621.676241][ T969] usb 5-1: config 128 interface 127 has no altsetting 0 [ 621.698005][ T969] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 621.707637][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.718950][ T969] usb 5-1: Product: syz [ 621.723164][ T969] usb 5-1: Manufacturer: syz [ 621.729707][ T969] usb 5-1: SerialNumber: syz [ 621.746920][T10638] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 622.040429][T10656] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 622.608072][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 623.055218][ T969] usb 5-1: USB disconnect, device number 10 [ 623.285566][T10639] udevd[10639]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 623.347381][T10677] netlink: 'syz.3.934': attribute type 5 has an invalid length. [ 623.494726][ T8614] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 624.527101][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.533731][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.737486][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.950'. [ 627.011393][T10725] netlink: 'syz.4.951': attribute type 21 has an invalid length. [ 627.086956][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 628.332640][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 630.545265][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 630.545322][ T29] audit: type=1107 audit(1732037762.428:257): pid=10781 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 630.610773][ T29] audit: type=1326 audit(1732037762.618:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.238751][ T29] audit: type=1326 audit(1732037763.148:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.260829][ T29] audit: type=1326 audit(1732037763.148:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.282479][ T29] audit: type=1326 audit(1732037763.148:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.304271][ T29] audit: type=1326 audit(1732037763.148:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.326756][ T29] audit: type=1326 audit(1732037763.148:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.348833][ T29] audit: type=1326 audit(1732037763.148:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.373288][ T29] audit: type=1326 audit(1732037763.158:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.395485][ T29] audit: type=1326 audit(1732037763.158:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10781 comm="syz.0.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0217e759 code=0x7fc00000 [ 631.519844][T10802] random: crng reseeded on system resumption [ 632.277290][T10808] tty tty33: ldisc open failed (-12), clearing slot 32 [ 632.724996][T10820] random: crng reseeded on system resumption [ 632.862622][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 632.906255][ T5928] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 633.074452][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 633.103712][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 633.145087][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 633.200685][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 633.236766][ T5928] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 633.269796][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 633.289757][ T5928] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 633.307615][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.322619][ T5928] usb 5-1: Product: syz [ 633.330587][ T5928] usb 5-1: Manufacturer: syz [ 633.336695][ T5928] usb 5-1: SerialNumber: syz [ 633.374047][ T5928] usb 5-1: config 0 descriptor?? [ 633.389881][ T5928] usb 5-1: no audio or video endpoints found [ 633.415155][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 633.620008][ T8614] usb 5-1: USB disconnect, device number 11 [ 636.639130][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 636.639148][ T29] audit: type=1326 audit(1732037768.688:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10883 comm="syz.1.1009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x0 [ 637.926648][ T29] audit: type=1804 audit(1732037769.978:326): pid=10905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1010" name="/newroot/232/file0/bus" dev="ramfs" ino=27927 res=1 errno=0 [ 637.966304][ T52] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 639.001261][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 640.052255][ T29] audit: type=1800 audit(1732037772.088:327): pid=10905 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1010" name="bus" dev="ramfs" ino=27927 res=0 errno=0 [ 640.690803][T10934] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 641.188785][T10934] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.1025'. [ 641.225369][T10934] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 641.273109][T10934] netlink: 'syz.4.1025': attribute type 2 has an invalid length. [ 641.372307][T10934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'. [ 641.861332][T10939] trusted_key: encrypted_key: insufficient parameters specified [ 642.199867][T10392] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 643.552555][T10972] trusted_key: encrypted_key: insufficient parameters specified [ 643.644262][T10392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.655414][T10392] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.668381][T10392] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 643.677634][T10392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.727223][ T12] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 644.785476][T10392] usb 2-1: config 0 descriptor?? [ 646.226190][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 646.353988][ T29] audit: type=1804 audit(1732037776.088:328): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1034" name="/newroot/235/file0/bus" dev="ramfs" ino=27452 res=1 errno=0 [ 646.375804][ T29] audit: type=1804 audit(1732037776.838:329): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1034" name="/newroot/235/file0/bus" dev="ramfs" ino=27452 res=1 errno=0 [ 646.398148][ T29] audit: type=1800 audit(1732037778.308:330): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1034" name="bus" dev="ramfs" ino=27452 res=0 errno=0 [ 646.497724][T10392] usb 2-1: can't set config #0, error -71 [ 646.507192][T10392] usb 2-1: USB disconnect, device number 10 [ 646.709782][T10997] tmpfs: Cannot retroactively limit inodes [ 647.155455][ T969] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 647.267550][ T5882] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 647.334635][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 647.344347][ T969] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 647.354795][ T969] usb 5-1: config 0 has no interface number 0 [ 647.371826][ T969] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 647.386530][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.406222][ T969] usb 5-1: Product: syz [ 647.418036][ T969] usb 5-1: Manufacturer: syz [ 647.433666][ T969] usb 5-1: SerialNumber: syz [ 647.462429][ T969] usb 5-1: config 0 descriptor?? [ 647.480291][ T969] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 647.565958][ T5882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.576554][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.588365][ T5882] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.597928][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.606725][ T5882] usb 7-1: SerialNumber: syz [ 648.232822][ T5882] usb 7-1: 0:2 : does not exist [ 648.268602][ T5882] usb 7-1: unit 255 not found! [ 648.378943][ T5882] usb 7-1: USB disconnect, device number 4 [ 648.393376][ T969] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 648.407833][ T969] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 648.670058][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 648.670559][ T8614] usb 5-1: USB disconnect, device number 12 [ 648.673540][ T8614] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 648.679003][ T8614] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 648.679505][ T8614] quatech2 5-1:0.51: device disconnected [ 648.728484][T11023] udevd[11023]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.509044][ T64] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 651.272790][T11067] veth0_to_team: entered promiscuous mode [ 651.291195][T11067] veth0_to_team: entered allmulticast mode [ 651.705553][T11076] syz.1.1071 (11076) used greatest stack depth: 16440 bytes left [ 652.126587][ T6520] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 653.134280][ T8614] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 653.474391][ T8614] usb 4-1: Using ep0 maxpacket: 32 [ 653.575947][ T8614] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 653.624227][ T8614] usb 4-1: config 0 has no interface number 0 [ 653.671584][ T8614] usb 4-1: config 0 interface 12 has no altsetting 0 [ 653.726664][ T8614] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 653.781641][ T8614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.808015][ T8614] usb 4-1: Product: syz [ 653.854318][ T8614] usb 4-1: Manufacturer: syz [ 653.871591][ T8614] usb 4-1: SerialNumber: syz [ 653.889078][ T8614] usb 4-1: config 0 descriptor?? [ 654.094663][ T969] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 654.339845][ T969] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 654.352384][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 654.369060][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 654.379427][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 654.391318][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 654.422795][ T969] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 654.431903][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 654.469484][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 654.482845][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 654.511541][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 654.526350][ T969] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 654.537432][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 654.539459][T11114] usb usb8: usbfs: process 11114 (syz.1.1088) did not claim interface 0 before use [ 654.570889][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 654.575196][ T8614] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 654.587955][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 654.595407][T11115] warning: `syz.0.1087' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 654.621543][ T8614] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 654.629229][ T969] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 654.634319][ T8614] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 654.659488][ T969] usb 7-1: string descriptor 0 read error: -22 [ 654.667321][ T8614] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 654.672024][ T969] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 654.701775][ T969] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.709886][ T8614] usb 4-1: USB disconnect, device number 9 [ 654.772548][ T969] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 655.005138][ T969] usb 7-1: USB disconnect, device number 5 [ 655.245871][ T6088] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 657.404726][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 657.566958][T11165] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 657.595828][ T29] audit: type=1326 audit(1732037789.648:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 657.754495][ T29] audit: type=1326 audit(1732037789.648:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 657.820580][ T29] audit: type=1326 audit(1732037789.668:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 658.254471][ T8614] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 658.270342][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 658.308813][ T29] audit: type=1326 audit(1732037789.668:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 658.454907][ T11] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 658.518646][ T8614] usb 2-1: device descriptor read/64, error -32 [ 658.568036][ T29] audit: type=1326 audit(1732037789.668:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 658.590282][ T29] audit: type=1326 audit(1732037789.668:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 658.612989][ T29] audit: type=1326 audit(1732037789.668:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 658.684917][ T29] audit: type=1326 audit(1732037789.668:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11176 comm="syz.1.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1cf7e759 code=0x7ffc0000 [ 658.784581][ T8614] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 659.331966][ T8614] usb 2-1: device descriptor read/64, error -71 [ 659.384457][T10392] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 659.454976][ T8614] usb usb2-port1: attempt power cycle [ 659.559513][T10392] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 659.567979][T10392] usb 5-1: config 0 has no interface number 0 [ 659.578306][T10392] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 659.589258][T10392] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.597504][T10392] usb 5-1: Product: syz [ 659.601998][T10392] usb 5-1: Manufacturer: syz [ 659.606754][T10392] usb 5-1: SerialNumber: syz [ 659.621842][T10392] usb 5-1: config 0 descriptor?? [ 659.794719][ T8614] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 659.815146][ T8614] usb 2-1: device descriptor read/8, error -71 [ 659.844677][T10392] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 659.893064][T10392] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 659.913100][T10392] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 659.924072][T10392] usb 5-1: media controller created [ 659.960682][T10392] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.014477][ T5928] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 660.054478][ T8614] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 660.063237][T10392] usb 5-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 660.074919][ T8614] usb 2-1: device descriptor read/8, error -71 [ 660.078604][T10392] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 660.134329][T10392] DVB: Unable to find symbol mxl5005s_attach() [ 660.194125][ T5928] usb 7-1: Using ep0 maxpacket: 16 [ 660.205216][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.217091][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.228046][ T5928] usb 7-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 660.241249][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.372424][ T5928] usb 7-1: config 0 descriptor?? [ 660.425534][T10392] usb 5-1: USB disconnect, device number 13 [ 660.455465][ T8614] usb usb2-port1: unable to enumerate USB device [ 661.017118][ T5928] nzxt-kraken2 0003:1E71:170E.0001: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.6-1/input0 [ 661.312050][ T6054] IPVS: ovf: UDP 127.0.0.1:0 - no destination available [ 662.127395][ T5928] usb 7-1: USB disconnect, device number 6 [ 662.227497][T11240] ------------[ cut here ]------------ [ 662.233441][T11240] WARNING: CPU: 0 PID: 11240 at io_uring/memmap.c:144 io_pin_pages+0x149/0x180 [ 662.243981][T11240] Modules linked in: [ 662.248941][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.3.1132 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 662.259892][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 662.270246][T11240] RIP: 0010:io_pin_pages+0x149/0x180 [ 662.275801][T11240] Code: 63 fd 4c 89 f8 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 ca aa e3 fc 90 0f 0b 90 49 c7 c7 ea ff ff ff eb de e8 b8 aa e3 fc 90 <0f> 0b 90 49 c7 c7 b5 ff ff ff eb cc 44 89 f1 80 e1 07 80 c1 03 38 [ 662.296114][T11240] RSP: 0018:ffffc90017b3fc10 EFLAGS: 00010283 [ 662.302541][T11240] RAX: ffffffff84b146c8 RBX: fff0000000000091 RCX: 0000000000040000 [ 662.310616][T11240] RDX: ffffc900047bc000 RSI: 0000000000000401 RDI: 0000000000000402 [ 662.318794][T11240] RBP: 000ffffffffffff0 R08: ffffffff84b145ce R09: 1ffff1100f614de0 [ 662.327183][T11240] R10: dffffc0000000000 R11: ffffed100f614de1 R12: ffffffffffff0000 [ 662.335610][T11240] R13: ffffffffffff0000 R14: ffffc90017b3fc80 R15: 1ffff1100b876520 [ 662.344842][T11240] FS: 00007f742f61e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 662.355302][T11240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 662.362369][T11240] CR2: 00007f742e928850 CR3: 00000000505e2000 CR4: 00000000003526f0 [ 662.371138][T11240] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 662.379906][T11240] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 662.388090][T11240] Call Trace: [ 662.391401][T11240] [ 662.394457][T11240] ? __warn+0x168/0x4e0 [ 662.398661][T11240] ? io_pin_pages+0x149/0x180 [ 662.403487][T11240] ? report_bug+0x2b3/0x500 [ 662.408096][T11240] ? io_pin_pages+0x149/0x180 [ 662.412823][T11240] ? handle_bug+0x60/0x90 [ 662.417270][T11240] ? exc_invalid_op+0x1a/0x50 [ 662.421983][T11240] ? asm_exc_invalid_op+0x1a/0x20 [ 662.427096][T11240] ? io_pin_pages+0x4e/0x180 [ 662.431725][T11240] ? io_pin_pages+0x148/0x180 [ 662.436709][T11240] ? io_pin_pages+0x149/0x180 [ 662.441412][T11240] __io_uaddr_map+0xfb/0x2d0 [ 662.446098][T11240] ? __pfx___io_uaddr_map+0x10/0x10 [ 662.451910][T11240] ? rcu_read_lock_any_held+0xb7/0x160 [ 662.458077][T11240] ? cap_capable+0x1b4/0x250 [ 662.462724][T11240] io_allocate_scq_urings+0x1c0/0x650 [ 662.468201][T11240] io_uring_create+0x5b5/0xc00 [ 662.473013][T11240] __se_sys_io_uring_setup+0x2ba/0x330 [ 662.478636][T11240] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 662.484723][T11240] ? do_syscall_64+0x100/0x230 [ 662.489537][T11240] ? do_syscall_64+0xb6/0x230 [ 662.494311][T11240] do_syscall_64+0xf3/0x230 [ 662.498992][T11240] ? clear_bhb_loop+0x35/0x90 [ 662.503742][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.504387][ T5882] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 662.509753][T11240] RIP: 0033:0x7f742e77e759 [ 662.521779][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.541637][T11240] RSP: 002b:00007f742f61dfc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 662.550184][T11240] RAX: ffffffffffffffda RBX: 00007f742e935f80 RCX: 00007f742e77e759 [ 662.558880][T11240] RDX: 00000000200004c0 RSI: 0000000020000400 RDI: 0000000000002c0c [ 662.567486][T11240] RBP: 0000000020000400 R08: 0000000000000000 R09: 00000000200004c0 [ 662.575674][T11240] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 662.583719][T11240] R13: 0000000020000480 R14: 0000000000002c0c R15: 00000000200004c0 [ 662.592044][T11240] [ 662.595169][T11240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 662.602470][T11240] CPU: 0 UID: 0 PID: 11240 Comm: syz.3.1132 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 662.612882][T11240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 662.622966][T11240] Call Trace: [ 662.626242][T11240] [ 662.629171][T11240] dump_stack_lvl+0x241/0x360 [ 662.633896][T11240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.639121][T11240] ? __pfx__printk+0x10/0x10 [ 662.643736][T11240] ? _printk+0xd5/0x120 [ 662.647917][T11240] ? __init_begin+0x41000/0x41000 [ 662.652966][T11240] ? vscnprintf+0x5d/0x90 [ 662.657325][T11240] panic+0x349/0x880 [ 662.661243][T11240] ? __warn+0x177/0x4e0 [ 662.665408][T11240] ? __pfx_panic+0x10/0x10 [ 662.669843][T11240] ? show_trace_log_lvl+0x3b2/0x410 [ 662.675090][T11240] __warn+0x34b/0x4e0 [ 662.679101][T11240] ? io_pin_pages+0x149/0x180 [ 662.683792][T11240] report_bug+0x2b3/0x500 [ 662.688125][T11240] ? io_pin_pages+0x149/0x180 [ 662.692898][T11240] handle_bug+0x60/0x90 [ 662.697069][T11240] exc_invalid_op+0x1a/0x50 [ 662.701575][T11240] asm_exc_invalid_op+0x1a/0x20 [ 662.706421][T11240] RIP: 0010:io_pin_pages+0x149/0x180 [ 662.711799][T11240] Code: 63 fd 4c 89 f8 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 ca aa e3 fc 90 0f 0b 90 49 c7 c7 ea ff ff ff eb de e8 b8 aa e3 fc 90 <0f> 0b 90 49 c7 c7 b5 ff ff ff eb cc 44 89 f1 80 e1 07 80 c1 03 38 [ 662.731412][T11240] RSP: 0018:ffffc90017b3fc10 EFLAGS: 00010283 [ 662.737504][T11240] RAX: ffffffff84b146c8 RBX: fff0000000000091 RCX: 0000000000040000 [ 662.745474][T11240] RDX: ffffc900047bc000 RSI: 0000000000000401 RDI: 0000000000000402 [ 662.753531][T11240] RBP: 000ffffffffffff0 R08: ffffffff84b145ce R09: 1ffff1100f614de0 [ 662.761591][T11240] R10: dffffc0000000000 R11: ffffed100f614de1 R12: ffffffffffff0000 [ 662.769561][T11240] R13: ffffffffffff0000 R14: ffffc90017b3fc80 R15: 1ffff1100b876520 [ 662.777552][T11240] ? io_pin_pages+0x4e/0x180 [ 662.782141][T11240] ? io_pin_pages+0x148/0x180 [ 662.786820][T11240] __io_uaddr_map+0xfb/0x2d0 [ 662.791588][T11240] ? __pfx___io_uaddr_map+0x10/0x10 [ 662.796800][T11240] ? rcu_read_lock_any_held+0xb7/0x160 [ 662.802256][T11240] ? cap_capable+0x1b4/0x250 [ 662.806844][T11240] io_allocate_scq_urings+0x1c0/0x650 [ 662.812229][T11240] io_uring_create+0x5b5/0xc00 [ 662.817031][T11240] __se_sys_io_uring_setup+0x2ba/0x330 [ 662.822493][T11240] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 662.828504][T11240] ? do_syscall_64+0x100/0x230 [ 662.833302][T11240] ? do_syscall_64+0xb6/0x230 [ 662.838000][T11240] do_syscall_64+0xf3/0x230 [ 662.842515][T11240] ? clear_bhb_loop+0x35/0x90 [ 662.847224][T11240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.853119][T11240] RIP: 0033:0x7f742e77e759 [ 662.857622][T11240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.877238][T11240] RSP: 002b:00007f742f61dfc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 662.885686][T11240] RAX: ffffffffffffffda RBX: 00007f742e935f80 RCX: 00007f742e77e759 [ 662.893726][T11240] RDX: 00000000200004c0 RSI: 0000000020000400 RDI: 0000000000002c0c [ 662.901811][T11240] RBP: 0000000020000400 R08: 0000000000000000 R09: 00000000200004c0 [ 662.909799][T11240] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 662.917776][T11240] R13: 0000000020000480 R14: 0000000000002c0c R15: 00000000200004c0 [ 662.925774][T11240] [ 662.929129][T11240] Kernel Offset: disabled [ 662.933459][T11240] Rebooting in 86400 seconds..