last executing test programs: 11m50.464024355s ago: executing program 2 (id=1609): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unlink(0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1460, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1400}], 0x0, 0x0, 0x0}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x3aba828, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c7c6723b96bb110ba7f0a8a63090c63caf7d87e0fba3f4f97e492", @ANYBLOB="c32ab801000000007a00000055bc60af00", @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES32=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESHEX], 0x3, 0x0, &(0x7f0000000080)) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m47.051698856s ago: executing program 2 (id=1619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r0, 0x0, 0x0, 0x0, 0x1edeeafe1ad2422d) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000880)}, 0x7b4}], 0x1, 0x2022, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) sendmsg$can_bcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x40804) r2 = socket$packet(0x11, 0x3, 0x300) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r3, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x142) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) fgetxattr(r0, &(0x7f0000000300)=@known='trusted.overlay.impure\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11m46.717418909s ago: executing program 2 (id=1626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getrlimit(0xb, &(0x7f0000000300)) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3601], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@mss, @window, @sack_perm, @timestamp, @timestamp, @sack_perm], 0x6) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) sendto$inet(r4, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0) 11m45.314381436s ago: executing program 2 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 11m44.515140244s ago: executing program 2 (id=1633): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856b340da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000600)={0x24, &(0x7f0000000040)={0x40, 0x22, 0x39, {0x39, 0x21, "2bbd26ca1779ffbe65b2f492342174db2c5f1ee61ccfe61caecb5d9faefbfcca3804e41211a3f2eb3fa47113213c970187fde1f4fccbb6"}}, &(0x7f00000006c0)={0x0, 0x3, 0xe7, @string={0xe7, 0x3, "2f69d5a2fd964412209115ad6eadbfb76ead1cbea5d3b9eec113b666f3398b4d0c00a1e3451568cc9f5fc1cf1cfefec8a980f339165789799b03e8fb9ebc80915abd6b8a28296d0944277bf34575f42920b73c3ad6b8502c1080e3b1e88a66fcf901880db3aafcad7c34baf285d5b912ab04c8cd534752be7c8a55af741a51d66a43fe323f3c5e898a714aca66e240b6a580cee740f6f7435ad491ad6de3d0bca18190a4d9072bb4916a84794434d61ae92557406464e133861639148446ff5de563b85ff0405dc944b6c8df68868ab929ebef93bb67ea395d7a315dc7c1d2c7ea869e7ef7"}}, &(0x7f00000004c0), &(0x7f00000005c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x86, 0x1, {0x22, 0x2ff}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000940)={0x0, 0x6, 0x3f, "2ddb008f7f7d5a299c80b4267d973b4e9596b71a3270e16d6bb369812d91bcea7f9eff65c321b086bab6e2d54fcd4e1f216c551f7680b39c61136b3899161e"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x1, 0x39, "d004137611613232364bf378b6fe9d2fa705fbb1f853966a95d294862bf0b896455c70937880192d816774e43b11a4bbf7815be2d030e2c142"}, &(0x7f00000008c0)={0x20, 0x3, 0x1}}) 11m42.625235866s ago: executing program 2 (id=1634): bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563018270001406"], 0xffdd) 11m27.539843856s ago: executing program 32 (id=1634): bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563018270001406"], 0xffdd) 10m46.724909813s ago: executing program 0 (id=1804): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4000, &(0x7f0000000400)={[{@norecovery}, {@grpquota}, {@debug}, {@usrquota}]}, 0xee, 0x4ba, &(0x7f0000001040)="$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") mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x401, 0x0) 10m46.39940525s ago: executing program 0 (id=1809): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000"], 0x30}}], 0x1, 0x4008804) 10m46.326036303s ago: executing program 0 (id=1810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 10m45.523531955s ago: executing program 0 (id=1816): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x5, 0x4, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e0000000400000008"], 0x50) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) ppoll(&(0x7f0000001100), 0x0, &(0x7f0000001140)={0x0, 0x989680}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) poll(&(0x7f0000000180)=[{r1, 0x1090}], 0x1, 0x5) 10m40.200710397s ago: executing program 0 (id=1836): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x57, 0xf7fe, 0x7ff, {0x0, 0x1}, {0x61, 0x1000}, @cond=[{0x7, 0x218, 0x7, 0x0, 0x2, 0x3}, {0x8, 0x5, 0x1, 0x52, 0x9, 0xd}]}) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) fsopen(&(0x7f0000000000)='exfat\x00', 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10m36.29455634s ago: executing program 0 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000050}, 0x4044014) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) rmdir(0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x4, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) 10m20.123669299s ago: executing program 33 (id=1848): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000050}, 0x4044014) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) rmdir(0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x148, 0x1a, 0x713, 0x0, 0x0, {{@in6=@loopback, @in=@multicast2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x32}, @in=@multicast2, {0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x4, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8}]}, 0x148}}, 0x0) 9m56.246159535s ago: executing program 6 (id=1935): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb0, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{0x0, 0x1}, {}, {0x0, 0x0, 0x8}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xc}, {0x0, 0x0, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x2}, {}, {}, {0xfffffff4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7fff}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {0x200}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x6}, {0x40}, {}, {}, {0x800, 0xfffffffd}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 9m54.305044775s ago: executing program 6 (id=1942): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$rds(0x15, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)={[{@codepage={'codepage', 0x3d, 'maccyrillic'}}]}, 0x1, 0x23a, &(0x7f0000000540)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='./file0/file0\x00', 0x84801, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0x4020940d, &(0x7f0000000440)={0x4}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) io_setup(0x7, &(0x7f0000001800)) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 9m51.683583338s ago: executing program 6 (id=1949): read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64, @ANYRESOCT, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb6fa71518c4638f5e66923f2ba986156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d76495fc48f43da2e2147ad0809022a1a0c2d4", @ANYRESHEX], 0x1, 0x14ee, &(0x7f0000004000)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x68}}, 0x0) 9m46.763668411s ago: executing program 6 (id=1967): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000004c0)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0xd0008}}, 0x50) read$FUSE(r0, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000d540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000006500)={0x50, 0x0, r2, {0x7, 0x28, 0x0, 0x140, 0x0, 0x0, 0x40000000}}, 0x50) 9m45.424792294s ago: executing program 6 (id=1977): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) 9m41.063470876s ago: executing program 6 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0xe4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r5, @ANYBLOB="08000100000000006b8ea2128b18cc132d75d250188d88c537a8597b13924f1dd10a10e2ed3d5f61d00c439261d62b88365f2edebcd35cfbf1c46032f06019ca0824ca599ac9bccb998e6cfb4e1455766497a22293a3975202e6abcccf45271cd006cc4dbfcdf434c32ec5376a79d7a92f53a82280d40c787f3ca65652e21e00"/142], 0x24}}, 0x0) 9m25.847604468s ago: executing program 34 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0xe4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008001d00", @ANYRES32=r5, @ANYBLOB="08000100000000006b8ea2128b18cc132d75d250188d88c537a8597b13924f1dd10a10e2ed3d5f61d00c439261d62b88365f2edebcd35cfbf1c46032f06019ca0824ca599ac9bccb998e6cfb4e1455766497a22293a3975202e6abcccf45271cd006cc4dbfcdf434c32ec5376a79d7a92f53a82280d40c787f3ca65652e21e00"/142], 0x24}}, 0x0) 2m37.826437614s ago: executing program 1 (id=3242): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) execveat(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={[0x0, &(0x7f0000000440)='sys_exit\x00']}, 0x0, 0x1100) 2m37.49149058s ago: executing program 1 (id=3244): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xa0c80) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0xffffc3e3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x77cb, &(0x7f0000000540)={0x0, 0x5885, 0x2, 0xfff7ffff, 0x3ab}, 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r4, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133e, 0x3], [{0x0, 0x7}, {0x31, 0x85}, {0x0, 0x7fffffff}, {}, {0x0, 0x7}], 0x10}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000005c0)=0x7) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x9, 0x0, &(0x7f0000000240)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m35.789545721s ago: executing program 1 (id=3247): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r1) io_uring_setup(0x6f6, &(0x7f0000005100)={0x0, 0x9dcc, 0x802}) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r3 = io_uring_setup(0x4c8d, &(0x7f0000000900)={0x0, 0x46ff, 0x80, 0x3, 0xb1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000280)=""/18, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5) r4 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffc}}) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="92", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2}}) 2m30.919898174s ago: executing program 1 (id=3260): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$alg(0x26, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.959077904s ago: executing program 1 (id=3263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000080)=0xfffffffa, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, 0x0) 1m56.002539867s ago: executing program 3 (id=3338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000180, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x53, 0x3, 0x1, {0xfffe, 0x1}, {0x60, 0x2}, @cond=[{0x24, 0x9, 0xc, 0x6, 0x7, 0x3f61}, {0x4, 0x1, 0xff, 0x4, 0x7, 0x766d}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x2400, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x8483, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1m52.895589917s ago: executing program 3 (id=3342): r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket$inet_mptcp(0x2, 0x1, 0x106) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1m51.313353769s ago: executing program 3 (id=3346): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 1m49.643196546s ago: executing program 3 (id=3350): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='rxrpc_rx_lose\x00', r3, 0x0, 0xa97d}, 0x18) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1m45.460655299s ago: executing program 3 (id=3354): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m42.936297966s ago: executing program 3 (id=3358): syz_clone(0xc1a04100, 0x0, 0xffffffffffffff2c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000c300)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) 1m42.838773889s ago: executing program 1 (id=3265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1m24.965710768s ago: executing program 35 (id=3265): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13.567562008s ago: executing program 5 (id=3535): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) 8.543890277s ago: executing program 8 (id=3554): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x36, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x147040, 0x0) poll(0x0, 0x0, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000001580), 0x400000000000203, 0x10122, 0x0) 8.486401513s ago: executing program 5 (id=3555): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 7.751545217s ago: executing program 5 (id=3557): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 7.421458305s ago: executing program 8 (id=3558): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x400880, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0x57, 0xd5, 0x20, 0xfd9, 0x2c, 0x7101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0xf6, 0x7b, 0xbf}}]}}]}}, 0x0) 6.710543328s ago: executing program 5 (id=3560): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x540e, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000001240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@prinfo={0x14, 0x84, 0x5, {0x1d9e5dbeab62225b, 0x6fa}}], 0x14}], 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000080)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r5, 0xffffffffffffffff) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) 4.780831324s ago: executing program 8 (id=3565): r0 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x110000018}) 4.652934717s ago: executing program 4 (id=3566): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x0, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x20, 0x0, &(0x7f0000000280)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 4.499599494s ago: executing program 8 (id=3568): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140)=0x4, 0x4) 4.406492943s ago: executing program 4 (id=3569): r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b36, 0x0) syz_open_procfs(r2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6e, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 4.328310206s ago: executing program 8 (id=3571): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xab, 0x1d, 0xc7, 0x40, 0x5032, 0xbc7, 0x9cbb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xec, 0xe8}}]}}]}}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x103) 3.968566443s ago: executing program 5 (id=3572): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) tkill(r2, 0x7) 3.621615355s ago: executing program 5 (id=3573): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 3.325886304s ago: executing program 7 (id=3574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) socket$tipc(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x65d5}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 2.996539842s ago: executing program 7 (id=3575): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000f14010029bd7000fddbdf25080045"], 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x4) 2.920429873s ago: executing program 4 (id=3576): syz_emit_ethernet(0x0, 0x0, 0x0) 2.64419447s ago: executing program 4 (id=3577): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) 2.486328764s ago: executing program 7 (id=3578): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r0, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000140)=0x8) 2.177017963s ago: executing program 7 (id=3579): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x120}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.3317816s ago: executing program 4 (id=3580): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.197457224s ago: executing program 8 (id=3581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="18", 0x1}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket(0x1, 0x3, 0xffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r5, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x800000000000, 0xfffffffffffffff9}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) r8 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) setsockopt$ax25_SO_BINDTODEVICE(r8, 0x101, 0x19, &(0x7f0000000280)=@bpq0, 0x10) 1.111076151s ago: executing program 4 (id=3582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000009f00)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x3}, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@newtfilter={0x38, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x3d}]}}]}, 0x38}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.046685992s ago: executing program 7 (id=3583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r3, &(0x7f0000000200)=""/209, 0xd1) tkill(r2, 0x7) 0s ago: executing program 7 (id=3584): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, &(0x7f0000000240)=""/194, 0x0, 0xc2, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_crypto(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): ridge0: port 2(bridge_slave_1) entered disabled state [ 514.593943][T12002] bridge_slave_1: entered allmulticast mode [ 514.611610][T12002] bridge_slave_1: entered promiscuous mode [ 514.711378][T10959] usb 4-1: Using ep0 maxpacket: 8 [ 514.725497][T10959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 514.757157][T10959] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 514.805192][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.824791][T10959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.864212][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.884080][T10959] usb 4-1: config 0 descriptor?? [ 515.604441][T10959] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 515.701608][ T5141] Bluetooth: hci2: command tx timeout [ 515.878893][T10959] usb 4-1: USB disconnect, device number 11 [ 516.082772][T12002] team0: Port device team_slave_0 added [ 516.324891][T12002] team0: Port device team_slave_1 added [ 516.765687][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.081753][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.094929][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.114634][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.122852][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.130469][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 517.152334][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 517.161972][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.210315][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.229239][T12089] lo: entered promiscuous mode [ 517.272170][T12088] lo: left promiscuous mode [ 519.301403][ T5141] Bluetooth: hci1: command tx timeout [ 519.688481][ T5933] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 519.962961][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.980239][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.020055][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.031418][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 520.051998][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 520.083664][ T5933] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 520.101276][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.119174][ T5933] usb 2-1: Product: syz [ 520.130785][ T5933] usb 2-1: Manufacturer: syz [ 520.138379][ T5933] usb 2-1: SerialNumber: syz [ 520.156659][ T5933] usb 2-1: config 0 descriptor?? [ 520.167188][ T5933] hub 2-1:0.0: bad descriptor, ignoring hub [ 520.184702][ T5933] hub 2-1:0.0: probe with driver hub failed with error -5 [ 520.268701][ T5933] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 520.304783][T10704] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.262036][ T5961] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 521.403373][ T5141] Bluetooth: hci1: command tx timeout [ 521.655616][ T5961] usb 8-1: Using ep0 maxpacket: 8 [ 521.684604][T10704] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.693404][ T5961] usb 8-1: config 0 has no interfaces? [ 522.166506][ T5961] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 522.178437][T12131] Cannot find del_set index 3 as target [ 522.218460][ T5961] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.239597][ T5961] usb 8-1: config 0 descriptor?? [ 522.629697][T10704] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.734899][T12002] hsr_slave_0: entered promiscuous mode [ 522.764796][T12002] hsr_slave_1: entered promiscuous mode [ 522.787907][T12002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 522.831662][T12002] Cannot create hsr debugfs directory [ 522.878680][T10704] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.441765][ T5141] Bluetooth: hci1: command tx timeout [ 524.481514][ T5925] usb 8-1: USB disconnect, device number 2 [ 525.521556][ T5141] Bluetooth: hci1: command tx timeout [ 526.321811][T12152] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 526.333661][T12091] chnl_net:caif_netlink_parms(): no params data found [ 526.363293][T12152] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 526.408777][ T967] usb 2-1: USB disconnect, device number 4 [ 526.422630][T12152] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 526.458618][T10704] bridge_slave_1: left allmulticast mode [ 526.510841][T12152] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 526.521415][T10704] bridge_slave_1: left promiscuous mode [ 526.569542][T10704] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.703720][T10704] bridge_slave_0: left allmulticast mode [ 526.718257][T10704] bridge_slave_0: left promiscuous mode [ 526.733246][T12152] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 526.743941][T10704] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.863581][T12152] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 526.873482][T12152] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 528.401369][ T5141] Bluetooth: hci2: command 0x0c1a tx timeout [ 528.407498][ T5141] Bluetooth: hci5: command 0x0c1a tx timeout [ 528.693849][ T5933] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 528.801424][T12189] Bluetooth: hci1: command 0x0405 tx timeout [ 528.893563][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.977517][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.025389][ T5933] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 529.081299][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.162296][ T5933] usb 4-1: config 0 descriptor?? [ 529.609268][ T5933] aquacomputer_d5next 0003:0C70:F00E.0003: unknown main item tag 0x0 [ 529.664975][ T5933] aquacomputer_d5next 0003:0C70:F00E.0003: hidraw0: USB HID vff.ff Device [HID 0c70:f00e] on usb-dummy_hcd.3-1/input0 [ 529.768043][ T5840] Bluetooth: hci5: unexpected event for opcode 0x0c14 [ 529.856256][ T5933] usb 4-1: USB disconnect, device number 12 [ 530.481373][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 530.601349][ T5925] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 530.630880][T10704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.891652][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 531.018496][ T5925] usb 8-1: Using ep0 maxpacket: 8 [ 531.130011][ T5925] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 531.649053][T10704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.707373][ T5925] usb 8-1: config 179 has no interface number 0 [ 531.757685][T10704] bond0 (unregistering): Released all slaves [ 531.778251][ T5925] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 531.842408][T12002] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 531.842423][ T5925] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 532.372788][T12002] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 532.391508][ T5925] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 532.460506][ T5925] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 532.531157][ T5925] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 532.591247][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 532.597863][ T5925] usb 8-1: config 179 interface 65 has no altsetting 0 [ 532.603617][T12002] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 532.641197][ T5925] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 532.671168][ T5925] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.727919][T12002] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 533.021260][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 533.305910][ T5925] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input8 [ 533.411615][ T5188] input input8: unable to receive magic message: -110 [ 533.501004][ T5925] usb 8-1: USB disconnect, device number 3 [ 533.501088][ C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 533.501465][ C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 533.537717][ T5925] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 533.861048][T12091] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.936366][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.989318][T12091] bridge_slave_0: entered allmulticast mode [ 534.056495][T12091] bridge_slave_0: entered promiscuous mode [ 534.065505][T12091] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.073618][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.086101][T12091] bridge_slave_1: entered allmulticast mode [ 534.121674][T12091] bridge_slave_1: entered promiscuous mode [ 535.071913][T12240] syz.7.2132[12240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.072023][T12240] syz.7.2132[12240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.084427][T12240] syz.7.2132[12240] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 535.629958][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 536.255390][T12252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2134'. [ 536.278355][T12091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.310512][T12243] warning: `syz.1.2133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 536.388190][T12091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.671416][T12091] team0: Port device team_slave_0 added [ 536.728968][T12091] team0: Port device team_slave_1 added [ 537.331831][T10704] hsr_slave_0: left promiscuous mode [ 537.495301][T10704] hsr_slave_1: left promiscuous mode [ 537.691396][T10704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.723678][T10704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.789112][T10704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.958606][T10704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.042225][T10704] veth1_macvtap: left promiscuous mode [ 538.073989][ T5933] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 538.085819][T10704] veth0_macvtap: left promiscuous mode [ 538.240130][T10704] veth1_vlan: left promiscuous mode [ 538.271574][T10704] veth0_vlan: left promiscuous mode [ 538.364588][ T5933] usb 2-1: device descriptor read/64, error -71 [ 538.661788][ T5933] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 538.811442][ T5933] usb 2-1: device descriptor read/64, error -71 [ 538.923631][ T5933] usb usb2-port1: attempt power cycle [ 539.291364][ T5933] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 539.341976][ T5933] usb 2-1: device descriptor read/8, error -71 [ 539.552802][T10704] team0 (unregistering): Port device team_slave_1 removed [ 539.591255][ T5933] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 539.632541][ T5933] usb 2-1: device descriptor read/8, error -71 [ 539.701552][T10704] team0 (unregistering): Port device team_slave_0 removed [ 539.751521][ T5933] usb usb2-port1: unable to enumerate USB device [ 541.458341][T12306] syz.1.2147[12306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.458449][T12306] syz.1.2147[12306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 541.470134][T12306] syz.1.2147[12306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.688564][T12091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.739920][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.811307][T12091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.024064][T12309] sp0: Synchronizing with TNC [ 543.155812][T12091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.193677][T12091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.235447][T12091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.492465][T12002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.539805][T12002] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.712013][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.719271][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.040716][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.048195][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.586004][T12091] hsr_slave_0: entered promiscuous mode [ 544.643326][T12091] hsr_slave_1: entered promiscuous mode [ 544.659246][T12091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 544.675980][T12091] Cannot create hsr debugfs directory [ 545.073436][T12002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.681787][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 545.824156][T12353] syz.1.2160[12353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 545.824642][T12353] syz.1.2160[12353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 545.837019][T12353] syz.1.2160[12353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.601987][ T9] usb 5-1: device descriptor read/64, error -71 [ 546.737037][T12364] Cannot find del_set index 3 as target [ 546.884611][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 546.898886][T12002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.080094][ T9] usb 5-1: device descriptor read/64, error -71 [ 547.251678][ T9] usb usb5-port1: attempt power cycle [ 547.376904][T12091] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.489260][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 548.545002][T12091] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.894964][ T9] usb 5-1: device not accepting address 16, error -71 [ 549.843606][T12091] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.832806][T12091] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.120564][T12426] Cannot find del_set index 3 as target [ 551.590097][T12425] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 551.760268][T12002] veth0_vlan: entered promiscuous mode [ 551.806324][T12002] veth1_vlan: entered promiscuous mode [ 551.932784][ T5895] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 552.143644][ T5895] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 552.191973][T12438] trusted_key: encrypted_key: insufficient parameters specified [ 552.201417][ T5895] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 552.369765][ T5895] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 552.513596][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 552.754590][ T5895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 552.792720][T12091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 552.825314][ T5895] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 552.861904][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 552.862304][T12091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 552.891334][ T5895] usb 5-1: Product: syz [ 552.910488][ T5895] usb 5-1: Manufacturer: syz [ 552.946649][ T5895] cdc_wdm 5-1:1.0: skipping garbage [ 552.990342][T12091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 552.999184][ T5895] cdc_wdm 5-1:1.0: skipping garbage [ 553.049053][ T5895] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 553.072096][ T5895] cdc_wdm 5-1:1.0: Unknown control protocol [ 553.074496][T12002] veth0_macvtap: entered promiscuous mode [ 553.205138][T12091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 553.223136][ T5895] usb 5-1: USB disconnect, device number 18 [ 553.232995][T12449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2181'. [ 553.352075][T12002] veth1_macvtap: entered promiscuous mode [ 553.496014][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.547181][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.597813][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.685775][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.735236][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 553.786078][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 553.892432][T12002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.652652][T12465] sp0: Synchronizing with TNC [ 554.654891][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.403027][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.475628][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.531229][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.611384][T12002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.647372][T12002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.689367][T12002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.012120][T12002] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.069225][T12002] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.101277][T12002] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.141308][T12002] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.826314][T12486] Cannot find del_set index 3 as target [ 558.093803][T10704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.156319][T10704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.510720][T12506] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 559.117394][T10721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.227014][T10721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.338863][T12091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.941426][T12091] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.798174][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.805474][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.017906][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.025107][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.230739][T12535] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2199'. [ 562.677081][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.855859][T12091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.915022][T12091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.091103][T12544] tipc: Failed to obtain node identity [ 563.101327][T12544] tipc: Enabling of bearer rejected, failed to enable media [ 563.820772][T12550] Cannot find del_set index 3 as target [ 564.784681][T12091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.869794][T12577] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 565.882585][T12577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 565.919194][T12577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 566.089219][T12091] veth0_vlan: entered promiscuous mode [ 566.188753][T12091] veth1_vlan: entered promiscuous mode [ 566.493135][T12091] veth0_macvtap: entered promiscuous mode [ 566.503855][T12091] veth1_macvtap: entered promiscuous mode [ 567.292972][T12189] Bluetooth: hci5: command 0x0c1a tx timeout [ 568.490901][T12189] Bluetooth: hci1: command 0x0405 tx timeout [ 568.497161][T12189] Bluetooth: hci2: command 0x0c1a tx timeout [ 568.544070][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.761903][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.690650][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.821028][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.921819][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.932409][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.953400][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.007795][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.071756][T12091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.151184][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.242827][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.349812][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.410043][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.467099][T12638] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2224'. [ 571.981723][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.026063][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.051011][T12091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.077369][T12091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.152029][T12091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.329794][T12091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.374483][T12091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.405445][T12091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.445962][T12091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.743397][T10721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.810808][T10721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.858655][ T29] audit: type=1326 audit(1734051767.152:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12656 comm="syz.7.2230" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc624985d19 code=0x0 [ 572.880700][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.407819][T12662] syz.1.2228: attempt to access beyond end of device [ 573.407819][T12662] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 573.717207][T12659] Falling back ldisc for ttyS3. [ 573.833293][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.900032][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.493824][T12699] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2239'. [ 580.365673][T12721] netlink: 212 bytes leftover after parsing attributes in process `syz.4.2244'. [ 580.413614][T12722] loop8: detected capacity change from 0 to 1024 [ 580.430448][T12722] EXT4-fs: Ignoring removed i_version option [ 580.462454][T12722] EXT4-fs: inline encryption not supported [ 580.537934][T12722] EXT4-fs (loop8): Test dummy encryption mode enabled [ 580.572683][T12722] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 580.686218][T12722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.930673][T10621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.940764][T10621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.951511][T12736] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 580.960704][T10621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 581.062991][T10621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 581.070635][T10621] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 581.077956][T10621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.185239][T12722] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.961913][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.305681][T12189] Bluetooth: hci1: command tx timeout [ 584.519170][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.901831][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.104032][T12791] block device autoloading is deprecated and will be removed. [ 585.105207][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.113129][T12791] syz.7.2263: attempt to access beyond end of device [ 585.113129][T12791] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 585.150405][T12789] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2252'. [ 585.509731][T12189] Bluetooth: hci1: command tx timeout [ 585.574110][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 585.673312][T12811] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 585.781789][ T11] bridge_slave_1: left allmulticast mode [ 585.833146][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 585.856036][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.856807][ T11] bridge_slave_1: left promiscuous mode [ 585.898847][ T9] usb 5-1: Product: syz [ 585.944155][ T9] usb 5-1: Manufacturer: syz [ 586.000478][ T9] usb 5-1: SerialNumber: syz [ 586.076647][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.254925][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 586.438846][ T11] bridge_slave_0: left allmulticast mode [ 586.574396][ T11] bridge_slave_0: left promiscuous mode [ 586.595671][ T5892] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 586.604906][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.607470][ T46] usb 5-1: USB disconnect, device number 19 [ 588.463680][T12189] Bluetooth: hci1: command tx timeout [ 588.546382][ T5892] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 588.578469][ T5892] ath9k_htc: Failed to initialize the device [ 588.843413][ T46] usb 5-1: ath9k_htc: USB layer deinitialized [ 590.651458][T12189] Bluetooth: hci1: command tx timeout [ 590.687661][ T5892] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 590.888999][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 591.043299][ T5892] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 591.166032][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.586516][ T5892] usb 4-1: config 0 descriptor?? [ 591.621270][ T5892] usb 4-1: selecting invalid altsetting 3 [ 591.627693][ T5892] comedi comedi0: could not set alternate setting 3 in high speed [ 591.646450][ T5892] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 591.677406][ T5892] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 591.843500][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.866407][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.884736][ T11] bond0 (unregistering): Released all slaves [ 592.074678][T12871] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2282'. [ 592.178708][T12734] chnl_net:caif_netlink_parms(): no params data found [ 592.439894][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2285'. [ 592.489958][T12880] loop8: detected capacity change from 0 to 1024 [ 592.644331][T12880] EXT4-fs: Ignoring removed i_version option [ 592.922955][T12880] EXT4-fs: inline encryption not supported [ 593.564157][T12891] Falling back ldisc for ttyS3. [ 593.737356][T12880] EXT4-fs (loop8): Test dummy encryption mode enabled [ 593.790176][T12880] EXT4-fs (loop8): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 593.921830][ T5933] usb 4-1: USB disconnect, device number 13 [ 594.252616][T12880] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.047176][T12914] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 595.153538][T12734] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.228174][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.235465][T12734] bridge_slave_0: entered allmulticast mode [ 595.275524][T12734] bridge_slave_0: entered promiscuous mode [ 595.307726][T12734] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.329978][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.363629][T12734] bridge_slave_1: entered allmulticast mode [ 595.415382][T12734] bridge_slave_1: entered promiscuous mode [ 595.429008][T12880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.799728][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2292'. [ 595.998668][T12734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.860858][T12734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.021992][ T11] hsr_slave_0: left promiscuous mode [ 597.057503][ T11] hsr_slave_1: left promiscuous mode [ 597.101015][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.108508][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.159507][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.198791][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.338146][ T11] veth1_macvtap: left promiscuous mode [ 597.343758][ T11] veth0_macvtap: left promiscuous mode [ 597.390029][ T11] veth1_vlan: left promiscuous mode [ 597.395391][ T11] veth0_vlan: left promiscuous mode [ 597.436529][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2299'. [ 597.893014][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2300'. [ 599.481961][T12967] Falling back ldisc for ttyS3. [ 599.738496][T12973] syz.4.2303: attempt to access beyond end of device [ 599.738496][T12973] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 599.826433][ T11] team0 (unregistering): Port device team_slave_1 removed [ 600.003268][ T11] team0 (unregistering): Port device team_slave_0 removed [ 602.060506][T12734] team0: Port device team_slave_0 added [ 602.085344][T12734] team0: Port device team_slave_1 added [ 602.891265][T12981] netdevsim netdevsim4: Direct firmware load for ùô failed with error -2 [ 602.902057][T12981] netdevsim netdevsim4: Falling back to sysfs fallback for: ùô [ 603.012586][T12734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.019585][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.272666][T12734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.401665][T12995] xt_nat: multiple ranges no longer supported [ 604.098581][T12734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.106555][T12734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.201408][T12734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.810390][T12734] hsr_slave_0: entered promiscuous mode [ 604.841431][T12734] hsr_slave_1: entered promiscuous mode [ 604.916486][T12734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 604.972082][T12734] Cannot create hsr debugfs directory [ 608.163852][T12734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 609.123313][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 609.184075][T12734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 609.295722][T12734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 609.383729][T12734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 610.380510][T12734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.509273][T12734] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.425942][T13097] Falling back ldisc for ttyS3. [ 611.431665][T13100] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 611.536451][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 611.843251][T13103] syz.1.2337[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.843364][T13103] syz.1.2337[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.855066][T13103] syz.1.2337[13103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.538274][T10701] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.556815][T10701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.600077][T10701] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.607391][T10701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.688313][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 612.899933][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.658155][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 613.668270][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.679162][ T8] usb 5-1: config 0 descriptor?? [ 614.404150][ T8] usb 5-1: can't set config #0, error -71 [ 614.417485][ T8] usb 5-1: USB disconnect, device number 20 [ 614.869852][T13129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'. [ 616.497762][T12734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.985854][T13169] syz.8.2351[13169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.985967][T13169] syz.8.2351[13169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.998098][T13169] syz.8.2351[13169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 617.123599][ T5925] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 617.969205][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 618.008409][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.061984][ T5925] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 618.093095][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.147986][ T5925] usb 4-1: config 0 descriptor?? [ 618.190766][ T5925] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 618.377116][T13189] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2359'. [ 618.435693][T13189] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2359'. [ 618.635870][T13189] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2359'. [ 619.758685][T12734] veth0_vlan: entered promiscuous mode [ 620.216738][T13212] program syz.1.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.998282][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 621.032785][T12734] veth1_vlan: entered promiscuous mode [ 621.142304][ T46] usb 4-1: USB disconnect, device number 14 [ 621.269000][T12734] veth0_macvtap: entered promiscuous mode [ 621.315659][T12734] veth1_macvtap: entered promiscuous mode [ 621.351982][T13222] syz.3.2368: attempt to access beyond end of device [ 621.351982][T13222] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 621.373791][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.453618][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.495973][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.568120][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.578612][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.589439][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.611977][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 621.649850][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 621.706359][T13231] syz.8.2367[13231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.706802][T13231] syz.8.2367[13231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.719146][T13231] syz.8.2367[13231] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.784111][T12734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.302749][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.519148][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.567644][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.578251][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.588554][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.599519][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.653176][T12734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.905584][T12734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.992415][T12734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.122720][T12734] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.218491][T12734] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.279713][T12734] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.288491][T12734] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.354133][T13256] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2375'. [ 623.558550][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 624.191001][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.198883][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.276413][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 624.296525][ T8] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 624.305784][ T3581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.319146][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.335690][ T3581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.445803][ T8] usb 5-1: config 0 descriptor?? [ 624.480938][ T8] usb 5-1: selecting invalid altsetting 3 [ 624.486729][ T8] comedi comedi0: could not set alternate setting 3 in high speed [ 624.505081][ T8] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 624.528126][ T8] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 624.648166][ T5925] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 624.827108][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 624.848962][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 624.945836][ T5925] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.990871][ T5925] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 625.003526][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.101204][ T5925] usb 2-1: config 0 descriptor?? [ 626.137722][ T5925] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 628.197578][ T9] usb 5-1: USB disconnect, device number 21 [ 628.264143][ T5925] usb 2-1: USB disconnect, device number 9 [ 628.361140][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.538621][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 630.867517][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 631.095607][ T9] usb 2-1: config 0 has no interfaces? [ 631.102728][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 631.103233][T13352] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2402'. [ 631.150470][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.262609][ T9] usb 2-1: config 0 descriptor?? [ 631.575831][ T5925] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 631.729922][T12189] Bluetooth: hci1: link tx timeout [ 631.735753][T12189] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 632.452433][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 632.468685][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 632.524933][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 632.676241][ T9] usb 2-1: USB disconnect, device number 10 [ 632.712365][ T5925] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.754425][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.859483][ T5925] usb 6-1: config 0 descriptor?? [ 632.883646][ T5925] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 633.029959][T13384] netlink: 'syz.1.2410': attribute type 4 has an invalid length. [ 633.797792][T13388] loop8: detected capacity change from 0 to 2048 [ 633.917135][T12189] Bluetooth: hci1: command 0x0405 tx timeout [ 633.923509][T13388] loop8: p1 < > p4 [ 633.946158][T13388] loop8: p4 size 8388608 extends beyond EOD, truncated [ 635.013017][T13410] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2418'. [ 635.112471][ T5892] usb 6-1: USB disconnect, device number 16 [ 636.135999][T13433] evm: overlay not supported [ 636.290220][ T29] audit: type=1804 audit(1734051826.353:1854): pid=13433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2423" name="/newroot/88/bus/bus" dev="overlay" ino=489 res=1 errno=0 [ 636.312103][ C1] vkms_vblank_simulate: vblank timer overrun [ 637.018335][ T5925] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 637.178884][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 637.230324][ T5925] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.258146][ T5925] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 637.303275][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.390173][T13457] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2432'. [ 637.788901][ T5925] usb 4-1: config 0 descriptor?? [ 637.798930][ T5925] pwc: Askey VC010 type 2 USB webcam detected. [ 638.519723][ T5925] pwc: recv_control_msg error -32 req 02 val 2b00 [ 638.631451][ T5925] pwc: recv_control_msg error -32 req 02 val 2700 [ 638.648993][ T5925] pwc: recv_control_msg error -32 req 02 val 2c00 [ 638.667437][ T5925] pwc: recv_control_msg error -32 req 04 val 1000 [ 639.794893][ T5925] pwc: recv_control_msg error -32 req 04 val 1400 [ 639.835969][ T5925] pwc: recv_control_msg error -32 req 02 val 2000 [ 640.315175][ T5925] pwc: recv_control_msg error -32 req 02 val 2100 [ 640.332802][ T5925] pwc: recv_control_msg error -71 req 04 val 1500 [ 640.363345][ T5925] pwc: recv_control_msg error -71 req 02 val 2500 [ 640.381067][ T5925] pwc: recv_control_msg error -71 req 02 val 2400 [ 640.421359][ T5925] pwc: recv_control_msg error -71 req 02 val 2600 [ 640.443012][ T5925] pwc: recv_control_msg error -71 req 02 val 2900 [ 640.692913][ T5925] pwc: recv_control_msg error -71 req 02 val 2800 [ 640.726769][ T5925] pwc: recv_control_msg error -71 req 04 val 1100 [ 640.748728][ T5925] pwc: recv_control_msg error -71 req 04 val 1200 [ 640.780616][ T5925] pwc: Registered as video103. [ 640.791649][ T5925] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 640.844696][ T5925] usb 4-1: USB disconnect, device number 15 [ 640.929104][T13497] netlink: 'syz.7.2440': attribute type 12 has an invalid length. [ 641.749381][T13516] netlink: 212 bytes leftover after parsing attributes in process `syz.5.2446'. [ 641.771682][T13514] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2447'. [ 643.785986][T13533] sp0: Synchronizing with TNC [ 644.523615][T13536] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2453'. [ 647.345745][T13564] sp0: Synchronizing with TNC [ 647.894241][T13566] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 650.177745][T13591] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2469'. [ 652.298905][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2477'. [ 652.447449][T13624] sp0: Synchronizing with TNC [ 653.003725][T13626] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 654.036610][T13645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2482'. [ 654.408566][T13657] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2487'. [ 654.831355][ T29] audit: type=1804 audit(1734051843.826:1855): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2490" name="/newroot/439/bus/bus" dev="overlay" ino=2364 res=1 errno=0 [ 657.796048][T13707] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2500'. [ 660.163434][T13735] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2505'. [ 662.685931][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2512'. [ 662.741062][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 662.748525][T13759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.851145][T13759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 663.234950][T13765] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2513'. [ 663.311130][T13759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.697294][T13778] Bluetooth: MGMT ver 1.23 [ 666.859262][T13804] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2523'. [ 668.672767][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2529'. [ 669.247363][T13724] syz.1.2501 (13724): drop_caches: 2 [ 669.653521][T13839] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2531'. [ 672.943967][T13871] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2539'. [ 674.357908][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2545'. [ 675.137883][T13904] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2547'. [ 675.976227][T13908] loop8: detected capacity change from 0 to 64 [ 676.063958][T13908] MINIX-fs: bad superblock [ 681.431055][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2561'. [ 681.461991][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.486444][T13956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.966924][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.026923][T13956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.305424][T13970] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2563'. [ 687.406723][T14011] netlink: 'syz.4.2574': attribute type 4 has an invalid length. [ 688.705940][T14017] tty tty35: ldisc open failed (-12), clearing slot 34 [ 688.764195][T14025] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2579'. [ 690.529696][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 690.570757][T14049] syz.7.2586: attempt to access beyond end of device [ 690.570757][T14049] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 691.035774][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2590'. [ 691.078991][T14062] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2590'. [ 691.635895][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 692.057680][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 692.254774][ T9] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 692.280501][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.282291][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2595'. [ 692.304589][ T9] usb 8-1: config 0 descriptor?? [ 692.500585][ T9] usb 8-1: selecting invalid altsetting 3 [ 692.508773][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 692.517519][ T9] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 692.547371][T14086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2597'. [ 692.568836][ T9] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 694.055735][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.727344][ T5925] usb 8-1: USB disconnect, device number 4 [ 694.872777][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2601'. [ 696.988613][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2612'. [ 697.504843][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 697.782637][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 698.851248][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 698.902713][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.964112][ T9] usb 4-1: config 0 descriptor?? [ 699.027541][ T9] usb 4-1: selecting invalid altsetting 3 [ 699.038630][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 699.054852][ T9] usbduxsigma 4-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 699.083452][ T9] usbduxsigma 4-1:0.0: probe with driver usbduxsigma failed with error -22 [ 699.097423][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2619'. [ 701.106436][ T5895] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 701.354852][ T5895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.401235][ T5895] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 701.437029][ T46] usb 4-1: USB disconnect, device number 16 [ 701.510334][ T5895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.898864][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.132140][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 702.152500][T14178] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 702.216516][ T5895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 703.945112][ T8] usb 2-1: USB disconnect, device number 11 [ 707.138081][T14216] loop8: detected capacity change from 0 to 40427 [ 707.248792][T14216] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 707.256948][T14216] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 707.278274][T14216] F2FS-fs (loop8): Unable to read 2th superblock [ 707.302351][T14218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2635'. [ 707.410211][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2637'. [ 707.431179][T14220] udevd[14220]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.106436][T14276] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2654'. [ 711.902680][T14289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2655'. [ 715.625321][ T5933] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 716.206517][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 716.280291][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 716.292477][ T5933] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 716.320101][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.386746][ T5933] usb 5-1: config 0 descriptor?? [ 716.587651][ T5933] usb 5-1: selecting invalid altsetting 3 [ 716.593456][ T5933] comedi comedi0: could not set alternate setting 3 in high speed [ 716.605759][T14341] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2672'. [ 716.621748][ T5933] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 716.668221][ T5933] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 718.886365][T14371] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 719.708141][T14383] netlink: 'syz.5.2687': attribute type 4 has an invalid length. [ 721.546865][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2692'. [ 722.691763][T12189] Bluetooth: hci1: command 0x0405 tx timeout [ 725.862950][T14457] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 725.895612][T14455] netlink: 196 bytes leftover after parsing attributes in process `syz.7.2708'. [ 726.044066][T14461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2711'. [ 726.228634][T14469] 9pnet_fd: Insufficient options for proto=fd [ 726.892371][T14473] syz.1.2714: attempt to access beyond end of device [ 726.892371][T14473] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 728.198863][T14494] Falling back ldisc for ttyS3. [ 728.204629][T14497] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 730.021729][T14519] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2727'. [ 730.072382][T14525] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 730.077446][T14524] 9pnet_fd: Insufficient options for proto=fd [ 730.644717][T14527] netlink: 'syz.8.2730': attribute type 4 has an invalid length. [ 730.834081][T14534] 9pnet_fd: Insufficient options for proto=fd [ 731.110736][T14537] syz.1.2734[14537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 731.110819][T14537] syz.1.2734[14537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 731.122521][T14537] syz.1.2734[14537] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 733.305321][T14569] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2745'. [ 733.529426][T14578] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 734.550894][T14585] syz.5.2751[14585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 734.551609][T14585] syz.5.2751[14585] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 737.379828][T14621] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2762'. [ 737.443879][T14626] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 739.562016][T14648] syz.8.2770: attempt to access beyond end of device [ 739.562016][T14648] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 740.613873][T14652] syz.5.2772[14652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 740.613988][T14652] syz.5.2772[14652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 740.625673][T14652] syz.5.2772[14652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 740.653728][T14654] 9pnet_fd: Insufficient options for proto=fd [ 741.970139][T14665] Falling back ldisc for ttyS3. [ 741.977016][T14667] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 744.166499][T14681] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2780'. [ 744.888143][T14682] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 745.180371][T14689] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 747.199137][T14718] syz.7.2790[14718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.199254][T14718] syz.7.2790[14718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.211077][T14718] syz.7.2790[14718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 747.801067][T14723] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 747.826953][T14723] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 747.846126][T14723] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 749.728196][ T5933] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 750.031856][T14745] sp0: Synchronizing with TNC [ 750.355090][T14747] syz.8.2797: attempt to access beyond end of device [ 750.355090][T14747] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 750.631436][ T5892] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 750.735310][ T5933] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 751.003846][ T5933] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 751.014515][ T5933] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 751.024239][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 751.029525][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.039617][ T5892] usb 8-1: config 0 has no interfaces? [ 751.045526][ T5892] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 751.057959][T14725] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 751.086680][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.099267][ T5933] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 751.118791][ T5892] usb 8-1: config 0 descriptor?? [ 751.161009][T14740] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 752.888267][ T5925] usb 8-1: USB disconnect, device number 5 [ 753.448889][ T5933] usb 2-1: USB disconnect, device number 12 [ 754.782308][T14778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2804'. [ 754.901584][T14788] syz.7.2806[14788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.901703][T14788] syz.7.2806[14788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.913537][T14788] syz.7.2806[14788] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 755.390333][T14785] udevd[14785]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.797606][T14815] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 758.177884][T14827] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 758.192766][T14827] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 758.207429][T14827] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 758.883211][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 759.058813][T14805] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 759.107007][T12189] Bluetooth: hci5: command 0x0c1a tx timeout [ 759.132086][T14805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 759.999951][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.116792][T14805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 760.218489][T14805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 760.655630][T14838] syz.1.2823[14838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 760.655743][T14838] syz.1.2823[14838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 760.667515][T14838] syz.1.2823[14838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 760.787805][T14831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.809407][T14831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.267652][T10621] Bluetooth: hci2: command 0x0c1a tx timeout [ 761.369448][T14843] netlink: 'syz.3.2825': attribute type 4 has an invalid length. [ 762.268361][T14843] syz.3.2825 (14843) used greatest stack depth: 17776 bytes left [ 762.778928][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 764.331320][T14861] syz.5.2830: attempt to access beyond end of device [ 764.331320][T14861] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 765.545380][T14873] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 766.416342][T14877] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 766.417330][T14875] Falling back ldisc for ttyS3. [ 766.458658][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 766.966857][T14889] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2822'. [ 767.033582][T14885] syz.3.2838[14885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 767.033690][T14885] syz.3.2838[14885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 767.045367][T14885] syz.3.2838[14885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 767.349713][T14887] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 767.368335][T14887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 767.374558][T14887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 768.661313][ T5925] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 768.907505][ T5925] usb 6-1: Using ep0 maxpacket: 8 [ 769.068631][ T5925] usb 6-1: config 0 has no interfaces? [ 769.139967][T14913] syz.8.2841: attempt to access beyond end of device [ 769.139967][T14913] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 769.296231][T14923] futex_wake_op: syz.3.2845 tries to shift op by 32; fix this program [ 769.336288][ T5925] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.477479][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.506646][ T5925] usb 6-1: config 0 descriptor?? [ 769.570260][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 769.576355][T10621] Bluetooth: hci2: command 0x0c1a tx timeout [ 769.582710][T10621] Bluetooth: hci5: command 0x0c1a tx timeout [ 769.923239][T14933] syz.8.2848: attempt to access beyond end of device [ 769.923239][T14933] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 772.085884][ T5925] usb 6-1: USB disconnect, device number 17 [ 772.212067][T14940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.263067][T14940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.849961][T14954] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2853'. [ 772.945282][T14953] syz.8.2854[14953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 772.945405][T14953] syz.8.2854[14953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 772.957283][T14953] syz.8.2854[14953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 775.035003][T14975] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 776.326579][ T5933] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 776.749897][T14986] syz.3.2864: attempt to access beyond end of device [ 776.749897][T14986] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 777.071030][ T5933] usb 8-1: Using ep0 maxpacket: 8 [ 777.097689][ T5933] usb 8-1: config 0 has no interfaces? [ 777.107051][ T5933] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 777.116334][ T5933] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.131174][ T5933] usb 8-1: config 0 descriptor?? [ 777.838726][T15002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 778.136860][T15003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2870'. [ 778.556196][ T5925] usb 8-1: USB disconnect, device number 6 [ 778.854903][T15009] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2871'. [ 779.199365][T15013] syz.3.2872[15013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.199459][T15013] syz.3.2872[15013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 779.211059][T15013] syz.3.2872[15013] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 782.900397][T15048] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 783.997782][T15059] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.292691][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2887'. [ 784.711622][T15073] syz.8.2889[15073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.711733][T15073] syz.8.2889[15073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 784.723753][T15073] syz.8.2889[15073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.654556][T15102] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 787.112874][T15111] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 787.127638][T15111] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 787.142314][T15111] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 787.596563][T15116] netlink: 'syz.5.2901': attribute type 4 has an invalid length. [ 789.925338][ T5925] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 790.106808][ T5925] usb 9-1: Using ep0 maxpacket: 8 [ 790.766566][ T5925] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.776666][ T5925] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 790.916058][ T5925] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 791.178682][ T5925] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.240892][ T5925] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.272012][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 791.280079][ T5925] usb 9-1: Product: syz [ 791.572551][ T5925] usb 9-1: GET_CAPABILITIES returned 0 [ 791.774800][ T5925] usbtmc 9-1:16.0: can't read capabilities [ 791.795091][ T5925] usb 9-1: USB disconnect, device number 2 [ 793.233600][T15157] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 794.036797][T15167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2916'. [ 798.010777][T15210] netlink: 'syz.3.2925': attribute type 4 has an invalid length. [ 798.131679][T15211] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 798.672631][T15224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2932'. [ 802.969538][T15265] sp0: Synchronizing with TNC [ 803.215264][T15270] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd1": -EINTR [ 805.683385][ T5895] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 805.873722][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 805.928842][ T5895] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 805.937980][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.019032][ T5895] usb 8-1: config 0 descriptor?? [ 806.300742][ T5895] usb 8-1: selecting invalid altsetting 3 [ 806.313781][ T5895] comedi comedi0: could not set alternate setting 3 in high speed [ 806.321630][ T5895] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 806.338829][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2950'. [ 806.359371][ T5895] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 808.933789][ T5925] usb 8-1: USB disconnect, device number 7 [ 813.409822][T15359] syz.4.2967[15359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.411182][T15359] syz.4.2967[15359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 813.439910][T15359] syz.4.2967[15359] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 814.550069][T15372] sp0: Synchronizing with TNC [ 814.924178][T15374] syz.8.2972: attempt to access beyond end of device [ 814.924178][T15374] nbd8: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 816.640143][T15389] rtc_cmos 00:00: Alarms can be up to one day in the future [ 816.722841][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 816.747783][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 816.758926][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 816.766425][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 816.822465][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 821.687203][T15432] sp0: Synchronizing with TNC [ 821.773895][T15435] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR [ 825.477393][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 827.130800][T15500] sp0: Synchronizing with TNC [ 827.579973][T15501] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 827.801915][T15507] nvme_fabrics: unknown parameter or missing value '0x0000000000000003' in ctrl creation request [ 828.503370][T15519] syz.8.3008[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.503478][T15519] syz.8.3008[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 828.546930][T15519] syz.8.3008[15519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 832.252899][T15551] [U] é [ 836.733338][T15603] netlink: 232 bytes leftover after parsing attributes in process `syz.5.3035'. [ 836.763271][T15604] [U] é [ 836.784910][T15603] netlink: 7704 bytes leftover after parsing attributes in process `syz.5.3035'. [ 837.039206][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 837.126093][T12189] Bluetooth: hci5: command 0x0c1a tx timeout [ 837.132524][T15582] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 837.329835][T15582] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 837.424602][T15582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 839.352628][T10621] Bluetooth: hci2: command 0x0c1a tx timeout [ 839.641112][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 842.837595][T15657] syz.3.3049[15657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.838192][T15657] syz.3.3049[15657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 842.850968][T15657] syz.3.3049[15657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 847.625038][T15682] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 847.647994][T12189] Bluetooth: hci1: command 0x0405 tx timeout [ 847.953671][T10621] Bluetooth: hci5: command 0x0c1a tx timeout [ 848.028484][T15682] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 848.034579][T15682] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 848.569533][T15711] syz.4.3062[15711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.569647][T15711] syz.4.3062[15711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.581352][T15711] syz.4.3062[15711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.709987][T15726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3065'. [ 850.820382][T12189] Bluetooth: hci1: command 0x0405 tx timeout [ 850.820487][T10621] Bluetooth: hci2: command 0x0c1a tx timeout [ 854.672751][T15757] sp0: Synchronizing with TNC [ 854.820789][T15758] syz.3.3074: attempt to access beyond end of device [ 854.820789][T15758] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 856.669160][T15780] syz.4.3077[15780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.669634][T15780] syz.4.3077[15780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 856.681779][T15780] syz.4.3077[15780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.518287][T15782] syz.3.3078[15782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.575919][T15782] syz.3.3078[15782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 857.597259][T15782] syz.3.3078[15782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 859.478158][T15005] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 860.298634][ T5892] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 860.545420][T15005] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 860.581315][ T5892] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=98.53 [ 860.655475][T15005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.907606][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.925483][T15005] usb 4-1: config 0 descriptor?? [ 861.049543][ T5892] usb 2-1: Product: syz [ 861.053891][ T5892] usb 2-1: Manufacturer: syz [ 861.070580][ T5892] usb 2-1: SerialNumber: syz [ 861.094264][ T5892] usb 2-1: config 0 descriptor?? [ 861.221818][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3089'. [ 861.240575][ T5892] usb 2-1: can't set config #0, error -71 [ 861.247500][T15005] usb 4-1: can't set config #0, error -71 [ 861.285019][T15005] usb 4-1: USB disconnect, device number 17 [ 861.303957][ T5892] usb 2-1: USB disconnect, device number 13 [ 861.841157][T15005] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 862.033948][T15005] usb 4-1: Using ep0 maxpacket: 8 [ 862.138341][T15005] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 862.193546][T15005] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 862.202823][T15005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.211216][T15005] usb 4-1: Product: syz [ 862.237623][T15005] usb 4-1: Manufacturer: syz [ 862.242341][T15005] usb 4-1: SerialNumber: syz [ 862.261680][T15837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3095'. [ 862.344808][T15005] usb 4-1: config 0 descriptor?? [ 862.427809][T15005] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 864.426849][T15005] gspca_zc3xx: reg_w_i err -110 [ 865.167934][T15005] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 865.174290][T15005] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 865.335781][T15867] netlink: 'syz.4.3105': attribute type 4 has an invalid length. [ 866.729698][ T9] usb 4-1: USB disconnect, device number 18 [ 868.576759][T15908] syz.4.3115[15908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.576864][T15908] syz.4.3115[15908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 868.615616][T15908] syz.4.3115[15908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 869.241254][ T5933] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 869.624391][T15928] overlayfs: missing 'lowerdir' [ 869.729198][T15929] fuse: Bad value for 'fd' [ 870.617739][ T5933] usb 9-1: Using ep0 maxpacket: 8 [ 870.628551][ T5933] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 870.639029][ T5933] usb 9-1: config 179 has no interface number 0 [ 870.645305][ T5933] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 870.742564][ T5933] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 870.797619][ T5933] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 870.849974][ T5933] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 870.914894][ T5933] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 871.025998][ T5933] usb 9-1: config 179 interface 65 has no altsetting 0 [ 871.058515][ T5933] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 871.105114][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.239034][ T5933] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input10 [ 871.381345][ T5188] input input10: unable to receive magic message: -110 [ 871.430413][ T5188] input input10: unable to receive magic message: -32 [ 871.472427][T15938] sp0: Synchronizing with TNC [ 871.555710][ T5188] input input10: unable to receive magic message: -32 [ 871.654158][ T5188] input input10: unable to receive magic message: -32 [ 872.161842][ T5188] input input10: unable to receive magic message: -71 [ 872.562334][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 872.571582][ T9] usb 9-1: USB disconnect, device number 3 [ 872.581358][ T9] xpad 9-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 872.643886][T15804] udevd[15804]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 874.423855][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 875.643819][ T5895] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 875.878844][ T5895] usb 9-1: Using ep0 maxpacket: 32 [ 875.944430][ T5895] usb 9-1: config 4 has an invalid interface number: 201 but max is 0 [ 875.963971][ T5895] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 875.986175][ T5895] usb 9-1: config 4 has no interface number 0 [ 876.009292][ T5895] usb 9-1: config 4 interface 201 has no altsetting 0 [ 876.039073][ T5895] usb 9-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 876.078635][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.109064][ T5895] usb 9-1: Product: syz [ 876.130484][ T5895] usb 9-1: Manufacturer: syz [ 876.152110][ T5895] usb 9-1: SerialNumber: syz [ 876.620822][ T5895] usb 9-1: bad CDC descriptors [ 876.633005][ T5895] cdc_acm 9-1:4.201: Zero length descriptor references [ 876.644598][ T5895] cdc_acm 9-1:4.201: probe with driver cdc_acm failed with error -22 [ 876.729113][ T5895] usb 9-1: USB disconnect, device number 4 [ 879.613437][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 879.773515][T16026] syz.4.3149[16026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.773624][T16026] syz.4.3149[16026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.804220][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 879.848179][T16026] syz.4.3149[16026] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 879.864235][ T9] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 879.917079][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.958069][ T9] usb 6-1: config 0 descriptor?? [ 879.994486][ T9] usb 6-1: selecting invalid altsetting 3 [ 880.020277][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 880.067889][ T9] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 880.123890][ T9] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 882.571683][T14639] usb 6-1: USB disconnect, device number 18 [ 883.204665][T16049] sp0: Synchronizing with TNC [ 886.505722][T16085] sp0: Synchronizing with TNC [ 887.057205][T16087] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 891.095171][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 891.674116][T16150] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 892.527041][T16158] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3192'. [ 893.092677][T16169] sp0: Synchronizing with TNC [ 893.605935][T16171] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd8": -EINTR [ 896.330471][T16186] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 896.356816][T16186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 896.401503][T16186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 896.588495][T16218] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3209'. [ 896.922572][T16220] sp0: Synchronizing with TNC [ 897.422865][T16222] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 898.674017][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 898.830322][T15733] Bluetooth: hci2: command 0x0c1a tx timeout [ 898.837100][T10621] Bluetooth: hci1: command 0x0405 tx timeout [ 900.525955][T16254] sp0: Synchronizing with TNC [ 904.071936][T16277] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3227'. [ 904.887523][T16285] sp0: Synchronizing with TNC [ 905.329815][T16287] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd5": -EINTR [ 905.641135][ T29] audit: type=1326 audit(1734052078.434:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16280 comm="syz.1.3220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe015185d19 code=0x0 [ 906.246807][T16302] netlink: 892 bytes leftover after parsing attributes in process `syz.5.3232'. [ 908.451697][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 908.537243][T16293] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 908.553260][T15733] Bluetooth: hci5: command 0x0c1a tx timeout [ 909.401483][T16293] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 909.551709][T16293] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 910.643629][T16337] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3240'. [ 910.942728][T16342] sp0: Synchronizing with TNC [ 911.348897][ T8] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 911.620729][T15733] Bluetooth: hci2: command 0x0c1a tx timeout [ 911.758091][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 911.810639][T15733] Bluetooth: hci1: command 0x0405 tx timeout [ 912.561903][T16358] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd1": -EINTR [ 912.623755][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 912.643722][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 912.652723][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 912.690930][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 912.829344][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 912.860738][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 912.917700][ T8] usb 4-1: Product: syz [ 912.939257][ T8] usb 4-1: Manufacturer: syz [ 912.981251][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 913.045446][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 913.117809][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 913.163787][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 913.693149][T16379] veth0_to_team: entered promiscuous mode [ 913.699014][T16379] veth0_to_team: entered allmulticast mode [ 916.520828][ T5892] usb 4-1: USB disconnect, device number 19 [ 917.192891][T16404] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3257'. [ 917.779625][T16408] netlink: 'syz.8.3259': attribute type 29 has an invalid length. [ 917.824463][ T29] audit: type=1326 audit(1734052089.837:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16410 comm="syz.1.3260" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe015185d19 code=0x0 [ 920.376292][T16423] sp0: Synchronizing with TNC [ 922.552625][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 922.720343][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 922.745643][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 922.755328][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 922.764220][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 923.064839][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 923.077998][ T5840] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 923.087593][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 923.485193][ T9] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 923.496348][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 923.538772][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 923.578957][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 923.612933][ T5826] syz_tun (unregistering): left allmulticast mode [ 923.641878][ T5826] syz_tun (unregistering): left promiscuous mode [ 923.655869][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 923.659505][ T5826] bridge0: port 1(syz_tun) entered disabled state [ 923.696487][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 923.717817][ T9] usb 4-1: Product: syz [ 923.722039][ T9] usb 4-1: Manufacturer: syz [ 923.777940][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 923.803504][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 923.824991][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 923.831029][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 923.919902][T16462] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3272'. [ 926.067983][ T5840] Bluetooth: hci6: command tx timeout [ 926.175720][ T9] usb 4-1: USB disconnect, device number 20 [ 926.304924][ T29] audit: type=1326 audit(1734052097.769:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16474 comm="syz.4.3275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f672ad85d19 code=0x0 [ 927.413649][T16482] sp0: Synchronizing with TNC [ 927.432503][T16484] sp0: Found TNC [ 927.475112][T16481] [U] è` [ 927.768554][T16451] chnl_net:caif_netlink_parms(): no params data found [ 928.355553][T16491] sp0: Synchronizing with TNC [ 928.379489][ T5840] Bluetooth: hci6: command tx timeout [ 930.098882][T16516] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3286'. [ 930.123336][T16451] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.206820][ T5840] Bluetooth: hci6: command tx timeout [ 931.232263][T16451] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.401327][T16451] bridge_slave_0: entered allmulticast mode [ 931.656902][T16451] bridge_slave_0: entered promiscuous mode [ 931.686911][T16451] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.703781][T16451] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.713766][T16451] bridge_slave_1: entered allmulticast mode [ 931.721107][T16451] bridge_slave_1: entered promiscuous mode [ 932.051755][T16451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.133234][T16451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.865716][T16539] sp0: Synchronizing with TNC [ 932.890075][T16540] sp0: Found TNC [ 932.899610][T16451] team0: Port device team_slave_0 added [ 932.920796][T16538] [U] è` [ 932.934304][T16451] team0: Port device team_slave_1 added [ 933.547042][ T5840] Bluetooth: hci6: command tx timeout [ 933.891021][T16451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 933.909696][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 934.218685][T16451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.245714][T16451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.315929][T16451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.057238][T16451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.547704][T16451] hsr_slave_0: entered promiscuous mode [ 936.606989][T16451] hsr_slave_1: entered promiscuous mode [ 936.672351][T16451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.725857][T16451] Cannot create hsr debugfs directory [ 937.302499][T16574] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3303'. [ 937.414413][T16451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.433886][T16451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50351 - 0 [ 937.891485][T16451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.121102][T16451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50351 - 0 [ 939.656386][T16451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.710131][T16451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50351 - 0 [ 939.782467][T16585] sp0: Synchronizing with TNC [ 939.835652][T16589] sp0: Found TNC [ 940.845671][T16583] [U] è` [ 941.284291][T16451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.679333][T16451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 50351 - 0 [ 942.104741][T16609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 944.311204][T16451] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 945.213735][T16451] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 945.233282][T16451] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 945.245029][T16451] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 945.633209][T16451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.746418][T16451] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.779099][T16641] sp0: Synchronizing with TNC [ 945.920661][T16643] syz.7.3321: attempt to access beyond end of device [ 945.920661][T16643] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 945.943231][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.950479][T10715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 947.206436][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.213637][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.371019][T15005] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 948.574401][T16669] sp0: Synchronizing with TNC [ 948.616705][T16669] sp0: Found TNC [ 948.623864][T16668] [U] `èè` [ 948.648398][T15005] usb 6-1: Using ep0 maxpacket: 32 [ 948.692626][T15005] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 948.738954][T15005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.778793][T15005] usb 6-1: config 0 descriptor?? [ 948.820902][T15005] usb 6-1: selecting invalid altsetting 3 [ 948.826697][T15005] comedi comedi0: could not set alternate setting 3 in high speed [ 948.862162][T15005] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 948.886528][T15005] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 948.976735][T16451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.789954][ T5925] usb 6-1: USB disconnect, device number 19 [ 954.462126][T16697] netlink: 'syz.8.3334': attribute type 4 has an invalid length. [ 954.645094][T16451] veth0_vlan: entered promiscuous mode [ 954.759221][T16451] veth1_vlan: entered promiscuous mode [ 954.931312][T16696] sp0: Synchronizing with TNC [ 955.179418][T16696] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd4": -EINTR [ 955.844572][T16451] veth0_macvtap: entered promiscuous mode [ 956.783648][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 956.827731][T16451] veth1_macvtap: entered promiscuous mode [ 957.090922][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.152079][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.211644][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.272344][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.329107][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 957.339605][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.400899][T16451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.533155][T16734] sp0: Synchronizing with TNC [ 957.544840][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.600877][T16740] sp0: Found TNC [ 957.607385][T16733] [U] è` [ 957.651311][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.419796][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.431332][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.441354][T16451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.483024][T16451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.524689][T16451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.543871][T16451] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.555813][T16451] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.567914][T16753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.588762][T16451] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.600609][T16753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.614834][T16451] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.906166][T12758] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 959.820093][T12758] usb 8-1: Using ep0 maxpacket: 32 [ 959.846224][T12758] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 959.879515][T12758] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.897563][T12758] usb 8-1: config 0 descriptor?? [ 962.005849][T12758] usb 8-1: selecting invalid altsetting 3 [ 962.019969][T10728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.044137][T12758] comedi comedi0: could not set alternate setting 3 in high speed [ 963.052524][T12758] usbduxsigma 8-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 963.066253][T12758] usbduxsigma 8-1:0.0: probe with driver usbduxsigma failed with error -22 [ 963.123358][T10728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.769725][T10728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.852865][T10728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.309774][T16783] sp0: Synchronizing with TNC [ 964.708622][T16791] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd4": -EINTR [ 965.614005][ T5895] usb 8-1: USB disconnect, device number 8 [ 965.954582][T16810] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 968.233694][T16833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.309766][T16833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.356880][T16866] sp0: Synchronizing with TNC [ 975.721371][T16868] syz.4.3371: attempt to access beyond end of device [ 975.721371][T16868] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 975.752894][T15005] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 976.531377][T15005] usb 9-1: Using ep0 maxpacket: 32 [ 976.566486][T15005] usb 9-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 976.630609][T15005] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.739922][T15005] usb 9-1: config 0 descriptor?? [ 976.787482][T15005] usb 9-1: selecting invalid altsetting 3 [ 976.851219][T15005] comedi comedi0: could not set alternate setting 3 in high speed [ 976.945293][T15005] usbduxsigma 9-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 977.775425][T15005] usbduxsigma 9-1:0.0: probe with driver usbduxsigma failed with error -22 [ 980.245132][ T46] usb 9-1: USB disconnect, device number 5 [ 986.512453][T16932] sp0: Synchronizing with TNC [ 986.759515][T16936] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd5": -EINTR [ 986.870752][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.891528][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.900541][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.911711][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.936429][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 986.955850][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 989.231117][ T5840] Bluetooth: hci0: command tx timeout [ 990.137658][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 990.169666][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 990.181506][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 990.189780][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 990.198836][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 990.206226][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 991.412007][ T5840] Bluetooth: hci0: command tx timeout [ 992.448708][ T5840] Bluetooth: hci3: command tx timeout [ 993.763130][ T5840] Bluetooth: hci0: command tx timeout [ 994.673150][ T5840] Bluetooth: hci3: command tx timeout [ 994.744981][ T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.595141][ T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.944813][ T5840] Bluetooth: hci0: command tx timeout [ 996.140900][ T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.572005][ T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.788349][T15005] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 996.884412][ T5840] Bluetooth: hci3: command tx timeout [ 997.034230][T15005] usb 8-1: Using ep0 maxpacket: 16 [ 997.052589][T16935] chnl_net:caif_netlink_parms(): no params data found [ 997.063565][T15005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.090801][T15005] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.102252][T15005] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 997.166937][T15005] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 997.250746][T15005] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.357019][T15005] usb 8-1: config 0 descriptor?? [ 997.413255][T16962] chnl_net:caif_netlink_parms(): no params data found [ 997.640704][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048fae000: rx timeout, send abort [ 997.652041][ C0] vcan0: j1939_tp_rxtimer: 0xffff888048fad800: rx timeout, send abort [ 997.660682][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888048fae000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 997.677432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888048fad800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 998.637873][T15005] usbhid 8-1:0.0: can't add hid device: -71 [ 998.666771][T15005] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 998.734380][T15005] usb 8-1: USB disconnect, device number 9 [ 998.883222][T16935] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.172378][ T5840] Bluetooth: hci3: command tx timeout [ 999.778821][T16935] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.942116][T16935] bridge_slave_0: entered allmulticast mode [ 999.949640][T16935] bridge_slave_0: entered promiscuous mode [ 1000.104531][T16935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.111687][T16935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.152201][T16935] bridge_slave_1: entered allmulticast mode [ 1000.170869][T16935] bridge_slave_1: entered promiscuous mode [ 1001.257587][ T33] bridge_slave_1: left allmulticast mode [ 1001.263321][ T33] bridge_slave_1: left promiscuous mode [ 1002.326410][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.161078][ T33] bridge_slave_0: left allmulticast mode [ 1003.202223][ T33] bridge_slave_0: left promiscuous mode [ 1003.214123][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.654591][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1004.493621][T17083] syz.5.3425: attempt to access beyond end of device [ 1004.493621][T17083] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1004.731495][T17074] Falling back ldisc for ttyS3. [ 1013.525792][T17124] syz.7.3437 (17124): drop_caches: 2 [ 1014.377458][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.613691][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.663200][ T33] bond0 (unregistering): Released all slaves [ 1015.015735][T15733] Bluetooth: hci3: command 0x0405 tx timeout [ 1015.080422][T16935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.098481][T16935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.799165][T17155] Falling back ldisc for ttyS3. [ 1015.804919][T17158] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 1016.217095][T16962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.254989][T16962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.275349][T16962] bridge_slave_0: entered allmulticast mode [ 1016.305267][T16962] bridge_slave_0: entered promiscuous mode [ 1016.389225][T16962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.416973][T16962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.453749][T16962] bridge_slave_1: entered allmulticast mode [ 1016.490809][T16962] bridge_slave_1: entered promiscuous mode [ 1016.826253][T16962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.881045][T16935] team0: Port device team_slave_0 added [ 1016.941196][T16935] team0: Port device team_slave_1 added [ 1016.963572][T16962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.832431][T16935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.882702][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.997917][T16935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.529333][ T33] hsr_slave_0: left promiscuous mode [ 1019.550064][ T33] hsr_slave_1: left promiscuous mode [ 1019.556495][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.595550][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.635507][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.596321][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.676707][ T33] veth1_macvtap: left promiscuous mode [ 1022.098637][ T33] veth0_macvtap: left promiscuous mode [ 1022.114062][ T33] veth1_vlan: left promiscuous mode [ 1022.119563][ T33] veth0_vlan: left promiscuous mode [ 1022.488173][T17199] syz.8.3454 (17199): drop_caches: 2 [ 1022.521044][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1026.625962][T17239] netlink: 'syz.5.3464': attribute type 4 has an invalid length. [ 1028.485219][ T33] team0 (unregistering): Port device team_slave_1 removed [ 1028.605832][ T33] team0 (unregistering): Port device team_slave_0 removed [ 1030.710207][T16962] team0: Port device team_slave_0 added [ 1030.721289][T16935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.728991][T16935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1030.764706][T16935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.797054][T16962] team0: Port device team_slave_1 added [ 1030.971620][T16962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.007990][T16962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.148632][T16962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.330556][T16962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.346202][T16962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.682344][T16962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.168618][T17274] sp0: Synchronizing with TNC [ 1032.325986][T16935] hsr_slave_0: entered promiscuous mode [ 1032.343421][T16935] hsr_slave_1: entered promiscuous mode [ 1032.365101][T16935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.376275][T16935] Cannot create hsr debugfs directory [ 1032.444758][T16962] hsr_slave_0: entered promiscuous mode [ 1032.484990][T16962] hsr_slave_1: entered promiscuous mode [ 1032.497412][T16962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1032.513813][T16962] Cannot create hsr debugfs directory [ 1037.054632][T17323] Falling back ldisc for ttyS3. [ 1037.060605][T17327] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd7": -EINTR [ 1039.813181][T16935] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1039.862013][T16935] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1039.964988][T16935] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1040.013667][T16935] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1040.190500][T16962] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1040.249051][T16962] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1040.348312][T16962] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1040.557050][T16962] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1041.698370][T16935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.832109][T16935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.873077][T10701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.880233][T10701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.956939][T10701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.964099][T10701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.141687][T16962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.165686][T17388] sp0: Synchronizing with TNC [ 1043.214335][T17387] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 1043.783243][T16962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.087848][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.095060][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.396961][T17407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.414473][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.421691][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.728680][T17407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1046.362226][T15733] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1046.384230][T15733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1046.396702][T15733] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1046.407685][T17435] syz.8.3504[17435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.407772][T17435] syz.8.3504[17435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.556236][T15733] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1046.576271][T15733] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1046.585651][T15733] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1046.777834][T17435] syz.8.3504[17435] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1046.989717][ T29] audit: type=1326 audit(1734052210.653:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.5.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61abd85d19 code=0x7ffc0000 [ 1047.115396][ T29] audit: type=1326 audit(1734052210.700:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.5.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61abd85d19 code=0x7ffc0000 [ 1047.248351][ T29] audit: type=1326 audit(1734052210.718:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.5.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f61abd85d19 code=0x7ffc0000 [ 1047.321402][ T29] audit: type=1326 audit(1734052210.718:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.5.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61abd85d19 code=0x7ffc0000 [ 1047.429708][T17452] binder: 17448:17452 ioctl c0306201 0 returned -14 [ 1047.656698][ T29] audit: type=1326 audit(1734052210.718:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17442 comm="syz.5.3507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61abd85d19 code=0x7ffc0000 [ 1048.830298][ T52] bridge_slave_1: left allmulticast mode [ 1048.906262][ T52] bridge_slave_1: left promiscuous mode [ 1048.984073][T15733] Bluetooth: hci0: command tx timeout [ 1049.339032][T17468] Falling back ldisc for ttyS3. [ 1049.344819][T17474] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 1049.897825][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.218692][ T52] bridge_slave_0: left allmulticast mode [ 1050.228839][ T52] bridge_slave_0: left promiscuous mode [ 1050.267063][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.662398][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1050.700983][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1050.730193][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1050.754919][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1050.786239][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1050.802131][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1051.215768][ T5840] Bluetooth: hci0: command tx timeout [ 1053.032491][T17510] Falling back ldisc for ttyS3. [ 1053.038249][T17513] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd4": -EINTR [ 1053.131149][ T5840] Bluetooth: hci3: command tx timeout [ 1053.676457][ T5840] Bluetooth: hci0: command tx timeout [ 1054.062065][ T46] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1054.396825][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 1054.629660][ T46] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.650767][ T46] usb 8-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 1054.665101][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.695390][ T46] usb 8-1: config 0 descriptor?? [ 1055.136357][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1055.157623][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1055.205017][ T52] bond0 (unregistering): Released all slaves [ 1055.307026][ T5840] Bluetooth: hci3: command tx timeout [ 1055.314697][ T46] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1055.322301][ T46] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1055.329025][ T46] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1055.336732][ T46] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1055.343604][ T46] elo 0003:04E7:0009.0004: unknown main item tag 0x0 [ 1055.359098][ T46] elo 0003:04E7:0009.0004: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.7-1/input0 [ 1055.389640][ T46] usb 8-1: USB disconnect, device number 10 [ 1055.495825][T17551] syz.5.3535[17551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.495938][T17551] syz.5.3535[17551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.548334][T17551] syz.5.3535[17551] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1055.896658][ T5840] Bluetooth: hci0: command tx timeout [ 1056.801550][T17557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1056.895891][T17557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1056.933887][T17557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1057.023748][ T52] hsr_slave_0: left promiscuous mode [ 1057.025395][T17557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1057.163855][T17557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1057.200054][ T52] hsr_slave_1: left promiscuous mode [ 1057.272185][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.345109][T17557] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1057.488996][T17557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1057.491051][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.524257][T17557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1057.580901][T17557] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1058.639724][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1058.788207][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1059.062121][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 1059.073097][T15733] Bluetooth: hci2: command 0x0c1a tx timeout [ 1059.816457][T15733] Bluetooth: hci0: command 0x0c1a tx timeout [ 1059.823507][T15733] Bluetooth: hci3: command 0x0419 tx timeout [ 1059.829980][ T5840] Bluetooth: hci1: command 0x0405 tx timeout [ 1060.285305][T17605] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3556'. [ 1060.769897][T17605] netlink: 'syz.7.3556': attribute type 21 has an invalid length. [ 1061.156805][T17611] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3557'. [ 1061.466534][ T5892] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1061.628756][ T5892] usb 9-1: config 0 has an invalid interface number: 140 but max is 0 [ 1061.651735][ T5892] usb 9-1: config 0 has no interface number 0 [ 1061.702305][ T5892] usb 9-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 1061.741095][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.776415][ T5892] usb 9-1: Product: syz [ 1061.780642][ T5892] usb 9-1: Manufacturer: syz [ 1061.787991][T17432] chnl_net:caif_netlink_parms(): no params data found [ 1061.814752][ T5892] usb 9-1: SerialNumber: syz [ 1061.831660][ T5892] usb 9-1: config 0 descriptor?? [ 1061.972677][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1061.979119][T15733] Bluetooth: hci3: command 0x0419 tx timeout [ 1062.139085][ T5892] as10x_usb: device has been detected [ 1062.194710][ T5892] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1062.258648][ T5892] usb 9-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1062.433377][ T5892] as10x_usb: error during firmware upload part1 [ 1062.520296][ T5892] Registered device Elgato EyeTV DTT Deluxe [ 1062.540690][ T5892] usb 9-1: USB disconnect, device number 6 [ 1063.635142][T17623] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1063.677514][T17623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1063.685700][T17623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1063.692333][T17623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1063.701242][T17623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1063.721072][T17432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.750010][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.758875][T17432] bridge_slave_0: entered allmulticast mode [ 1063.770048][T17432] bridge_slave_0: entered promiscuous mode [ 1063.788834][ T5892] Unregistered device Elgato EyeTV DTT Deluxe [ 1063.797257][T17432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.820984][ T5892] as10x_usb: device has been disconnected [ 1063.832273][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.846938][T17432] bridge_slave_1: entered allmulticast mode [ 1063.883632][T17432] bridge_slave_1: entered promiscuous mode [ 1064.098791][T17486] chnl_net:caif_netlink_parms(): no params data found [ 1064.141512][ T5895] IPVS: starting estimator thread 0... [ 1064.245977][T17656] IPVS: using max 21 ests per chain, 50400 per kthread [ 1064.490340][T17432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1064.528216][T17667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3570'. [ 1064.669566][T17432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1065.005063][ T46] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1065.157613][T17432] team0: Port device team_slave_0 added [ 1065.266430][ T46] usb 9-1: New USB device found, idVendor=5032, idProduct=0bc7, bcdDevice=9c.bb [ 1065.603134][ T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.655126][ T46] usb 9-1: config 0 descriptor?? [ 1065.687903][ T46] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in warm state. [ 1065.724035][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3575'. [ 1065.744078][ T46] dvb-usb: bulk message failed: -22 (3/0) [ 1065.769198][T17432] team0: Port device team_slave_1 added [ 1065.808235][ T46] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1065.820081][T15733] Bluetooth: hci2: command 0x0c1a tx timeout [ 1065.820097][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 1065.903485][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 1065.903511][T15733] Bluetooth: hci1: command 0x0405 tx timeout [ 1065.915885][ T5840] Bluetooth: hci3: command 0x0419 tx timeout [ 1065.932430][T17486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.943939][ T46] dvbdev: DVB: registering new adapter (GRAND - USB2.0 DVB-T adapter) [ 1065.953563][ T46] usb 9-1: media controller created [ 1065.988207][T17486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.008397][ T46] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1066.034641][T17486] bridge_slave_0: entered allmulticast mode [ 1066.045793][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 1066.067760][ T46] dvb-usb: bulk message failed: -22 (6/0) [ 1066.070050][T17486] bridge_slave_0: entered promiscuous mode [ 1066.086381][ T46] dvb-usb: no frontend was attached by 'GRAND - USB2.0 DVB-T adapter' [ 1066.105719][T17486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.109038][ T46] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input11 [ 1066.124354][T17486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1066.136031][T17486] bridge_slave_1: entered allmulticast mode [ 1066.146702][T17486] bridge_slave_1: entered promiscuous mode [ 1066.212539][T17432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1066.239476][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1066.343980][T17432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1066.373893][ T46] dvb-usb: schedule remote query interval to 150 msecs. [ 1066.380912][ T46] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully initialized and connected. [ 1066.412467][ T46] usb 9-1: USB disconnect, device number 7 [ 1067.281119][T17706] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3579'. [ 1067.314340][ T5895] IPVS: starting estimator thread 0... [ 1067.415546][ T46] dvb-usb: GRAND - USB2.0 DVB-T adapter successfully deinitialized and disconnected. [ 1067.431374][T17486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.432001][T17709] IPVS: using max 22 ests per chain, 52800 per kthread [ 1067.497935][T17486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.523783][T17432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.536692][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1067.567797][T17432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.126587][T15733] Bluetooth: hci3: command 0x0419 tx timeout [ 1068.621499][T17718] ------------[ cut here ]------------ [ 1068.627394][T17718] refcount_t: decrement hit 0; leaking memory. [ 1068.634401][T17718] WARNING: CPU: 1 PID: 17718 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 1068.644289][T17718] Modules linked in: [ 1068.648211][T17718] CPU: 1 UID: 0 PID: 17718 Comm: syz.8.3581 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 1068.659032][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1068.669171][T17718] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1068.675330][T17718] Code: b2 00 00 00 e8 87 43 dd fc 5b 5d e9 4b 26 2e 07 e8 7b 43 dd fc c6 05 9d 83 41 0b 01 90 48 c7 c7 40 53 5f 8c e8 d7 ec 9d fc 90 <0f> 0b 90 90 eb d9 e8 5b 43 dd fc c6 05 7a 83 41 0b 01 90 48 c7 c7 [ 1068.695810][T17718] RSP: 0018:ffffc90003f0f8e8 EFLAGS: 00010246 [ 1068.701934][T17718] RAX: abf4ae17f8c0c400 RBX: ffff88807edb464c RCX: 0000000000080000 [ 1068.710182][T17718] RDX: ffffc9001730d000 RSI: 000000000000541e RDI: 000000000000541f [ 1068.718484][T17718] RBP: 0000000000000004 R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 1068.727084][T17718] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807edb4608 [ 1068.735100][T17718] R13: 0000000000000000 R14: ffff88807edb464c R15: dffffc0000000000 [ 1068.743469][T17718] FS: 00007efe6e7b46c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1068.752996][T17718] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1068.759699][T17718] CR2: 000055fc4438b534 CR3: 0000000063e74000 CR4: 0000000000350ef0 [ 1068.767762][T17718] Call Trace: [ 1068.771114][T17718] [ 1068.774064][T17718] ? __warn+0x165/0x4d0 [ 1068.778272][T17718] ? refcount_warn_saturate+0xfa/0x1d0 [ 1068.783826][T17718] ? report_bug+0x2b3/0x500 [ 1068.788371][T17718] ? refcount_warn_saturate+0xfa/0x1d0 [ 1068.794390][T17718] ? handle_bug+0x60/0x90 [ 1068.799381][T17718] ? exc_invalid_op+0x1a/0x50 [ 1068.804521][T17718] ? asm_exc_invalid_op+0x1a/0x20 [ 1068.810287][T17718] ? __warn_printk+0x292/0x360 [ 1068.815229][T17718] ? refcount_warn_saturate+0xfa/0x1d0 [ 1068.820736][T17718] ? refcount_warn_saturate+0xf9/0x1d0 [ 1068.826332][T17718] ref_tracker_free+0x6af/0x7e0 [ 1068.831226][T17718] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1068.837217][T17718] ? __pfx_ref_tracker_free+0x10/0x10 [ 1068.842649][T17718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.848358][T17718] ? ax25_destroy_socket+0x551/0x5c0 [ 1068.853946][T17718] ax25_release+0x368/0x950 [ 1068.858488][T17718] sock_close+0xbe/0x240 [ 1068.862764][T17718] ? __pfx_sock_close+0x10/0x10 [ 1068.867708][T17718] __fput+0x23e/0xa50 [ 1068.871744][T17718] task_work_run+0x251/0x310 [ 1068.876425][T17718] ? __pfx_task_work_run+0x10/0x10 [ 1068.881590][T17718] get_signal+0x15f7/0x1750 [ 1068.886232][T17718] ? __pfx_get_signal+0x10/0x10 [ 1068.891125][T17718] ? kick_process+0xef/0x160 [ 1068.895764][T17718] arch_do_signal_or_restart+0x96/0x860 [ 1068.901534][T17718] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1068.908039][T17718] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1068.914078][T17718] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1068.920106][T17718] syscall_exit_to_user_mode+0xce/0x340 [ 1068.925694][T17718] do_syscall_64+0x100/0x230 [ 1068.930389][T17718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1068.936057][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.942083][T17718] RIP: 0033:0x7efe70985d19 [ 1068.946528][T17718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.966280][T17718] RSP: 002b:00007efe6e7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1068.975211][T17718] RAX: 0000000000000000 RBX: 00007efe70b76160 RCX: 00007efe70985d19 [ 1068.983458][T17718] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 000000000000000c [ 1068.991456][T17718] RBP: 00007efe70a01a20 R08: 0000000000000010 R09: 0000000000000000 [ 1068.999523][T17718] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000000 [ 1069.007557][T17718] R13: 0000000000000000 R14: 00007efe70b76160 R15: 00007ffcc8bd77c8 [ 1069.015857][T17718] [ 1069.018908][T17718] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1069.026291][T17718] CPU: 1 UID: 0 PID: 17718 Comm: syz.8.3581 Not tainted 6.13.0-rc2-syzkaller-00130-g150b567e0d57 #0 [ 1069.037075][T17718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1069.047161][T17718] Call Trace: [ 1069.050454][T17718] [ 1069.053404][T17718] dump_stack_lvl+0x241/0x360 [ 1069.058129][T17718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1069.063374][T17718] ? __pfx__printk+0x10/0x10 [ 1069.067995][T17718] ? _printk+0xd5/0x120 [ 1069.072179][T17718] ? __init_begin+0x41000/0x41000 [ 1069.077225][T17718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.082881][T17718] ? vscnprintf+0x5d/0x90 [ 1069.087246][T17718] panic+0x349/0x880 [ 1069.091192][T17718] ? __warn+0x174/0x4d0 [ 1069.095379][T17718] ? __pfx_panic+0x10/0x10 [ 1069.099833][T17718] __warn+0x344/0x4d0 [ 1069.103829][T17718] ? refcount_warn_saturate+0xfa/0x1d0 [ 1069.109399][T17718] report_bug+0x2b3/0x500 [ 1069.113830][T17718] ? refcount_warn_saturate+0xfa/0x1d0 [ 1069.119312][T17718] handle_bug+0x60/0x90 [ 1069.123492][T17718] exc_invalid_op+0x1a/0x50 [ 1069.128114][T17718] asm_exc_invalid_op+0x1a/0x20 [ 1069.132990][T17718] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1069.139076][T17718] Code: b2 00 00 00 e8 87 43 dd fc 5b 5d e9 4b 26 2e 07 e8 7b 43 dd fc c6 05 9d 83 41 0b 01 90 48 c7 c7 40 53 5f 8c e8 d7 ec 9d fc 90 <0f> 0b 90 90 eb d9 e8 5b 43 dd fc c6 05 7a 83 41 0b 01 90 48 c7 c7 [ 1069.158700][T17718] RSP: 0018:ffffc90003f0f8e8 EFLAGS: 00010246 [ 1069.164791][T17718] RAX: abf4ae17f8c0c400 RBX: ffff88807edb464c RCX: 0000000000080000 [ 1069.172767][T17718] RDX: ffffc9001730d000 RSI: 000000000000541e RDI: 000000000000541f [ 1069.180748][T17718] RBP: 0000000000000004 R08: ffffffff81600a42 R09: fffffbfff1cfa210 [ 1069.188730][T17718] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88807edb4608 [ 1069.196707][T17718] R13: 0000000000000000 R14: ffff88807edb464c R15: dffffc0000000000 [ 1069.204693][T17718] ? __warn_printk+0x292/0x360 [ 1069.209484][T17718] ? refcount_warn_saturate+0xf9/0x1d0 [ 1069.214963][T17718] ref_tracker_free+0x6af/0x7e0 [ 1069.219825][T17718] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1069.225737][T17718] ? __pfx_ref_tracker_free+0x10/0x10 [ 1069.231132][T17718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.236773][T17718] ? ax25_destroy_socket+0x551/0x5c0 [ 1069.242093][T17718] ax25_release+0x368/0x950 [ 1069.246620][T17718] sock_close+0xbe/0x240 [ 1069.250877][T17718] ? __pfx_sock_close+0x10/0x10 [ 1069.255742][T17718] __fput+0x23e/0xa50 [ 1069.259757][T17718] task_work_run+0x251/0x310 [ 1069.264371][T17718] ? __pfx_task_work_run+0x10/0x10 [ 1069.269505][T17718] get_signal+0x15f7/0x1750 [ 1069.274040][T17718] ? __pfx_get_signal+0x10/0x10 [ 1069.278909][T17718] ? kick_process+0xef/0x160 [ 1069.283523][T17718] arch_do_signal_or_restart+0x96/0x860 [ 1069.289100][T17718] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1069.295274][T17718] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1069.301279][T17718] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1069.307018][T17718] syscall_exit_to_user_mode+0xce/0x340 [ 1069.312584][T17718] do_syscall_64+0x100/0x230 [ 1069.317279][T17718] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1069.322930][T17718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.328838][T17718] RIP: 0033:0x7efe70985d19 [ 1069.333258][T17718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1069.352872][T17718] RSP: 002b:00007efe6e7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1069.361299][T17718] RAX: 0000000000000000 RBX: 00007efe70b76160 RCX: 00007efe70985d19 [ 1069.369276][T17718] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 000000000000000c [ 1069.377252][T17718] RBP: 00007efe70a01a20 R08: 0000000000000010 R09: 0000000000000000 [ 1069.385317][T17718] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000000 [ 1069.393385][T17718] R13: 0000000000000000 R14: 00007efe70b76160 R15: 00007ffcc8bd77c8 [ 1069.401386][T17718] [ 1069.404642][T17718] Kernel Offset: disabled [ 1069.409079][T17718] Rebooting in 86400 seconds..