last executing test programs: 16m14.217372168s ago: executing program 3 (id=193): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) pread64(r1, &(0x7f0000000080)=""/31, 0x1f, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) r4 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3, 0x8}}}, 0x24}}, 0x20040000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="34215be17bb8427b17d78fe12f51035f4a6e5f1064b0255cc160f628e35095f63b224892e9f3e7b7f438fbf799be0472372ba2408cac54ca951b6814868786d968ad0531df5031ed14a9fadef55fdb765221ba8ec9524b0ea04e29421887e7df9358578ff47f909f419fed052103e7b4b1c30614afcea5ae58b5e47fe7d1c8ec27ad9f57b6ef25e26d0dffd0f70b59f78caf1984ce00914b0e1b03b9d915fd4c606f09040075c22cfb5d469cc4f4ca0f", 0xb0}, {&(0x7f0000000400)="6310d2e5111157f28dd3cf8c89506d7abf582dacd64197925ae34c6caf5b9294b5474e61fe12046f43bb102ba5cd49cef9ed742d062a961b050b2e6d0462881b2c79cdfe6488d0b35c180c7c328c2a8e21934af63a806ea5e1a51d98ed14", 0x5e}, {&(0x7f00000004c0)="93bc888a70641bcd7a81a62e4f8df165414cb3b1e5cfc5f3bc0080d12ce4ee23abf9f836f4cf10f614a590b9c141edf54f9981efee4084af7244fb034606aa73faefffdb775161a4f4fadda4c39f546ad46f45388f4a929406e548d4a25c6592b4de6f1ac458fb490f311e85e7bb975a9c0deae81ee51fe19b0b5145baf2f0260a594243924348ee779427d9089402612a6f0ae0553b58c51db1c6552ab1f31c27ea7fa7f68ac5918fb6bb506b386b91f6cbd9d76b5cce9a254018dcac37b15a03b1a21fbb01aa7ef8d6c5c95f7a2e46bedea6", 0xd3}, {&(0x7f00000005c0)="e2f9233661d6ccad1a8b0f82525adb1e19a06c9694617e1827bfb4007655ff1985dd7111d64c641c64d741721b39a5e99281fee1fe1130e1144ab5c30d8ce9bbd37adddf31cb8a11eee78d249d49a720f20e86a6", 0x54}], 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="1c00"/12, @ANYRES32=r6, @ANYBLOB="ac1414aaac1414aa0000000011000000000000000000000001000000000000000000000014000000000000000000000002000000030000000000000044000000000000000000000007000000862a000000000502060cd7356396796dce2f975b0707c385c1806f060f2d7f0f15e7973b120ab0da29f64408fd30000000080000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e00000020a01010100000200000008000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="640101020000000000000000"], 0x158}}], 0x1, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) syz_clone(0x910000, &(0x7f0000000000)="eb517d02001d054d1257f8af1bb77e91c7d9d1a8403dd7c573249e", 0x1b, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) connect$inet6(r10, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x80) write(r10, &(0x7f00000000c0)="8f2a0a65bd8c2b2b0304000e0580a7b6070d63e286a5ce", 0x17) 16m11.819118008s ago: executing program 3 (id=197): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x880, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r2, 0x0, 0x6, 0x80000000}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000980)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000008000000000ee4fe5067406b838d15fcfcaae6ce3c669c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) write$cgroup_int(r8, 0x0, 0x0) 16m9.776902358s ago: executing program 3 (id=201): r0 = socket(0x25, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1f32}, 0x48, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1005, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r8, @in={{0x2, 0x4e20, @empty}}, 0xd9d, 0x1}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) 16m8.242829983s ago: executing program 3 (id=204): mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000480)={0x0, 0xfffffffd, 0x80, 0x3, 0x34e}, &(0x7f0000000980)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffd6c, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket(0x2a, 0x2, 0xfffffffe) inotify_init() syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r3 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0xe000, 0x80) r4 = accept4$packet(r3, 0x0, &(0x7f0000000300), 0x800) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x5c, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x47bc, 0xa8be, 0x0, 0x0, 0x0) r5 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x2) pwrite64(r5, &(0x7f00000004c0)='\f', 0x1, 0x7fff) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b40), 0x2400, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000001100)) ftruncate(r5, 0x3) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r7, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xa2}], 0x1, 0x80000001, 0x3f7a) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) io_setup(0x1, &(0x7f00000004c0)=0x0) sendmmsg$alg(r6, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000017010000040000000600000000000000180000000000000017010000040000001409000000000000600000000000000017010000020000004a0000002e71e064b1ea6ed118cbc0b6faa82599ea3c7cda43de4900f35909f3ab019ac7577d9b3b6ec537d1225aaaef85d791a5e7b65fde623d058c265693574f3d13c6f6f5ad740aca31c3fe5e0cbcc424c5431fd5260012c7723fa20942735000001800000000000000170100000300000000000000000000003800000000000000170100000200000023000000ec7d4e037c88220b666967304a528771b33eaa2cd3b5dddcddaaaa33c548f8b3ebd90a0018000000000000001701000004000000010000000000000000cc84cda9628482d7bc7313de1419e42c88e4cc8ee65883f226f5609461215e6e82f02c4ebd446342e1b6162dddfc365d8025ff51f66c482a06d70ed5a2cc0c24733b28914cab8beafb7c614d57382efd53abb29a8a1c8568d47759e608c171ed2da9561181865efddc63f0a33623509a8ae9137fcc3f97e35e885a8f28429bcf9ab4f7742d8f64527359e40217247a3c4591d6480be03b446ce1f8cc528e4f806342dd11a2f4324612713cde6d110d70cf104c202400"/461], 0xf8, 0x80}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000900)="29040c83484dfeedf274bfd180015639f8a8de161c98ab5660ee99af7fda49e70cd4bde061679bd2a49f332daebdb3905340c033719fe4d3bfef45e56d6af35c47b69aae9665e0d6e404fb5694c6fa5abb6e3e1236e320fd98562270ecd01bf430e3", 0x62}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x60801}], 0x2, 0x4040000) io_submit(r9, 0x0, 0x0) 16m5.369504946s ago: executing program 3 (id=211): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x4087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x1, [{0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000001040)=[{0x6, 0x0, 0x0, 0x7fff8000}, {0xffff, 0x1, 0x5, 0x6}, {0x3, 0x4, 0x7e, 0x1}]}) process_mrelease(0xffffffffffffffff, 0x0) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 16m2.799147548s ago: executing program 3 (id=214): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/236) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0xfe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x5002, 0x10000, 0x10, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x4000, 0x0, 0xb, 0x0, 0x0, 0x4}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x80a0000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x40, 0x0, 0x0, 0x1}, {0x6000}, {0x1, 0xfffe}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 15m47.108789668s ago: executing program 32 (id=214): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x40000) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/236) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x5}, 0x1c) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0x0, 0xfe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x5002, 0x10000, 0x10, 0x8, 0x0, 0x0, 0x81, 0x0, 0x44, 0xe, 0x0, 0x3}, {0x4000, 0x0, 0xb, 0x0, 0x0, 0x4}, {0x11000, 0xd000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1a}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x84}, {0x80a0000, 0x80a0000, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x82, 0x0, 0x40, 0x0, 0x0, 0x1}, {0x6000}, {0x1, 0xfffe}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900, [0x0, 0x0, 0x0, 0x3]}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m38.833078497s ago: executing program 5 (id=2524): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x20000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x56, {0x4e24, 0x4e26, [0x4, 0x5, 0x0, 0xfffffffe], [0x0, 0x7ffffffe]}, 0xc9e}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x14c97000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x6, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, [0x0, 0x0, 0xfff, 0x0, 0x0, 0xa9, 0x100]}}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x34, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x4a080}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) 3m36.551875506s ago: executing program 5 (id=2528): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000022, &(0x7f00000004c0)=@ieee802154={0x24, @short={0x2, 0x1, 0x555e}}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x80) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r7, 0xfffffffffffffffd, 0x58) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x1, 0x2}) 3m34.345299303s ago: executing program 5 (id=2534): syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040)) r0 = socket(0x1e, 0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) socket(0x1e, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) setns(r1, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x2, 0x8800) read$usbmon(r3, &(0x7f0000000100)=""/113, 0x71) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_io_uring_setup(0x39fc, &(0x7f0000000000)={0x0, 0x4054d0}, &(0x7f0000ff5000), &(0x7f0000ff4000)) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 3m20.234426875s ago: executing program 5 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r5 = memfd_secret(0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r7, 0x1) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000080)="2f00000014000f3f03000000120f0af710004003009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000054000100010000000000000007000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000300ffff0001000000002000"/24], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40c0}, 0x0) 3m15.635214386s ago: executing program 5 (id=2572): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x103b02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x0) writev(r8, &(0x7f0000000040), 0x2) close(r8) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m13.582218624s ago: executing program 5 (id=2575): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="84d5", 0x2}], 0x1}}], 0x1, 0x6000c080) sendto$inet6(r3, &(0x7f00000002c0)="f658", 0x36, 0x40084, 0x0, 0xffffffffffffff18) write$smackfs_ipv6host(r2, &(0x7f0000000040)=@l2={{0xd, 0x3a, 0xad0, 0x3a, 0x717a, 0x3a, 0x5, 0x3a, 0x4c, 0x3a, 0x8, 0x3a, 0x1, 0x3a, 0x7}, 0x2f, 0x10000, 0x20, '}.$'}, 0xb1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 2m57.822844941s ago: executing program 33 (id=2575): sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)="84d5", 0x2}], 0x1}}], 0x1, 0x6000c080) sendto$inet6(r3, &(0x7f00000002c0)="f658", 0x36, 0x40084, 0x0, 0xffffffffffffff18) write$smackfs_ipv6host(r2, &(0x7f0000000040)=@l2={{0xd, 0x3a, 0xad0, 0x3a, 0x717a, 0x3a, 0x5, 0x3a, 0x4c, 0x3a, 0x8, 0x3a, 0x1, 0x3a, 0x7}, 0x2f, 0x10000, 0x20, '}.$'}, 0xb1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') 26.449157489s ago: executing program 2 (id=2908): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f1, 0x0, 0x9}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x9, &(0x7f0000000000)) r7 = gettid() r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000040)={0x2, r9, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0xe}) rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)) syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r12, @ANYBLOB='W3\x00\x00', @ANYRES32=r12], 0x40}}, 0x0) 23.987733525s ago: executing program 2 (id=2912): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x545900, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) waitid(0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x8, "11c0003daad0996b2fb7bc32d8fbb64400000000000000000000fb00", 0x7, 0x100000000, 0x1, 0x9e, 0x1, 0x200, 0x9, 0x6, [0x64a, 0x3, 0x1000, 0x6]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001c00000000000000778a00008517d90000006d0000009582", @ANYBLOB="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"], 0x0, 0x7cb, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) 22.534978251s ago: executing program 2 (id=2914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r3, 0x0, 0x6f) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x1611, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x60424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x400, 0x38d, 0x9}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40854}, 0x40000) 20.87832425s ago: executing program 2 (id=2915): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.919467015s ago: executing program 4 (id=2921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f1, 0x0, 0x9}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x9, &(0x7f0000000000)) r7 = gettid() r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000040)={0x2, r9, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0xe}) rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)) syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r12, @ANYBLOB='W3\x00\x00', @ANYRES32=r12], 0x40}}, 0x0) 15.462958437s ago: executing program 1 (id=2923): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x545900, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) waitid(0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x8, "11c0003daad0996b2fb7bc32d8fbb64400000000000000000000fb00", 0x7, 0x100000000, 0x1, 0x9e, 0x1, 0x200, 0x9, 0x6, [0x64a, 0x3, 0x1000, 0x6]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001c00000000000000778a00008517d90000006d0000009582", @ANYBLOB="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"], 0x0, 0x7cb, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) 11.995220287s ago: executing program 2 (id=2925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r3, 0x0, 0x6f) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x1611, 0x0) socket$kcm(0x29, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x60424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x400, 0x38d, 0x9}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40854}, 0x40000) 11.867227176s ago: executing program 1 (id=2926): syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c00000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000100)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) 11.86600227s ago: executing program 4 (id=2927): ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x300, 0x34324142, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x7fffffff}, {0xd, 0x8}, {0x5, 0x2000008}, {0x2, 0x3}, {0x5, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r5, 0x0, 0x4840) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc040) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x6) r7 = getpid() ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4590) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) sched_rr_get_interval(r7, &(0x7f0000000080)) 5.932903117s ago: executing program 2 (id=2928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) write$smackfs_netlabel(r3, 0x0, 0x6f) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) io_uring_setup(0x1611, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200326a03030000001b000000000000000010002b0001000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x60424}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x400, 0x38d, 0x9}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40854}, 0x40000) 5.93166899s ago: executing program 0 (id=2929): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@remote, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d5, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb8}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 5.9303298s ago: executing program 1 (id=2930): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde2feacc831eec04c24eeec7ff3d31378508003d2d5c89ab0220cefebd4687636417b9822766c1bfea4e01fd43c6a4caeaf049a572a9774d3b882663b4a66c5ec48c29f065d"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x60, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r8 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x20}, {}, {0x0, 0x3}], 0x3f}}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="a5", 0x1}], 0x1}, 0x48001) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x8491) 5.90094506s ago: executing program 4 (id=2931): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) 5.054015407s ago: executing program 0 (id=2932): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde2feacc831eec04c24eeec7ff3d31378508003d2d5c89ab0220cefebd4687636417b9822766c1bfea4e01fd43c6a4caeaf049a572a9774d3b882663b4a66c5ec48c29f065d"}, 0xd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x13, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x60, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r8 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05640, &(0x7f0000000080)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {0x20}, {}, {0x0, 0x3}], 0x3f}}) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="a5", 0x1}], 0x1}, 0x48001) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}, 0x8491) 4.884642828s ago: executing program 4 (id=2933): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) 4.779596581s ago: executing program 1 (id=2934): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280), 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005", @ANYBLOB="ebffffffffffffff280012800b"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.799084048s ago: executing program 0 (id=2935): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x545900, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) waitid(0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x8, "11c0003daad0996b2fb7bc32d8fbb64400000000000000000000fb00", 0x7, 0x100000000, 0x1, 0x9e, 0x1, 0x200, 0x9, 0x6, [0x64a, 0x3, 0x1000, 0x6]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001c00000000000000778a00008517d90000006d0000009582", @ANYBLOB="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"], 0x0, 0x7cb, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) 3.313507028s ago: executing program 4 (id=2936): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f1, 0x0, 0x9}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x9, &(0x7f0000000000)) r7 = gettid() r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r8, 0xc02464bb, &(0x7f0000000040)={0x2, r9, 0x5, 0x5, 0x7, 0x5, 0x3, 0x7, 0xe}) rt_sigqueueinfo(r7, 0x21, &(0x7f0000001500)) syz_open_dev$sndpcmc(0x0, 0x1, 0x101000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004"], 0x328}}, 0x84) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r12, @ANYBLOB='W3\x00\x00', @ANYRES32=r12], 0x40}}, 0x0) 2.979421418s ago: executing program 0 (id=2937): remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) 2.288586338s ago: executing program 0 (id=2938): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) write$dsp(0xffffffffffffffff, &(0x7f00000001c0), 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa000000000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 2.26465919s ago: executing program 1 (id=2939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffff00000001}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000640200000000800084000000000050005000a0000000500010006feff000d000300686173683a6e6574"], 0x5c}}, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f00000001c0)='3\x00', 0x2) 1.912969886s ago: executing program 4 (id=2940): syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) 38.786709ms ago: executing program 1 (id=2941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000580)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c0000001100000126bd7000fcdbdf25190000007000328008007500", @ANYRES32=r1, @ANYBLOB="040031807d47ade75b055dbb2a91fbc3dbae5a5b6cee10fa9eeccd183fad9f288a49cbaa701fee4504005d0008008700", @ANYRES32=r6, @ANYBLOB="a41d9cc27526da7a3e25f53db6bbfd8608f0458aa4a741d1f45508706cd9b90b6bafe71b5552698d8da283551041372ee30400148008001f80040024", @ANYRES32=r2, @ANYBLOB="0800d100e0000001"], 0x9c}, 0x1, 0x0, 0x0, 0x40041}, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 0 (id=2942): mount$overlay(0x0, 0x0, 0x0, 0x18000, 0x0) rmdir(0x0) open(0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@loopback, @in=@remote, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d5, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb8}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) kernel console output (not intermixed with test programs): gspca_stk1135: Sensor write failed [ 450.906579][ T978] gspca_stk1135: serial bus timeout: status=0x00 [ 450.906735][ T978] gspca_stk1135: Sensor write failed [ 450.907222][ T978] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 451.233224][ T978] usb 2-1: USB disconnect, device number 12 [ 452.292707][ T9954] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 453.585710][ T9971] syz_tun: entered promiscuous mode [ 453.599542][ T9971] vlan2: entered promiscuous mode [ 455.651304][ T55] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 455.661577][ T55] Bluetooth: hci3: Injecting HCI hardware error event [ 455.679053][ T5831] Bluetooth: hci3: hardware error 0x00 [ 456.887178][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 457.382821][T10030] overlayfs: failed to clone upperpath [ 458.415868][ T5831] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 458.596131][ T30] audit: type=1800 audit(1746374973.543:31): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1032" name="/" dev="9p" ino=2 res=0 errno=0 [ 461.170301][ T52] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 461.349391][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.378454][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.438791][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.513535][ T52] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.621919][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.705249][ T52] usb 5-1: config 0 descriptor?? [ 461.747468][T10087] 9pnet_fd: Insufficient options for proto=fd [ 462.666531][T10097] random: crng reseeded on system resumption [ 462.672154][ T52] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 463.192762][ T52] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 464.250805][ T975] usb 5-1: USB disconnect, device number 7 [ 465.030710][ T30] audit: type=1804 audit(1746374980.023:32): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1054" name="file0" dev="tmpfs" ino=1301 res=1 errno=0 [ 465.142470][T10111] ref_ctr_offset mismatch. inode: 0x515 offset: 0x0 ref_ctr_offset(old): 0x200000000280 ref_ctr_offset(new): 0x200000000200 [ 465.162799][T10111] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 465.204214][T10111] ref_ctr decrement failed for inode: 0x515 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807ee01e00 [ 465.249861][T10111] uprobe: syz.0.1054:10111 failed to unregister, leaking uprobe [ 465.275600][T10111] uprobe: syz.0.1054:10111 failed to unregister, leaking uprobe [ 466.111489][T10131] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1059'. [ 466.166341][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 467.159855][ T52] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 467.360124][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 467.458297][ T52] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 467.563568][ T52] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 467.638947][ T52] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 467.656840][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.667718][ T52] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 467.678512][ T52] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 467.692115][ T52] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 467.701601][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.817622][ T52] usb 2-1: config 0 descriptor?? [ 468.334791][ T52] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 468.465513][ T52] usb 2-1: USB disconnect, device number 13 [ 468.659073][ T52] usblp0: removed [ 469.479831][T10180] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1076'. [ 469.596995][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1076'. [ 470.520095][ T52] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 470.813753][T10199] netlink: 'syz.5.1081': attribute type 10 has an invalid length. [ 470.822727][T10199] syz_tun: entered promiscuous mode [ 470.840048][T10199] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 470.996798][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 471.008742][ T52] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 471.019582][ T52] usb 2-1: config 0 has no interface number 0 [ 471.057499][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1083'. [ 471.060506][ T52] usb 2-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 471.067453][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1083'. [ 471.350263][ T52] usb 2-1: config 0 interface 239 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 8 [ 471.382499][ T52] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 471.414569][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.436295][ T52] usb 2-1: Product: syz [ 471.444579][ T52] usb 2-1: Manufacturer: syz [ 471.587424][ T52] usb 2-1: SerialNumber: syz [ 471.826421][T10213] netlink: 'syz.4.1086': attribute type 4 has an invalid length. [ 471.856705][ T52] usb 2-1: config 0 descriptor?? [ 471.876724][T10190] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 471.909358][T10213] netlink: 'syz.4.1086': attribute type 4 has an invalid length. [ 472.205068][T10222] netlink: del zone limit has 4 unknown bytes [ 472.504563][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1088'. [ 472.842468][T10226] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1088'. [ 472.933275][ T52] ath6kl: Failed to submit usb control message: -110 [ 472.964776][ T52] ath6kl: unable to send the bmi data to the device: -110 [ 472.982457][ T52] ath6kl: Unable to send get target info: -110 [ 473.002100][ T52] ath6kl: Failed to init ath6kl core: -110 [ 473.017302][ T52] ath6kl_usb 2-1:0.239: probe with driver ath6kl_usb failed with error -110 [ 473.161500][ T52] usb 2-1: USB disconnect, device number 14 [ 473.203241][T10234] netem: incorrect gi model size [ 480.336444][T10297] 9pnet_fd: Insufficient options for proto=fd [ 480.711344][T10308] syzkaller0: tun_chr_ioctl cmd 35111 [ 483.929854][ T5821] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 484.100661][ T5821] usb 6-1: Using ep0 maxpacket: 16 [ 484.118591][ T5821] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 484.140973][ T5821] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 484.165154][ T5821] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 484.180092][ T5821] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 484.188808][ T5821] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.211905][ T5821] usb 6-1: config 0 has no interface number 0 [ 484.250619][ T5821] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 484.262553][ T5821] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 484.302903][ T5821] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.339536][ T5821] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 485.010795][ T5821] usb 6-1: config 0 interface 125 has no altsetting 0 [ 485.021695][ T5821] usb 6-1: config 0 interface 125 has no altsetting 2 [ 485.039225][ T5821] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 485.055977][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.075263][ T5821] usb 6-1: Product: syz [ 485.085934][ T5821] usb 6-1: Manufacturer: syz [ 485.101108][ T5821] usb 6-1: SerialNumber: syz [ 485.126009][ T5821] usb 6-1: config 0 descriptor?? [ 485.148593][ T5821] usb 6-1: selecting invalid altsetting 2 [ 485.180251][T10320] loop2: detected capacity change from 0 to 7 [ 485.192964][ T9456] loop2: [POWERTEC] p1 p2 p3 [ 485.201914][ T9456] loop2: p1 start 1600481121 is beyond EOD, truncated [ 485.208827][ T9456] loop2: p2 size 1680801792 extends beyond EOD, truncated [ 485.226066][ T9456] loop2: p3 start 4294967295 is beyond EOD, truncated [ 485.524500][T10346] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1118'. [ 485.605101][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 486.661603][ T5821] get_1284_register timeout [ 486.670044][ C1] usb 6-1: async_complete: urb error -104 [ 486.676039][ C1] usb 6-1: async_complete: urb error -104 [ 486.690143][ T5821] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 488.243420][ T5821] usb 6-1: USB disconnect, device number 14 [ 490.011407][T10398] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 490.011407][T10398] program syz.1.1139 not setting count and/or reply_len properly [ 490.440014][T10407] Bluetooth: MGMT ver 1.23 [ 492.482752][T10440] tipc: Enabling of bearer rejected, failed to enable media [ 492.692533][T10445] syz.5.1152: attempt to access beyond end of device [ 492.692533][T10445] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 494.039845][ T5821] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 494.710680][ T5821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.731220][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.785468][ T5821] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.816221][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.860762][ T5821] usb 6-1: config 0 descriptor?? [ 494.882397][ T5821] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 496.167302][T10477] 8021q: VLANs not supported on vcan0 [ 496.836170][ T5868] usb 6-1: USB disconnect, device number 15 [ 501.369570][T10525] ip6gretap0: entered promiscuous mode [ 501.369901][T10520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1173'. [ 501.375661][T10525] vlan2: entered promiscuous mode [ 501.484363][T10520] netlink: 'syz.5.1173': attribute type 7 has an invalid length. [ 501.495405][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.508698][T10520] netlink: 'syz.5.1173': attribute type 8 has an invalid length. [ 501.517391][T10520] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1173'. [ 501.581468][T10520] ip6gretap0: entered promiscuous mode [ 501.628311][T10520] ip6gretap0: left promiscuous mode [ 502.420115][ T978] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 502.659913][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 502.682801][ T978] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 503.078561][ T978] usb 5-1: config 0 has no interface number 0 [ 503.101895][ T978] usb 5-1: New USB device found, idVendor=0c45, idProduct=6040, bcdDevice=2a.c4 [ 503.119353][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.135840][ T978] usb 5-1: Product: syz [ 503.140251][ T978] usb 5-1: Manufacturer: syz [ 503.144900][ T978] usb 5-1: SerialNumber: syz [ 503.156512][ T978] usb 5-1: config 0 descriptor?? [ 503.191637][ T978] gspca_main: sonixj-2.14.0 probing 0c45:6040 [ 503.475370][T10528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.078911][ T978] gspca_sonixj: reg_w1 err -110 [ 504.089887][ T978] sonixj 5-1:0.128: probe with driver sonixj failed with error -110 [ 504.115515][T10528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.359914][T10565] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1186'. [ 504.362711][ T978] usb 5-1: USB disconnect, device number 8 [ 509.508158][T10614] Cannot find set identified by id 0 to match [ 520.030370][T10708] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1221'. [ 520.085897][T10709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1221'. [ 525.527653][T10757] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1236'. [ 525.643530][T10756] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1236'. [ 526.699787][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 526.723161][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1239'. [ 534.290385][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 534.975509][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'. [ 534.992430][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1257'. [ 535.281326][T10834] team0: entered promiscuous mode [ 535.286878][T10834] team_slave_0: entered promiscuous mode [ 535.295281][T10834] team_slave_1: entered promiscuous mode [ 535.307337][T10834] batadv_slave_1: entered promiscuous mode [ 536.584925][T10842] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1259'. [ 536.695524][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1259'. [ 538.593292][T10863] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1263'. [ 538.865947][T10854] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1263'. [ 540.145911][T10873] smc: net device lo applied user defined pnetid SYZ1 [ 540.394288][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1267'. [ 540.463330][T10878] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1267'. [ 540.768256][T10884] hub 9-0:1.0: USB hub found [ 540.774807][T10884] hub 9-0:1.0: 1 port detected [ 540.823930][T10884] Invalid source name [ 540.828043][T10884] UBIFS error (pid: 10884): cannot open "./file0", error -22 [ 541.237977][T10887] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.264915][T10891] netlink: 'syz.1.1273': attribute type 1 has an invalid length. [ 541.300746][T10891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.446194][T10891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 541.473151][T10891] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 541.509021][T10891] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 541.749830][ T5929] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 541.839802][T10903] netlink: 'syz.5.1275': attribute type 23 has an invalid length. [ 541.910195][ T5929] usb 2-1: Using ep0 maxpacket: 8 [ 541.946217][ T5929] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 542.102559][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.289217][ T5929] usb 2-1: Product: syz [ 542.300047][ T5929] usb 2-1: Manufacturer: syz [ 542.308928][ T5929] usb 2-1: SerialNumber: syz [ 542.321666][ T5929] usb 2-1: config 0 descriptor?? [ 543.505035][ T5929] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 543.526060][ T5929] usb 2-1: setting power ON [ 543.592795][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 543.624036][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.658727][ T5929] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 543.672447][ T5929] usb 2-1: media controller created [ 543.716868][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.926900][ T5929] usb 2-1: selecting invalid altsetting 6 [ 544.470578][ T5929] usb 2-1: digital interface selection failed (-22) [ 544.477229][ T5929] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 544.505313][ T5929] usb 2-1: setting power OFF [ 544.612538][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 544.618543][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 545.109885][ T5929] (NULL device *): no alternate interface [ 545.634884][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 545.707225][ T5929] usb 2-1: USB disconnect, device number 15 [ 548.799969][ T978] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 549.137428][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 549.771069][ T978] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.799865][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.819465][ T978] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 549.839815][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.854274][ T978] usb 2-1: Product: syz [ 549.860087][ T978] usb 2-1: Manufacturer: syz [ 549.864993][ T978] usb 2-1: SerialNumber: syz [ 549.970112][ T55] Bluetooth: hci1: command 0x0405 tx timeout [ 550.092004][ T978] usb 2-1: 0:2 : does not exist [ 550.546951][ T978] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 550.692851][ T978] usb 2-1: USB disconnect, device number 16 [ 551.336999][T10922] udevd[10922]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.144834][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.154037][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.163312][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.172623][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.181840][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.190981][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.200210][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.209936][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.219649][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 556.230930][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 563.548582][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.306899][T11070] tty tty31: ldisc open failed (-12), clearing slot 30 [ 564.530028][T11075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 564.684032][T11080] xt_socket: unknown flags 0xd0 [ 565.149930][ T5942] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 565.309904][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 565.335848][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 565.362771][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 565.405020][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 565.465773][ T5942] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 565.492866][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.521381][ T5942] usb 6-1: Product: syz [ 565.539800][ T5942] usb 6-1: Manufacturer: syz [ 565.564152][ T5942] usb 6-1: SerialNumber: syz [ 565.609255][ T5942] usb 6-1: config 0 descriptor?? [ 566.497218][T11086] __nla_validate_parse: 37 callbacks suppressed [ 566.497239][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1321'. [ 566.566608][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.629124][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.444833][T11115] sctp: [Deprecated]: syz.1.1327 (pid 11115) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.444833][T11115] Use struct sctp_sack_info instead [ 569.145833][ T978] usb 6-1: USB disconnect, device number 16 [ 571.164804][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1330'. [ 571.490828][T11130] 8021q: VLANs not supported on nlmon0 [ 571.917702][T11152] bond0: (slave syz_tun): Releasing backup interface [ 572.016728][T11152] bridge_slave_0: left allmulticast mode [ 572.023506][T11152] bridge_slave_0: left promiscuous mode [ 572.035238][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.091447][T11152] bridge_slave_1: left allmulticast mode [ 572.124053][T11152] bridge_slave_1: left promiscuous mode [ 572.545384][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.615510][T11152] bond0: (slave bond_slave_0): Releasing backup interface [ 572.660550][T11152] bond0: (slave bond_slave_1): Releasing backup interface [ 572.759845][T11152] team0: Port device team_slave_0 removed [ 572.806423][T11152] team0: Port device team_slave_1 removed [ 572.834772][T11152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.879927][T11152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.920793][T11152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.932642][T11152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.013232][T11162] ptrace attach of "./syz-executor exec"[5810] was attempted by "./syz-executor exec"[11162] [ 576.569813][ T5821] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 576.828945][T11200] capability: warning: `syz.0.1350' uses 32-bit capabilities (legacy support in use) [ 576.971929][ T5821] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 576.991618][ T5821] usb 2-1: config 0 has no interface number 0 [ 577.031446][ T5821] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 577.766979][ T5821] usb 2-1: string descriptor 0 read error: -71 [ 577.783937][ T5821] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 577.825007][ T5821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.921840][ T5821] usb 2-1: config 0 descriptor?? [ 578.863996][T11216] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 578.942203][ T5821] usb 2-1: can't set config #0, error -71 [ 579.088455][ T5821] usb 2-1: USB disconnect, device number 17 [ 584.685385][T11272] Invalid ELF header magic: != ELF [ 585.894718][T11290] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1372'. [ 586.045588][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1372'. [ 587.706931][T11305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 587.721423][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1376'. [ 588.815509][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 589.298411][T11315] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1381'. [ 589.335140][ T5831] block nbd1: Receive control failed (result -32) [ 589.360024][T11316] block nbd1: shutting down sockets [ 592.422016][T11348] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1388'. [ 592.665887][T11348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1388'. [ 594.416250][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 595.739805][T11375] netlink: 788 bytes leftover after parsing attributes in process `syz.4.1394'. [ 595.794945][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'. [ 599.373022][T11405] UBIFS error (pid: 11405): cannot open "c:::", error -22 [ 601.354914][T11422] overlayfs: failed to decode file handle (len=5, type=248, flags=0, err=-22) [ 602.165103][T11424] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1407'. [ 602.219875][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 602.663854][ T5831] Bluetooth: hci1: Unable to find connection with handle 0x00c8 [ 602.687215][T11433] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 603.317001][T11443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 603.565481][T11442] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 603.652192][ T978] IPVS: starting estimator thread 0... [ 603.665191][ T6616] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 604.591062][T11433] veth5: entered promiscuous mode [ 604.620662][T11433] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 604.973251][ T6604] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 604.991656][T11448] IPVS: using max 55 ests per chain, 132000 per kthread [ 605.741977][T11460] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1415'. [ 606.133890][T11466] netlink: 'syz.4.1417': attribute type 21 has an invalid length. [ 606.889184][T11460] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1415'. [ 614.260839][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 614.267024][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 614.548428][ T5867] libceph: connect (1)[c::]:6789 error -101 [ 614.577952][T11511] ceph: No mds server is up or the cluster is laggy [ 615.059042][T11529] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1422'. [ 615.068317][T11529] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1422'. [ 615.083800][ T5867] libceph: mon0 (1)[c::]:6789 connect error [ 621.219985][T11584] netlink: 'syz.2.1449': attribute type 4 has an invalid length. [ 621.227956][T11584] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1449'. [ 622.879144][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1448'. [ 624.376408][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.773807][T11593] macvtap1: entered allmulticast mode [ 624.779384][T11593] veth0_macvtap: entered allmulticast mode [ 625.514772][T11602] misc userio: No port type given on /dev/userio [ 626.450744][T11606] netlink: 'syz.1.1454': attribute type 4 has an invalid length. [ 626.464814][T11606] netlink: 'syz.1.1454': attribute type 4 has an invalid length. [ 629.245328][T11629] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1459'. [ 631.185432][T11644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 631.944582][T11656] ERROR: device name not specified. [ 633.766383][T11653] trusted_key: encrypted_key: master key parameter 'user' is invalid [ 637.487280][T11690] Invalid ELF header magic: != ELF [ 637.499400][T11690] netlink: 'syz.1.1475': attribute type 1 has an invalid length. [ 637.507319][T11690] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1475'. [ 638.409900][T11697] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1470'. [ 639.762521][T11704] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13) [ 639.769165][T11704] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 639.787967][T11714] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 639.806262][T11704] vhci_hcd vhci_hcd.0: Device attached [ 639.831036][T11711] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(19) [ 639.837674][T11711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 639.907681][T11711] vhci_hcd vhci_hcd.0: Device attached [ 639.914673][T11704] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(15) [ 639.921315][T11704] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 639.938725][T11704] vhci_hcd vhci_hcd.0: Device attached [ 640.043982][ T978] vhci_hcd: vhci_device speed not set [ 640.058550][T11711] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 640.074619][T11704] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 640.121628][T11715] vhci_hcd: connection closed [ 640.121876][ T2979] vhci_hcd: stop threads [ 640.121981][T11721] vhci_hcd: connection closed [ 640.126780][ T2979] vhci_hcd: release socket [ 640.140674][ T978] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 640.645622][ T2979] vhci_hcd: disconnect device [ 640.651144][ T2979] vhci_hcd: stop threads [ 640.655434][ T2979] vhci_hcd: release socket [ 640.762144][T11712] vhci_hcd: connection reset by peer [ 640.784765][ T2979] vhci_hcd: disconnect device [ 640.790108][ T2979] vhci_hcd: stop threads [ 640.795706][ T2979] vhci_hcd: release socket [ 640.803187][ T2979] vhci_hcd: disconnect device [ 642.023213][T11736] /dev/nullb0: Can't open blockdev [ 643.138228][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 644.364507][T11765] (unnamed net_device) (uninitialized): down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 644.377124][T11765] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 644.439056][T11765] SET target dimension over the limit! [ 645.239955][ T978] vhci_hcd: vhci_device speed not set [ 645.252424][ T5821] IPVS: starting estimator thread 0... [ 646.010596][T11773] IPVS: using max 33 ests per chain, 79200 per kthread [ 648.229263][T11799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 648.238517][T11799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 648.710372][T11799] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 648.864276][T11799] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 651.247800][T11833] netlink: 'syz.0.1502': attribute type 4 has an invalid length. [ 651.328948][T11834] netlink: 'syz.0.1502': attribute type 4 has an invalid length. [ 656.394495][T11867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1511'. [ 661.179500][T11886] cgroup: Unknown subsys name 'obj_role' [ 666.620179][T11923] netlink: 'syz.1.1522': attribute type 10 has an invalid length. [ 667.082863][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.107945][T11923] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 669.170166][T11938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.792265][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1530'. [ 673.855292][T11967] netlink: 'syz.5.1533': attribute type 1 has an invalid length. [ 673.863331][T11967] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1533'. [ 674.484870][T11981] hub 9-0:1.0: USB hub found [ 674.489886][T11981] hub 9-0:1.0: 1 port detected [ 679.775455][T12036] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1552'. [ 680.606944][ T30] audit: type=1804 audit(1746375195.563:33): pid=12040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.1553" name="/newroot/298/file1" dev="fuse" ino=1 res=1 errno=0 [ 683.519956][ T975] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 684.160042][ T975] usb 6-1: Using ep0 maxpacket: 16 [ 684.186379][ T975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.197790][ T975] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 684.351965][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.364664][ T975] usb 6-1: config 0 descriptor?? [ 684.412055][T12072] overlayfs: failed to resolve './file0': -2 [ 684.676296][ T975] usbhid 6-1:0.0: can't add hid device: -71 [ 684.692726][ T975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 684.728129][ T975] usb 6-1: USB disconnect, device number 17 [ 685.502154][T12086] overlayfs: missing 'lowerdir' [ 685.816694][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.684522][T12110] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 688.373339][T12112] input: syz0 as /devices/virtual/input/input20 [ 692.036424][ T5942] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 692.655218][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 692.676951][ T5942] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 692.703559][ T5942] usb 6-1: config 0 has no interface number 0 [ 692.881334][ T5942] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 693.074777][T12146] trusted_key: syz.4.1580 sent an empty control message without MSG_MORE. [ 693.196623][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.200502][ T5942] usb 6-1: Product: syz [ 695.740492][ T5942] usb 6-1: Manufacturer: syz [ 695.756424][ T5942] usb 6-1: SerialNumber: syz [ 696.641916][T12171] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1584'. [ 696.651466][T12171] unsupported nlmsg_type 40 [ 696.739220][T12167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.866610][ T5942] usb 6-1: config 0 descriptor?? [ 696.887699][ T5942] usb 6-1: can't set config #0, error -71 [ 696.901528][ T5942] usb 6-1: USB disconnect, device number 18 [ 699.008499][T12142] syz.1.1579 (12142): drop_caches: 2 [ 699.355924][T12197] overlayfs: failed to clone lowerpath [ 699.468211][T12188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1591'. [ 699.853696][T12200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.301366][T12211] pimreg: entered allmulticast mode [ 704.317534][ T30] audit: type=1326 audit(1746375219.253:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 704.350521][ T30] audit: type=1326 audit(1746375219.253:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 704.687436][ T30] audit: type=1326 audit(1746375219.253:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 704.779020][ T30] audit: type=1326 audit(1746375219.253:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 705.447508][ T30] audit: type=1326 audit(1746375219.263:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 705.469387][ T30] audit: type=1326 audit(1746375219.263:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 705.515625][ T30] audit: type=1326 audit(1746375219.263:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 705.547773][ T30] audit: type=1326 audit(1746375219.263:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x7ffc0000 [ 705.575255][T12223] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1599'. [ 705.685877][ T30] audit: type=1326 audit(1746375219.263:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2336990887 code=0x7ffc0000 [ 705.707855][ T30] audit: type=1326 audit(1746375219.263:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12207 comm="syz.1.1595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f23369907fc code=0x7ffc0000 [ 707.055211][T12226] [U] .ú [ 707.360136][T12240] tipc: Started in network mode [ 707.365246][T12240] tipc: Node identity ac14140f, cluster identity 4711 [ 707.374873][T12240] tipc: New replicast peer: 255.255.255.255 [ 707.383119][T12240] tipc: Enabled bearer , priority 10 [ 707.668094][ T5831] Bluetooth: hci1: command 0x0405 tx timeout [ 708.392252][ T978] tipc: Node number set to 2886997007 [ 709.869959][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 709.869978][ T30] audit: type=1326 audit(1746375224.143:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12250 comm="syz.0.1605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x0 [ 710.314661][T12260] vlan2: entered allmulticast mode [ 710.319910][T12260] vlan1: entered allmulticast mode [ 710.325041][T12260] veth0_vlan: entered allmulticast mode [ 712.640562][T12278] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1611'. [ 713.581533][T12283] veth0_vlan: entered allmulticast mode [ 714.544826][T12292] lo speed is unknown, defaulting to 1000 [ 714.551554][T12292] lo speed is unknown, defaulting to 1000 [ 714.566730][T12292] lo speed is unknown, defaulting to 1000 [ 714.604151][T12292] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 714.735520][T12292] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 714.874889][T12292] lo speed is unknown, defaulting to 1000 [ 714.883473][T12292] lo speed is unknown, defaulting to 1000 [ 714.890454][T12292] lo speed is unknown, defaulting to 1000 [ 714.897222][T12292] lo speed is unknown, defaulting to 1000 [ 714.904146][T12292] lo speed is unknown, defaulting to 1000 [ 717.390894][T12317] fuse: Unknown parameter '0xffffffffffffffff' [ 718.520122][ T5865] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 719.122934][T12340] overlayfs: failed to clone upperpath [ 719.227333][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 719.486371][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 719.588908][ T5865] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 719.601035][ T5865] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 719.836333][ T5865] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 720.532488][ T5865] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.543350][ T5865] usb 6-1: config 0 descriptor?? [ 720.566463][ T5865] usb 6-1: can't set config #0, error -71 [ 720.579196][ T5865] usb 6-1: USB disconnect, device number 19 [ 720.953627][T12356] tmpfs: Bad value for 'mpol' [ 723.250484][T12374] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1634'. [ 728.698707][ T978] IPVS: starting estimator thread 0... [ 728.819903][T12432] IPVS: using max 35 ests per chain, 84000 per kthread [ 730.054872][T12449] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 730.064081][T12449] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 730.192586][T12450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 730.924515][T12447] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 734.601412][T12461] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 741.669086][T12514] Bluetooth: MGMT ver 1.23 [ 746.777564][ T52] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 747.031769][ T52] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 747.069824][ T52] usb 2-1: config 0 has no interface number 0 [ 747.076244][ T52] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 747.271939][T12561] usb usb8: usbfs: process 12561 (syz.5.1675) did not claim interface 0 before use [ 747.548851][T12562] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1678'. [ 747.604542][T12563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1678'. [ 747.621894][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.666030][ T52] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 747.675874][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.684273][ T52] usb 2-1: Product: syz [ 747.688905][ T52] usb 2-1: Manufacturer: syz [ 747.694004][ T52] usb 2-1: SerialNumber: syz [ 747.707871][ T978] libceph: connect (1)[c::]:6789 error -101 [ 747.715929][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 747.725370][ T52] usb 2-1: config 0 descriptor?? [ 747.740464][T12542] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 747.749255][ T52] usb-storage 2-1:0.20: USB Mass Storage device detected [ 747.770575][ T52] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 747.968698][T12558] ceph: No mds server is up or the cluster is laggy [ 747.982724][ T978] libceph: connect (1)[c::]:6789 error -101 [ 748.006856][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 748.636841][T12582] netlink: ct family unspecified [ 748.642493][T12582] openvswitch: netlink: Actions may not be safe on all matching packets [ 748.654838][T12582] netlink: 'syz.4.1683': attribute type 21 has an invalid length. [ 750.083036][ T52] scsi host1: usb-storage 2-1:0.20 [ 750.159093][ T52] usb 2-1: USB disconnect, device number 18 [ 750.303075][T12601] overlayfs: failed to clone upperpath [ 750.812934][T12601] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1690'. [ 751.743109][T12619] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1693'. [ 751.935259][T12619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1693'. [ 751.946784][T12626] fuse: Unknown parameter '0x0000000000000005' [ 752.768515][T12629] bridge0: port 1(batadv0) entered blocking state [ 753.719293][T12629] bridge0: port 1(batadv0) entered disabled state [ 753.732390][T12629] batadv0: entered allmulticast mode [ 753.760654][T12641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1702'. [ 754.484932][ T30] audit: type=1326 audit(1746375268.953:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 754.514435][T12629] batadv0: entered promiscuous mode [ 754.779975][ T30] audit: type=1326 audit(1746375268.953:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 755.029587][ T975] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 755.329898][T12652] block device autoloading is deprecated and will be removed. [ 755.730024][ T30] audit: type=1326 audit(1746375268.953:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 755.760318][ T53] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 755.769603][ T30] audit: type=1326 audit(1746375268.953:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 755.770011][ T53] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 755.870121][ T30] audit: type=1326 audit(1746375268.953:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 755.919488][ T30] audit: type=1326 audit(1746375268.953:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 755.941316][ T975] usb 6-1: Using ep0 maxpacket: 32 [ 756.139277][ T30] audit: type=1326 audit(1746375268.953:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 756.162279][ T30] audit: type=1326 audit(1746375268.953:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 756.184520][ T30] audit: type=1326 audit(1746375268.953:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 756.206689][ T30] audit: type=1326 audit(1746375268.953:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12634 comm="syz.0.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f678098e969 code=0x7ffc0000 [ 758.541429][T12685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1713'. [ 759.020711][ T975] usb 6-1: unable to get BOS descriptor or descriptor too short [ 759.041476][ T975] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 759.049219][ T975] usb 6-1: can't read configurations, error -71 [ 761.491434][T12729] netlink: 'syz.5.1730': attribute type 11 has an invalid length. [ 761.499612][T12729] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1730'. [ 762.709921][T12743] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1731'. [ 762.744637][T12725] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 764.053917][T12725] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 764.577347][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1748'. [ 768.417028][T12840] usb usb8: usbfs: process 12840 (syz.4.1761) did not claim interface 0 before use [ 768.452129][T12840] usb usb8: selecting invalid altsetting 65516 [ 773.160250][T12873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 774.275428][T12893] xt_connbytes: Forcing CT accounting to be enabled [ 775.633430][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 776.050630][T12911] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1780'. [ 776.106139][T12912] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1780'. [ 777.579426][T12939] netlink: 792 bytes leftover after parsing attributes in process `syz.4.1788'. [ 777.615347][T12939] netlink: 13036 bytes leftover after parsing attributes in process `syz.4.1788'. [ 777.657454][T12939] netlink: 792 bytes leftover after parsing attributes in process `syz.4.1788'. [ 777.770108][T12951] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 777.806440][T12951] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 778.050065][ T5868] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 778.119978][ T978] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 778.138283][T12974] Smack: duplicate mount options [ 778.217690][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 778.263481][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.302373][ T5868] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 778.312053][ T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.339830][ T5868] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 778.350275][ T978] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 778.368172][ T5868] usb 6-1: Manufacturer: syz [ 778.382717][ T978] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 778.404916][ T5868] usb 6-1: config 0 descriptor?? [ 778.412383][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.605133][ T978] usb 5-1: config 0 descriptor?? [ 778.615099][ T978] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 778.629889][ T978] dvb-usb: bulk message failed: -22 (3/0) [ 778.649579][ T978] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 778.659258][ T978] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 778.719497][T12998] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1807'. [ 778.775440][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1807'. [ 779.214356][ T5868] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 779.221582][ T978] usb 5-1: media controller created [ 779.228490][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 779.237194][ T5868] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 779.244418][ T5868] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 779.253362][T12958] dvb-usb: bulk message failed: -22 (2/0) [ 779.273490][ T5868] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 779.294554][ T978] dvb-usb: bulk message failed: -22 (6/0) [ 779.311190][ T5868] cougar 0003:060B:700A.000A: unknown main item tag 0x0 [ 779.329354][ T978] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 779.358908][ T5868] cougar 0003:060B:700A.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 779.381305][ T978] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 779.481072][ T978] dvb-usb: schedule remote query interval to 150 msecs. [ 779.506891][ T5868] usb 6-1: USB disconnect, device number 22 [ 779.533809][ T978] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 779.596700][ T978] usb 5-1: USB disconnect, device number 9 [ 779.883932][ T978] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 780.218418][T13021] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 781.240484][ T5942] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 781.583696][ T5942] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 781.593066][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.632852][ T5942] usb 2-1: Product: syz [ 781.637078][ T5942] usb 2-1: Manufacturer: syz [ 781.698231][ T5942] usb 2-1: SerialNumber: syz [ 781.713644][ T5942] usb 2-1: config 0 descriptor?? [ 781.776980][T12691] kernel write not supported for file /819/attr/prev (pid: 12691 comm: kworker/0:1) [ 782.351166][ T5942] usb 2-1: Firmware version (0.0) predates our first public release. [ 782.428748][T13088] syz_tun: entered allmulticast mode [ 782.434360][ T5942] usb 2-1: Please update to version 0.2 or newer [ 782.477312][T13088] dvmrp1: entered allmulticast mode [ 782.536101][ T5942] usb 2-1: USB disconnect, device number 19 [ 783.385310][T13084] syz_tun: left allmulticast mode [ 783.832635][ T5942] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 784.010542][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 784.019357][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.052919][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.064083][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 784.098756][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=c53f, bcdDevice= 0.00 [ 784.108861][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.120717][ T5942] usb 6-1: config 0 descriptor?? [ 784.149883][ T975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 784.256537][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1874'. [ 784.313583][ T975] usb 2-1: Using ep0 maxpacket: 8 [ 784.325601][ T975] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=e9.9b [ 784.339265][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.347830][ T975] usb 2-1: Product: syz [ 784.352095][ T975] usb 2-1: Manufacturer: syz [ 784.356728][ T975] usb 2-1: SerialNumber: syz [ 784.370640][ T975] usb 2-1: config 0 descriptor?? [ 784.382201][ T975] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 784.391033][ T975] dvb-usb: bulk message failed: -22 (2/0) [ 784.403354][ T975] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 784.413802][ T975] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 2) [ 784.422946][ T975] usb 2-1: media controller created [ 784.470024][ T975] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.139847][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 785.147043][ T5942] usb 6-1: USB disconnect, device number 23 [ 785.347422][ T975] DVB: Unable to find symbol mt352_attach() [ 785.402439][ T975] dvb-usb: bulk message failed: -22 (5/0) [ 785.421316][ T975] zl10353_read_register: readreg error (reg=127, ret==-121) [ 785.438920][ T975] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 2' [ 785.448993][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 785.449007][ T30] audit: type=1326 audit(2000000021.320:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 785.535776][ T30] audit: type=1326 audit(2000000021.330:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 785.584449][ T975] rc_core: IR keymap rc-dvico-mce not found [ 785.595695][ T975] Registered IR keymap rc-empty [ 785.615255][ T975] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 785.638383][ T30] audit: type=1326 audit(2000000021.330:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 785.660757][ T5868] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 785.679547][ T975] input: DViCO FusionHDTV DVB-T Dual Digital 2 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input23 [ 785.689531][ T30] audit: type=1326 audit(2000000021.330:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 785.691512][ T5942] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 785.754246][ T975] dvb-usb: schedule remote query interval to 100 msecs. [ 785.757536][ T30] audit: type=1326 audit(2000000021.370:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 785.761719][ T975] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully initialized and connected. [ 785.843611][ T975] usb 2-1: USB disconnect, device number 20 [ 785.850824][ T5868] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 785.858923][ T5868] usb 5-1: config 0 has no interface number 0 [ 785.896064][ T30] audit: type=1326 audit(2000000021.370:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 785.918634][ T5868] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 785.960068][ T5942] usb 6-1: Using ep0 maxpacket: 32 [ 785.970936][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.015392][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.069239][ T975] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 successfully deinitialized and disconnected. [ 786.089873][ T5942] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 786.100996][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.111264][ T30] audit: type=1326 audit(2000000021.370:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 786.132339][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.135243][ T5868] usb 5-1: config 0 descriptor?? [ 786.147076][ T30] audit: type=1326 audit(2000000021.370:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 786.172155][ T5868] usb 5-1: selecting invalid altsetting 1 [ 786.179356][ T5868] dvb_ttusb_budget: ttusb_init_controller: error [ 786.191199][ T5868] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 786.200035][ T30] audit: type=1326 audit(2000000021.370:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 786.335613][ T30] audit: type=1326 audit(2000000021.370:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13170 comm="syz.2.1880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x7ffc0000 [ 786.672088][ T5942] usb 6-1: config 0 descriptor?? [ 786.708172][ T5942] hub 6-1:0.0: USB hub found [ 786.820844][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 786.888577][ T5868] DVB: Unable to find symbol cx22700_attach() [ 786.934680][ T5942] hub 6-1:0.0: 1 port detected [ 787.036078][ T5868] DVB: Unable to find symbol tda10046_attach() [ 787.060479][ T5868] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 787.152274][ T5942] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 787.184678][ T5942] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 787.247560][ T5868] usb 5-1: USB disconnect, device number 10 [ 787.271977][ T5942] usbhid 6-1:0.0: can't add hid device: -71 [ 787.294808][ T5942] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 787.827731][ T5942] usb 6-1: USB disconnect, device number 24 [ 788.057156][ T55] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 788.057195][ T55] Bluetooth: hci1: Malformed LE Event: 0x0d [ 788.079953][ T5865] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 788.234075][T13230] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1903'. [ 788.300217][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.350463][ T5865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.383255][ T5865] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 788.395764][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.421159][ T5865] usb 5-1: config 0 descriptor?? [ 789.210994][ T5865] ryos 0003:1E7D:3138.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.4-1/input0 [ 789.255966][ T5865] usb 5-1: USB disconnect, device number 11 [ 789.596216][T13271] netlink: 'syz.1.1922': attribute type 29 has an invalid length. [ 789.614448][T13271] netlink: 'syz.1.1922': attribute type 29 has an invalid length. [ 789.625495][T13271] netlink: 'syz.1.1922': attribute type 29 has an invalid length. [ 789.880829][T13277] 9pnet_fd: Insufficient options for proto=fd [ 790.181376][T13280] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 790.222040][T13280] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1925'. [ 792.445489][T13351] pim6reg: entered allmulticast mode [ 793.013687][T13351] pim6reg: left allmulticast mode [ 793.096189][T13359] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1953'. [ 793.109456][T13359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1953'. [ 793.819551][T13388] netlink: 'syz.1.1962': attribute type 11 has an invalid length. [ 793.827688][T13388] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1962'. [ 794.500732][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1967'. [ 796.366773][T13456] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1984'. [ 796.521031][ T978] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 796.692258][ T978] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 796.708939][ T978] usb 2-1: config 0 has no interface number 0 [ 796.750392][ T978] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 797.125803][ T978] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 797.138428][ T978] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 797.150856][ T978] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 797.163380][ T978] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 797.175936][ T978] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 797.197558][ T978] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 797.235091][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.281560][ T978] usb 2-1: config 0 descriptor?? [ 797.309323][T13451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 797.330580][T13451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 797.366861][ T978] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 797.546097][T13487] lo speed is unknown, defaulting to 1000 [ 797.687090][ T5868] usb 2-1: USB disconnect, device number 21 [ 797.693459][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 797.724470][T13451] ldusb 2-1:0.55: Couldn't submit interrupt_out_urb -19 [ 797.812886][ T978] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 797.828871][ T5868] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 798.422859][ T5821] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 798.500670][ T978] usb 6-1: no configurations [ 798.506085][ T978] usb 6-1: can't read configurations, error -22 [ 798.634786][ T5821] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 798.840772][ T5821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.852519][ T5821] usb 5-1: config 0 descriptor?? [ 798.962694][T13516] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2002'. [ 799.018728][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2002'. [ 799.462358][ T978] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 799.632659][ T978] usb 6-1: no configurations [ 799.637397][ T978] usb 6-1: can't read configurations, error -22 [ 799.668290][ T978] usb usb6-port1: attempt power cycle [ 799.948955][T13539] 9pnet_fd: Insufficient options for proto=fd [ 800.096255][ T978] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 800.121932][ T978] usb 6-1: no configurations [ 800.136947][ T978] usb 6-1: can't read configurations, error -22 [ 800.230935][T13546] overlayfs: failed to clone upperpath [ 800.734746][ T5821] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 800.772256][ T5821] usb 5-1: USB disconnect, device number 12 [ 800.961720][ T978] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 801.225024][ T978] usb 6-1: device not accepting address 28, error -71 [ 801.250147][ T978] usb usb6-port1: unable to enumerate USB device [ 801.672592][T13575] netlink: 788 bytes leftover after parsing attributes in process `syz.5.2017'. [ 801.724064][T13576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 803.228292][T13596] IPVS: stopping master sync thread 13597 ... [ 803.239949][T13597] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 803.345138][T13593] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2024'. [ 803.729332][T13607] netlink: 304 bytes leftover after parsing attributes in process `syz.5.2023'. [ 803.730077][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2023'. [ 804.190174][ T978] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 804.370166][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 804.412168][ T978] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 804.492877][ T978] usb 5-1: config 0 has no interface number 0 [ 804.575147][T13627] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2034'. [ 804.631070][T13628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 805.010501][ T978] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 805.028523][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.038083][ T978] usb 5-1: Product: syz [ 805.046785][ T978] usb 5-1: Manufacturer: syz [ 805.057526][ T978] usb 5-1: SerialNumber: syz [ 805.181003][ T978] usb 5-1: config 0 descriptor?? [ 805.197013][ T978] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 805.443355][ T5865] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 805.451741][T13644] overlayfs: failed to clone upperpath [ 805.489701][ T978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 805.579260][ T978] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 806.003735][ T5865] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 806.018998][ T5865] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 806.045618][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 806.090046][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 806.104845][ T5821] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 806.134019][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 806.179556][ T5865] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 806.202233][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 806.222679][ T5865] usb 2-1: Product: syz [ 806.226896][ T5865] usb 2-1: Manufacturer: syz [ 806.268828][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 806.285212][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 806.289965][ T5821] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 806.311446][ T5865] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 806.329164][ T5821] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 806.332134][ T5942] usb 5-1: USB disconnect, device number 13 [ 806.339396][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 806.349021][ T5865] cdc_wdm 2-1:1.0: Unknown control protocol [ 806.419890][ T5821] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 806.429073][ T5821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.447140][ T5942] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 806.499665][ T5942] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 806.515261][ T5821] usb 6-1: config 0 descriptor?? [ 806.546085][T13646] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 806.562780][ T5942] quatech2 5-1:0.51: device disconnected [ 806.630834][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 806.631017][ T52] usb 2-1: USB disconnect, device number 22 [ 806.637715][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 806.649588][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 806.658683][ C0] vkms_vblank_simulate: vblank timer overrun [ 806.785383][ T5821] ath6kl: Failed to submit usb control message: -71 [ 806.813081][ T5821] ath6kl: unable to send the bmi data to the device: -71 [ 806.833257][ T5821] ath6kl: Unable to send get target info: -71 [ 806.854429][ T5821] ath6kl: Failed to init ath6kl core: -71 [ 806.875484][ T5821] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 806.925264][ T5821] usb 6-1: USB disconnect, device number 29 [ 807.274570][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2052'. [ 807.316849][T13692] geneve2: entered promiscuous mode [ 807.853285][T13707] pimreg: left allmulticast mode [ 807.917960][T13710] fuse: Unknown parameter 'user_id00000000000000000000' [ 808.619498][T13729] netlink: 'syz.4.2063': attribute type 11 has an invalid length. [ 808.627685][T13729] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2063'. [ 808.698430][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.465028][T13783] syz_tun: entered allmulticast mode [ 811.485499][T13782] syz_tun: left allmulticast mode [ 811.605228][T13790] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 811.614847][T13790] overlayfs: missing 'lowerdir' [ 811.884422][ T5865] IPVS: starting estimator thread 0... [ 811.895953][ T53] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 812.056457][ T5942] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 812.059905][T13802] IPVS: using max 31 ests per chain, 74400 per kthread [ 812.363976][ T5942] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 812.391848][ T5942] usb 5-1: config 0 has no interface number 0 [ 812.413575][ T5942] usb 5-1: too many endpoints for config 0 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 812.439257][ T5942] usb 5-1: config 0 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 812.461541][ T5942] usb 5-1: config 0 interface 32 has no altsetting 0 [ 812.469635][ T5942] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 812.507906][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.547258][ T5942] usb 5-1: config 0 descriptor?? [ 812.986703][ T5942] usb 5-1: string descriptor 0 read error: -71 [ 813.023565][ T5942] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 813.098220][ T5942] usb 5-1: USB disconnect, device number 14 [ 817.577149][T13953] lo: entered allmulticast mode [ 817.626472][T13953] tunl0: entered allmulticast mode [ 817.659391][T13953] gre0: entered allmulticast mode [ 817.706633][T13953] gretap0: entered allmulticast mode [ 817.729463][T13953] erspan0: entered allmulticast mode [ 817.743763][T13953] ip_vti0: entered allmulticast mode [ 817.792083][T13953] ip6_vti0: entered allmulticast mode [ 817.838017][T13953] sit0: entered allmulticast mode [ 817.868412][T13953] ip6tnl0: entered allmulticast mode [ 817.909003][T13953] ip6gre0: entered allmulticast mode [ 817.960970][T13953] syz_tun: entered allmulticast mode [ 817.988964][T13953] ip6gretap0: entered allmulticast mode [ 818.007571][T13953] vcan0: entered allmulticast mode [ 818.018655][T13953] bond0: entered allmulticast mode [ 818.029919][T13953] bond_slave_0: entered allmulticast mode [ 818.036193][T13953] bond_slave_1: entered allmulticast mode [ 818.052292][T13953] tipc: Resetting bearer [ 818.078737][T13953] team0: entered allmulticast mode [ 818.084935][T13953] team_slave_0: entered allmulticast mode [ 818.095159][T13953] team_slave_1: entered allmulticast mode [ 818.101325][ T5942] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 818.116273][T13953] dummy0: entered allmulticast mode [ 818.132909][T13953] nlmon0: entered allmulticast mode [ 818.143768][T13953] caif0: entered allmulticast mode [ 818.151995][T13953] veth0: entered allmulticast mode [ 818.165303][T13953] veth1: entered allmulticast mode [ 818.177314][T13953] wg0: entered allmulticast mode [ 818.186927][T13953] wg1: entered allmulticast mode [ 818.198066][T13953] wg2: entered allmulticast mode [ 818.214928][T13953] veth0_to_bridge: entered allmulticast mode [ 818.226583][T13953] bridge_slave_0: entered allmulticast mode [ 818.237079][T13953] veth1_to_bridge: entered allmulticast mode [ 818.248012][T13953] bridge_slave_1: entered allmulticast mode [ 818.258424][T13953] veth0_to_bond: entered allmulticast mode [ 818.271903][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.300149][T13953] veth1_to_bond: entered allmulticast mode [ 818.306126][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.336107][T13953] veth0_to_team: entered allmulticast mode [ 818.342286][ T5942] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 818.366874][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.367266][T13950] syz.1.2123 (13950): drop_caches: 2 [ 818.383710][T13953] veth1_to_team: entered allmulticast mode [ 818.393391][ T5942] usb 6-1: config 0 descriptor?? [ 818.419060][T13953] veth0_to_batadv: entered allmulticast mode [ 818.439169][T13953] batadv_slave_0: entered allmulticast mode [ 818.450915][T13953] veth1_to_batadv: entered allmulticast mode [ 818.462646][T13953] batadv_slave_1: entered allmulticast mode [ 818.477233][T13953] xfrm0: entered allmulticast mode [ 818.488469][T13953] veth0_to_hsr: entered allmulticast mode [ 818.525911][T13953] hsr_slave_0: entered allmulticast mode [ 818.539418][T13953] veth1_to_hsr: entered allmulticast mode [ 818.552689][T13953] hsr_slave_1: entered allmulticast mode [ 818.562252][T13953] hsr0: entered allmulticast mode [ 818.576167][T13953] veth1_virt_wifi: entered allmulticast mode [ 818.595759][T13953] veth0_virt_wifi: entered allmulticast mode [ 818.606465][T13953] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 818.615514][T13953] veth1_vlan: entered allmulticast mode [ 818.624685][T13953] veth0_vlan: entered allmulticast mode [ 818.634777][T13953] vlan0: entered allmulticast mode [ 818.641565][T13953] vlan1: entered allmulticast mode [ 818.647658][T13953] macvlan0: entered allmulticast mode [ 818.660390][T13953] macvlan1: entered allmulticast mode [ 818.670547][T13953] ipvlan0: entered allmulticast mode [ 818.677049][T13953] ipvlan1: entered allmulticast mode [ 818.684287][T13953] veth1_macvtap: entered allmulticast mode [ 818.720681][T13953] macvtap0: entered allmulticast mode [ 818.741201][T13953] macsec0: entered allmulticast mode [ 818.753089][T13953] geneve0: entered allmulticast mode [ 818.779805][T13953] geneve1: entered allmulticast mode [ 818.791435][T13953] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 818.798676][T13953] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 818.808829][T13953] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 818.822769][T13953] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 818.855235][ T5942] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 818.868265][T13953] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 818.898371][T13953] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 818.922751][T13953] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 818.940570][ T5942] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 819.016413][T13953] mac80211_hwsim hwsim14 wlan2: entered allmulticast mode [ 819.039405][T13953] mac80211_hwsim hwsim15 wlan3: entered allmulticast mode [ 819.053270][ T5942] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 819.055134][T13953] mac80211_hwsim hwsim32 wlan4: entered allmulticast mode [ 819.080982][T13953] mac80211_hwsim hwsim34 wlan5: entered allmulticast mode [ 819.132436][T13953] mac80211_hwsim hwsim35 wlan6: entered allmulticast mode [ 819.142604][ T5942] usb 6-1: USB disconnect, device number 30 [ 819.156233][T13953] mac80211_hwsim hwsim44 wlan7: entered allmulticast mode [ 819.162950][ T5942] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 819.168515][T13953] mac80211_hwsim hwsim48 wlan8: entered allmulticast mode [ 819.205687][T13953] mac80211_hwsim hwsim49 wlan9: entered allmulticast mode [ 819.243892][T13953] mac80211_hwsim hwsim56 wlan10: entered allmulticast mode [ 819.257345][T13953] bridge0: entered allmulticast mode [ 819.266891][T13953] bridge1: entered allmulticast mode [ 819.268333][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 819.274028][T13953] team_slave_1.0: entered allmulticast mode [ 819.292128][T13953] mac80211_hwsim hwsim67 wlan11: entered allmulticast mode [ 819.303540][T13953] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.314305][T13953] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.326029][T13953] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.338164][T13953] geneve2: left promiscuous mode [ 819.345738][T13953] geneve2: entered allmulticast mode [ 819.355837][T13953] gre1: entered allmulticast mode [ 819.380551][ T5865] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 819.431409][T13977] macvtap1: entered promiscuous mode [ 819.436877][T13977] erspan0: entered promiscuous mode [ 819.442669][T13977] macvtap1: entered allmulticast mode [ 819.491913][T13978] erspan0: left promiscuous mode [ 819.553147][ T5865] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 819.565435][ T5865] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 819.577391][ T5865] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 819.592520][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 819.606992][ T5865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 819.624046][ T5865] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 819.634815][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 819.646267][ T5865] usb 2-1: Product: syz [ 819.652884][ T5865] usb 2-1: Manufacturer: syz [ 819.664311][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 819.674416][ T5865] cdc_wdm 2-1:1.0: skipping garbage [ 819.719237][ T5865] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 819.727053][ T5865] cdc_wdm 2-1:1.0: Unknown control protocol [ 820.810810][ T5865] usb 2-1: USB disconnect, device number 23 [ 821.320203][ T975] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 821.631175][ T975] usb 5-1: Using ep0 maxpacket: 16 [ 821.683932][ T975] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 821.734215][ T975] usb 5-1: config 0 has no interface number 0 [ 821.774136][ T975] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 821.832124][ T975] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 821.904419][ T975] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 821.946643][ T975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.995519][ T975] usb 5-1: Product: syz [ 822.021263][ T975] usb 5-1: Manufacturer: syz [ 822.049287][ T975] usb 5-1: SerialNumber: syz [ 822.088996][ T975] usb 5-1: config 0 descriptor?? [ 822.101350][T14012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 822.109998][T14012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 822.212897][T14049] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2154'. [ 822.343561][T14012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 822.544702][T14012] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 822.685639][T14062] overlayfs: failed to clone upperpath [ 823.178219][ T975] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 823.319515][ T975] asix 5-1:0.251: probe with driver asix failed with error -524 [ 823.462405][ T5868] usb 5-1: USB disconnect, device number 15 [ 823.857340][T14092] bridge0: port 2(netdevsim0) entered blocking state [ 823.870217][T14092] bridge0: port 2(netdevsim0) entered disabled state [ 823.878484][T14092] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 827.451124][T14121] netlink: 304 bytes leftover after parsing attributes in process `syz.1.2169'. [ 827.460995][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 828.113886][ T30] audit: type=1326 audit(2000000063.980:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14117 comm="syz.5.2171" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7aad98e969 code=0x0 [ 830.259227][ T55] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 830.268276][ T55] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 830.642604][ T30] audit: type=1800 audit(2000000066.530:93): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2188" name="nullb0" dev="tmpfs" ino=2840 res=0 errno=0 [ 831.463617][ T5865] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 831.988786][T14195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.032125][ T5865] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 832.089368][T14190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.306517][ T5865] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 832.345015][ T5865] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.405770][ T5865] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 832.410899][T14190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 832.484214][T14202] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 832.497225][ T5865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.694678][ T5865] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 833.291883][ T5865] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 833.467237][T13672] udevd[13672]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.473908][T14202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.800235][T14209] veth3: entered promiscuous mode [ 833.828804][T14209] bond1: (slave veth3): Enslaving as an active interface with a down link [ 833.948111][T14211] bond1: (slave erspan0): making interface the new active one [ 834.125853][T14211] erspan0: entered promiscuous mode [ 834.133270][T14211] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 834.736075][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 834.745516][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 834.755753][ T55] Bluetooth: hci1: hardware error 0x00 [ 834.991746][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880416eb800: rx timeout, send abort [ 835.001314][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880416eb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 835.743584][T14236] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 837.015408][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 837.154716][ T5868] usb 5-1: USB disconnect, device number 16 [ 837.290002][ T975] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 837.485264][ T975] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.518423][ T975] usb 6-1: config 0 has no interfaces? [ 837.585445][ T975] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 837.595188][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.608979][ T975] usb 6-1: config 0 descriptor?? [ 838.638244][ T5868] usb 6-1: USB disconnect, device number 31 [ 838.639866][ T5865] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 839.240403][T14289] xt_ecn: cannot match TCP bits for non-tcp packets [ 839.677941][ T5865] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 839.989386][ T5865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.004085][ T5865] usb 2-1: config 0 descriptor?? [ 840.012729][ T5865] pwc: Samsung MPC-C10 USB webcam detected. [ 840.333156][ T5865] pwc: send_video_command error -71 [ 840.341245][ T5865] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 840.349563][ T5865] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 840.362241][ T5865] usb 2-1: USB disconnect, device number 24 [ 840.455896][T14306] trusted_key: encrypted_key: key user:syz not found [ 842.359963][ T5865] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 842.724097][T14328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 847.110120][ T5868] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 847.490310][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 847.555294][ T5868] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 847.599604][ T5868] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 847.650605][ T5868] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 847.686522][ T5868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 847.851784][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 847.890489][ T5868] usb 5-1: SerialNumber: syz [ 848.452803][T14355] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 848.780274][ T5868] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 848.833741][ T5868] usb 5-1: USB disconnect, device number 17 [ 850.298253][T14404] netlink: 'syz.4.2250': attribute type 11 has an invalid length. [ 850.306354][T14404] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2250'. [ 854.434388][ T3509] erspan0: left promiscuous mode [ 857.920202][ T5868] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 858.170872][ T5868] usb 5-1: Using ep0 maxpacket: 32 [ 858.274001][ T5868] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 858.314681][ T5868] usb 5-1: config 0 has no interface number 0 [ 858.344270][ T5868] usb 5-1: config 0 interface 184 has no altsetting 0 [ 858.376405][ T5868] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 858.559860][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.567987][ T5868] usb 5-1: Product: syz [ 858.580140][ T5868] usb 5-1: Manufacturer: syz [ 858.584833][ T5868] usb 5-1: SerialNumber: syz [ 858.602648][ T5868] usb 5-1: config 0 descriptor?? [ 858.622013][ T5868] smsc75xx v1.0.0 [ 859.839983][ T5868] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 859.859828][ T5868] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 859.910274][ T5942] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 860.082602][ T5942] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 860.108593][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.187435][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 860.661367][ T5942] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.681609][ T5942] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 860.739901][ T5942] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 860.749105][ T5942] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 860.874119][ T5868] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 860.876042][ T5942] usb 6-1: Manufacturer: syz [ 860.890364][ T5868] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 860.910076][ T5868] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 860.929664][ T5942] usb 6-1: config 0 descriptor?? [ 860.931493][ T5868] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 861.395334][ T5942] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 861.414152][ T5942] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 861.470524][ T5942] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 862.265056][T14532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.425625][T14532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.502942][ T5868] usb 5-1: USB disconnect, device number 18 [ 864.122290][ T5942] usb 6-1: USB disconnect, device number 32 [ 864.246353][T14620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 870.134221][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.085627][ T5942] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 876.359813][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 876.514252][ T5942] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 876.543003][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.573532][ T5942] usb 6-1: config 0 has no interface number 0 [ 876.586007][ T5942] usb 6-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 876.595136][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.604634][ T5942] usb 6-1: Product: syz [ 876.619776][ T5942] usb 6-1: Manufacturer: syz [ 876.632638][ T5942] usb 6-1: SerialNumber: syz [ 876.777408][ T5942] usb 6-1: config 0 descriptor?? [ 878.237424][ T5942] usb 6-1: Found UVC 0.00 device syz (046c:14e8) [ 878.249813][ T5942] usb 6-1: No valid video chain found. [ 879.335585][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2336'. [ 879.359157][T14761] netlink: 'syz.2.2336': attribute type 7 has an invalid length. [ 879.442851][T14761] netlink: 'syz.2.2336': attribute type 8 has an invalid length. [ 880.224609][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 880.527467][T14761] syz_tun: entered promiscuous mode [ 880.584638][T14761] gretap0: entered promiscuous mode [ 880.602357][ T5868] usb 6-1: USB disconnect, device number 33 [ 880.749582][T14761] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 880.974126][T14761] Cannot create hsr debugfs directory [ 881.094546][T14761] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 881.444097][T14761] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 881.614044][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2344'. [ 881.639924][T14786] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2344'. [ 881.660026][T14761] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network [ 881.745959][T14786] team0: entered promiscuous mode [ 881.771189][T14786] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 881.814260][T14786] Cannot create hsr debugfs directory [ 881.847061][T14792] netlink: 'syz.4.2343': attribute type 11 has an invalid length. [ 881.855186][T14792] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2343'. [ 882.126186][T14786] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 882.279302][T14786] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 882.366928][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2342'. [ 882.677167][T14780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 884.122456][T14818] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2350'. [ 888.576644][T14885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2367'. [ 890.010674][ T30] audit: type=1800 audit(2000000125.890:94): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2371" name="nullb0" dev="tmpfs" ino=2840 res=0 errno=0 [ 890.590162][T14920] netlink: 'syz.0.2373': attribute type 10 has an invalid length. [ 890.622848][T14920] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 891.154503][T14920] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 891.184120][T14920] bridge0: port 2(netdevsim0) entered disabled state [ 891.279148][T14920] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 891.307612][T14920] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 894.980040][T14974] netlink: 'syz.1.2385': attribute type 1 has an invalid length. [ 897.305853][T15012] ptrace attach of "./syz-executor exec"[9343] was attempted by "./syz-executor exec"[15012] [ 904.684094][ T975] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 904.905616][ T975] usb 6-1: config 3 has an invalid interface number: 168 but max is 0 [ 904.923601][ T975] usb 6-1: config 3 has no interface number 0 [ 904.933711][ T975] usb 6-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 904.954296][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2413'. [ 904.963608][T15098] 8021q: VLANs not supported on nlmon0 [ 905.150648][ T975] usb 6-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 905.163742][ T975] usb 6-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 905.175992][ T975] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 905.185423][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.206381][T15086] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 905.800417][ T975] usb 6-1: string descriptor 0 read error: -71 [ 905.845025][ T975] keyspan 6-1:3.168: Keyspan 2 port adapter converter detected [ 906.123564][ T975] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 1 [ 907.386790][ T975] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 84 [ 907.398787][ T975] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 2 [ 907.422455][ T975] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 907.484875][ T975] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 88 [ 907.619922][T15123] fuse: root generation should be zero [ 907.636303][ T975] keyspan 6-1:3.168: found no endpoint descriptor for endpoint 6 [ 908.003923][ T975] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 908.137159][ T975] usb 6-1: USB disconnect, device number 34 [ 908.154942][ T975] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 908.167728][ T975] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 908.178994][ T975] keyspan 6-1:3.168: device disconnected [ 910.018548][T15144] tipc: New replicast peer: 255.255.255.255 [ 910.028471][T15144] tipc: Enabled bearer , priority 10 [ 911.139939][ T5868] tipc: Node number set to 2886997162 [ 919.812544][T15250] overlayfs: failed to clone upperpath [ 926.607539][T15332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 927.515719][T15347] overlayfs: failed to clone upperpath [ 929.914459][T15365] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2470'. [ 929.923551][T15365] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2470'. [ 931.586185][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.019658][T15397] atomic_op ffff88804c733998 conn xmit_atomic 0000000000000000 [ 933.957823][T15415] netlink: 'syz.1.2482': attribute type 16 has an invalid length. [ 933.965993][T15415] netlink: 64130 bytes leftover after parsing attributes in process `syz.1.2482'. [ 936.900424][ T52] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 937.120880][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 937.451285][ T52] usb 2-1: config 0 has an invalid interface number: 176 but max is 0 [ 937.470393][ T52] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.496812][ T52] usb 2-1: config 0 has no interface number 0 [ 937.628194][ T52] usb 2-1: config 0 interface 176 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 937.639837][ T52] usb 2-1: config 0 interface 176 altsetting 11 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 937.651180][ T52] usb 2-1: config 0 interface 176 altsetting 11 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.670245][ T52] usb 2-1: config 0 interface 176 has no altsetting 0 [ 937.679365][ T52] usb 2-1: New USB device found, idVendor=165c, idProduct=0002, bcdDevice=26.26 [ 937.698465][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.708714][ T52] usb 2-1: Product: syz [ 937.749376][ T52] usb 2-1: Manufacturer: syz [ 937.793454][ T52] usb 2-1: SerialNumber: syz [ 938.250596][ T52] usb 2-1: config 0 descriptor?? [ 938.281532][ T52] usb 2-1: can't set config #0, error -71 [ 938.297056][ T52] usb 2-1: USB disconnect, device number 26 [ 940.157170][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2494'. [ 940.927089][T15492] netlink: 'syz.2.2498': attribute type 12 has an invalid length. [ 941.001483][ T30] audit: type=1326 audit(2000000176.880:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 941.133746][ T30] audit: type=1326 audit(2000000176.950:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 941.306508][ T30] audit: type=1326 audit(2000000177.020:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 941.341286][ T30] audit: type=1326 audit(2000000177.020:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 941.369527][ T30] audit: type=1326 audit(2000000177.020:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 941.803090][ T30] audit: type=1326 audit(2000000177.020:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 941.830975][ T30] audit: type=1326 audit(2000000177.020:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 942.035618][T15497] netlink: 'syz.0.2501': attribute type 4 has an invalid length. [ 942.043471][T15497] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2501'. [ 942.060605][ T30] audit: type=1326 audit(2000000177.020:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 942.083173][ T30] audit: type=1326 audit(2000000177.020:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 942.105153][ T30] audit: type=1326 audit(2000000177.020:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15491 comm="syz.4.2500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba8b58e969 code=0x7ffc0000 [ 942.593378][T15507] netlink: 'syz.1.2502': attribute type 11 has an invalid length. [ 942.601386][T15507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2502'. [ 944.849161][T15531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 946.549648][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2512'. [ 946.562708][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2512'. [ 946.589573][T15550] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 947.242893][T15550] bond0: entered promiscuous mode [ 947.280974][T15550] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 947.288662][T15550] Cannot create hsr debugfs directory [ 947.306234][T15550] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 949.825918][ C1] hrtimer: interrupt took 33099 ns [ 950.451171][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2521'. [ 957.138190][T15650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2533'. [ 957.147659][T15650] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2533'. [ 957.157368][T15650] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2533'. [ 957.636101][T15655] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2535'. [ 957.645476][T15655] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2535'. [ 958.171198][T15669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2537'. [ 959.272113][T15682] bond2: entered promiscuous mode [ 959.277205][T15682] bond2: entered allmulticast mode [ 959.282641][T15682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 959.553523][T15693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2542'. [ 959.562713][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2542'. [ 959.572072][T15693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2542'. [ 959.581585][T15693] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2542'. [ 959.664275][T15695] netlink: 'syz.1.2539': attribute type 3 has an invalid length. [ 959.673481][T15695] netlink: 'syz.1.2539': attribute type 3 has an invalid length. [ 960.781712][T15712] : renamed from bond0 (while UP) [ 966.215803][T15764] misc userio: No port type given on /dev/userio [ 968.799282][T15776] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 968.887951][T15777] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 970.917906][T15790] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 970.928518][T15790] gretap1: entered promiscuous mode [ 970.934569][T15790] gretap1: entered allmulticast mode [ 972.623374][T15787] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2561'. [ 972.638402][T15787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2561'. [ 973.308283][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 973.308306][ T30] audit: type=1326 audit(2000000209.190:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15812 comm="syz.1.2568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f233698e969 code=0x0 [ 974.184862][T15827] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 976.690198][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 977.534359][T15864] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 977.543994][T15864] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 978.578547][T15879] netlink: 'syz.2.2582': attribute type 4 has an invalid length. [ 978.586552][T15879] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2582'. [ 982.790376][T15923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 988.275007][T15974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2605'. [ 990.695844][T15988] tmpfs: Bad value for 'mpol' [ 992.153994][T16004] trusted_key: encrypted_key: insufficient parameters specified [ 993.155345][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.440473][T14229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 993.570581][T14229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 993.584994][T14229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 993.596228][T14229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 993.606872][T14229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 993.789527][T16017] lo speed is unknown, defaulting to 1000 [ 993.941701][T16029] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2615'. [ 994.622583][T16032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2617'. [ 994.644607][T16028] veth0_vlan: entered allmulticast mode [ 996.768867][T14229] Bluetooth: hci5: command tx timeout [ 997.285509][ T30] audit: type=1326 audit(2000000233.160:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16038 comm="syz.2.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7ca38e969 code=0x0 [ 998.860527][ T55] Bluetooth: hci5: command tx timeout [ 999.085459][T16017] chnl_net:caif_netlink_parms(): no params data found [ 1001.280546][ T55] Bluetooth: hci5: command tx timeout [ 1002.311696][T16017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.330388][ T55] Bluetooth: hci5: command tx timeout [ 1003.339690][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.347572][T16017] bridge_slave_0: entered allmulticast mode [ 1003.369259][T16017] bridge_slave_0: entered promiscuous mode [ 1003.663447][T16017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.220259][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.228334][T16017] bridge_slave_1: entered allmulticast mode [ 1004.251639][T16017] bridge_slave_1: entered promiscuous mode [ 1004.576898][T16017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.705944][T16017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.392413][T16151] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2644'. [ 1008.308458][T16017] team0: Port device team_slave_0 added [ 1008.476041][T16017] team0: Port device team_slave_1 added [ 1008.948603][T16017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.979340][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.109182][T16017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.134262][T16017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.162646][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1010.198644][T16017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.359830][T16214] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 1011.033076][T16221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2656'. [ 1012.105194][T16017] hsr_slave_0: entered promiscuous mode [ 1012.139158][T16017] hsr_slave_1: entered promiscuous mode [ 1012.216766][T16017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1012.281747][T16230] xt_connbytes: Forcing CT accounting to be enabled [ 1012.288934][T16230] Cannot find del_set index 1 as target [ 1012.320746][T16017] Cannot create hsr debugfs directory [ 1014.085596][T16268] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2665'. [ 1014.140605][T16269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2665'. [ 1014.149790][T16267] Cannot find del_set index 1 as target [ 1017.273817][T16017] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1017.936372][T16017] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1018.958858][T16017] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1021.150711][T16328] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2680'. [ 1021.202007][T16333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2680'. [ 1021.229241][T16017] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1021.560167][T16349] set match dimension is over the limit! [ 1024.508395][ T5868] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1025.037780][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 1025.176614][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.590530][ T5868] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1025.599633][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.610582][ T5868] usb 2-1: config 0 descriptor?? [ 1026.457897][ T5868] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1026.717368][ T5936] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.747419][T16404] Cannot find del_set index 1 as target [ 1026.924676][T16017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.206056][ T5868] usb 2-1: USB disconnect, device number 27 [ 1027.245797][ T5936] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.073373][T16017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.171609][ T5936] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.226846][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.234014][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.736755][T16436] Cannot find add_set index 0 as target [ 1028.990268][ T5936] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.035034][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.042249][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.692806][ T5936] dvmrp1 (unregistering): left allmulticast mode [ 1034.006814][ T5936] bond0 (unregistering): Released all slaves [ 1034.026223][ T5936] bond1 (unregistering): Released all slaves [ 1034.171023][ T5936] bond2 (unregistering): Released all slaves [ 1035.586695][T16017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.572998][T16017] veth0_vlan: entered promiscuous mode [ 1049.623838][T16017] veth1_vlan: entered promiscuous mode [ 1050.030165][T16017] veth0_macvtap: entered promiscuous mode [ 1050.977398][T16763] netlink: 'syz.4.2740': attribute type 11 has an invalid length. [ 1050.985658][T16763] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2740'. [ 1051.599585][T16017] veth1_macvtap: entered promiscuous mode [ 1051.828081][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.881844][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.914537][T16017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.661173][T16017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.782755][T16017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.797006][T16017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.518391][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.477609][T14229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1055.491051][T14229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1055.506761][T14229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1055.530413][T14229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1055.538148][T14229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1055.801363][T16859] lo speed is unknown, defaulting to 1000 [ 1057.650585][T14229] Bluetooth: hci1: command tx timeout [ 1059.830420][T14229] Bluetooth: hci1: command tx timeout [ 1061.666422][ T5936] team0: left promiscuous mode [ 1061.890181][ T55] Bluetooth: hci1: command tx timeout [ 1062.151937][ T5936] hsr_slave_0: left promiscuous mode [ 1062.364022][ T5936] hsr_slave_1: left promiscuous mode [ 1062.592014][ T5936] veth1_macvtap: left promiscuous mode [ 1062.624110][ T5936] veth0_macvtap: left promiscuous mode [ 1062.667780][ T5936] veth1_vlan: left promiscuous mode [ 1062.701696][ T5936] veth0_vlan: left promiscuous mode [ 1063.971345][ T55] Bluetooth: hci1: command tx timeout [ 1066.030754][T16859] chnl_net:caif_netlink_parms(): no params data found [ 1069.856910][T16859] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.874208][T16859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.887613][T16859] bridge_slave_0: entered allmulticast mode [ 1069.912413][T16859] bridge_slave_0: entered promiscuous mode [ 1070.392162][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.426044][T16859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.553045][T16859] bridge_slave_1: entered allmulticast mode [ 1070.668421][T16859] bridge_slave_1: entered promiscuous mode [ 1071.287440][T16859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.288083][ T5936] IPVS: stop unused estimator thread 0... [ 1071.384837][T16859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.946002][T17047] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2784'. [ 1073.484729][T16859] team0: Port device team_slave_0 added [ 1074.311132][T16859] team0: Port device team_slave_1 added [ 1079.234465][T16859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.245769][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.415416][T16859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.169480][T17122] cgroup: Unknown subsys name 'obj_role' [ 1080.483327][T17125] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2796'. [ 1080.738265][T16859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.755588][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.832316][T16859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.927157][T16859] hsr_slave_0: entered promiscuous mode [ 1081.935549][T16859] hsr_slave_1: entered promiscuous mode [ 1081.944193][T16859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.952176][T16859] Cannot create hsr debugfs directory [ 1084.357475][T17188] macsec0: entered promiscuous mode [ 1086.544990][ T5936] bridge_slave_1: left allmulticast mode [ 1086.775533][ T5936] bridge_slave_1: left promiscuous mode [ 1086.861562][T17219] netlink: 788 bytes leftover after parsing attributes in process `syz.1.2813'. [ 1087.537710][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.807166][ T5936] bridge_slave_0: left allmulticast mode [ 1087.818228][ T5936] bridge_slave_0: left promiscuous mode [ 1087.839772][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.081517][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.213021][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.248235][ T5936] bond0 (unregistering): Released all slaves [ 1094.030491][T17221] macsec0: entered promiscuous mode [ 1096.240642][ T5936] hsr_slave_0: left promiscuous mode [ 1096.691392][ T5936] hsr_slave_1: left promiscuous mode [ 1096.801407][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1096.808880][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1097.026759][ T5936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1097.277797][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1097.447234][ T5936] veth1_macvtap: left promiscuous mode [ 1097.512163][ T5936] veth0_macvtap: left promiscuous mode [ 1097.518066][ T5936] veth1_vlan: left promiscuous mode [ 1097.640744][ T5936] veth0_vlan: left promiscuous mode [ 1099.347557][T17348] Cannot find del_set index 1 as target [ 1102.535579][T17357] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1105.472118][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1105.568052][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1106.640201][T17364] macsec0: entered promiscuous mode [ 1106.645688][T17364] macsec0: entered allmulticast mode [ 1106.651145][T17364] veth1_macvtap: entered allmulticast mode [ 1109.145347][T16859] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1109.304573][T16859] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1110.798339][T16859] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1112.251278][T16859] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1112.716122][T16859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.779849][T16859] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.800549][T16592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.807744][T16592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.559648][T16592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.566894][T16592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.950713][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.762138][T14229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1119.803675][T14229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1119.904062][T14229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1119.939591][T14229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1119.964023][T14229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1121.864359][T17533] lo speed is unknown, defaulting to 1000 [ 1122.216399][T14229] Bluetooth: hci5: command tx timeout [ 1123.736970][T17617] lo speed is unknown, defaulting to 1000 [ 1124.098160][T17533] chnl_net:caif_netlink_parms(): no params data found [ 1124.290532][T14229] Bluetooth: hci5: command tx timeout [ 1126.370469][T14229] Bluetooth: hci5: command tx timeout [ 1129.229819][T14229] Bluetooth: hci5: command tx timeout [ 1130.428253][T17533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.466620][T17533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1130.610373][T17533] bridge_slave_0: entered allmulticast mode [ 1130.618126][T17533] bridge_slave_0: entered promiscuous mode [ 1130.632913][T17533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.456286][T17533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.464518][T17533] bridge_slave_1: entered allmulticast mode [ 1131.472673][T17533] bridge_slave_1: entered promiscuous mode [ 1131.480546][ T5936] bridge_slave_1: left allmulticast mode [ 1131.486279][ T5936] bridge_slave_1: left promiscuous mode [ 1131.499208][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.616642][ T5936] bridge_slave_0: left allmulticast mode [ 1131.669870][ T5936] bridge_slave_0: left promiscuous mode [ 1131.678012][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.079821][T17710] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2885'. [ 1133.869413][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.881984][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.892854][ T5936] bond0 (unregistering): Released all slaves [ 1134.043510][ T5936] hsr_slave_0: left promiscuous mode [ 1134.054427][ T5936] hsr_slave_1: left promiscuous mode [ 1134.065233][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1134.102140][ T5936] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.142246][ T5936] team0 (unregistering): Port device team_slave_1 removed [ 1136.268411][ T5936] team0 (unregistering): Port device team_slave_0 removed [ 1138.355559][T17533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.426789][T17533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.943094][T17533] team0: Port device team_slave_0 added [ 1140.010821][T17533] team0: Port device team_slave_1 added [ 1140.359550][T17533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.415724][T17533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.542153][T17533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.670985][T17533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.677980][T17533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.899965][T17533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.877479][T17533] hsr_slave_0: entered promiscuous mode [ 1141.915683][T17533] hsr_slave_1: entered promiscuous mode [ 1141.934943][T17533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1141.966101][T17533] Cannot create hsr debugfs directory [ 1145.069492][T17858] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1145.177718][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 1150.736116][T17533] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1152.013491][T17533] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1152.050899][T17533] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1152.269648][T17533] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1156.714526][T17923] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1156.759365][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2921'. [ 1157.120501][T17533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.141507][T17533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.186513][T17533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1157.196997][T17533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1157.227091][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.234445][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.326197][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.333501][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1164.598008][T17533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1166.833601][T18007] netlink: 788 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1166.888876][T18008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2936'. [ 1167.365058][T17533] veth0_vlan: entered promiscuous mode [ 1167.383829][T17533] veth1_vlan: entered promiscuous mode [ 1167.505044][T17533] veth0_macvtap: entered promiscuous mode [ 1167.767778][T17533] veth1_macvtap: entered promiscuous mode [ 1168.508228][T18018] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 1168.517610][T18018] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 1169.556935][T17533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.570587][T17533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.585875][T17533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.599404][T17533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1169.649347][T17533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.813752][T17533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.842518][T17533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.882386][T17533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.885986][T17533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.899699][T17533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1173.990763][ T31] INFO: task kworker/0:0:9 blocked for more than 144 seconds. [ 1173.998269][ T31] Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 [ 1174.038725][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1174.998224][ T31] task:kworker/0:0 state:D stack:23288 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1175.010658][ T31] Workqueue: usb_hub_wq hub_event [ 1175.015720][ T31] Call Trace: [ 1175.019003][ T31] [ 1175.022071][ T31] __schedule+0x168f/0x4c70 [ 1175.026594][ T31] ? __lock_acquire+0xaac/0xd20 [ 1175.031728][ T31] ? schedule+0x165/0x360 [ 1175.036080][ T31] ? __pfx___schedule+0x10/0x10 [ 1175.234532][ T31] ? schedule+0x91/0x360 [ 1175.243160][ T31] schedule+0x165/0x360 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1175.275975][ T31] usb_kill_urb+0x1be/0x2d0 [ 1175.302704][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 1175.326042][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1175.392223][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 1175.440521][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1175.459441][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 1175.480161][ T31] usb_control_msg+0x232/0x3e0 [ 1175.485008][ T31] hub_port_init+0xbf9/0x2800 [ 1175.499888][ T31] hub_event+0x2518/0x4a00 [ 1175.504417][ T31] ? __pfx_hub_event+0x10/0x10 [ 1175.509201][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1175.533629][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.573364][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1175.579139][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 1175.593077][ T31] process_scheduled_works+0xadb/0x17a0 [ 1175.720516][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1175.726583][ T31] worker_thread+0x8a0/0xda0 [ 1175.770553][ T31] kthread+0x70e/0x8a0 [ 1175.774662][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1175.802816][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.807531][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.814092][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1175.819392][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1175.825438][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.831452][ T31] ret_from_fork+0x4b/0x80 [ 1175.835942][ T31] ? __pfx_kthread+0x10/0x10 [ 1175.843965][ T31] ret_from_fork_asm+0x1a/0x30 [ 1175.848849][ T31] [ 1175.854111][ T31] [ 1175.854111][ T31] Showing all locks held in the system: [ 1175.871828][ T31] 5 locks held by kworker/0:0/9: [ 1175.876852][ T31] #0: ffff8881446e5948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1176.065991][ T31] #1: ffffc900000e7c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1176.078105][ T31] #2: ffff8880287da198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1176.087205][ T31] #3: ffff8880287de510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1176.097380][ T31] #4: ffff888026d67b68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1176.107218][ T31] 2 locks held by kworker/u8:0/12: [ 1176.126935][ T31] #0: ffff8881456d7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1176.179774][ T31] #1: ffffc90000117c60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1176.239978][ T31] 1 lock held by khungtaskd/31: [ 1176.269832][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1176.316935][ T31] 3 locks held by kworker/0:2/975: [ 1176.369893][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1176.439798][ T31] #1: ffffc90003737c60 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1176.479812][ T31] #2: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 1176.509994][ T31] 4 locks held by udevd/5188: [ 1176.514765][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1176.539799][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 1176.569863][ T31] #2: ffff888032cf30f8 (&lockref->lock){+.+.}-{3:3}, at: __dentry_kill+0x2cf/0x660 [ 1176.579416][ T31] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: is_bpf_text_address+0x26/0x2b0 [ 1176.609933][ T31] 2 locks held by dhcpcd/5482: [ 1176.614795][ T31] #0: ffff88803d4c46d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 1176.653357][ T31] #1: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1176.665288][ T31] 2 locks held by getty/5569: [ 1176.674230][ T31] #0: ffff8880341720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1176.685225][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1176.702631][ T31] 3 locks held by syz-executor/5823: [ 1176.708013][ T31] 1 lock held by syz.0.89/6324: [ 1176.713230][ T31] #0: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1176.722728][ T31] 1 lock held by syz.4.1838/13075: [ 1176.727919][ T31] #0: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1176.737107][ T31] 1 lock held by syz.1.1913/13252: [ 1176.742778][ T31] #0: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1176.752015][ T31] 2 locks held by kworker/u8:20/16606: [ 1176.757715][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 1176.767846][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 1176.789369][ T31] 3 locks held by kworker/u8:24/16644: [ 1176.795140][ T31] #0: ffff88802fbee948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1176.807526][ T31] #1: ffffc9000483fc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1176.822420][ T31] #2: ffffffff8f2e2588 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1176.833242][ T31] 2 locks held by dhcpcd/18042: [ 1176.838104][ T31] #0: ffff88805eea2008 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1176.848393][ T31] #1: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 1176.860089][ T31] 1 lock held by dhcpcd/18045: [ 1176.864978][ T31] #0: ffff888023aa6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1176.875051][ T31] [ 1176.877585][ T31] ============================================= [ 1176.877585][ T31] [ 1176.890268][ T31] NMI backtrace for cpu 1 [ 1176.890287][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 1176.890306][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1176.890319][ T31] Call Trace: [ 1176.890326][ T31] [ 1176.890333][ T31] dump_stack_lvl+0x189/0x250 [ 1176.890357][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1176.890377][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1176.890397][ T31] ? __pfx__printk+0x10/0x10 [ 1176.890432][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1176.890458][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1176.890478][ T31] ? _printk+0xcf/0x120 [ 1176.890505][ T31] ? __pfx__printk+0x10/0x10 [ 1176.890528][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1176.890553][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1176.890577][ T31] watchdog+0xfee/0x1030 [ 1176.890595][ T31] ? watchdog+0x1de/0x1030 [ 1176.890620][ T31] kthread+0x70e/0x8a0 [ 1176.890641][ T31] ? __pfx_watchdog+0x10/0x10 [ 1176.890657][ T31] ? __pfx_kthread+0x10/0x10 [ 1176.890674][ T31] ? __pfx_kthread+0x10/0x10 [ 1176.890690][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.890706][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1176.890724][ T31] ? __pfx_kthread+0x10/0x10 [ 1176.890739][ T31] ret_from_fork+0x4b/0x80 [ 1176.890753][ T31] ? __pfx_kthread+0x10/0x10 [ 1176.890770][ T31] ret_from_fork_asm+0x1a/0x30 [ 1176.890806][ T31] [ 1176.890831][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1177.046971][ C0] NMI backtrace for cpu 0 [ 1177.046988][ C0] CPU: 0 UID: 0 PID: 17533 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 1177.047009][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1177.047018][ C0] RIP: 0010:is_bpf_text_address+0xb/0x2b0 [ 1177.047044][ C0] Code: 00 00 4c 89 ea e8 55 33 5d ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 10 49 89 fe e8 d6 3b f1 ff e8 81 17 d9 ff 48 8d [ 1177.047058][ C0] RSP: 0018:ffffc9000adb75b0 EFLAGS: 00000246 [ 1177.047072][ C0] RAX: 0000000000000000 RBX: 00007f9176f907fc RCX: 8f4f9af3e3bed100 [ 1177.047084][ C0] RDX: 0000000000000000 RSI: ffffffff8d921256 RDI: 00007f9176f907fc [ 1177.047095][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1177.047104][ C0] R10: 0000000000000000 R11: ffffffff81ab2a1d R12: ffff88802f0a9e00 [ 1177.047116][ C0] R13: 1ffff920015b6ef0 R14: 0000000000000001 R15: 1ffff920015b6ece [ 1177.047128][ C0] FS: 0000000000000000(0000) GS:ffff8881260ff000(0000) knlGS:0000000000000000 [ 1177.047141][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1177.047152][ C0] CR2: 00007ffcd03bd000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 1177.047166][ C0] Call Trace: [ 1177.047172][ C0] [ 1177.047180][ C0] kernel_text_address+0xa5/0xe0 [ 1177.047200][ C0] __kernel_text_address+0xd/0x40 [ 1177.047218][ C0] unwind_get_return_address+0x4d/0x90 [ 1177.047235][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1177.047252][ C0] arch_stack_walk+0xfc/0x150 [ 1177.047275][ C0] stack_trace_save+0x9c/0xe0 [ 1177.047290][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1177.047309][ C0] save_stack+0xf7/0x1f0 [ 1177.047331][ C0] ? __pfx_save_stack+0x10/0x10 [ 1177.047350][ C0] ? __free_frozen_pages+0xb05/0xcd0 [ 1177.047365][ C0] ? vfree+0x1a6/0x330 [ 1177.047387][ C0] ? kcov_close+0x28/0x50 [ 1177.047402][ C0] ? __fput+0x449/0xa70 [ 1177.047418][ C0] ? task_work_run+0x1d1/0x260 [ 1177.047435][ C0] ? do_exit+0x8d6/0x2550 [ 1177.047451][ C0] ? do_group_exit+0x21c/0x2d0 [ 1177.047467][ C0] ? get_signal+0x125e/0x1310 [ 1177.047488][ C0] ? arch_do_signal_or_restart+0x95/0x780 [ 1177.047510][ C0] ? syscall_exit_to_user_mode+0x8b/0x120 [ 1177.047528][ C0] ? do_syscall_64+0x103/0x210 [ 1177.047544][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.047562][ C0] ? page_ext_put+0x97/0xc0 [ 1177.047586][ C0] __reset_page_owner+0x71/0x1f0 [ 1177.047607][ C0] __free_frozen_pages+0xb05/0xcd0 [ 1177.047626][ C0] vfree+0x1a6/0x330 [ 1177.047649][ C0] ? __pfx_kcov_close+0x10/0x10 [ 1177.047665][ C0] kcov_close+0x28/0x50 [ 1177.047680][ C0] __fput+0x449/0xa70 [ 1177.047701][ C0] task_work_run+0x1d1/0x260 [ 1177.047720][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1177.047739][ C0] ? kmem_cache_free+0x192/0x3f0 [ 1177.047764][ C0] do_exit+0x8d6/0x2550 [ 1177.047784][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1177.047800][ C0] ? __pfx_do_exit+0x10/0x10 [ 1177.047816][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1177.047840][ C0] do_group_exit+0x21c/0x2d0 [ 1177.047856][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1177.047873][ C0] get_signal+0x125e/0x1310 [ 1177.047911][ C0] arch_do_signal_or_restart+0x95/0x780 [ 1177.047934][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1177.047963][ C0] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1177.047985][ C0] syscall_exit_to_user_mode+0x8b/0x120 [ 1177.048002][ C0] do_syscall_64+0x103/0x210 [ 1177.048020][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1177.048035][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1177.048053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.048068][ C0] RIP: 0033:0x7f9176f907fc [ 1177.048088][ C0] Code: Unable to access opcode bytes at 0x7f9176f907d2. [ 1177.048097][ C0] RSP: 002b:00007fff4ac93770 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1177.048112][ C0] RAX: 0000000000000020 RBX: 00007f9177ce4620 RCX: 00007f9176f907fc [ 1177.048124][ C0] RDX: 0000000000000020 RSI: 00007f9177ce4670 RDI: 0000000000000003 [ 1177.048134][ C0] RBP: 0000000000000000 R08: 00007fff4ac937c4 R09: 000000000000000c [ 1177.048144][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1177.048154][ C0] R13: 0000000000000000 R14: 00007f9177ce4670 R15: 0000000000000000 [ 1177.048172][ C0] [ 1177.478700][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1177.485600][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc4-syzkaller-00296-ge8ab83e34bdc #0 PREEMPT(full) [ 1177.497423][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 1177.507496][ T31] Call Trace: [ 1177.510794][ T31] [ 1177.513734][ T31] dump_stack_lvl+0x99/0x250 [ 1177.518338][ T31] ? __asan_memcpy+0x40/0x70 [ 1177.522941][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1177.528157][ T31] ? __pfx__printk+0x10/0x10 [ 1177.532778][ T31] panic+0x2db/0x790 [ 1177.536696][ T31] ? __pfx_panic+0x10/0x10 [ 1177.541121][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 1177.546514][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1177.551899][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1177.558082][ T31] watchdog+0x102d/0x1030 [ 1177.562511][ T31] ? watchdog+0x1de/0x1030 [ 1177.566949][ T31] kthread+0x70e/0x8a0 [ 1177.571030][ T31] ? __pfx_watchdog+0x10/0x10 [ 1177.575720][ T31] ? __pfx_kthread+0x10/0x10 [ 1177.580321][ T31] ? __pfx_kthread+0x10/0x10 [ 1177.584920][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1177.590122][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1177.595336][ T31] ? __pfx_kthread+0x10/0x10 [ 1177.599936][ T31] ret_from_fork+0x4b/0x80 [ 1177.604362][ T31] ? __pfx_kthread+0x10/0x10 [ 1177.608961][ T31] ret_from_fork_asm+0x1a/0x30 [ 1177.613754][ T31] [ 1177.617031][ T31] Kernel Offset: disabled [ 1177.621353][ T31] Rebooting in 86400 seconds..