last executing test programs: 6m10.691207088s ago: executing program 3 (id=228): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000280)={"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"}) 6m10.233923171s ago: executing program 3 (id=231): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x6) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {}, 0x37b4, [0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a29, 0x0, 0x400000, 0x0, 0xf, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x80], [0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x22d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb890, 0x0, 0x80000000, 0x1000000]}, 0x45c) 6m9.850239261s ago: executing program 3 (id=233): creat(&(0x7f00000002c0)='./file0\x00', 0x60) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1b94efa9ac82b2de, 0x0, 0x0, 0x2, 0xd7b, 0x0, 0x0, 0x10, 0x7}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x0, 0x3572111cb2a712f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffff9c, &(0x7f0000000bc0)='./file0\x00', 0x101200, 0x8) 6m8.885090909s ago: executing program 3 (id=242): mkdir(&(0x7f0000000380)='./bus\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 6m8.60652027s ago: executing program 3 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x40) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x20, 0x5, 0xe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009f02"]) 6m8.265940052s ago: executing program 3 (id=250): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x1, 0x9], 0x9}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 6m7.946272274s ago: executing program 32 (id=250): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x1, 0x9], 0x9}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 5m52.881979027s ago: executing program 5 (id=251): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x9, 0x2a7345, 0x20d37}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r2, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 5m52.528045705s ago: executing program 5 (id=321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x6, 0x4], 0x2000, 0x8240}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) capset(&(0x7f0000000300)={0x20071026}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m51.973061988s ago: executing program 5 (id=324): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x1ff}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 5m51.012767761s ago: executing program 5 (id=329): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) write$tun(0xffffffffffffffff, 0x0, 0x46) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000340)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 5m49.938203391s ago: executing program 5 (id=333): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5m48.862168373s ago: executing program 5 (id=339): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) 5m33.834958561s ago: executing program 4 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 5m32.663503109s ago: executing program 33 (id=339): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4) close(0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x0) 4m51.58067941s ago: executing program 4 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 3m54.822431051s ago: executing program 4 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 2m53.973242063s ago: executing program 4 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 43.601511103s ago: executing program 4 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 18.234296862s ago: executing program 4 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x15) 9.823265766s ago: executing program 0 (id=1011): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, 0x0, 0x2) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 8.745895989s ago: executing program 0 (id=1013): setresuid(0xee01, 0x0, 0xffffffffffffffff) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0xfffffffffffffffc, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, 0x0) fchdir(0xffffffffffffffff) 8.308976433s ago: executing program 2 (id=1015): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x24, 0x0, 0x41046100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="1827dacb7cd53e01b4852de2d748e21fa033071acb841f449efc23d452101807ae5c485596338a6d31388444ae8ade7b60a85a37d3db29ef19ae4c4d4db9c2c82c7908debb2e2b5ebef336aad77bef942d064955079af4e914f372cec8ed0440f6ee0bded3c565283bdb75124011227712d5f01e8c1eb86cf69205a8b5b374edee58ebaf09d62191cf41190260c30a719bbc9bc29be0d60c678791de6b236c9b5a057247c281937c2b2ae747c858532113e0a1e7af49298ef54f15572301d3c907b02529bc470beab8f9208cf92b17a9df99ceff90a1e384d6bda3fe823d8eff0e2229a43c31781935de69466b1082c0f88d3716f234e1d6e17e1360f6621e686d661af20eaf08cc97c261590ac3291667a87bbf66f86d9005f034ea5517b2187b6dfecebc1cb8fc4dab511a2890a68ed185483c548168803f353520cc6f820d1349ac985e12a3ff6e8a78b29ed97213962fca3ba7d04d1ab4dbcfe93a88831f784ed278d079eb3e2e69d3161600fc7b0dae825b510a59c14315fc6ca0ce68dafd088f02a92ae0ab3f15ca1a863b640e8e4a89407a8b8d752892e1f8b0e793d430c3ec46cbe2b6a4bdad728c34e734864aeac2b6b2eb51c3a2f9e6773c5834166511086dc35847cfa17974889795ed305353d41c9399bb95936a3c1be1099f21795cfc04d9699929eca65a0edcae5d4e564404e5292dc15f40d78d94be9e8dca92983bc71729ab30a70455bbfd5a98d97cab9778d9b7b69fb20019e7e7c7bc17c84da1dab53a187a116ac229e00312c95b1074afff18a8771a4ab47be2205745836dc3cc1ce531fe697e9a734698fb2343b331ad9f13214d1d7d511dc646fb8b3b70fb4611e6d102a0e2bda6311ca824537f699efdefbd8a3a523e26272f07abd75504188edc788af9c75aabf77f4ac883573f63ded319fa5a8b6317d4490391879629446fa5ea4c695f3db9739f7bc1da7a19f3e1c0ccca98307b3a7a38272b7455c8957b17138c9e170c27895fcf47eb5530948b7cc43d61a621293b0c83dc893f02def2b42a8bd7ad6c9cdfeb7a3bde141e98e5af7500b07d85c6314949b754c88cc666bdaaec89271f56ec11bfa0aa337feb1140b8a07fbd5c79bdd0239f8aa1d454c0e5a16e99d38d1212ff709bb1964c317c98bfef37b56944666f0320ec85b5b1e07731de5584901f8c65e14fd2ba83b500fdbb137c7cdf91d66400688a5da6405ca7e0b8107ed65be0ef5c6234b62f613e7e76d6f3d5cc12bde4342391524e25bab6ec0a358c6c66b7cdbdd9301f91589af65cb7c02fe8271a798c5e122fef9e7581d28884d33d01f0475c9ac052d2d014bdc09e2738487742f7bff40facf2e96dcdfefa336c46923b77b334daf7b01a9fd5d957a29b83adf6f23acc507a58dabe6b2804532bc1a865a01b1126127f7c6a8029531db8a51d8472c0abffca5be97b9b5433ad220ab9ad65cf94a1167f3fb2b8804ce66f9f5cae212724b2b3a04343580f5919f446f40eaa0177f25ebe68ee7c7a35d9d5ef6e1cb220eaf8ad9b269b15c2ab9692c345f3c3bd5965f06adfdfa2d672b5e3184ebe192f73e70e829adfac2e6318d238dceb6e3d7d1422d57ff7124793b92966bd229c0725b0d591e59c57f98841b5ffad16d0ae903406014d3e632d0654e9084f870e124046f3ebae3ecbf5c5365aa32ebf169ccf1243dc8fb296cef006d5f00447ecd2980abb98e3b6e6bf6181e5df7994ea1c1273784af0d92a57394c71926dc143228a8ade103ff61860d21ffd467b2c41bbbd2490dd36add865828fb64396f16831a3a74f57ee2254cc93b25b7219bc00339a2518be3caa4765ed63295c84f1d59144e96aacfb57c6441f64f29729bb7d68127ae2472bbf089570003b1e820191878ab6f53db01c180751e34672cf5a96edfefe164580d6101672281b59f58f3c7b1222f2b6d19c8a8e5f9ad539045f7dbadaa767f993da974dae20744bf5ad0e0ec71ee97696659981e067463c78bd9337b8bcfc070e7e5b47303eaaf9651c19f19a15eab8e2c47041828be50994b5695ee5fbc9a9ecacf9de714215eb7992c07f262db8843937934fdf6fdd31d0f3a44f074f3a1dd6622dbdb3364df79d5ec90ead64c29e05a6c5358cc6b9d8493b7e1c53a91c37aa3653cf2002072461f4b99fcdec142e53b87f61ea55cdb834dd4e03f2f57a206cabe2f3f3cbfad3b4117bf4434718022b09a8419959a9bb97fba50a6b3b9a844cd1301de7bae89f8d1bf549b88dd2bd0697e70ce89cc2e383221ca2ae9d3671a730466c250a8963f6411a42ecc85a00c01b2b43c39432d5065a5fd11c29a23169891cd674cf3a31e82587a26c8d48aa3debeaf067a26669599fae850126dd516512e0cf5ab556b5582add7d2f665723a2244007ddc302f0ec29da73578a80c998849be2f766a334c7ade4dd46f37d648899da5cf7437af2d6e8d03d934903387c4c7e260909d59b546dfac9ffdce11fb92e5bb6ff6836fa0e6d0c5942b4660fdd68d3cc8a76ce0960584dbf634695ca75752b19067ba535e4779189b111c9a3e0ea877067c046d10021b0e60eae8d5dd7536b4474d8ab74679e2d8e68bc9208db5561e28d0bec177cda1e2f944a4cd97b6432033ce40063cbced6b36e486b096adffd699c9fdf58d5ec54bf4afdf52493fbfcd91e807da31ff675b567058697aa088118a6ecf1b7c7dceba3ba87d59d882fce3b3b676763ed658e991c4fd5746946815af0a2c1e96aeb27383cf6638d6d7e1932b3a028250fee18db7c46acd7fab33ab22ff91cf78029a4ed96494151652213fb7dcca0a8944568bf84aded113e20e6897d6b8f6f9fe5f6975c7cbf999d15ce5f8d50454d58e7a5b285fce4ef9d14758cf4a9619b17275fa66f2c6c48d44da95657708062bec9b633ba2df082766f549c5c1b661fc8a5f7b8b6699503da733a66df44f116c4a470b73648cb64bf04101e7bc1d048d230addbf22a5b98aea08beda847e33552faf771d9b181f610ce34530543096257856ea3a08276bec1ea40e7bf6957143623ef47b5c41e61d076eef0a5195431b49beab9fd7f07b1a153491a7250a889b26ce657df550b226fb94cb5f52306f47ee3af4627ef0cdc0c50536af7b386440b878ed5d672670abdb3ea3e3c3c031e67293104a4d6476cf325f6fe4762ce2351dffac116387baadb82f987cab7fe88ce1be7d44ccd572bfd29114d2ce4d5e90f4d6bf7be39ce25ab7de52815e4059d783564d518dd208714de1c524ff69a4ec5f29bb631eff605cc6f30a0bcfba44810a3a6fc263891791b51cb4be0d60d3d0798e38b01b9a21150589a436fb4df4584bf6e7094176884921bbb0f87b1bcdfb6df8aef8f58393800816c15647650448da0ba5bb76f7bf76c3be83aceab79eedae80e1fb46a2557a9485aa7a8053a5835e609fdf54222f5b43cba63c9508dbbd0e22953768f88e2070236d7255f682464d09c7ba12b2e8787a1bc889af686d2c355961d8f92f877bb09baef09d70b5b306047d8d3cb97fb06ba8d09bfbae02314dddf98092b6ef275743e9deb391995003d83b549ecd604daa9bd34ef311aeced5db504242241c0717f8302efedcd3fd43686a7ee21c73ba3c5af98c93d09158c9011e11bc4b51a3a4e904c4b6ced1a786adf310073405c27df6aae6d5da4398d78622ba9144ad09902da49b77046ad22fd303f07c1533f271eb82794b402382d2971f46c7907069907a7afb9e94dd4071685f91cfca10d86aad7c385e4d90f0d44d37588a8f1f267c1d8445634ca4194d1a0c5894a6d00cae3af3aec991cfefda59e3f46c0a6e2fac55b35259a9960ec7dbd1c7dd128368393f0de1e0994ba1f5b41762c22213f56bbf4c2cca458dd5731f9379f0651ba61fbf17a5861eb417e20a7fc9df12c6771f5ab322213ec95beff96dc1811dd0f45be8fb1ed93c2cc01e694620b550e45bd265fb357f52699cf9ca3ddf331fe4d11c5e97bb57631d9c7620b5c19562c85ef8e04ecd5cd5b713fbd94b6b76331a83f304cd8ae1a903ffa722cf5697b1e1bde206735656ce57254744daff8013f47f9aa4f062d8c5956fa8df5ee79d6e6ffbc0c47cd0c99517a6d92fe8ad18c001be4b55af7a6533712c6a2ccb7e813016e7cb74a94bf2a2ce9b3b440faae19210d43320cb81a6472d1da775ca27f2b5bbe5964271eefccdfa0bd6b163357af4539fdb5d5e2e7e1795040776d4d75b70928b8efa954556f4d225bd9b6f9e5a71a8e7a3ef5c36d459233c66650ada1c55dfa02bca3997f93b92028881d9c3ec0e7e1a42c587482b0cfbc77e8520c6ca0f3e5127c96b41056b7279d9e62358e39dc95e779affaaaddc8e9ee66ba336feca8b957ccb4f352c0d162390e3bde27b15132407c97c3a6b5f1704e1e559ee12655a71d7dce3711c8af907d7d2875e2407ff8c59c5457678058d3d00a7971d239c1b1c67dac3ff3fbcc2d8c8035e31040118ac46ba5110a16aedd0b7f731a4f86a63a697501a664946eaf7da6d3cc2a296f294ee765b8f26363ba6116e0ea0ef8eabb0f1e7cc429611194cf0bb66463d26a82dd118cbbd3f1040dca2f5f82ac5eb5df41a4658fcb34b68066c5708a4a16c48fd290b32e392e7f5b662f4e3fa2d79a814f52824cf737872604672bdaf80fc527deb1f690339c92b6c6c6c8635de5a2e1a7ff617d0f1c11bc3a3504d0de94d77678025ab5bea511d783df148e58b0793251db3b7b9e03bb201be89d5939c0a60ab548460d543d015082e00ad9d05418c327ebafbad7924aaf70e5fa6eb0be359b65ac2fbbcad495b17712e033cbf1853d1e2450ac4c8d19287074e76ca3d087d376b0f861b525d4949098dd4e3a3cc50118c8587adf6587ed9aa0352b7d812fe66bb64eb0c0f4d46822aa9c3d4848454d49b61cca24d7d6b82fafc5d8eb4e40e3665f24a95182b70b22c5f9303a49d1278f25de9855246c729fc8ba300fad799a949b9b0ce303477d22337d599d4c8441461d25725965183210a729fc59c4e5ddb45c0b9db06a09619e6009aa0653cd1e8b06d0e55c133d5022dcf91f12a21e9f977de2485f886c5133a8837987e7bc90662156b0250cc76cb03ad9fa36733ef371479ea9c1313682866b963f1f96bba8c658e2c6a10e5e29d8a07d4999b735bdef7f60326aa64fc198c3f2670fa4a44717fc613f1282fc324fd9476e6da7866cb6ce1efa8a1577088f2aa757584b8ade9f2ba34a2287870da2cc7704008b6e057eaf8bfe2fd0d6d60cf03e1751d2284c6439ee6079708451e64b1f7e7dc8400ae99e0d834a7daba6c3a8219812adff0760129e18a41eb0448c57a909714cd395933436e9ae040277f213e30ab7b6e7e3109642ffa051b3c423f6ffa7830c75d229acd617d6bc1f7948f09238f5437ff4fb302034fec1fed96c55c46c7d70d6ab3018c1a3d76120077f815fa67ec8815f44fd0cae7d1509d217a432ce904c778f201a508fdea4672e9cff797bd1d0f58d46f39396e148573ae9b2468e4ee5bd9a5abce8166333c524f0a104da2e3c99ddbc51fc6f4e7c628af79c93d0fbe61b1c4a72b11fe423597f126467a01ee6dad848f24abdfe453592f02c84e017fe553f27e639f88824d70aeeaca54758184f95f12d696291798046bb075fefd6876e8ef893f5b9340e21fc63c67feb6f03055f2f394a591164a61b1aab14c468998175b75974543e79b241dc69a6e346374dec5eebae154e36f29d17273e608ce69d539a5e4702f474bad66fbf3348f0c859bf884576faeeac754e290ec97e863526e55420da72b6b6cd209e6685ffb64e9865d00eb017c843d3c0cf3ab26f53f76316fbe009f0b2c4932b0694fecf1a148dbead458ca9f5f6d678d6c6fbd23fb6aea9e951914300eaaaf69bf35d4ce11c0349a02aa14529a083e701eac0177d4ddb305a9f9a5cf8bacd96327a161bb8b877813ea022d62bac8f0ab9eb5e9d145dda4b1fe79c0bee34c8bbfe866ba376d3a71b9809adda06e64eafaa6cf53fff8ed63e15525fd409e13b1809ae6e6e937acf858a59d2073b304171d5ab35ec92f66fbb2d4e34d46e886c3546c1026d0ff27821a15aa397dbc686540d546ea66fb43dcb9beaeadde6250cfe8e563f9033b432018c88bec07279c6a0228f3eb11031d3435d95c9c1789a5338f74aa6db2c853c87f8f2397f9067fa59774770f64b8ae42b9a07f85f1bcabbc6d3b3456a253bdb73ad3de0aa416589b722053c81db90e7b66a835d636615701e6869fef016bfaba9da0a869005ffc3174b605fdabdb8c7346262ce78a64aa7036960913edfffad202d664d1771018de43b6548a6672f48979b8e30017a93da2c093266306e09eb203fb37d7d54466fb26d4414ba88346d02d8811f100dcb0a3e50ae46247b986b928f12c1ad506c6b33b49d7e6955ae9619f73c79b72a95b053d53c4c54d36dceb8ae780b321aa41b5d61caa21a6c65329f08da522bbbb3d07501b39cc6bfbe4a2ef8054d7c57666bc805ed451517a1432b958141f3ce94752a67a17aadb41590037da8efdb251eb56de30b0e0e75adfbf4e06d4777f843a8d7c31e2ab62d98764217491d46960d67d3ee1213d150c28e75d1f440d41ffc3cf876554e2d4a354f70fce17e4c0fdc64992c32e785263ca4ffcab57d3d46d220627ed05f1628551e9843137996bc7a0b773e1ccfe5364216a8003757ffdc052d93793a3463baf4eef5dd283826f8510bb1f20505a6e61cb3d571d0f77e67ff3c0aa5ca91f6d68c7e0d2d79c649b091b30b2911c5c47157c9c531296eba681e039eaecab83722cc2fd5b91913a463ba9f693e34da60b1adb8ee9f4a83fa67e25f19e4cd6e19ed1381cba8b5b4591109637ae1f7f29b5495fc5f8057da565d937e7577735bd98fe626ce8568897d240f054ad69c8e0ca424d1be51b17d5e639253fb2fe6791e01edcf9c4f8404233d7f98b52c31c4996b6b63112d0126036ca20cf52a2da2478683c41bfd8fb5b34de59d5e87b5075e5e1d78ad06c6a2f6e662145be3d30d140b62c49df203350ea4412c97aaeec7aaa00d81b89f3b7295607840de2a8386f52012b5c4e6e0e1986565bc4f99b6bc10f3a2ab59783a8b9f3c696f741af0f51b6592c68ddff861fc7d2b16876b05a54eae9ec0e170fbf26d9358941c6cba50a5c41e77f72c7f41e0bbf6023f04f7701f676a64cb63ea1a8d373ee6a99ba56449699ccdf8a11dc7d840d695cd5ef987f74e5b16594cc8c6c2251c47b429281b6e34c0288c7242052ac3c9c63213f6ddb08726001e0afe1fb312d463db8722f1617972dc7f365de498027ef0b5c6d100e583348cd777a2afbfd60ef59969c8f88358b6995c177a7d7e69d86b11e36f42bae8c9af599d3f828447c31004000163bb74ef20f656f6a1c8159bd0f867f2e283c10656a40a397b2e514c19efb5d5a5f54316509801bd8208a2c84b2ef13e54d7b8af8787b826b50095a15e33a5e8e306454312a83af7869b7ba0039ca601751b580a9190435d35a8ce9d8e9558ca1bcea3cc3604f4e991aee79fd0d2393b9f87e8dac7782e837e1de5e88a7c79385a2b14556041f49c1113df43efd8aea14c4b651d713fc9989b2fd77ce13a98efef5e83cc6843d313117753d82870c5efec8cc6fd855ab6e0fc6d48c66874fdcb2d007db7fbb9371da3836eb23da1106283a20e32617bcaba574b7b6298d48334eaeef905ff348c2bfbc1c83a88d6915b644d1854161ab4f1d1db12e74de2853e48d1a10f9835c226bca6944d0de6a18e0e07df45ad72a7d354045a6997ffdee010e37091a3a5280e5db8aeea0245217a6f1160a6287d9a28c0eeabaebe755b9485da5b7ccb85166ed902e63200e5e8ac464124bef0196eddee6cfe90fce770b416817e1ca78494786bdaeafa3538841f74bbdb2585d63f667ef227287efa56c030c0999e9ead590f1ce383a138233235494ecec0aed97c803b4d7c4fb80ac9a3bcb1dd2bab51382a94195bee034c3f3d3d9efc44add83ec580a5cfe8f5942b1694b0ab3ef4b2d9f7c0b8634b056c6b6eeb946be1825fa452abdbc1545cd94774abed3fdc2b0399929298221030f6cd0a2b38490f5e4bfd53ee20de10eeb2ffacca980d40e0885cb91c94a4d81a61d863efd0f7a12da233e1dacf7af728950892ef887abcc5e4d08c6b57834a1e5dd1dfc69418fc681b47d8cd34c6a3846b0e1afdc7c7f9033ff817a72ac617c0a1e59e4e6ea40bd668c499f221c5f63700e74b68ba3045b4460f0fa60308cf8964d95237d888d5c1b1be0fa7bd2703eaeb0d2914b8d22cbd8693c16f21bb72566f38aa97e86f212557d40e10b285e1d4de0b153c8f91e168e9d0031bb7ee7fec5f0c3fbf15bc6fbceeae6dd363b7e9835b175b0be16a3348a2c2d07468449fbb2fcfca9e7d8b72b623355715a6a1edc87ea4c699ffeacb2277fbb5658a1eb12d0a7a93bf100ab11cf49b35c16a14044ac8e5bd69af05b252325f0eca41f90681b4a1ec399096939a96685926655a0c4d172d06646c87f35b65c0d7654882b79838f78c35febbdb378f9f28d7e6ba1c1fa191bbcdbf991731f546439a966e4f7a15c77367161bde14b731c9f2b91114fa46e02e70f07d3c40988e8140866ed3dcd98ef5524700deb75c1a6414016da0ce6845e936a8692b7beac01bc855a72a490c667c3b755ffaaa57af54af1bd07ae7b203be85f3653aa63cc5ae10f6e585c7bd8a5257604e82fad6c7be6f1a47eb665c1422c03d3263f351671a48bd5eed22077b8c16e706f009880941c29b90c29a11ef008a371b29200f32523b9847d911fab4ee1468bf98a49ff73703e2d9d7bbf6ae37459c3cb502541f304e1d5918518a06225b65f3b38b91f8e0b49a29ef9aacca369ce5cf8b45738e29118ab06078b885189acf4d0a5200b86cb2269dde90dfada27975dbe6ded12232c0faf7ea12ecacbdf416cff8632e48346478a75c0279c1920b7556fc6670704d5d97912c75d3a9cffe6891abdf747a6850ba7d9668e56c7e7ecc03c5c388e886bc984c8bfd9f470b7e4ea4d146c3c28e4f8ff82b9558266343036e6239a26f567f7633911ccc51522c29ff3ca36ad5b8cfd6ec1c86ae08f30d87a503c909e66dc278e9d14f3fae4bfa4813f315b1610ed76fc149d92f319044e813c3769d4978637e0ee732d3bb86e9fa584181f41d4304c07a1cb71d10f07da649288275a213eff161c536c7366d4c010cf9a4b1c2f2940607dc7468e51204c6983c554d616d48f93ae51e6a7769b3285785ae7bcba3cfb27879df1d7f1f18849a70814eb51df6d1d8cbe80b736cb38326f7db7a06e49cd4fe41b3f7a9156cfac9222ac23d13765e7f2910a365fb23a208f192cfca97b2b8a3de44a2d90d3c865bec109f4bdfb1d37216cf5f71a27c39a83b5562b0c06d76b46b2d8f5b15cb1765d6c78d065d24bedf72405dcb8e795fe183196a6b620f918a2dd7fdfac142aa653fd431ec153e3daac8f615a45b3a0d665d5fe36efb6e2f18b8399429e4f363748eddd5cd2a637e9a0a553fac6d05a3e2bd1b26f2f99433f8f59a3691417a4f35ff7d46a22e39e94641d942706850cb2843ff4a34122e37dcc8224ae9f6ab7f64ff4a0bcb0aaff2f429e4f0f5fcf90ab6a2c45e8f2408d9bbd4f60d6b01a0cf527895e1cd063b178b8973930b9488d81d3f0f7985b900d0a894c29642b809ef39294bfaaa5401f5ed50cbb91a047b60ad54b323a2f2ada04d19d6dbda02e0f22d4d6520f9db2263181c97c9bb74dd8a90adedc80bfd064eb103f67d02ea17571f870c779470bb6460c658da4c502b9a10c8050fc26ad5cc1ae1eb02f0d703d05b48f48ab8c9f9a1bd000181ccf929d45544b44e9a3cd0bcd412ad639323283ed229e5486a2a93babb165880a0a7329834bb51a0631cba5caa30637ca3f07074051c608b7c7170c8c415c2eb88bd6a798bd86953ff71052506ccf0e2357deff6cef24de5b7f68a17082c08d096e43fbe727ab0ab1aa27a703ccd58168039e50dce2d400ed7f2a217c1eea7b29455fbf910d36db324d1c6b53343a78484883ad100a0b5b28c74ab6296df5bf8048fb916e8ddda0ded3f5b08d262b9b1cb1ecb149c02a21490ebebe8856c844d448d2a3878dcc930c3c88d9addf73917e9d3f878fb12fba3e602cfde199a0e69eab56e3d4ffa01135b3145baa613be01f0b94af5bd3b8b432339c954f52b8551fd13790bc1ee18be226b819d8001a3da8e097f84c166e4002e4c1043d3a3721f05105cd17a278b9509d7a04826e8a5b4956bbf976ffb4857fd88da99cfea8d2e0a1c4f52f71f87cbee8c02fbf59b12bdaccb67d0b95f0a56693eafafeefce1953d708b56532ed5bbe12626a3d041c031b48a47b34c504f7dd57e21147b920c058385ddc8cbea5332086c269b0d5c2439f30fa431f88d1a10e25eba0df70d8617ecd5546314ffeae9c4baab872ab82a45eeaf0e1e1533e8a6189c324f31b652aeadc52981b66161313999c5a7bd7c79ef4ee55c7cb00ebd9637ffe01924508a44ab72ab16b70b8b815ce7d27772db315122f4a5a7679af5ac685c26320a71cdd8066b19f749705e2e35d1d9166ecb066053dd05a759270e119944cf99b918cb5e4e6c931031ae2eeffe349ac246c92174091c687c58879e1f05c43b010f7ec3f204c106cf60740b0bc2d355f57bbaec7d060dedab9aebaa4094e72ebffbf61cdfb7d69fbd146daea59339fa83c19c5f75b866af5e7f387740e675e1e2ba29c261d9e7237c6e9ef1b39a8fdacb44de0eaff5f4f9e3e42b75d0a37834eab0cf47acf65e882f0962e01982e783c0dae7efbc95dccb235562e5a2e04fd2b4b43388c0292e6e8198c6df0348920d6e1c8acdd2e892d3f7aef7703824dbb08695642f0e444ade6c4f1ec1e267feb5135cccd50fcde643acb66dbd18f507496957ced435e0db0a8e8441a8e2ebc365f995c32399f7d180b6faeb85ee1921b95f82f3194bed7d157e842257d2da26dfac90f32fb53147e48e232d5115f1cd12b45c55330b29775ab776599afa504b7fe114cd7fb3ab4eb6c30becb82f448b284b20010bea918019af99b2a9ccab1585aec19fd1abe8365a6023f96dddf1a37cce2734bb6585143729850bcd811787bd07cb5fdd57cc987f9278b7f5ef3c7529a9b6d20d18cc4446f1036cf7635da6732986c38df4785e2e428f14b84957319772bdbb7d2d2d20321e522b1ec6c807f3a3f575643d4b71e1bbd1e843b5816aa68900298f5058c65a9fe1022978a44a77bde2b99e221de97cd7fa6a2ea440220bac20e3e4c1e4224958aca15681d3a18f74218114c3e5eefa1fc16de8c07f1d1297b0e772d05f205337175c1dbe88dfc876dcfce367304afac68c41b98ed2ba3f04fd1b37db27dd5d9c9aafaeadfcc44585908ea655ffce1fc2516b060256777e8953e2a6861ec4460034691aed001ea2971627615fc7972773d6a8c343117bae3fc68cfd1f187c478c0f52e86b118c65c39848a8c582ed908fb1242ad3455288cc858e52e119d368e00783c2b8c2916ba564a3501326baefe1dcadac8b4b8b666f20a3a245ca171b43af", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x1, 0x1, 0x20000000, 0x7, 0xfffffffd, 0x5, {0xffffffffffffffff, 0x2, 0x7, 0x0, 0x48, 0x1, 0x4, 0x0, 0xd6, 0x8000, 0x0, r2, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f000000bdc0)="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", 0x2000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00') 8.001968665s ago: executing program 0 (id=1017): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = getpid() capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) 7.9630461s ago: executing program 2 (id=1018): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_connect(0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 6.689458183s ago: executing program 1 (id=1019): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) 6.49484819s ago: executing program 0 (id=1020): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000006000000000000000000850000000f000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0xffff, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x0, 0x0) ptrace$cont(0x1f, r1, 0x16d, 0x0) 6.425403842s ago: executing program 1 (id=1021): open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 6.138101401s ago: executing program 1 (id=1022): socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pselect6(0x40, &(0x7f0000000000)={0x300, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) 6.094624818s ago: executing program 2 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) mount$9p_fd(0x0, 0x0, &(0x7f0000000280), 0x800400, &(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYBLOB="3a86e341f09a3d", @ANYRESHEX=r7, @ANYRES32=r0, @ANYBLOB="c13b7d4c00c82254ceef8bccbbc06c3939c3d0e937d033bfadc5ee74c797a41bca9b2a5db6a6b6e6ce884c43f4a7b7cb2025d6dd26180462a9bb74ccb1a4b3c7d9dc35a6fbf649da9f7239150209079d74ea0c762f779925ead2e2aca02ef3a6f993bac1bb3ffd9fdd1683e48a5c319872e5c24146efa12d43c064b8b27e3a4a"]) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000100)={0xc, "5639f5bb08000000c26ebe7d9a7b0d5100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000001c0)={0x80000, "340b7832ceefdad118cf501922d6974a270000c50f00c3002ddc7d000000c400", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000000c0)={"2c24139ed44aec57f2b94e1a8a7b448ed886923c31d4b8affbf514fd00", r10}) close_range(r4, 0xffffffffffffffff, 0x0) syz_clone(0xa082c000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.963598245s ago: executing program 2 (id=1024): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @private=0xa010101}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x40000000000000b3}}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0xffbf) 4.79650634s ago: executing program 0 (id=1025): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) unshare(0x22020600) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x1000000000000000) 3.200350277s ago: executing program 0 (id=1027): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2.780168422s ago: executing program 6 (id=1031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001140)=""/102392, 0x18ff8) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 2.730160441s ago: executing program 1 (id=1032): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="aefd", 0x2}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r3]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) 1.180451896s ago: executing program 1 (id=1033): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=@newlink={0x28, 0x10, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x20000, 0x100}, [@IFLA_MTU={0x8, 0x4, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8d0}, 0x4008050) 1.058809732s ago: executing program 6 (id=1034): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz0\x00', {0x7, 0x5731, 0x9, 0x80}, 0x47, [0xffff, 0x8, 0xa64, 0x6, 0xff, 0x8001, 0x4, 0x14, 0xfffffffb, 0xffffffff, 0xa97, 0xef8, 0xb, 0x2, 0x1, 0x10, 0x1, 0xff, 0xa7, 0x8, 0x9, 0x6, 0x1, 0x8, 0x3, 0x47, 0x5, 0xf, 0xa, 0x6, 0x4, 0x5, 0x1aab, 0x4, 0x1, 0x8, 0x66d, 0x8220, 0x6, 0x3, 0xfffffff8, 0x100, 0xfff80000, 0x200, 0x8001, 0x3, 0x4, 0x4, 0x6, 0xd, 0x4, 0x9, 0x7fffffff, 0x8, 0x5, 0x8001, 0xffff, 0x3, 0x5, 0x3, 0x8, 0x9, 0x3, 0x5], [0x7, 0x90ec, 0x5, 0x401, 0x1, 0x800080, 0x8, 0xc, 0xfffffc01, 0x2, 0xe3a, 0x0, 0x1000008, 0x7, 0x9, 0x45, 0x4, 0x9, 0xffffffff, 0x5, 0x7, 0x4, 0x3, 0x1, 0x5, 0x0, 0x7fffffff, 0x2, 0x0, 0x5, 0x5, 0x9, 0x9, 0x0, 0x7f, 0x9, 0x9, 0x0, 0x2, 0x2, 0x9, 0x5, 0x3, 0x4, 0x7fffffff, 0x200, 0xfffffffb, 0x10000, 0x7, 0xfff, 0xfffffffc, 0x2, 0x4, 0x99fc, 0x8, 0x7, 0x6, 0x7, 0x4, 0x5, 0xffff, 0x9, 0x3, 0x5], [0x0, 0xfffffffa, 0x740, 0x1, 0x7b42, 0xf56, 0x0, 0x6, 0x4, 0x6, 0x3, 0x8, 0x1000000, 0x101, 0x9, 0x0, 0x400, 0x1, 0x2, 0x24, 0xf, 0xfffff917, 0x6, 0x6, 0xfff, 0xfffffff7, 0x7, 0xfff, 0x67e, 0x1ff, 0x7ff, 0xd, 0x58f, 0xd, 0x7, 0x9, 0x100, 0x5, 0x8, 0x9, 0x5, 0x5, 0x401, 0x0, 0x5, 0x6, 0x9, 0x1, 0x10, 0x400, 0x800, 0x10001, 0x5, 0x2, 0x6, 0x405a4788, 0xc8e, 0x1, 0x8ee5, 0x86c, 0x8, 0x5, 0x0, 0x6], [0x7, 0xe67, 0x1, 0x6, 0xfffffffa, 0x1, 0x2, 0x5, 0x5, 0x1000, 0x1e, 0x5, 0x8, 0x7, 0x0, 0x1ff, 0x80000001, 0x400, 0xfffffff9, 0xa8f, 0x7, 0x2, 0x8, 0x2, 0x2, 0x200, 0x3, 0x6, 0x5, 0x81, 0x1, 0x5, 0x9, 0x4, 0x7, 0xb, 0x2, 0x80000001, 0x9, 0xd, 0x2, 0x8000, 0x3, 0x16, 0x7fff, 0x5, 0xffff8000, 0x7fff, 0x101, 0x0, 0xa, 0x8, 0x7fff, 0x4, 0x9695, 0x1, 0x5, 0x8, 0x1, 0xfffff801, 0x80, 0x9e4, 0x8, 0x6d0]}, 0x45c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a848", 0x19, 0x0, &(0x7f0000000140), 0x14) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0xa4000608) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) 954.167736ms ago: executing program 2 (id=1035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000000a40)="8231"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 919.622692ms ago: executing program 1 (id=1036): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d40)=""/4096, 0x1000}], 0x1}, 0x1ff}], 0x1, 0x40000003, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 909.098304ms ago: executing program 6 (id=1037): openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)) 790.198658ms ago: executing program 6 (id=1038): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000ac0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f870c0000002a90000709f7be0083"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000180)={0x5, 0x11, 0xf5d, 0x28, "c400523a6f2d960fce66e2e7aadce2988b5ec056b7577f87586a324b565ffcbb"}) 224.272787ms ago: executing program 6 (id=1039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x2000001f, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x4, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x2, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x8, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xfd}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x4c4, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0xffff, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0xc, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0xd3ff, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x2, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9, 0x6}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x80000000, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x18, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f2}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x10001, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x4000007, 0x69a0, 0x10, 0x1001}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x9}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0xfffffffb, 0x2}, {0x1, 0x4, 0xfffff000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x9, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x2, 0x6d3, 0x29}, {0x6, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x2, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x5, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x4, 0x10001, 0xce7, 0xec, 0x1000}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 29.4776ms ago: executing program 6 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 2 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) kernel console output (not intermixed with test programs): meout [ 211.925112][ T7677] program syz.2.406 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.503511][ T7614] chnl_net:caif_netlink_parms(): no params data found [ 213.720186][ T7616] chnl_net:caif_netlink_parms(): no params data found [ 213.873328][ T2971] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.896926][ T5835] Bluetooth: hci3: command tx timeout [ 213.914029][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.921845][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.933549][ T7614] bridge_slave_0: entered allmulticast mode [ 213.958020][ T7614] bridge_slave_0: entered promiscuous mode [ 214.000843][ T2971] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.055162][ T5835] Bluetooth: hci4: command tx timeout [ 214.055317][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.075314][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.084255][ T7614] bridge_slave_1: entered allmulticast mode [ 214.092588][ T7614] bridge_slave_1: entered promiscuous mode [ 215.571657][ T2971] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.683367][ T7711] tc_dump_action: action bad kind [ 215.755286][ T2971] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.934170][ T7616] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.949688][ T7616] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.957081][ T7616] bridge_slave_0: entered allmulticast mode [ 215.977080][ T7616] bridge_slave_0: entered promiscuous mode [ 215.998669][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.016527][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.040330][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.052354][ T7616] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.061639][ T7616] bridge_slave_1: entered allmulticast mode [ 216.072889][ T7616] bridge_slave_1: entered promiscuous mode [ 216.099931][ T5835] Bluetooth: hci3: command tx timeout [ 216.134228][ T7614] team0: Port device team_slave_0 added [ 216.272815][ T5835] Bluetooth: hci4: command tx timeout [ 216.364227][ T7614] team0: Port device team_slave_1 added [ 216.616186][ T7616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.750691][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 216.750710][ T30] audit: type=1804 audit(1746113898.294:185): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.418" name="/newroot/123/file1" dev="fuse" ino=1 res=1 errno=0 [ 216.847308][ T30] audit: type=1800 audit(1746113898.332:186): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.418" name="/" dev="fuse" ino=1 res=0 errno=0 [ 216.923871][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.930864][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.979667][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.043552][ T7616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.087841][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.142714][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.364070][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.990168][ T7616] team0: Port device team_slave_0 added [ 218.086718][ T30] audit: type=1804 audit(1746113899.539:187): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.421" name="/newroot/125/file1" dev="fuse" ino=1 res=1 errno=0 [ 218.176646][ T7614] hsr_slave_0: entered promiscuous mode [ 218.183350][ T7614] hsr_slave_1: entered promiscuous mode [ 218.237446][ T30] audit: type=1800 audit(1746113899.576:188): pid=7744 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.421" name="/" dev="fuse" ino=1 res=0 errno=0 [ 218.281945][ T7616] team0: Port device team_slave_1 added [ 218.860306][ T2971] bridge_slave_1: left allmulticast mode [ 218.900488][ T2971] bridge_slave_1: left promiscuous mode [ 218.906419][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.996474][ T2971] bridge_slave_0: left allmulticast mode [ 219.002180][ T2971] bridge_slave_0: left promiscuous mode [ 219.035607][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.532754][ T7721] Set syz1 is full, maxelem 65536 reached [ 219.840073][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.851345][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.862463][ T2971] bond0 (unregistering): Released all slaves [ 219.883230][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.892514][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.920740][ T7616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.018301][ T7616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.026269][ T7616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.054361][ T7616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.213061][ T7616] hsr_slave_0: entered promiscuous mode [ 220.224307][ T7616] hsr_slave_1: entered promiscuous mode [ 220.233643][ T7616] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.242094][ T7616] Cannot create hsr debugfs directory [ 221.517922][ T2971] hsr_slave_0: left promiscuous mode [ 221.551476][ T2971] hsr_slave_1: left promiscuous mode [ 221.561707][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.580151][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.601825][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.623578][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.678991][ T2971] veth1_macvtap: left promiscuous mode [ 221.688672][ T2971] veth0_macvtap: left promiscuous mode [ 221.712117][ T2971] veth1_vlan: left promiscuous mode [ 221.717548][ T2971] veth0_vlan: left promiscuous mode [ 224.023293][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 224.125345][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 224.680754][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.1.430'. [ 227.136417][ T7616] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 227.237234][ T7616] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 227.268388][ T7616] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 227.349001][ T7616] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 227.456974][ T7865] tipc: Enabled bearer , priority 0 [ 227.598987][ T7865] syzkaller0: entered promiscuous mode [ 227.605177][ T7865] syzkaller0: entered allmulticast mode [ 227.611690][ T7865] tipc: Resetting bearer [ 227.637232][ T7614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 227.650260][ T7614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 227.684974][ T7864] tipc: Resetting bearer [ 229.719285][ T5831] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 229.915430][ T5831] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 229.935934][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.954572][ T5831] usb 2-1: Product: syz [ 229.966988][ T5831] usb 2-1: Manufacturer: syz [ 229.975946][ T5831] usb 2-1: SerialNumber: syz [ 229.999427][ T5831] usb 2-1: config 0 descriptor?? [ 230.023752][ T5831] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 232.409977][ T5863] usb 2-1: USB disconnect, device number 10 [ 233.514019][ T7864] tipc: Disabling bearer [ 233.540403][ T7614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.565389][ T7614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.704556][ T7616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.797403][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.032687][ T7616] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.083318][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.094851][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.102001][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.132516][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.139754][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.228830][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.236042][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.839130][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.846427][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.120403][ T7616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.233054][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.267867][ T7616] veth0_vlan: entered promiscuous mode [ 241.352832][ T7616] veth1_vlan: entered promiscuous mode [ 241.506339][ T7616] veth0_macvtap: entered promiscuous mode [ 241.583137][ T7616] veth1_macvtap: entered promiscuous mode [ 241.622631][ T7614] veth0_vlan: entered promiscuous mode [ 241.668044][ T7614] veth1_vlan: entered promiscuous mode [ 241.737278][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.767708][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.942672][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.953774][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.968141][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.049549][ T30] audit: type=1326 audit(1746113921.960:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8053 comm="syz.2.472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x0 [ 242.070539][ C0] vkms_vblank_simulate: vblank timer overrun [ 242.643483][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.791703][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.875775][ T7614] veth0_macvtap: entered promiscuous mode [ 242.926823][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.951663][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.970420][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.981008][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.991334][ T7616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.002464][ T7616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.019782][ T7616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.068536][ T7614] veth1_macvtap: entered promiscuous mode [ 243.128228][ T7616] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.149118][ T7616] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.160196][ T7616] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.169345][ T7616] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.426925][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.645662][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.663534][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.674617][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.684564][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.695605][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.707024][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.717825][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.741094][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.785005][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.811364][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.821381][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.831940][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.847929][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.858621][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.010039][ T7614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.021336][ T7614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.042915][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.726719][ T7614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.847574][ T7614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.856587][ T7614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.909652][ T7614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.031312][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.082125][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.041059][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.097624][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.280487][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.308639][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.451274][ T6349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.502594][ T6349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.219637][ T1324] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.450176][ T1324] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.600138][ T1324] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.727797][ T1324] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.027439][ T1324] bridge_slave_1: left allmulticast mode [ 250.069963][ T1324] bridge_slave_1: left promiscuous mode [ 250.143030][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.627635][ T1324] bridge_slave_0: left allmulticast mode [ 250.725245][ T1324] bridge_slave_0: left promiscuous mode [ 250.844773][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.263313][ T8153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'. [ 251.280564][ T8153] netlink: 'syz.2.486': attribute type 7 has an invalid length. [ 251.496232][ T8153] netlink: 'syz.2.486': attribute type 8 has an invalid length. [ 252.018756][ T8153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.486'. [ 253.882545][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.897316][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.920835][ T1324] bond0 (unregistering): Released all slaves [ 253.963698][ T8153] ip6gretap0: entered promiscuous mode [ 253.973252][ T8153] syz_tun: entered promiscuous mode [ 253.989576][ T8153] gretap0: entered promiscuous mode [ 254.056253][ T8163] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.082171][ T8163] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.102486][ T8163] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.152451][ T8163] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 254.200929][ T8163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 254.402611][ T8163] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 256.448704][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 256.454778][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.460897][ T5130] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.467032][ T5130] Bluetooth: hci4: command 0x0c1a tx timeout [ 256.685430][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.695782][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.704023][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.713594][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.721315][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.702171][ T5130] Bluetooth: hci4: command 0x0c1a tx timeout [ 258.837054][ T1324] hsr_slave_0: left promiscuous mode [ 259.034951][ T5130] Bluetooth: hci3: command tx timeout [ 259.068545][ T1324] hsr_slave_1: left promiscuous mode [ 259.217323][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.231695][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.883364][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.416267][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.483500][ T1324] veth1_macvtap: left promiscuous mode [ 260.647040][ T1324] veth0_macvtap: left promiscuous mode [ 260.652796][ T1324] veth1_vlan: left promiscuous mode [ 260.658261][ T1324] veth0_vlan: left promiscuous mode [ 260.939112][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 261.256308][ T55] Bluetooth: hci3: command 0x041b tx timeout [ 263.833875][ T5130] Bluetooth: hci3: command 0x041b tx timeout [ 264.854857][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.861424][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.947556][ T5831] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 265.128955][ T5831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.139578][ T5831] usb 2-1: config 0 has no interfaces? [ 265.144027][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 265.145147][ T5831] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 265.164631][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.185968][ T5831] usb 2-1: config 0 descriptor?? [ 265.211298][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 265.445664][ T5873] usb 2-1: USB disconnect, device number 11 [ 266.055326][ T5130] Bluetooth: hci3: command 0x041b tx timeout [ 267.314448][ T8170] chnl_net:caif_netlink_parms(): no params data found [ 268.724895][ T5130] Bluetooth: hci3: command 0x041b tx timeout [ 269.861570][ T8170] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.878358][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.895066][ T5130] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 269.909935][ T8170] bridge_slave_0: entered allmulticast mode [ 269.957472][ T8297] syz.2.516 (8297): /proc/8292/oom_adj is deprecated, please use /proc/8292/oom_score_adj instead. [ 269.998152][ T8170] bridge_slave_0: entered promiscuous mode [ 270.065077][ T8170] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.330027][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.368343][ T8170] bridge_slave_1: entered allmulticast mode [ 271.779772][ T8170] bridge_slave_1: entered promiscuous mode [ 271.813387][ T8311] netlink: 'syz.6.518': attribute type 4 has an invalid length. [ 272.141731][ T8170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.187676][ T8170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.421811][ T8170] team0: Port device team_slave_0 added [ 273.933141][ T8170] team0: Port device team_slave_1 added [ 274.997128][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.011037][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.064162][ T8170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.111585][ T8170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.139144][ T8170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.227835][ T8170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.363560][ T8170] hsr_slave_0: entered promiscuous mode [ 276.370300][ T8170] hsr_slave_1: entered promiscuous mode [ 281.073356][ T30] audit: type=1326 audit(1746113958.450:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 281.141024][ T30] audit: type=1326 audit(1746113958.450:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 281.193515][ T8170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.256832][ T8170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.352261][ T8170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.394412][ T30] audit: type=1326 audit(1746113958.450:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 281.416647][ T30] audit: type=1326 audit(1746113958.450:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 281.438579][ T30] audit: type=1326 audit(1746113958.450:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 281.479734][ T30] audit: type=1326 audit(1746113958.469:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 281.547888][ T8170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.207076][ T30] audit: type=1326 audit(1746113958.469:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 282.434429][ T30] audit: type=1326 audit(1746113958.469:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6959f90887 code=0x7ffc0000 [ 282.832663][ T30] audit: type=1326 audit(1746113958.469:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6959f907fc code=0x7ffc0000 [ 283.137541][ T30] audit: type=1326 audit(1746113958.469:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8402 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6959f90734 code=0x7ffc0000 [ 284.478568][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.127692][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.141328][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.148517][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.226993][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.234322][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.317033][ T8442] loop6: detected capacity change from 0 to 524287999 [ 286.775270][ T8459] team_slave_0: entered promiscuous mode [ 286.781305][ T8459] team_slave_1: entered promiscuous mode [ 286.870576][ T8459] vlan2: entered promiscuous mode [ 286.892463][ T8459] team0: entered promiscuous mode [ 287.758811][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.491874][ T8496] random: crng reseeded on system resumption [ 292.444721][ T8170] veth0_vlan: entered promiscuous mode [ 292.457334][ T8170] veth1_vlan: entered promiscuous mode [ 292.675070][ T8170] veth0_macvtap: entered promiscuous mode [ 292.696526][ T8170] veth1_macvtap: entered promiscuous mode [ 293.416096][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.427169][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.437150][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.537221][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.573069][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.590564][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.608593][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.817483][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.850482][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.860402][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.871747][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.882055][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.892814][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.429159][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.440816][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.451461][ T8170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.462358][ T8170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.475250][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.859476][ T8170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.873287][ T8170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.890983][ T8170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.899908][ T8170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.742710][ T8534] netfs: Couldn't get user pages (rc=-14) [ 296.874667][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.919586][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.094565][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.118464][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.894664][ T8545] netlink: 'syz.0.570': attribute type 4 has an invalid length. [ 298.990077][ T8548] mmap: syz.2.571 (8548) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 299.029855][ T8548] netlink: 'syz.2.571': attribute type 4 has an invalid length. [ 302.714508][ T8576] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 304.058710][ T8585] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 305.411734][ T6349] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.661403][ T6349] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.797886][ T6349] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.910586][ T8607] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 305.919685][ T8607] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 305.977671][ T6349] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.257923][ T6349] bridge_slave_1: left allmulticast mode [ 306.263649][ T6349] bridge_slave_1: left promiscuous mode [ 306.289089][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.301454][ T6349] bridge_slave_0: left allmulticast mode [ 306.308152][ T6349] bridge_slave_0: left promiscuous mode [ 306.313972][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.873265][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 306.873286][ T30] audit: type=1400 audit(1746113982.565:210): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=8615 comm="syz.1.585" path="socket:[23960]" dev="sockfs" ino=23960 [ 308.974378][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.987820][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.003236][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.025214][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.036679][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 312.720581][ T5130] Bluetooth: hci3: command tx timeout [ 313.448440][ T6349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.579450][ T6349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.596295][ T6349] bond0 (unregistering): Released all slaves [ 313.827263][ T8664] lo speed is unknown, defaulting to 1000 [ 313.834309][ T8664] lo speed is unknown, defaulting to 1000 [ 313.842786][ T8664] lo speed is unknown, defaulting to 1000 [ 313.859534][ T8664] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 313.878223][ T8664] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 313.917215][ T8664] lo speed is unknown, defaulting to 1000 [ 313.925465][ T8664] lo speed is unknown, defaulting to 1000 [ 313.934742][ T8664] lo speed is unknown, defaulting to 1000 [ 313.943428][ T8664] lo speed is unknown, defaulting to 1000 [ 313.953955][ T8664] lo speed is unknown, defaulting to 1000 [ 313.978520][ T8664] lo speed is unknown, defaulting to 1000 [ 314.821213][ T8673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.000772][ T5130] Bluetooth: hci3: command tx timeout [ 316.856800][ T6349] hsr_slave_0: left promiscuous mode [ 316.879164][ T6349] hsr_slave_1: left promiscuous mode [ 317.189848][ T5130] Bluetooth: hci3: command tx timeout [ 317.586862][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.594326][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.615328][ T6349] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.623129][ T6349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.646447][ T6349] veth1_macvtap: left promiscuous mode [ 317.652174][ T6349] veth0_macvtap: left promiscuous mode [ 317.657851][ T6349] veth1_vlan: left promiscuous mode [ 317.663261][ T6349] veth0_vlan: left promiscuous mode [ 319.426312][ T5130] Bluetooth: hci3: command tx timeout [ 320.553054][ T6349] team0 (unregistering): Port device team_slave_1 removed [ 320.597794][ T6349] team0 (unregistering): Port device team_slave_0 removed [ 321.467080][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 321.529435][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 321.552191][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 322.359294][ T8723] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 322.718804][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.610'. [ 322.741317][ T8732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.610'. [ 323.379538][ T8732] netlink: 48 bytes leftover after parsing attributes in process `syz.6.610'. [ 323.395024][ T8634] chnl_net:caif_netlink_parms(): no params data found [ 323.530440][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 323.582256][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 323.705306][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 323.712432][ T8634] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.732468][ T8634] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.739767][ T8634] bridge_slave_0: entered allmulticast mode [ 323.759743][ T8634] bridge_slave_0: entered promiscuous mode [ 323.777968][ T8634] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.786834][ T8634] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.794156][ T8634] bridge_slave_1: entered allmulticast mode [ 323.832912][ T8634] bridge_slave_1: entered promiscuous mode [ 323.840701][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 323.881656][ T8723] hsr0 speed is unknown, defaulting to 1000 [ 323.928983][ T8634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.952699][ T8634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.956898][ T5873] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 324.076321][ T8634] team0: Port device team_slave_0 added [ 324.098419][ T8634] team0: Port device team_slave_1 added [ 324.142957][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.167990][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.188192][ T5873] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 324.209572][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.235176][ T5873] usb 3-1: config 0 descriptor?? [ 324.401956][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.428055][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.466975][ T8634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.480862][ T30] audit: type=1804 audit(1746113999.065:211): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.616" name="/newroot/152/file0" dev="tmpfs" ino=821 res=1 errno=0 [ 324.502356][ T8634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.509365][ T8634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.560872][ T8747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.644371][ T8634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.230316][ T5873] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 325.279605][ T5873] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 325.589149][ T5873] cp2112 0003:10C4:EA90.0006: error requesting version [ 326.840857][ T8634] hsr_slave_0: entered promiscuous mode [ 326.847696][ T8634] hsr_slave_1: entered promiscuous mode [ 326.873029][ T5873] cp2112 0003:10C4:EA90.0006: probe with driver cp2112 failed with error -71 [ 326.889960][ T5873] usb 3-1: USB disconnect, device number 11 [ 330.695769][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.702167][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 335.758430][ T5874] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 335.846395][ T8634] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 335.871159][ T8634] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 336.648899][ T8634] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 336.664244][ T5874] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 336.673588][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.682011][ T5874] usb 7-1: Product: syz [ 336.686220][ T5874] usb 7-1: Manufacturer: syz [ 336.691651][ T5874] usb 7-1: SerialNumber: syz [ 336.701539][ T5874] usb 7-1: config 0 descriptor?? [ 337.843237][ T8634] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.976932][ T5874] usb 7-1: USB disconnect, device number 2 [ 340.428034][ T8634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.503018][ T8634] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.806405][ T6051] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.813627][ T6051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.131794][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.139000][ T6349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.622380][ T8927] qnx4: no qnx4 filesystem (no root dir). [ 345.632818][ T8927] ubi: mtd0 is already attached to ubi31 [ 345.706961][ T8634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.858085][ T5891] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 346.710683][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 346.727820][ T5891] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.738936][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.745602][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 346.762203][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.823446][ T5891] usb 2-1: config 0 descriptor?? [ 350.000362][ T8974] usb 2-1: USB disconnect, device number 12 [ 350.134652][ T8975] hub 2-0:1.0: USB hub found [ 350.143074][ T8975] hub 2-0:1.0: 1 port detected [ 350.661895][ T5874] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 352.040399][ T8634] veth0_vlan: entered promiscuous mode [ 352.054765][ T8634] veth1_vlan: entered promiscuous mode [ 352.085373][ T8634] veth0_macvtap: entered promiscuous mode [ 352.122447][ T8634] veth1_macvtap: entered promiscuous mode [ 354.068774][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.200801][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.210681][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.401922][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.491120][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.545956][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.565707][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.679134][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.789956][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.309949][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.394383][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.425606][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.473495][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.512056][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.688547][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.311540][ T8634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.322102][ T8634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.333746][ T8634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.346673][ T8634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.382601][ T8634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.552482][ T8634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.906174][ T8634] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.532441][ T9038] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 360.378585][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.469785][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.814372][ T6051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.822948][ T6051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.267729][ T9111] netlink: 'syz.6.676': attribute type 2 has an invalid length. [ 367.570296][ T64] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.793824][ T9126] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.855760][ T9111] : entered promiscuous mode [ 367.961230][ T9116] mkiss: ax0: crc mode is auto. [ 368.026005][ T64] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.140539][ T64] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.257770][ T64] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.423804][ T64] bridge_slave_1: left allmulticast mode [ 368.429534][ T64] bridge_slave_1: left promiscuous mode [ 368.438559][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.457233][ T64] bridge_slave_0: left allmulticast mode [ 368.468563][ T64] bridge_slave_0: left promiscuous mode [ 368.476915][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.036446][ T9155] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 372.280956][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.318984][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 372.332041][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 372.340635][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 372.350177][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 372.358120][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 372.410092][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.447211][ T64] bond0 (unregistering): Released all slaves [ 373.725257][ T9169] lo speed is unknown, defaulting to 1000 [ 373.734471][ T9169] hsr0 speed is unknown, defaulting to 1000 [ 373.829733][ T9185] xt_policy: too many policy elements [ 373.960563][ T9185] netlink: 'syz.6.685': attribute type 4 has an invalid length. [ 374.707826][ T5130] Bluetooth: hci3: command tx timeout [ 376.289043][ T30] audit: type=1326 audit(359.862:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9192 comm="syz.6.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff20ef8e969 code=0x0 [ 376.309378][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.618053][ T9193] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 376.786637][ T64] hsr_slave_0: left promiscuous mode [ 376.795920][ T64] hsr_slave_1: left promiscuous mode [ 376.804062][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.811717][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.845798][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.853283][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.886122][ T5130] Bluetooth: hci3: command tx timeout [ 377.751402][ T64] veth1_macvtap: left promiscuous mode [ 377.778784][ T64] veth0_macvtap: left promiscuous mode [ 377.799944][ T64] veth1_vlan: left promiscuous mode [ 377.821477][ T64] veth0_vlan: left promiscuous mode [ 379.156343][ T5130] Bluetooth: hci3: command tx timeout [ 381.410561][ T5130] Bluetooth: hci3: command tx timeout [ 383.839983][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 384.461474][ T9247] random: crng reseeded on system resumption [ 388.869586][ T64] team0 (unregistering): Port device team_slave_1 removed [ 388.911309][ T64] team0 (unregistering): Port device team_slave_0 removed [ 389.062800][ T5918] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 389.236448][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 389.251375][ T5918] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 389.261877][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.280274][ T5918] usb 2-1: config 0 descriptor?? [ 389.286200][ T9270] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 389.440856][ T9268] netlink: 44 bytes leftover after parsing attributes in process `syz.6.704'. [ 389.727511][ T24] usb 3-1: device descriptor read/all, error -71 [ 390.205152][ T5918] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 392.254366][ T5918] usb 2-1: reset full-speed USB device number 14 using dummy_hcd [ 393.214126][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 393.831031][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 393.840062][ T9307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.711'. [ 394.742448][ T5891] usb 2-1: USB disconnect, device number 14 [ 396.220278][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.238401][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.307056][ T9333] use of bytesused == 0 is deprecated and will be removed in the future, [ 396.316114][ T9333] use the actual size instead. [ 399.443307][ T5918] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 400.696473][ T5918] usb 7-1: config 0 has no interfaces? [ 400.944616][ T9356] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.958907][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.057519][ T5918] usb 7-1: New USB device found, idVendor=ac09, idProduct=0a0f, bcdDevice= c.3e [ 401.070679][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.077942][ T9169] bridge_slave_0: entered allmulticast mode [ 401.093389][ T5918] usb 7-1: New USB device strings: Mfr=199, Product=92, SerialNumber=3 [ 401.120024][ T5918] usb 7-1: Product: syz [ 401.132428][ T5918] usb 7-1: Manufacturer: syz [ 401.159117][ T5918] usb 7-1: SerialNumber: syz [ 401.181031][ T5918] usb 7-1: config 0 descriptor?? [ 401.210201][ T9169] bridge_slave_0: entered promiscuous mode [ 402.084569][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.091843][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.103961][ T9169] bridge_slave_1: entered allmulticast mode [ 402.112390][ T9169] bridge_slave_1: entered promiscuous mode [ 402.850426][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 403.241276][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.261609][ T9379] Device name cannot be null; rc = [-22] [ 403.320932][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.933855][ T9169] team0: Port device team_slave_0 added [ 404.978817][ T9169] team0: Port device team_slave_1 added [ 405.752276][ T5918] usb 7-1: can't set config #0, error -71 [ 405.938706][ T5918] usb 7-1: USB disconnect, device number 3 [ 406.881157][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.911652][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.097780][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.209972][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.225191][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.251163][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.537722][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.638446][ T9169] hsr_slave_0: entered promiscuous mode [ 409.678448][ T9169] hsr_slave_1: entered promiscuous mode [ 409.859152][ T9432] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 409.865713][ T9432] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 410.721694][ T9432] vhci_hcd vhci_hcd.0: Device attached [ 411.218866][ T9432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 411.251154][ T9440] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 411.257819][ T9440] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 411.378856][ T5831] vhci_hcd: vhci_device speed not set [ 411.439756][ T9440] vhci_hcd vhci_hcd.0: Device attached [ 411.476794][ T9432] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 411.483461][ T9432] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 411.508641][ T9432] vhci_hcd vhci_hcd.0: Device attached [ 411.697710][ T5831] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 411.887840][ T9452] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(12) [ 411.894507][ T9452] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.952132][ T9440] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(20) [ 411.958808][ T9440] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 411.963424][ T9456] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.025459][ T9452] vhci_hcd vhci_hcd.0: Device attached [ 412.044841][ T9440] vhci_hcd vhci_hcd.0: Device attached [ 412.057365][ T9432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.076055][ T9432] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 412.087006][ T9467] syz_tun: entered allmulticast mode [ 413.110637][ T9455] vhci_hcd: connection closed [ 413.114749][ T9453] vhci_hcd: connection closed [ 413.124157][ T64] vhci_hcd: stop threads [ 413.148512][ T9441] vhci_hcd: connection closed [ 413.149120][ T9434] vhci_hcd: connection reset by peer [ 413.160020][ T9449] vhci_hcd: connection closed [ 413.160619][ T64] vhci_hcd: release socket [ 413.204243][ T64] vhci_hcd: disconnect device [ 413.245139][ T64] vhci_hcd: stop threads [ 413.249456][ T64] vhci_hcd: release socket [ 413.265001][ T64] vhci_hcd: disconnect device [ 413.277371][ T64] vhci_hcd: stop threads [ 413.303705][ T64] vhci_hcd: release socket [ 413.308238][ T64] vhci_hcd: disconnect device [ 413.348887][ T64] vhci_hcd: stop threads [ 413.362480][ T5873] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 413.370168][ T64] vhci_hcd: release socket [ 413.384927][ T64] vhci_hcd: disconnect device [ 413.448998][ T64] vhci_hcd: stop threads [ 413.454544][ T64] vhci_hcd: release socket [ 413.495541][ T64] vhci_hcd: disconnect device [ 413.555688][ T5873] usb 7-1: Using ep0 maxpacket: 16 [ 413.586651][ T5873] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 413.810799][ T5873] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 413.821178][ T5873] usb 7-1: config 0 interface 0 has no altsetting 0 [ 413.830754][ T5873] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 413.847577][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.859062][ T5873] usb 7-1: Product: syz [ 413.865106][ T5873] usb 7-1: Manufacturer: syz [ 413.869979][ T5873] usb 7-1: SerialNumber: syz [ 413.947918][ T5873] usb 7-1: config 0 descriptor?? [ 414.921311][ T9460] syz_tun: left allmulticast mode [ 414.944284][ T5873] usb 7-1: USB disconnect, device number 4 [ 415.079903][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 415.435557][ T9169] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.606791][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 416.214924][ T9169] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.288481][ T9169] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 417.469048][ T9169] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.659971][ T5831] vhci_hcd: vhci_device speed not set [ 418.073405][ T9516] veth0_vlan: entered allmulticast mode [ 418.465202][ T5873] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 419.574723][ T59] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 419.656123][ T5873] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 419.664078][ T5873] usb 2-1: can't read configurations, error -71 [ 420.510123][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.043625][ T59] usb 7-1: device not accepting address 5, error -71 [ 421.195706][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.883220][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.890435][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.938648][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.6.752'. [ 421.948450][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.752'. [ 421.979330][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.986520][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.358871][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 427.009575][ T9601] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 428.876579][ T9611] netlink: 'syz.0.764': attribute type 9 has an invalid length. [ 429.103212][ T30] audit: type=1326 audit(409.111:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 429.606995][ T30] audit: type=1326 audit(409.111:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 429.627887][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.728850][ T30] audit: type=1326 audit(409.111:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 429.772640][ T30] audit: type=1326 audit(409.111:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 429.819922][ T9617] pimreg: entered allmulticast mode [ 430.036739][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.043801][ T30] audit: type=1326 audit(409.111:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 430.114589][ T30] audit: type=1326 audit(409.111:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 430.184558][ T30] audit: type=1326 audit(409.111:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 430.545595][ T30] audit: type=1326 audit(409.111:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6959f8e969 code=0x7ffc0000 [ 430.717892][ T30] audit: type=1326 audit(409.111:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6959f90887 code=0x7ffc0000 [ 430.862949][ T5874] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 431.035065][ T59] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 431.053535][ T30] audit: type=1326 audit(409.111:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.2.763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6959f907fc code=0x7ffc0000 [ 431.167947][ T5874] usb 3-1: config 0 has no interfaces? [ 431.209156][ T5874] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 431.254139][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.281760][ T5874] usb 3-1: Product: syz [ 431.298671][ T5874] usb 3-1: Manufacturer: syz [ 431.311939][ T59] usb 7-1: Using ep0 maxpacket: 8 [ 431.329333][ T5874] usb 3-1: SerialNumber: syz [ 431.372792][ T59] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.416001][ T59] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.460417][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.486662][ T5874] usb 3-1: config 0 descriptor?? [ 431.657762][ T59] usb 7-1: config 0 descriptor?? [ 433.796306][ T59] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 435.206150][ T9657] netlink: 'syz.1.770': attribute type 10 has an invalid length. [ 435.215469][ T9657] netlink: 40 bytes leftover after parsing attributes in process `syz.1.770'. [ 435.750973][ T9657] geneve0: entered promiscuous mode [ 435.764653][ T9657] team0: Port device geneve0 added [ 437.571208][ T9668] block device autoloading is deprecated and will be removed. [ 438.031886][ T5874] usb 3-1: USB disconnect, device number 14 [ 438.440970][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 439.632946][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 439.649684][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 440.052404][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 440.070163][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 440.080328][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 443.072006][ T5130] Bluetooth: hci3: command tx timeout [ 443.179540][ T5873] usb 7-1: USB disconnect, device number 7 [ 443.406056][ T9689] lo speed is unknown, defaulting to 1000 [ 443.627033][ T9725] overlayfs: overlapping lowerdir path [ 443.677107][ T9726] overlayfs: overlapping lowerdir path [ 443.736985][ T9727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 443.746306][ T9727] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 443.753929][ T9727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.595700][ T999] Bluetooth: hci5: Frame reassembly failed (-84) [ 444.614346][ T999] Bluetooth: hci5: Frame reassembly failed (-84) [ 444.763471][ T5918] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 444.980610][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.422129][ T55] Bluetooth: hci3: command tx timeout [ 445.486842][ T5918] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.531838][ T5918] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.607310][ T12] bridge_slave_1: left allmulticast mode [ 445.608233][ T5918] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.624045][ T12] bridge_slave_1: left promiscuous mode [ 445.630481][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.654329][ T12] bridge_slave_0: left allmulticast mode [ 445.660563][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.674178][ T12] bridge_slave_0: left promiscuous mode [ 445.690678][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.706762][ T5918] usb 7-1: config 0 descriptor?? [ 446.227353][ T5918] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 446.258791][ T5918] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 447.071179][ T55] Bluetooth: hci5: command 0x1003 tx timeout [ 447.184610][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 447.191254][ T9756] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 447.516294][ T5918] usb 7-1: USB disconnect, device number 8 [ 447.721143][ T55] Bluetooth: hci3: command tx timeout [ 447.727890][ T5130] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 451.764658][ T5130] Bluetooth: hci3: command tx timeout [ 452.907887][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 452.916393][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 452.926475][ T5130] Bluetooth: hci1: hardware error 0x00 [ 458.327531][ T5130] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 458.954963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.840414][ T9804] netlink: 124 bytes leftover after parsing attributes in process `syz.2.793'. [ 459.880126][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.908563][ T12] bond0 (unregistering): Released all slaves [ 460.208687][ T5831] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 461.895817][ T9818] input: syz0 as /devices/virtual/input/input17 [ 461.926553][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.944962][ T9827] xt_hashlimit: overflow, rate too high: 0 [ 461.955440][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.963832][ T9697] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 462.008438][ T12] hsr_slave_0: left promiscuous mode [ 462.585061][ T12] hsr_slave_1: left promiscuous mode [ 462.615542][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.636606][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.067005][ T9844] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 466.124019][ T5831] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 466.140028][ T5831] usb 7-1: can't read configurations, error -71 [ 466.259647][ T9697] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 466.269449][ T9697] Bluetooth: hci0: Injecting HCI hardware error event [ 466.278865][ T9697] Bluetooth: hci0: hardware error 0x00 [ 467.042606][ T9871] netlink: 'syz.6.806': attribute type 7 has an invalid length. [ 467.160902][ T9875] 9pnet_virtio: no channels available for device ./cgroup [ 467.521342][ T9879] trusted_key: syz.1.808 sent an empty control message without MSG_MORE. [ 468.008488][ T9882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.809'. [ 468.374037][ T12] team0 (unregistering): Port device team_slave_1 removed [ 468.483853][ T9697] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 468.594620][ T12] team0 (unregistering): Port device team_slave_0 removed [ 474.056892][ T9689] chnl_net:caif_netlink_parms(): no params data found [ 474.666891][ T9916] : renamed from bond_slave_0 (while UP) [ 476.405714][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 476.406320][ T30] audit: type=1800 audit(453.393:232): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.819" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 476.541029][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.562974][ T9689] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.601927][ T9689] bridge_slave_0: entered allmulticast mode [ 476.634192][ T9689] bridge_slave_0: entered promiscuous mode [ 476.947941][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.161373][ T9689] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.172602][ T9689] bridge_slave_1: entered allmulticast mode [ 477.186439][ T9689] bridge_slave_1: entered promiscuous mode [ 478.190198][ T9958] loop7: detected capacity change from 0 to 16384 [ 479.402561][ T9974] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 479.520709][ T9689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.599482][ T9689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.811521][ T9980] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.837403][ T9980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 479.843587][ T9980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.854653][ T9689] team0: Port device team_slave_0 added [ 479.895242][ T9689] team0: Port device team_slave_1 added [ 479.911974][ T9980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 479.950307][ T9980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 480.072003][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.082757][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.129368][ T9689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.347080][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.354201][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.413179][ T9689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.857228][ T9697] Bluetooth: hci2: command 0x0c1a tx timeout [ 482.589903][ T9697] Bluetooth: hci3: command 0x0c1a tx timeout [ 482.596247][ T9697] Bluetooth: hci4: command 0x0c1a tx timeout [ 483.256675][T10018] lo speed is unknown, defaulting to 1000 [ 483.449726][ T9689] hsr_slave_0: entered promiscuous mode [ 483.505663][ T9689] hsr_slave_1: entered promiscuous mode [ 484.822380][ T5130] Bluetooth: hci3: command 0x0c1a tx timeout [ 486.518252][T10056] orangefs_mount: mount request failed with -4 [ 486.940479][T10065] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 486.948868][T10065] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 486.959084][T10065] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 487.867653][T10086] usb usb1: usbfs: process 10086 (syz.6.848) did not claim interface 0 before use [ 487.932532][ T9689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.971497][ T9689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 488.007027][ T9689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 488.041613][ T9689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 488.346280][ T5831] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 489.131714][ T5130] Bluetooth: hci2: command 0x0c1a tx timeout [ 489.142907][ T9697] Bluetooth: hci4: command 0x0c1a tx timeout [ 489.163022][ T5831] usb 7-1: Using ep0 maxpacket: 16 [ 489.180961][ T5831] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.191319][ T5130] Bluetooth: hci3: command 0x0c1a tx timeout [ 489.198217][ T5831] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 489.209013][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.217609][ T5831] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 489.227631][ T5831] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.241581][ T5831] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.254873][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.262910][ T5831] usb 7-1: Product: syz [ 489.274830][ T5831] usb 7-1: Manufacturer: syz [ 489.287307][ T5831] usb 7-1: SerialNumber: syz [ 489.335103][ T9689] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.377311][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.377465][ T6349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.400670][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.400761][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.526872][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.6.848'. [ 490.010693][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.747543][ T9689] veth0_vlan: entered promiscuous mode [ 490.769379][ T9689] veth1_vlan: entered promiscuous mode [ 491.535022][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 491.647107][ T9689] veth0_macvtap: entered promiscuous mode [ 491.679142][ T5831] usb 7-1: USB disconnect, device number 11 [ 491.691613][ T9689] veth1_macvtap: entered promiscuous mode [ 491.735340][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 491.778334][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.829373][ T9912] udevd[9912]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 491.852848][ T5874] usb 2-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 491.871504][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.882519][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.900410][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.914952][ T5874] usb 2-1: config 0 descriptor?? [ 491.927028][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.970525][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.995763][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.012873][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.041723][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.054764][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.067927][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.080726][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.091633][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.102489][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.138449][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.160362][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.178708][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.189146][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.200357][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.433621][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.468301][ T9689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.477490][ T9689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.487757][ T9689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.500808][ T9689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.642799][ T5874] usb 2-1: string descriptor 0 read error: -71 [ 492.664333][ T5874] uclogic 0003:5543:006E.000A: failed retrieving string descriptor #200: -71 [ 492.695161][ T5874] uclogic 0003:5543:006E.000A: failed retrieving pen parameters: -71 [ 492.705862][ T5874] uclogic 0003:5543:006E.000A: failed probing pen v2 parameters: -71 [ 492.723278][ T5874] uclogic 0003:5543:006E.000A: failed probing parameters: -71 [ 492.733743][ T5874] uclogic 0003:5543:006E.000A: probe with driver uclogic failed with error -71 [ 492.780182][ T5874] usb 2-1: USB disconnect, device number 17 [ 492.901486][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.909448][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.974357][T10168] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 493.014940][T10168] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 493.033843][ T9227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.045485][T10168] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 493.053341][ T9227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.301385][ T5874] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 494.728855][ T5874] usb 3-1: Using ep0 maxpacket: 8 [ 494.732739][ T5874] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 494.732772][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 494.732799][ T5874] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 494.732824][ T5874] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 494.732867][ T5874] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 494.732892][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.979295][ T5874] usb 3-1: GET_CAPABILITIES returned 0 [ 495.013370][ T5874] usbtmc 3-1:16.0: can't read capabilities [ 495.304133][ T52] usb 3-1: USB disconnect, device number 15 [ 495.494595][ T999] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.531775][T10192] sch_fq: defrate 2147483648 ignored. [ 495.975091][ T999] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.048348][ T999] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.158962][ T999] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.376890][ T999] bridge_slave_1: left allmulticast mode [ 496.382612][ T999] bridge_slave_1: left promiscuous mode [ 496.393159][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.405143][ T999] bridge_slave_0: left allmulticast mode [ 496.414178][ T999] bridge_slave_0: left promiscuous mode [ 496.423424][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.028346][T10243] vivid-000: disconnect [ 497.079760][T10233] vivid-000: reconnect [ 500.093282][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.204960][ T9697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 500.215784][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.225044][ T9697] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 500.238509][ T9697] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 500.251070][ T9697] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 500.260767][ T9697] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 500.281208][ T999] bond0 (unregistering): Released all slaves [ 500.301278][T10251] vxcan1: entered allmulticast mode [ 500.320113][T10261] vxcan1: left allmulticast mode [ 500.816591][T10272] lo speed is unknown, defaulting to 1000 [ 501.188946][T10293] sctp: [Deprecated]: syz.2.896 (pid 10293) Use of int in max_burst socket option deprecated. [ 501.188946][T10293] Use struct sctp_assoc_value instead [ 502.503312][ T9697] Bluetooth: hci3: command tx timeout [ 502.735400][T10308] team0: Port device virt_wifi0 added [ 502.798424][T10308] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 502.853567][T10308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 503.805514][ T999] hsr_slave_0: left promiscuous mode [ 503.823007][ T999] hsr_slave_1: left promiscuous mode [ 503.834661][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.860035][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.879118][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.899158][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.977135][ T999] veth1_macvtap: left promiscuous mode [ 503.982940][ T999] veth0_macvtap: left promiscuous mode [ 504.000631][ T999] veth1_vlan: left promiscuous mode [ 504.006033][ T999] veth0_vlan: left promiscuous mode [ 504.200635][ T5891] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 504.383165][ T5891] usb 7-1: Using ep0 maxpacket: 8 [ 504.394069][ T5891] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 504.402403][ T5891] usb 7-1: config 179 has no interface number 0 [ 504.444211][ T5891] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 504.455601][ T5891] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 504.482732][ T5891] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.505051][ T5891] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 504.534000][ T5891] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 504.543237][ T5891] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.568801][T10332] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 504.666126][ T9697] Bluetooth: hci3: command tx timeout [ 504.912099][ T59] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 504.925886][ T5891] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input22 [ 505.051385][ T5891] usb 7-1: USB disconnect, device number 12 [ 505.051464][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 505.051517][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 505.078871][ T5891] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 505.098674][ T59] usb 3-1: Using ep0 maxpacket: 8 [ 505.127643][ T59] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 505.147900][ T59] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 505.161178][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 48, changing to 9 [ 505.173853][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24624, setting to 1024 [ 505.186208][ T59] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 505.215614][ T999] team0 (unregistering): Port device team_slave_1 removed [ 505.235738][ T59] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 505.245092][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 505.256534][ T59] usb 3-1: Product: syz [ 505.264083][ T59] usb 3-1: Manufacturer: syz [ 505.268816][ T59] usb 3-1: SerialNumber: syz [ 505.288627][ T59] usb 3-1: config 0 descriptor?? [ 505.295927][ T999] team0 (unregistering): Port device team_slave_0 removed [ 505.510904][ T59] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 505.519686][ T59] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 505.725335][ T59] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 505.740112][ T59] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 505.936631][ T59] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 505.953142][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 505.960747][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 505.967533][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 505.974196][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 505.980872][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 505.987528][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 505.994184][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.000909][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.007562][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.014212][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.020883][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.027532][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.034602][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.041276][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.048021][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.054785][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.061457][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.069141][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.075844][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.082524][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.089182][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.095855][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.102496][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.109242][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.115920][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.122583][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.129222][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.135858][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.142525][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.149168][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.155851][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.162514][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.169166][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.176759][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.183410][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.190059][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.196706][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.203353][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.209999][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.216658][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.223297][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.229949][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.237244][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.243909][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.250546][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.257286][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.263961][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.270607][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.277257][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.283894][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.291665][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.298336][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.304984][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.311639][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.318284][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.324981][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.331714][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.338363][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.345011][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.351699][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.358361][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.365033][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.371765][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.378455][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.385113][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.391761][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.399133][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.407327][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.413988][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.421006][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.428208][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.434861][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.441518][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.448211][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.454874][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.461560][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.468252][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.474904][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.481611][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.488313][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.495013][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.501665][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.509393][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.516058][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.522749][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.529442][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.536108][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.542775][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.549428][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.556077][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.562745][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.569406][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.576073][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.582794][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.591116][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.598059][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.604727][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.611414][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.619032][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.625681][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.632441][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.639109][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.645802][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.652496][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.659089][ T59] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 506.667528][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.674361][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.680995][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.687576][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.694700][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.701616][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.708243][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.714944][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.721508][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.728102][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.736271][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.743163][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.749929][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.756497][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.763053][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.769631][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.776176][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.782773][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.789354][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.795901][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.802971][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.809720][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.816265][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.822902][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.829549][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.836141][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.844416][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.850999][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.857571][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.864144][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.870709][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.877355][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.883922][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.884130][ T9697] Bluetooth: hci3: command tx timeout [ 506.890638][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.902849][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.909529][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.916206][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.922947][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.929773][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.936459][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.948406][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.955559][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.962269][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.969072][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.975796][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.982455][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.989111][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 506.995760][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.002440][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.009200][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.015887][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.022551][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.029268][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.035955][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.042654][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.049377][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.065837][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.073070][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.079726][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.086554][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.093280][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.099965][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.106626][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.113336][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.120001][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.126716][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.133380][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.140110][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.146776][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.153492][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.160975][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.172236][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.178991][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.185635][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.192288][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.198984][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.205629][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.212286][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.218950][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.223061][T10272] chnl_net:caif_netlink_parms(): no params data found [ 507.225573][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.247049][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.253789][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.260449][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.267073][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.278540][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.285668][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.292365][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.299009][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.305714][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.312378][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.319118][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.325770][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.332430][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.339161][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.345834][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.352579][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.359236][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.366334][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.374474][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.386682][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.393831][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.400565][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.407226][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.413920][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.420580][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.427257][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.433944][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.440604][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.447241][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.453880][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.460841][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.468504][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.475512][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.482192][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.493562][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.500742][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.507502][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.514259][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.520954][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.527651][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.534311][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.540975][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.547637][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.554312][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.561163][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.567837][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.574532][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.581227][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.587925][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.594591][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.610868][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.621639][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.631820][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.642493][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.649523][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.663318][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.674585][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.681445][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.688098][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.694769][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.701431][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.717734][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.724889][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.737513][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.744461][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.751164][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.751389][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.751611][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.751831][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.752047][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.752263][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.752494][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.752714][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.752936][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.753156][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.753374][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.753591][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.753818][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.754029][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.754243][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.754454][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.754669][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.754888][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.755101][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.755308][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.755522][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.755736][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.755959][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.756167][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.756374][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.756595][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.756803][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.757019][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.757239][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.757455][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.757669][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.757887][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.758104][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.758320][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.758538][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.758756][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.758987][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 507.997894][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.005566][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.012221][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.018894][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.025529][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.032195][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.039851][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.046712][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.053339][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.059978][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.066648][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.074587][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.081244][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 508.089305][ T59] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 508.103830][ T59] usb 3-1: USB disconnect, device number 16 [ 508.512473][T10272] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.570279][T10272] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.784212][T10272] bridge_slave_0: entered allmulticast mode [ 509.065145][ T5874] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 509.087192][T10272] bridge_slave_0: entered promiscuous mode [ 509.107813][ T9697] Bluetooth: hci3: command tx timeout [ 509.127834][T10272] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.140065][T10272] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.147343][T10272] bridge_slave_1: entered allmulticast mode [ 509.159025][T10272] bridge_slave_1: entered promiscuous mode [ 509.272666][T10272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.293691][ T5874] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 509.310514][ T5874] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.333629][T10272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.353409][ T5874] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 509.396052][ T5874] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 509.431978][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.482613][ T5874] usb 7-1: config 0 descriptor?? [ 509.521710][T10272] team0: Port device team_slave_0 added [ 509.572558][T10272] team0: Port device team_slave_1 added [ 509.879521][T10272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.897424][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.954518][T10272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.959109][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 509.993751][T10272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.003577][T10272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.016107][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 510.054175][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 510.061964][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 510.069571][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 510.077232][T10272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.083008][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 510.119340][ T5874] holtek_kbd 0003:04D9:A055.000B: unknown main item tag 0x0 [ 510.168251][ T5874] holtek_kbd 0003:04D9:A055.000B: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.6-1/input0 [ 510.237679][ T5874] usb 7-1: USB disconnect, device number 13 [ 510.356889][T10272] hsr_slave_0: entered promiscuous mode [ 510.391543][T10272] hsr_slave_1: entered promiscuous mode [ 510.657236][T10434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.716800][ T5874] IPVS: starting estimator thread 0... [ 511.898039][T10462] IPVS: using max 25 ests per chain, 60000 per kthread [ 512.349868][T10272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.370527][T10272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.395125][T10272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 512.427465][T10272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 512.483604][T10481] syz_tun: entered allmulticast mode [ 512.510010][T10480] syz_tun: left allmulticast mode [ 512.748112][T10272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.783705][ T30] audit: type=1326 audit(487.516:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326f8e969 code=0x7ffc0000 [ 512.832326][T10272] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.880236][ T30] audit: type=1326 audit(487.525:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f2326f8e969 code=0x7ffc0000 [ 512.903515][ T30] audit: type=1326 audit(487.525:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326f8e969 code=0x7ffc0000 [ 512.915116][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.925165][ T5918] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 512.931560][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.961622][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.968815][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.982525][ T30] audit: type=1326 audit(487.525:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.1.942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2326f8e969 code=0x7ffc0000 [ 513.081396][T10272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.116632][ T59] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 513.162807][ T5918] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 513.172580][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.192171][ T5918] usb 3-1: Product: syz [ 513.201951][ T5918] usb 3-1: Manufacturer: syz [ 513.206605][ T5918] usb 3-1: SerialNumber: syz [ 513.245798][ T5918] usb 3-1: config 0 descriptor?? [ 513.279289][ T5918] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 017 [ 513.281819][ T59] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 513.322832][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.353071][ T59] usb 7-1: config 0 descriptor?? [ 513.699178][ T5918] (null): failure reading functionality [ 513.769016][ T5918] i2c i2c-1: connected i2c-tiny-usb device [ 514.370236][T10272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.378280][ T5918] usb 3-1: USB disconnect, device number 17 [ 514.557904][ T59] usb 7-1: Cannot set autoneg [ 514.568672][ T59] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 514.596856][ T59] usb 7-1: USB disconnect, device number 14 [ 515.883153][ T5918] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 515.903237][T10555] loop9: detected capacity change from 0 to 7 [ 515.930080][T10272] veth0_vlan: entered promiscuous mode [ 515.934606][T10555] Dev loop9: unable to read RDB block 7 [ 515.954738][T10272] veth1_vlan: entered promiscuous mode [ 515.958113][T10555] loop9: unable to read partition table [ 515.980743][T10555] loop9: partition table beyond EOD, truncated [ 516.004009][T10555] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 516.049059][T10272] veth0_macvtap: entered promiscuous mode [ 516.065005][T10272] veth1_macvtap: entered promiscuous mode [ 516.079224][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 516.116846][ T5918] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 516.153350][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.169723][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.184887][ T5918] usb 3-1: Product: syz [ 516.189104][ T5918] usb 3-1: Manufacturer: syz [ 516.204999][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.220669][ T5918] usb 3-1: SerialNumber: syz [ 516.230149][ T5918] usb 3-1: config 0 descriptor?? [ 516.247997][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.274331][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.323060][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.341509][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.353549][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.366084][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.412259][T10272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.499231][ T5918] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 516.516706][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.555033][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.587768][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.617043][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.659499][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.686695][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.697146][T10272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.740507][T10272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.776324][T10272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.820123][T10272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.850756][T10272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.878747][T10272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.910295][T10272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.569342][ T5918] gspca_sunplus: reg_w_riv err -71 [ 517.580314][ T5918] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 517.605086][ T5918] usb 3-1: USB disconnect, device number 18 [ 518.671556][ T9227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.714078][ T9227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.856654][ T9101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.875947][ T9101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.732433][T10654] overlayfs: upper fs does not support tmpfile. [ 520.903594][ T2971] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.105144][ T2971] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.222510][ T2971] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.346959][ T2971] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.586188][ T2971] bridge_slave_1: left allmulticast mode [ 521.591913][ T2971] bridge_slave_1: left promiscuous mode [ 521.598292][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.614982][ T2971] bridge_slave_0: left allmulticast mode [ 521.622030][ T2971] bridge_slave_0: left promiscuous mode [ 521.630230][ T2971] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.004958][ T2971] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.015962][ T2971] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.026575][ T2971] bond0 (unregistering): Released all slaves [ 522.283154][ T2971] hsr_slave_0: left promiscuous mode [ 522.289649][ T2971] hsr_slave_1: left promiscuous mode [ 522.295772][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.313550][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.322799][ T2971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.330260][ T2971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.443492][ T2971] veth1_macvtap: left promiscuous mode [ 522.459148][ T2971] veth0_macvtap: left promiscuous mode [ 522.475326][ T2971] veth1_vlan: left promiscuous mode [ 522.481014][ T2971] veth0_vlan: left promiscuous mode [ 524.234678][ T5891] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 524.427219][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 524.437480][ T5891] usb 3-1: config 0 has no interfaces? [ 524.449913][ T5891] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 524.471893][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.488865][ T5891] usb 3-1: Product: syz [ 524.497914][ T5891] usb 3-1: Manufacturer: syz [ 524.508752][ T5891] usb 3-1: SerialNumber: syz [ 524.526385][ T5891] usb 3-1: config 0 descriptor?? [ 524.594673][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 524.620892][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 524.629943][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 524.639249][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 524.655427][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 524.773884][ T5831] usb 3-1: USB disconnect, device number 19 [ 524.969790][ T2971] team0 (unregistering): Port device team_slave_1 removed [ 525.027186][ T2971] team0 (unregistering): Port device team_slave_0 removed [ 525.577431][T10716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.668825][T10720] lo speed is unknown, defaulting to 1000 [ 526.840459][T10720] chnl_net:caif_netlink_parms(): no params data found [ 527.026166][ T9697] Bluetooth: hci3: command tx timeout [ 527.589632][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 527.596207][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.768381][T10776] overlayfs: failed to clone upperpath [ 527.912006][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.928718][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.940118][T10720] bridge_slave_0: entered allmulticast mode [ 527.948048][T10720] bridge_slave_0: entered promiscuous mode [ 527.958113][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.967899][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.982922][T10720] bridge_slave_1: entered allmulticast mode [ 527.989053][ T5891] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 528.003400][T10720] bridge_slave_1: entered promiscuous mode [ 528.134439][T10720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.164030][T10720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.191791][ T5891] usb 3-1: config index 0 descriptor too short (expected 36, got 21) [ 528.212484][ T5891] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 528.233336][ T5891] usb 3-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 528.274435][ T5891] usb 3-1: config 0 interface 0 has no altsetting 0 [ 528.291429][ T5891] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 528.313531][T10720] team0: Port device team_slave_0 added [ 528.319555][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.341905][T10720] team0: Port device team_slave_1 added [ 528.358855][ T5891] usb 3-1: config 0 descriptor?? [ 528.379058][ T5891] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 528.486756][T10720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.494529][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.533544][T10720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.550312][T10720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.559876][T10720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.590099][T10720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.625784][T10777] loop8: detected capacity change from 0 to 7 [ 528.655974][T10777] Dev loop8: unable to read RDB block 7 [ 528.668326][T10777] loop8: unable to read partition table [ 528.681394][T10777] loop8: partition table beyond EOD, truncated [ 528.694884][T10777] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 528.694884][T10777] ) failed (rc=-5) [ 528.748209][ T5875] usb 3-1: USB disconnect, device number 20 [ 528.764883][T10720] hsr_slave_0: entered promiscuous mode [ 528.782738][T10720] hsr_slave_1: entered promiscuous mode [ 528.959261][T10810] fuse: Bad value for 'fd' [ 528.970889][ T5918] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 529.174555][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 529.200996][ T5918] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.211772][ T9697] Bluetooth: hci3: command tx timeout [ 529.227549][ T5918] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.250843][ T5918] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.262243][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.281137][ T5918] usb 2-1: Product: syz [ 529.311463][ T5918] usb 2-1: Manufacturer: syz [ 529.350744][ T5918] usb 2-1: SerialNumber: syz [ 530.835358][T10841] fuse: root generation should be zero [ 530.835556][ T5918] usb 2-1: 0:2 : does not exist [ 530.872909][ T5918] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 530.944794][ T5918] usb 2-1: USB disconnect, device number 18 [ 531.170832][T10273] udevd[10273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.451357][ T9697] Bluetooth: hci3: command tx timeout [ 532.639824][T10720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 532.671401][T10720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 532.700437][T10720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 532.756360][T10720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 533.772045][ T9697] Bluetooth: hci3: command tx timeout [ 533.927203][T10720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.983989][T10720] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.024828][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.032091][ T9227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.076905][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.084149][ T9227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.290026][T10884] syzkaller0: entered promiscuous mode [ 534.303706][T10884] syzkaller0: entered allmulticast mode [ 534.359506][T10720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.100782][T10913] overlayfs: failed to clone upperpath [ 536.524346][ T5831] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 536.695015][ T5831] usb 2-1: Using ep0 maxpacket: 8 [ 536.705299][ T5831] usb 2-1: config 0 has no interfaces? [ 536.714672][ T5831] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.725609][ T5831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.763736][ T5831] usb 2-1: config 0 descriptor?? [ 537.018836][T10917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.028152][T10917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.158372][ T5918] usb 2-1: USB disconnect, device number 19 [ 538.150535][T10720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 538.368949][T10720] veth0_vlan: entered promiscuous mode [ 538.382363][T10720] veth1_vlan: entered promiscuous mode [ 538.416313][T10720] veth0_macvtap: entered promiscuous mode [ 538.426270][T10720] veth1_macvtap: entered promiscuous mode [ 538.444088][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.455665][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.465628][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.477958][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.487916][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.498742][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.508706][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.522920][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.535664][T10720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.549627][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.562954][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.572913][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.583962][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.593909][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.604521][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.614693][T10720] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.625283][T10720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.636938][T10720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.649952][T10720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.658765][T10720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.667862][T10720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.676695][T10720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.825369][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.850640][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.884895][ T2971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.912373][ T2971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.972961][T10720] ================================================================== [ 538.981087][T10720] BUG: KASAN: slab-use-after-free in binder_add_device+0x5f/0xa0 [ 538.988854][T10720] Write of size 8 at addr ffff888035037808 by task syz-executor/10720 [ 538.997046][T10720] [ 538.999413][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 538.999436][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 538.999450][T10720] Call Trace: [ 538.999458][T10720] [ 538.999470][T10720] dump_stack_lvl+0x189/0x250 [ 538.999499][T10720] ? __kasan_check_byte+0x12/0x40 [ 538.999528][T10720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.999550][T10720] ? lock_release+0x4b/0x3e0 [ 538.999570][T10720] ? lock_release+0x4b/0x3e0 [ 538.999594][T10720] ? __virt_addr_valid+0x469/0x540 [ 538.999616][T10720] print_report+0xb4/0x290 [ 538.999635][T10720] ? binder_add_device+0x5f/0xa0 [ 538.999654][T10720] kasan_report+0x118/0x150 [ 538.999679][T10720] ? binder_add_device+0x5f/0xa0 [ 538.999703][T10720] binder_add_device+0x5f/0xa0 [ 538.999723][T10720] binderfs_binder_device_create+0x8b7/0xaf0 [ 538.999746][T10720] binderfs_fill_super+0xa0e/0xe90 [ 538.999772][T10720] ? __pfx_binderfs_fill_super+0x10/0x10 [ 538.999801][T10720] ? shrinker_register+0x16b/0x230 [ 538.999822][T10720] ? sget_fc+0x962/0xa40 [ 538.999850][T10720] ? __pfx_set_anon_super_fc+0x10/0x10 [ 538.999870][T10720] ? __pfx_binderfs_fill_super+0x10/0x10 [ 538.999890][T10720] get_tree_nodev+0xb8/0x150 [ 538.999911][T10720] vfs_get_tree+0x8f/0x2b0 [ 538.999936][T10720] do_new_mount+0x24a/0xa40 [ 538.999965][T10720] __se_sys_mount+0x317/0x410 [ 538.999991][T10720] ? __pfx___se_sys_mount+0x10/0x10 [ 539.000018][T10720] ? do_syscall_64+0xba/0x210 [ 539.000039][T10720] ? __x64_sys_mount+0x20/0xc0 [ 539.000066][T10720] do_syscall_64+0xf6/0x210 [ 539.000086][T10720] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.000108][T10720] ? clear_bhb_loop+0x45/0xa0 [ 539.000129][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.000146][T10720] RIP: 0033:0x7f872e99010a [ 539.000173][T10720] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.000188][T10720] RSP: 002b:00007fffcdb45f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 539.000207][T10720] RAX: ffffffffffffffda RBX: 00007f872ea10e74 RCX: 00007f872e99010a [ 539.000220][T10720] RDX: 00007f872ea208cb RSI: 00007f872ea10e74 RDI: 00007f872ea208cb [ 539.000232][T10720] RBP: 00007f872ea110bd R08: 0000000000000000 R09: 00007f872ebb6738 [ 539.000245][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f872e9ec1a8 [ 539.000255][T10720] R13: 00007f872e9ec180 R14: 0000000000000009 R15: 0000000000000000 [ 539.000272][T10720] [ 539.000278][T10720] [ 539.249903][T10720] Allocated by task 7616: [ 539.254236][T10720] kasan_save_track+0x3e/0x80 [ 539.258950][T10720] __kasan_kmalloc+0x93/0xb0 [ 539.263546][T10720] __kmalloc_cache_noprof+0x230/0x3d0 [ 539.268938][T10720] binderfs_binder_device_create+0x17f/0xaf0 [ 539.274921][T10720] binderfs_fill_super+0xa0e/0xe90 [ 539.280149][T10720] get_tree_nodev+0xb8/0x150 [ 539.284745][T10720] vfs_get_tree+0x8f/0x2b0 [ 539.289177][T10720] do_new_mount+0x24a/0xa40 [ 539.293688][T10720] __se_sys_mount+0x317/0x410 [ 539.298375][T10720] do_syscall_64+0xf6/0x210 [ 539.302880][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.308776][T10720] [ 539.311103][T10720] Freed by task 5918: [ 539.315081][T10720] kasan_save_track+0x3e/0x80 [ 539.319848][T10720] kasan_save_free_info+0x46/0x50 [ 539.324875][T10720] __kasan_slab_free+0x62/0x70 [ 539.329645][T10720] kfree+0x193/0x440 [ 539.333553][T10720] binder_proc_dec_tmpref+0x228/0x4f0 [ 539.338928][T10720] binder_deferred_func+0x13a5/0x1520 [ 539.344296][T10720] process_scheduled_works+0xadb/0x17a0 [ 539.349853][T10720] worker_thread+0x8a0/0xda0 [ 539.354455][T10720] kthread+0x70e/0x8a0 [ 539.358523][T10720] ret_from_fork+0x4b/0x80 [ 539.362941][T10720] ret_from_fork_asm+0x1a/0x30 [ 539.367715][T10720] [ 539.370039][T10720] The buggy address belongs to the object at ffff888035037800 [ 539.370039][T10720] which belongs to the cache kmalloc-512 of size 512 [ 539.384091][T10720] The buggy address is located 8 bytes inside of [ 539.384091][T10720] freed 512-byte region [ffff888035037800, ffff888035037a00) [ 539.397724][T10720] [ 539.400055][T10720] The buggy address belongs to the physical page: [ 539.406483][T10720] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888035037800 pfn:0x35034 [ 539.416556][T10720] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 539.425049][T10720] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 539.433553][T10720] page_type: f5(slab) [ 539.437536][T10720] raw: 00fff00000000240 ffff88801a041c80 ffffea0000ca1810 ffffea0001fa9610 [ 539.446116][T10720] raw: ffff888035037800 000000000010000d 00000000f5000000 0000000000000000 [ 539.454707][T10720] head: 00fff00000000240 ffff88801a041c80 ffffea0000ca1810 ffffea0001fa9610 [ 539.463382][T10720] head: ffff888035037800 000000000010000d 00000000f5000000 0000000000000000 [ 539.472061][T10720] head: 00fff00000000002 ffffea0000d40d01 00000000ffffffff 00000000ffffffff [ 539.480735][T10720] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 539.489419][T10720] page dumped because: kasan: bad access detected [ 539.495852][T10720] page_owner tracks the page as allocated [ 539.501562][T10720] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5194, tgid 5194 (udevd), ts 52742284806, free_ts 52450627447 [ 539.522312][T10720] post_alloc_hook+0x1d8/0x230 [ 539.527086][T10720] get_page_from_freelist+0x21c7/0x22a0 [ 539.532719][T10720] __alloc_frozen_pages_noprof+0x181/0x370 [ 539.538529][T10720] alloc_pages_mpol+0x232/0x4a0 [ 539.543385][T10720] allocate_slab+0x8a/0x3b0 [ 539.548030][T10720] ___slab_alloc+0xbfc/0x1480 [ 539.552722][T10720] __kmalloc_cache_noprof+0x296/0x3d0 [ 539.558111][T10720] kernfs_fop_open+0x397/0xca0 [ 539.562883][T10720] do_dentry_open+0xdf0/0x1970 [ 539.567655][T10720] vfs_open+0x3b/0x340 [ 539.571728][T10720] path_openat+0x2ee5/0x3830 [ 539.576325][T10720] do_filp_open+0x1fa/0x410 [ 539.580829][T10720] do_sys_openat2+0x121/0x1c0 [ 539.585504][T10720] __x64_sys_openat+0x138/0x170 [ 539.590360][T10720] do_syscall_64+0xf6/0x210 [ 539.594864][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.600757][T10720] page last free pid 23 tgid 23 stack trace: [ 539.606734][T10720] __free_frozen_pages+0xb05/0xcd0 [ 539.611848][T10720] rcu_core+0xca5/0x1710 [ 539.616098][T10720] handle_softirqs+0x283/0x870 [ 539.620869][T10720] run_ksoftirqd+0x9b/0x100 [ 539.625367][T10720] smpboot_thread_fn+0x53f/0xa60 [ 539.630307][T10720] kthread+0x70e/0x8a0 [ 539.634374][T10720] ret_from_fork+0x4b/0x80 [ 539.638844][T10720] ret_from_fork_asm+0x1a/0x30 [ 539.643616][T10720] [ 539.645936][T10720] Memory state around the buggy address: [ 539.651579][T10720] ffff888035037700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 539.659640][T10720] ffff888035037780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 539.667708][T10720] >ffff888035037800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 539.675770][T10720] ^ [ 539.680097][T10720] ffff888035037880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 539.688156][T10720] ffff888035037900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 539.696229][T10720] ================================================================== [ 539.753285][T10720] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 539.760564][T10720] CPU: 0 UID: 0 PID: 10720 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller-00052-g4f79eaa2ceac #0 PREEMPT(full) [ 539.772821][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 539.782973][T10720] Call Trace: [ 539.786265][T10720] [ 539.789207][T10720] dump_stack_lvl+0x99/0x250 [ 539.793822][T10720] ? __asan_memcpy+0x40/0x70 [ 539.798419][T10720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 539.803623][T10720] ? __pfx__printk+0x10/0x10 [ 539.808260][T10720] panic+0x2db/0x790 [ 539.812166][T10720] ? __pfx_preempt_schedule+0x10/0x10 [ 539.817539][T10720] ? __pfx_panic+0x10/0x10 [ 539.821966][T10720] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 539.827867][T10720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 539.834242][T10720] ? binder_add_device+0x5f/0xa0 [ 539.839186][T10720] check_panic_on_warn+0x89/0xb0 [ 539.844130][T10720] ? binder_add_device+0x5f/0xa0 [ 539.849071][T10720] end_report+0x78/0x160 [ 539.853322][T10720] kasan_report+0x129/0x150 [ 539.857839][T10720] ? binder_add_device+0x5f/0xa0 [ 539.862793][T10720] binder_add_device+0x5f/0xa0 [ 539.867565][T10720] binderfs_binder_device_create+0x8b7/0xaf0 [ 539.873553][T10720] binderfs_fill_super+0xa0e/0xe90 [ 539.878669][T10720] ? __pfx_binderfs_fill_super+0x10/0x10 [ 539.884314][T10720] ? shrinker_register+0x16b/0x230 [ 539.889429][T10720] ? sget_fc+0x962/0xa40 [ 539.893677][T10720] ? __pfx_set_anon_super_fc+0x10/0x10 [ 539.899150][T10720] ? __pfx_binderfs_fill_super+0x10/0x10 [ 539.904789][T10720] get_tree_nodev+0xb8/0x150 [ 539.909386][T10720] vfs_get_tree+0x8f/0x2b0 [ 539.913818][T10720] do_new_mount+0x24a/0xa40 [ 539.918332][T10720] __se_sys_mount+0x317/0x410 [ 539.923020][T10720] ? __pfx___se_sys_mount+0x10/0x10 [ 539.928227][T10720] ? do_syscall_64+0xba/0x210 [ 539.932909][T10720] ? __x64_sys_mount+0x20/0xc0 [ 539.937683][T10720] do_syscall_64+0xf6/0x210 [ 539.942188][T10720] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.948339][T10720] ? clear_bhb_loop+0x45/0xa0 [ 539.953022][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.958919][T10720] RIP: 0033:0x7f872e99010a [ 539.963336][T10720] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.982944][T10720] RSP: 002b:00007fffcdb45f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 539.991360][T10720] RAX: ffffffffffffffda RBX: 00007f872ea10e74 RCX: 00007f872e99010a [ 539.999333][T10720] RDX: 00007f872ea208cb RSI: 00007f872ea10e74 RDI: 00007f872ea208cb [ 540.007306][T10720] RBP: 00007f872ea110bd R08: 0000000000000000 R09: 00007f872ebb6738 [ 540.015327][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f872e9ec1a8 [ 540.023319][T10720] R13: 00007f872e9ec180 R14: 0000000000000009 R15: 0000000000000000 [ 540.031317][T10720] [ 540.034703][T10720] Kernel Offset: disabled [ 540.039031][T10720] Rebooting in 86400 seconds..