last executing test programs: 15.611777003s ago: executing program 1 (id=162): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket(0x2, 0x80805, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x40001}, 0x44110) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000ac0)={0x73622a85, 0x0, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xb, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd0000000000590033008020090008021100000108021100"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 15.164931702s ago: executing program 1 (id=165): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) set_mempolicy(0x2, 0x0, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000b00)=""/186, 0xba, 0x100e0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = userfaultfd(0x80801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x8101000, 0x101000, 0x8}) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/234, 0xea}], 0x8, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001300)=""/4096, 0x1000}, &(0x7f0000000540), 0x8}}], 0x30, 0x40021}, 0x20004080) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x3f, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) 10.732048572s ago: executing program 1 (id=180): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xffffffff) 8.669742244s ago: executing program 1 (id=189): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 6.997641518s ago: executing program 2 (id=197): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xffffffff) 6.011991668s ago: executing program 3 (id=199): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2000, 0x0, 0xffff}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x16) r1 = syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x200000, 0x13100, 0x0, 0x15}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000400)={{}, 0x16, 0x1, 0x5}, 0x18) 5.836806662s ago: executing program 3 (id=200): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xbdded000) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 5.680963684s ago: executing program 0 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000060000000405"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x4000000) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 5.548025947s ago: executing program 3 (id=202): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000003140), 0x800) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.167142195s ago: executing program 0 (id=203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mkdir(0x0, 0xf62b) pivot_root(&(0x7f0000001080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000380)={0x0, 0x8, 0x4, 0x4, @vifc_lcl_addr=@broadcast, @private=0xa010100}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000002400)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(0x0, 0x2, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x109440, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 4.961954739s ago: executing program 3 (id=204): unshare(0x2c020400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f00000002c0)=0x3) 4.807586143s ago: executing program 2 (id=205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="50010000100001000000000000000000fc0000000000000000a6d2b4d7a284dbe80000020000000000000000f000"/64, @ANYRES32=0x0, @ANYRES32], 0x150}}, 0x40000) 4.647916036s ago: executing program 3 (id=206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7, 0x0) r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_enter(r2, 0x7277, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x7, 0x202000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000900)={0x0, 0x0, 0x1, r6, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x80000001, 0xb, 0x1fd, 0x1}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.578292777s ago: executing program 2 (id=207): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) r2 = syz_io_uring_setup(0x1102, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x421e}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x1, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000280)={0x5, 0x7, 0x43b, 0x2, 0x6}, 0x14) lseek(r5, 0x6, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) sendmsg$nl_netfilter(r1, 0x0, 0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_async', 0x40100, 0x3c) setxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) alarm(0x8000000000000001) r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x2000000) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000080)}) pwritev(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 2.668553756s ago: executing program 0 (id=208): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000000)=0xd) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, 0xffffffffffffffff, 0xcc8c8000) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd) 2.360005712s ago: executing program 0 (id=209): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000040)={0x91}) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r5, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r6, 0x0, 0x1004000, 0x0, 0x0}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x6}, {0x4, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x834) socket$pppoe(0x18, 0x1, 0x0) 1.579210838s ago: executing program 3 (id=210): landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001540)={0x14, r6, 0x715, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0xc0) 1.408821281s ago: executing program 2 (id=211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0xa, 0x4e20, 0x4, @empty, 0x9}, 0x1c, 0x0}, 0x0) 1.02001353s ago: executing program 1 (id=212): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x800) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 536.3122ms ago: executing program 1 (id=213): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x82000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000040)=0xffffffff) 332.437934ms ago: executing program 0 (id=214): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xff7ffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) 332.260623ms ago: executing program 2 (id=215): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="50010000100001000000000000000000fc0000000000000000a6d2b4d7a284dbe80000020000000000000000f000"/64, @ANYRES32=0x0, @ANYRES32], 0x150}}, 0x40000) 118.457418ms ago: executing program 2 (id=216): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) 0s ago: executing program 0 (id=217): openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r0 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r0, 0x4}) readv(r0, &(0x7f0000000440), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 82.337959][ T5774] cgroup: Unknown subsys name 'net' [ 82.509882][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.232851][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.668816][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.669168][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.692184][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.695327][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.701987][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.709597][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.722045][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.723471][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.736747][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.736841][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.746252][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.752463][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.759450][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.766516][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.780146][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.785656][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.791006][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.802352][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.810076][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.810464][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.825916][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.833584][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.843323][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.859614][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.286042][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.759117][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 87.809110][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 87.842147][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.849340][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.857436][ T5786] bridge_slave_0: entered allmulticast mode [ 87.865229][ T5786] bridge_slave_0: entered promiscuous mode [ 87.881843][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.889014][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.896304][ T5786] bridge_slave_1: entered allmulticast mode [ 87.903621][ T5786] bridge_slave_1: entered promiscuous mode [ 87.911366][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 88.037326][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.049975][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.185027][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.192383][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.199598][ T5787] bridge_slave_0: entered allmulticast mode [ 88.208357][ T5787] bridge_slave_0: entered promiscuous mode [ 88.232770][ T5786] team0: Port device team_slave_0 added [ 88.239097][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.246438][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.253822][ T5784] bridge_slave_0: entered allmulticast mode [ 88.261702][ T5784] bridge_slave_0: entered promiscuous mode [ 88.271062][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.278390][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.285833][ T5785] bridge_slave_0: entered allmulticast mode [ 88.293403][ T5785] bridge_slave_0: entered promiscuous mode [ 88.305226][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.312602][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.319799][ T5787] bridge_slave_1: entered allmulticast mode [ 88.327709][ T5787] bridge_slave_1: entered promiscuous mode [ 88.335874][ T5786] team0: Port device team_slave_1 added [ 88.356100][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.363361][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.370845][ T5784] bridge_slave_1: entered allmulticast mode [ 88.377901][ T5784] bridge_slave_1: entered promiscuous mode [ 88.385482][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.393566][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.400955][ T5785] bridge_slave_1: entered allmulticast mode [ 88.407973][ T5785] bridge_slave_1: entered promiscuous mode [ 88.489845][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.497098][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.524209][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.538194][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.550947][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.577293][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.592507][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.605627][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.638603][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.650990][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.674319][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.706889][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.802050][ T5784] team0: Port device team_slave_0 added [ 88.812432][ T5785] team0: Port device team_slave_0 added [ 88.821363][ T5792] Bluetooth: hci0: command tx timeout [ 88.839035][ T5787] team0: Port device team_slave_0 added [ 88.849013][ T5787] team0: Port device team_slave_1 added [ 88.856942][ T5784] team0: Port device team_slave_1 added [ 88.878005][ T5785] team0: Port device team_slave_1 added [ 88.888625][ T5786] hsr_slave_0: entered promiscuous mode [ 88.895421][ T5786] hsr_slave_1: entered promiscuous mode [ 88.901202][ T5792] Bluetooth: hci1: command tx timeout [ 88.901254][ T50] Bluetooth: hci2: command tx timeout [ 88.979301][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.986913][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.991983][ T50] Bluetooth: hci3: command tx timeout [ 89.013803][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.043711][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.050844][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.076915][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.090629][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.097622][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.123878][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.135803][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.143156][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.169374][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.182332][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.189335][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.215329][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.227536][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.234922][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.261071][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.366837][ T5785] hsr_slave_0: entered promiscuous mode [ 89.373546][ T5785] hsr_slave_1: entered promiscuous mode [ 89.380112][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.389292][ T5785] Cannot create hsr debugfs directory [ 89.417395][ T5787] hsr_slave_0: entered promiscuous mode [ 89.424201][ T5787] hsr_slave_1: entered promiscuous mode [ 89.430603][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.438206][ T5787] Cannot create hsr debugfs directory [ 89.524174][ T5784] hsr_slave_0: entered promiscuous mode [ 89.530830][ T5784] hsr_slave_1: entered promiscuous mode [ 89.537459][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.545212][ T5784] Cannot create hsr debugfs directory [ 89.924483][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.940707][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.957779][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.979986][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.030014][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.045618][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.066691][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.078184][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.179610][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.192498][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.214836][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.226933][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.320357][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.342477][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.354795][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.365374][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.454745][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.512677][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.526723][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.548348][ T2957] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.555820][ T2957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.594336][ T2957] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.601541][ T2957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.624862][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.656341][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.663676][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.711269][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.718477][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.784102][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.798204][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.872437][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.899096][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.906801][ T50] Bluetooth: hci0: command tx timeout [ 90.933737][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.940964][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.971361][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.978566][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.986614][ T50] Bluetooth: hci1: command tx timeout [ 90.994004][ T50] Bluetooth: hci2: command tx timeout [ 91.018050][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.025410][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.062701][ T50] Bluetooth: hci3: command tx timeout [ 91.104715][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.112001][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.197637][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.345759][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.447668][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.508533][ T5786] veth0_vlan: entered promiscuous mode [ 91.602088][ T5786] veth1_vlan: entered promiscuous mode [ 91.623969][ T5785] veth0_vlan: entered promiscuous mode [ 91.680169][ T5785] veth1_vlan: entered promiscuous mode [ 91.762026][ T5785] veth0_macvtap: entered promiscuous mode [ 91.774455][ T5785] veth1_macvtap: entered promiscuous mode [ 91.801606][ T5786] veth0_macvtap: entered promiscuous mode [ 91.812353][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.832635][ T5786] veth1_macvtap: entered promiscuous mode [ 91.855037][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.868192][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.880086][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.899173][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.909972][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.919677][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.929213][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.049393][ T5784] veth0_vlan: entered promiscuous mode [ 92.060017][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.071269][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.083388][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.133065][ T5784] veth1_vlan: entered promiscuous mode [ 92.140199][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.151325][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.164460][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.185683][ T5787] veth0_vlan: entered promiscuous mode [ 92.201438][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.209632][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.232226][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.241963][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.251244][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.260015][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.308147][ T5787] veth1_vlan: entered promiscuous mode [ 92.323962][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.341706][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.353151][ T786] cfg80211: failed to load regulatory.db [ 92.436897][ T5784] veth0_macvtap: entered promiscuous mode [ 92.466313][ T5787] veth0_macvtap: entered promiscuous mode [ 92.510245][ T5787] veth1_macvtap: entered promiscuous mode [ 92.535153][ T5784] veth1_macvtap: entered promiscuous mode [ 92.555642][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.586920][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.611659][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.636140][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.645751][ T5880] syz.3.4[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.646857][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.669332][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.682088][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.697996][ T5880] loop3: detected capacity change from 0 to 2048 [ 92.735957][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.749752][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.761838][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.774705][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.784903][ T5880] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 92.802857][ T5880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.815011][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.844550][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.856406][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.868286][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.887553][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.898782][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.910790][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.923493][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.924945][ T28] audit: type=1800 audit(1758161152.598:2): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 92.943845][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.981284][ T50] Bluetooth: hci0: command tx timeout [ 92.993281][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.002837][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.020662][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.063779][ T50] Bluetooth: hci1: command tx timeout [ 93.064645][ T5792] Bluetooth: hci2: command tx timeout [ 93.081027][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.092536][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.104801][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.120595][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.140719][ T5792] Bluetooth: hci3: command tx timeout [ 93.217771][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.396242][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.467271][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.576081][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.585230][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.665868][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.691020][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.700096][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.716889][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.060121][ T5885] loop3: detected capacity change from 0 to 2048 [ 94.069428][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.074345][ T5885] ======================================================= [ 94.074345][ T5885] WARNING: The mand mount option has been deprecated and [ 94.074345][ T5885] and is ignored by this kernel. Remove the mand [ 94.074345][ T5885] option from the mount to silence this warning. [ 94.074345][ T5885] ======================================================= [ 94.113605][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.121773][ T5885] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.158953][ T28] audit: type=1800 audit(1758161153.828:3): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 94.267699][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.285466][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.358226][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.389448][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.417135][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.443480][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.673780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.062427][ T5792] Bluetooth: hci0: command tx timeout [ 95.141756][ T5792] Bluetooth: hci2: command tx timeout [ 95.142189][ T50] Bluetooth: hci1: command tx timeout [ 95.221311][ T50] Bluetooth: hci3: command tx timeout [ 95.448859][ T5897] loop3: detected capacity change from 0 to 128 [ 95.546891][ T5897] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 95.651923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.719032][ T5897] hpfs: filesystem error: improperly stopped [ 96.071969][ T5897] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 96.072106][ T5897] hpfs: You really don't want any checks? You are crazy... [ 96.075324][ T5897] hpfs: hpfs_map_sector(): read error [ 96.075369][ T5897] hpfs: code page support is disabled [ 96.119812][ T5897] hpfs: hpfs_map_4sectors(): unaligned read [ 96.121340][ T5897] hpfs: hpfs_map_4sectors(): unaligned read [ 96.121424][ T5897] hpfs: filesystem error: unable to find root dir [ 96.900614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.926754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.981318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.286512][ T5907] hpfs: hpfs_map_4sectors(): unaligned read [ 97.865117][ T5897] hpfs: hpfs_map_4sectors(): unaligned read [ 97.911782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.928540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.937354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.950457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.015408][ T23] IPVS: starting estimator thread 0... [ 98.150530][ T5914] IPVS: using max 26 ests per chain, 62400 per kthread [ 98.188230][ T5788] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.351138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.405134][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.420903][ T5788] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.447219][ T5788] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.478251][ T5788] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.501024][ T5788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.536512][ T5788] usb 1-1: config 0 descriptor?? [ 98.570553][ T786] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.891908][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 98.966279][ T786] usb 2-1: config 5 has an invalid interface number: 52 but max is 1 [ 98.993149][ T786] usb 2-1: config 5 has an invalid interface number: 4 but max is 1 [ 99.010471][ T786] usb 2-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 99.039805][ T5788] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 99.040452][ T786] usb 2-1: config 5 has no interface number 0 [ 99.057518][ T5921] loop2: detected capacity change from 0 to 2048 [ 99.073819][ T786] usb 2-1: config 5 has no interface number 1 [ 99.081794][ T786] usb 2-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.100084][ T5921] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 99.128130][ T786] usb 2-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.154690][ T5921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.155243][ T5788] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 99.184042][ T786] usb 2-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 99.248824][ T786] usb 2-1: config 5 interface 52 has no altsetting 0 [ 99.258254][ T28] audit: type=1800 audit(1758161158.918:4): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=1346 res=0 errno=0 [ 99.304044][ T786] usb 2-1: config 5 interface 4 has no altsetting 0 [ 99.377528][ T786] usb 2-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 99.390066][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.398410][ T786] usb 2-1: Product: syz [ 99.405197][ T786] usb 2-1: Manufacturer: syz [ 99.410144][ T786] usb 2-1: SerialNumber: syz [ 99.422472][ T5788] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 100.043389][ T5788] usb 1-1: USB disconnect, device number 2 [ 100.462617][ T5924] fido_id[5924]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 101.423044][ T786] cytherm 2-1:5.52: Cypress thermometer device now attached [ 101.457057][ T786] cytherm 2-1:5.4: Cypress thermometer device now attached [ 101.540225][ T786] usb 2-1: USB disconnect, device number 2 [ 101.601100][ T786] cytherm 2-1:5.52: Cypress thermometer now disconnected [ 101.638729][ T786] cytherm 2-1:5.4: Cypress thermometer now disconnected [ 101.809591][ T5937] loop2: detected capacity change from 0 to 2048 [ 101.856205][ T5937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.881613][ T28] audit: type=1800 audit(1758161161.558:5): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.17" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 103.702553][ T5788] IPVS: starting estimator thread 0... [ 103.810658][ T5958] IPVS: using max 16 ests per chain, 38400 per kthread [ 103.885440][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.088924][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.118811][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.151938][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.178271][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.210436][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.242128][ T9] usb 2-1: config 0 descriptor?? [ 104.718152][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 104.740206][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 104.796851][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 105.206744][ T9] usb 2-1: USB disconnect, device number 3 [ 106.394942][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.712561][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.726378][ T8] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.744330][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 106.754781][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.775235][ T8] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.788314][ T8] usb 4-1: Product: syz [ 106.793647][ T8] usb 4-1: Manufacturer: syz [ 106.804060][ T8] usb 4-1: SerialNumber: syz [ 106.820517][ T8] usb 4-1: config 0 descriptor?? [ 106.899514][ T8] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 107.153663][ T5804] udevd[5804]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.349290][ T8] usb 4-1: USB disconnect, device number 2 [ 108.504583][ T5992] netlink: 'syz.1.29': attribute type 2 has an invalid length. [ 109.332520][ T5776] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.582417][ T5776] usb 3-1: Using ep0 maxpacket: 8 [ 109.651494][ T5776] usb 3-1: config 5 has an invalid interface number: 52 but max is 1 [ 109.686959][ T5776] usb 3-1: config 5 has an invalid interface number: 4 but max is 1 [ 109.750931][ T5776] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 109.814931][ T5776] usb 3-1: config 5 has no interface number 0 [ 109.860992][ T5776] usb 3-1: config 5 has no interface number 1 [ 109.900974][ T5776] usb 3-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 109.942669][ T5776] usb 3-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.980658][ T5776] usb 3-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 110.014024][ T5776] usb 3-1: config 5 interface 52 has no altsetting 0 [ 110.024762][ T5776] usb 3-1: config 5 interface 4 has no altsetting 0 [ 110.141554][ T5776] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 110.199577][ T5776] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.240817][ T5776] usb 3-1: Product: syz [ 110.245068][ T5776] usb 3-1: Manufacturer: syz [ 110.310245][ T5776] usb 3-1: SerialNumber: syz [ 110.501333][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 110.692510][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.707677][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.718286][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 110.739411][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 110.748928][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.761976][ T9] usb 4-1: config 0 descriptor?? [ 111.198429][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 111.208187][ T9] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 111.233428][ T9] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 111.747257][ T5776] cytherm 3-1:5.52: Cypress thermometer device now attached [ 111.778251][ T5776] cytherm 3-1:5.4: Cypress thermometer device now attached [ 111.811777][ T5776] usb 3-1: USB disconnect, device number 2 [ 111.818314][ T5776] cytherm 3-1:5.52: Cypress thermometer now disconnected [ 111.832670][ T5776] cytherm 3-1:5.4: Cypress thermometer now disconnected [ 113.025773][ T6032] loop2: detected capacity change from 0 to 128 [ 113.054780][ T6032] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 113.093346][ T6032] hpfs: filesystem error: improperly stopped [ 113.110888][ T6032] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 113.130858][ T6032] hpfs: You really don't want any checks? You are crazy... [ 113.149505][ T6032] hpfs: hpfs_map_sector(): read error [ 113.160117][ T6032] hpfs: code page support is disabled [ 113.169502][ T6032] hpfs: hpfs_map_4sectors(): unaligned read [ 113.177007][ T6032] hpfs: hpfs_map_4sectors(): unaligned read [ 113.192180][ T6032] hpfs: filesystem error: unable to find root dir [ 113.227754][ T6034] mmap: syz.0.47 (6034) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.245611][ T6032] hpfs: hpfs_map_4sectors(): unaligned read [ 113.328530][ T6038] hpfs: hpfs_map_4sectors(): unaligned read [ 113.401220][ T6038] hpfs: hpfs_map_4sectors(): unaligned read [ 113.652898][ T8] usb 4-1: USB disconnect, device number 3 [ 114.390394][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.572470][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.606471][ T5878] usb 3-1: config 0 has no interfaces? [ 114.619825][ T5878] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 114.635998][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.659319][ T5878] usb 3-1: config 0 descriptor?? [ 114.670493][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.880793][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 114.906367][ T23] usb 4-1: config 5 has an invalid interface number: 52 but max is 1 [ 114.945317][ T23] usb 4-1: config 5 has an invalid interface number: 4 but max is 1 [ 114.977884][ T23] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 115.017715][ T23] usb 4-1: config 5 has no interface number 0 [ 115.035311][ T23] usb 4-1: config 5 has no interface number 1 [ 115.054240][ T23] usb 4-1: config 5 interface 52 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.068942][ T23] usb 4-1: config 5 interface 4 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.080874][ T23] usb 4-1: config 5 interface 4 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 115.095109][ T23] usb 4-1: config 5 interface 52 has no altsetting 0 [ 115.103726][ T23] usb 4-1: config 5 interface 4 has no altsetting 0 [ 115.170520][ T23] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 115.186354][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.194761][ T23] usb 4-1: Product: syz [ 115.199477][ T23] usb 4-1: Manufacturer: syz [ 115.204250][ T23] usb 4-1: SerialNumber: syz [ 115.236035][ T6055] gretap0: entered promiscuous mode [ 116.688779][ T6065] loop1: detected capacity change from 0 to 2048 [ 116.719190][ T6065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.769886][ T28] audit: type=1800 audit(1758161176.438:6): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.57" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 116.786463][ T6067] loop0: detected capacity change from 0 to 128 [ 116.833419][ T6067] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 116.850800][ T6067] hpfs: filesystem error: improperly stopped [ 116.866397][ T6067] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 116.888162][ T6067] hpfs: You really don't want any checks? You are crazy... [ 116.912177][ T6067] hpfs: hpfs_map_sector(): read error [ 116.926559][ T6067] hpfs: code page support is disabled [ 116.941453][ T6067] hpfs: hpfs_map_4sectors(): unaligned read [ 116.957145][ T6067] hpfs: hpfs_map_4sectors(): unaligned read [ 116.980131][ T6067] hpfs: filesystem error: unable to find root dir [ 117.004451][ T6067] hpfs: hpfs_map_4sectors(): unaligned read [ 117.073510][ T6070] hpfs: hpfs_map_4sectors(): unaligned read [ 117.091161][ T6070] hpfs: hpfs_map_4sectors(): unaligned read [ 117.722167][ T9] usb 3-1: USB disconnect, device number 3 [ 117.834271][ T23] cytherm 4-1:5.52: Cypress thermometer device now attached [ 117.902023][ T23] cytherm 4-1:5.4: Cypress thermometer device now attached [ 117.964536][ T23] usb 4-1: USB disconnect, device number 4 [ 118.002309][ T23] cytherm 4-1:5.52: Cypress thermometer now disconnected [ 118.036783][ T6080] loop0: detected capacity change from 0 to 128 [ 118.046837][ T23] cytherm 4-1:5.4: Cypress thermometer now disconnected [ 118.091033][ T6080] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 118.150548][ T6080] hpfs: filesystem error: improperly stopped [ 118.180135][ T6080] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.188417][ T6080] hpfs: You really don't want any checks? You are crazy... [ 118.200882][ T6080] hpfs: hpfs_map_sector(): read error [ 118.208326][ T6080] hpfs: code page support is disabled [ 118.217702][ T6080] hpfs: hpfs_map_4sectors(): unaligned read [ 118.227295][ T6080] hpfs: hpfs_map_4sectors(): unaligned read [ 118.234390][ T6080] hpfs: filesystem error: unable to find root dir [ 118.270509][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.285139][ T6080] hpfs: hpfs_map_4sectors(): unaligned read [ 118.393401][ T6084] hpfs: hpfs_map_4sectors(): unaligned read [ 118.416206][ T6084] hpfs: hpfs_map_4sectors(): unaligned read [ 118.575882][ T9] usb 2-1: config 0 has no interfaces? [ 118.637244][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 118.685088][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.714883][ T9] usb 2-1: Product: syz [ 118.722361][ T9] usb 2-1: Manufacturer: syz [ 118.766442][ T9] usb 2-1: SerialNumber: syz [ 118.919854][ T9] usb 2-1: config 0 descriptor?? [ 119.229440][ T6078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.244898][ T6078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.275056][ T23] IPVS: starting estimator thread 0... [ 119.371013][ T6078] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 119.430480][ T6091] IPVS: using max 25 ests per chain, 60000 per kthread [ 121.326356][ T786] usb 2-1: USB disconnect, device number 4 [ 121.625687][ T6110] input: syz0 as /devices/virtual/input/input5 [ 121.834440][ T6114] loop0: detected capacity change from 0 to 2048 [ 121.874896][ T6114] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.158246][ T6120] process 'syz.3.72' launched './cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 122.461275][ T5776] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.655085][ T5776] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 122.675823][ T6134] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.698747][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.749844][ T5776] usb 1-1: Product: syz [ 122.761764][ T5776] usb 1-1: Manufacturer: syz [ 122.810348][ T5776] usb 1-1: SerialNumber: syz [ 122.866866][ T5776] usb 1-1: config 0 descriptor?? [ 123.254610][ T5776] usb 1-1: USB disconnect, device number 3 [ 124.225733][ T6151] loop0: detected capacity change from 0 to 2048 [ 124.372217][ T6151] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.411037][ T6154] pim6reg1: entered promiscuous mode [ 124.430187][ T6154] pim6reg1: entered allmulticast mode [ 124.768218][ T6158] syz.0.86: attempt to access beyond end of device [ 124.768218][ T6158] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 125.680612][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 125.840640][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 125.850445][ T5878] usb 1-1: device descriptor read/64, error -71 [ 126.044859][ T786] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 126.080594][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.088841][ T786] usb 3-1: Product: syz [ 126.093151][ T786] usb 3-1: Manufacturer: syz [ 126.098544][ T786] usb 3-1: SerialNumber: syz [ 126.115014][ T786] usb 3-1: config 0 descriptor?? [ 126.134056][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.310403][ T5878] usb 1-1: device descriptor read/64, error -71 [ 126.444894][ T5878] usb usb1-port1: attempt power cycle [ 126.475929][ T8] usb 3-1: USB disconnect, device number 4 [ 126.890445][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.964596][ T5878] usb 1-1: device descriptor read/8, error -71 [ 127.290450][ T5878] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.334590][ T5878] usb 1-1: device descriptor read/8, error -71 [ 127.460738][ T5878] usb usb1-port1: unable to enumerate USB device [ 128.159608][ T6185] loop3: detected capacity change from 0 to 2048 [ 128.237861][ T6185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.366284][ T28] audit: type=1326 audit(1758161188.038:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a058eba9 code=0x7ffc0000 [ 128.461721][ T28] audit: type=1326 audit(1758161188.038:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a058eba9 code=0x7ffc0000 [ 128.510827][ T28] audit: type=1326 audit(1758161188.058:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f99a058eba9 code=0x7ffc0000 [ 128.630625][ T28] audit: type=1326 audit(1758161188.078:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a058eba9 code=0x7ffc0000 [ 128.770883][ T28] audit: type=1326 audit(1758161188.078:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6186 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a058eba9 code=0x7ffc0000 [ 129.310519][ T5776] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.508026][ T5776] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 129.521752][ T6215] : renamed from bridge_slave_0 (while UP) [ 129.542448][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.583890][ T5776] usb 1-1: Product: syz [ 129.596141][ T5776] usb 1-1: Manufacturer: syz [ 129.609040][ T5776] usb 1-1: SerialNumber: syz [ 129.624471][ T5776] usb 1-1: config 0 descriptor?? [ 129.876264][ T8] usb 1-1: USB disconnect, device number 8 [ 132.870425][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.085400][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 133.128225][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.168956][ T23] usb 1-1: Product: syz [ 133.173666][ T23] usb 1-1: Manufacturer: syz [ 133.183599][ T23] usb 1-1: SerialNumber: syz [ 133.196078][ T23] usb 1-1: config 0 descriptor?? [ 133.310907][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.317914][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.494640][ T786] usb 1-1: USB disconnect, device number 9 [ 134.221034][ T5878] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.423734][ T5878] usb 2-1: config 0 has no interfaces? [ 134.433191][ T5878] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 134.450415][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.681351][ T5878] usb 2-1: Product: syz [ 134.686402][ T5878] usb 2-1: Manufacturer: syz [ 134.692092][ T5878] usb 2-1: SerialNumber: syz [ 134.700728][ T5878] usb 2-1: config 0 descriptor?? [ 135.902712][ T786] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 136.107309][ T786] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 136.119486][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.141522][ T786] usb 1-1: Product: syz [ 136.156105][ T786] usb 1-1: Manufacturer: syz [ 136.167668][ T786] usb 1-1: SerialNumber: syz [ 136.186940][ T786] usb 1-1: config 0 descriptor?? [ 136.436409][ T23] usb 1-1: USB disconnect, device number 10 [ 136.853521][ T23] usb 2-1: USB disconnect, device number 5 [ 137.337954][ T6318] loop2: detected capacity change from 0 to 128 [ 137.350633][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 137.410116][ T6320] : renamed from bridge_slave_0 (while UP) [ 137.425043][ T6318] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 137.474933][ T6318] hpfs: filesystem error: improperly stopped [ 137.499503][ T6318] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 137.515598][ T6318] hpfs: You really don't want any checks? You are crazy... [ 137.526328][ T6318] hpfs: hpfs_map_sector(): read error [ 137.537285][ T6318] hpfs: code page support is disabled [ 137.543966][ T6318] hpfs: hpfs_map_4sectors(): unaligned read [ 137.550165][ T6318] hpfs: hpfs_map_4sectors(): unaligned read [ 137.556504][ T6318] hpfs: filesystem error: unable to find root dir [ 137.624346][ T6318] hpfs: hpfs_map_4sectors(): unaligned read [ 137.703165][ T6322] hpfs: hpfs_map_4sectors(): unaligned read [ 139.562375][ T6335] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.610031][ T6335] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.879813][ T6342] loop0: detected capacity change from 0 to 128 [ 139.900423][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.903509][ T6342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 139.953311][ T6342] hpfs: filesystem error: improperly stopped [ 139.959463][ T6342] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 139.990845][ T6342] hpfs: You really don't want any checks? You are crazy... [ 139.998627][ T6342] hpfs: hpfs_map_sector(): read error [ 140.020225][ T6342] hpfs: code page support is disabled [ 140.026861][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 140.049449][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 140.056629][ T6342] hpfs: filesystem error: unable to find root dir [ 140.091380][ T6342] hpfs: hpfs_map_4sectors(): unaligned read [ 140.126782][ T23] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 140.155281][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.184605][ T23] usb 3-1: Product: syz [ 140.189106][ T23] usb 3-1: Manufacturer: syz [ 140.202262][ T23] usb 3-1: SerialNumber: syz [ 140.231261][ T23] usb 3-1: config 0 descriptor?? [ 140.232917][ T6348] hpfs: hpfs_map_4sectors(): unaligned read [ 140.624740][ T5878] usb 3-1: USB disconnect, device number 5 [ 142.061568][ T6379] loop3: detected capacity change from 0 to 128 [ 142.116709][ T6379] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 142.201900][ T6379] hpfs: filesystem error: improperly stopped [ 142.222813][ T6379] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 142.260600][ T6379] hpfs: You really don't want any checks? You are crazy... [ 142.268347][ T6379] hpfs: hpfs_map_sector(): read error [ 142.286620][ T6379] hpfs: code page support is disabled [ 142.310784][ T6379] hpfs: hpfs_map_4sectors(): unaligned read [ 142.313898][ T6384] binder: 6382:6384 ioctl c0306201 2000000003c0 returned -14 [ 142.316871][ T6379] hpfs: hpfs_map_4sectors(): unaligned read [ 142.352482][ C0] Unknown status report in ack skb [ 142.359144][ T6379] hpfs: filesystem error: unable to find root dir [ 142.414003][ T6379] hpfs: hpfs_map_4sectors(): unaligned read [ 142.482133][ T6388] hpfs: hpfs_map_4sectors(): unaligned read [ 142.661291][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 142.912268][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 142.934145][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.946814][ T23] usb 1-1: Product: syz [ 142.953862][ T23] usb 1-1: Manufacturer: syz [ 142.959004][ T23] usb 1-1: SerialNumber: syz [ 142.991465][ T23] usb 1-1: config 0 descriptor?? [ 143.228918][ T23] usb 1-1: USB disconnect, device number 11 [ 145.620632][ T5788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.668181][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.175'. [ 145.852755][ T5788] usb 4-1: config 0 has no interfaces? [ 145.870611][ T5788] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 145.905183][ T5788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.914235][ T5788] usb 4-1: Product: syz [ 145.920751][ T5788] usb 4-1: Manufacturer: syz [ 145.925769][ T5788] usb 4-1: SerialNumber: syz [ 145.946754][ T5788] usb 4-1: config 0 descriptor?? [ 147.420417][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 147.470168][ T786] usb 4-1: USB disconnect, device number 5 [ 147.655802][ T23] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 147.676872][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.695827][ T23] usb 2-1: Product: syz [ 147.775537][ T23] usb 2-1: Manufacturer: syz [ 147.780226][ T23] usb 2-1: SerialNumber: syz [ 148.093434][ T23] usb 2-1: config 0 descriptor?? [ 148.590791][ T5878] usb 2-1: USB disconnect, device number 6 [ 148.675965][ T6449] udevd[6449]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.713212][ T28] audit: type=1326 audit(1758161208.388:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6451 comm="syz.2.187" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3ca58eba9 code=0x0 [ 148.952393][ T6454] ALSA: mixer_oss: invalid OSS volume 'u' [ 148.966636][ T6454] ALSA: mixer_oss: invalid OSS volume 'KE(E֤Ya]f' [ 148.986477][ T6454] ALSA: mixer_oss: invalid OSS volume 'I' Yx\8' [ 149.023050][ T6454] ALSA: mixer_oss: invalid OSS volume 'KAwՈiILrJ4Emͽ' [ 149.036247][ T6454] ALSA: mixer_oss: invalid OSS volume 'X*yē҈ |)¶Sv'M3' [ 149.053069][ T6454] ALSA: mixer_oss: invalid OSS volume '&οer5<-{kUqvW~7|' [ 149.066309][ T6454] ALSA: mixer_oss: invalid OSS volume '/ӑ+e!586| Cɂ' [ 149.215558][ T6454] ALSA: mixer_oss: invalid OSS volume 'aQ4̳~A$nVnr' [ 149.250534][ T6454] ALSA: mixer_oss: invalid OSS volume 'B\,Ps9HoFr' [ 149.265433][ T6454] ALSA: mixer_oss: invalid OSS volume ')K47`.|=*:}4*' [ 149.277232][ T6454] ALSA: mixer_oss: invalid OSS volume '!|' [ 149.290371][ T6454] ALSA: mixer_oss: invalid OSS volume 'J' [ 149.296445][ T6454] ALSA: mixer_oss: invalid OSS volume 'UeIg=c¸֋͓hXyC9' [ 149.312767][ T6454] ALSA: mixer_oss: invalid OSS volume 'C<_E=b?H7' [ 149.334022][ T6454] ALSA: mixer_oss: invalid OSS volume 'rFcߋ;ǒJlvı;1.hg' [ 149.359080][ T6454] ALSA: mixer_oss: invalid OSS volume '' [ 149.376346][ T6454] ALSA: mixer_oss: invalid OSS volume 'yBqLa'MmЌ_dnD&' [ 149.397492][ T6454] ALSA: mixer_oss: invalid OSS volume '|kGhoQ6' [ 149.416980][ T6454] ALSA: mixer_oss: invalid OSS volume 'Vs1J y['&[wn)Y3EFI' [ 149.790726][ T6454] ALSA: mixer_oss: invalid OSS volume '_L> rDM' [ 149.813553][ T6454] ALSA: mixer_oss: invalid OSS volume 'Hs7d' [ 149.838643][ T6454] ALSA: mixer_oss: invalid OSS volume 'J/ݚO5@g?Ra' [ 149.856436][ T6454] ALSA: mixer_oss: invalid OSS volume ' O#|IXw7!йT'g' [ 149.933630][ T6454] ALSA: mixer_oss: invalid OSS volume 'UUI@W;d*( ā40?۽-IL' [ 149.973618][ T6454] ALSA: mixer_oss: invalid OSS volume 'r,4fArJpX:' [ 150.474601][ C1] sd 0:0:1:0: [sda] tag#3377 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 150.485203][ C1] sd 0:0:1:0: [sda] tag#3377 CDB: Read(6) 08 00 00 00 03 44 [ 151.881410][ T6484] input: syz0 as /devices/virtual/input/input6 [ 151.960457][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 152.168162][ T23] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 152.189243][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.209713][ T23] usb 3-1: Product: syz [ 152.214077][ T23] usb 3-1: Manufacturer: syz [ 152.218714][ T23] usb 3-1: SerialNumber: syz [ 152.233125][ T23] usb 3-1: config 0 descriptor?? [ 152.473859][ T23] usb 3-1: USB disconnect, device number 6 [ 153.131715][ T6500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.205'. [ 153.900456][ T786] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 154.106464][ T786] usb 3-1: config 0 has no interfaces? [ 154.126355][ T786] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 154.180780][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.209250][ T786] usb 3-1: Product: syz [ 154.230335][ T786] usb 3-1: Manufacturer: syz [ 154.235125][ T786] usb 3-1: SerialNumber: syz [ 154.261599][ T786] usb 3-1: config 0 descriptor?? [ 155.716697][ T6516] Zero length message leads to an empty skb [ 156.390972][ T786] usb 3-1: USB disconnect, device number 7 [ 156.737655][ T6460] Set syz1 is full, maxelem 65536 reached [ 157.016706][ T6523] IPv4: Oversized IP packet from 127.202.26.0 [ 157.613212][ T6531] netlink: 96 bytes leftover after parsing attributes in process `syz.2.215'. [ 157.661275][ T6533] loop4: detected capacity change from 0 to 7 [ 157.688252][ T6533] Dev loop4: unable to read RDB block 7 [ 157.708300][ T6533] loop4: unable to read partition table [ 157.715380][ T6533] loop4: partition table beyond EOD, truncated [ 157.729336][ T6533] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 157.840604][ T5776] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 157.868434][ T58] ------------[ cut here ]------------ [ 157.868435][ T3468] ------------[ cut here ]------------ [ 157.874475][ T3468] WARNING: CPU: 0 PID: 3468 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.880131][ T58] WARNING: CPU: 1 PID: 58 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.880186][ T58] Modules linked in: [ 157.891522][ T3468] Modules linked in: [ 157.902056][ T58] [ 157.902094][ T58] CPU: 1 PID: 58 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 157.902116][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.902130][ T58] Workqueue: phy6 ieee80211_csa_finalize_work [ 157.902163][ T58] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.902199][ T58] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 157.906135][ T3468] [ 157.910035][ T58] RSP: 0018:ffffc900015979c0 EFLAGS: 00010293 [ 157.912412][ T3468] CPU: 0 PID: 3468 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 157.912434][ T3468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.912447][ T3468] Workqueue: phy5 ieee80211_csa_finalize_work [ 157.919909][ T58] [ 157.919919][ T58] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: ffff88801cec3c00 [ 157.919936][ T58] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 157.919951][ T58] RBP: dffffc0000000000 R08: ffff88805e1895af R09: 1ffff1100bc312b5 [ 157.930065][ T3468] [ 157.930076][ T3468] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.936206][ T58] R10: dffffc0000000000 R11: ffffed100bc312b6 R12: 0000000000000001 [ 157.936226][ T58] R13: ffff88805e18a5d9 R14: ffff88801ebbac70 R15: ffff88801ebbace8 [ 157.943577][ T3468] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 157.943598][ T3468] RSP: 0018:ffffc9000ccb79c0 EFLAGS: 00010293 [ 157.943622][ T3468] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: ffff88802d6dbc00 [ 157.943637][ T3468] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 157.943651][ T3468] RBP: dffffc0000000000 R08: ffff88805e7815af R09: 1ffff1100bcf02b5 [ 157.943667][ T3468] R10: dffffc0000000000 R11: ffffed100bcf02b6 R12: 0000000000000001 [ 157.943683][ T3468] R13: ffff88805e7825d9 R14: ffff88807cb62c70 R15: ffff88807cb62ce8 [ 157.943699][ T3468] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 157.943716][ T3468] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.943731][ T3468] CR2: 00007ff3cb3056c0 CR3: 00000000628ad000 CR4: 00000000003506f0 [ 157.964311][ T58] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 157.964340][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.964357][ T58] CR2: 0000200000290030 CR3: 000000006289d000 CR4: 00000000003506e0 [ 157.964378][ T58] Call Trace: [ 157.964388][ T58] [ 157.964430][ T58] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 157.964476][ T58] ieee80211_csa_finalize+0x59a/0xf00 [ 157.964500][ T58] ? mutex_lock_nested+0x20/0x20 [ 157.964532][ T58] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 157.964559][ T58] ? ieee80211_csa_finalize_work+0x140/0x140 [ 157.964584][ T58] ? read_lock_is_recursive+0x20/0x20 [ 157.964619][ T58] ieee80211_csa_finalize_work+0xf6/0x140 [ 157.964643][ T58] ? process_scheduled_works+0x957/0x15b0 [ 157.964672][ T58] process_scheduled_works+0xa45/0x15b0 [ 157.964734][ T58] ? assign_work+0x400/0x400 [ 157.964769][ T58] ? assign_work+0x39e/0x400 [ 157.964802][ T58] worker_thread+0xa55/0xfc0 [ 157.964862][ T58] kthread+0x2fa/0x390 [ 157.964882][ T58] ? pr_cont_work+0x560/0x560 [ 157.964910][ T58] ? kthread_blkcg+0xd0/0xd0 [ 157.964917][ C0] ------------[ cut here ]------------ [ 157.964931][ T58] ret_from_fork+0x48/0x80 [ 157.964955][ T58] ? kthread_blkcg+0xd0/0xd0 [ 157.964943][ C0] WARNING: CPU: 0 PID: 3468 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 157.964978][ T58] ret_from_fork_asm+0x11/0x20 [ 157.964997][ C0] Modules linked in: [ 157.965015][ C0] CPU: 0 PID: 3468 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 157.965025][ T58] [ 157.965037][ T58] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.965037][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.965047][ T58] CPU: 1 PID: 58 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 157.965051][ C0] Workqueue: phy5 ieee80211_csa_finalize_work [ 157.965073][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.965072][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 157.965085][ T58] Workqueue: phy6 ieee80211_csa_finalize_work [ 157.965105][ T58] Call Trace: [ 157.965113][ T58] [ 157.965108][ C0] Code: 24 4c 89 e7 e8 de 69 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 44 97 f7 0f 0b e9 f6 f7 ff ff e8 8d 44 97 f7 <0f> 0b e9 48 fb ff ff e8 81 44 97 f7 48 c7 c7 60 0f 24 8e 4c 89 e6 [ 157.965120][ T58] dump_stack_lvl+0x16c/0x230 [ 157.965126][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 157.965144][ C0] RAX: ffffffff89ee4bb3 RBX: ffffffff89ee39b6 RCX: ffff88802d6dbc00 [ 157.965150][ T58] ? show_regs_print_info+0x20/0x20 [ 157.965160][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.965173][ C0] RBP: 0000000000000000 R08: ffff88802d6dbc00 R09: 0000000000000003 [ 157.965175][ T58] ? load_image+0x3b0/0x3b0 [ 157.965186][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e18a3c0 [ 157.965200][ C0] R13: dffffc0000000000 R14: ffff88805e18a8b0 R15: ffff8880303cac24 [ 157.965215][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 157.965211][ T58] panic+0x2c0/0x710 [ 157.965232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 157.965247][ C0] CR2: 00007ff3cb3056c0 CR3: 00000000628ad000 CR4: 00000000003506f0 [ 157.965248][ T58] ? bpf_jit_dump+0xd0/0xd0 [ 157.965265][ C0] Call Trace: [ 157.965273][ C0] [ 157.965283][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 157.965290][ T58] ? ret_from_fork_asm+0x11/0x20 [ 157.965325][ T58] __warn+0x2e0/0x470 [ 157.965334][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 157.965353][ T58] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.965374][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 157.965387][ T58] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.965418][ T58] report_bug+0x2be/0x4f0 [ 157.965421][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 157.965442][ T58] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.965456][ C0] __iterate_interfaces+0x243/0x500 [ 157.965475][ T58] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.965482][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 157.965506][ T58] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 157.965508][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 157.965537][ T58] handle_bug+0xcf/0x120 [ 157.965538][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 157.965564][ T58] exc_invalid_op+0x1a/0x50 [ 157.965564][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 157.965590][ T58] asm_exc_invalid_op+0x1a/0x20 [ 157.965596][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 157.965609][ T58] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 157.965623][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 157.965640][ T58] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 157.965656][ T58] RSP: 0018:ffffc900015979c0 EFLAGS: 00010293 [ 157.965654][ C0] ? hw_scan_work+0xf40/0xf40 [ 157.965669][ T58] [ 157.965674][ T58] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: ffff88801cec3c00 [ 157.965688][ T58] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 157.965686][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 157.965699][ T58] RBP: dffffc0000000000 R08: ffff88805e1895af R09: 1ffff1100bc312b5 [ 157.965713][ T58] R10: dffffc0000000000 R11: ffffed100bc312b6 R12: 0000000000000001 [ 157.965708][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 157.965725][ T58] R13: ffff88805e18a5d9 R14: ffff88801ebbac70 R15: ffff88801ebbace8 [ 157.965743][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 157.965749][ T58] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 157.965771][ C0] handle_softirqs+0x280/0x820 [ 157.965796][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 157.965804][ T58] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 157.965822][ C0] ? do_softirq+0x180/0x180 [ 157.965843][ T58] ieee80211_csa_finalize+0x59a/0xf00 [ 157.965847][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 157.965863][ T58] ? mutex_lock_nested+0x20/0x20 [ 157.965877][ C0] __irq_exit_rcu+0xc7/0x190 [ 157.965892][ T58] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 157.965898][ C0] ? irq_exit_rcu+0x20/0x20 [ 157.965916][ T58] ? ieee80211_csa_finalize_work+0x140/0x140 [ 157.965927][ C0] irq_exit_rcu+0x9/0x20 [ 157.965938][ T58] ? read_lock_is_recursive+0x20/0x20 [ 157.965945][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 157.965976][ C0] [ 157.965971][ T58] ieee80211_csa_finalize_work+0xf6/0x140 [ 157.965982][ C0] [ 157.965990][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.965993][ T58] ? process_scheduled_works+0x957/0x15b0 [ 157.966012][ C0] RIP: 0010:vprintk_emit+0x44f/0x600 [ 157.966019][ T58] process_scheduled_works+0xa45/0x15b0 [ 157.966036][ C0] Code: 51 01 00 00 e8 32 4d 1b 00 45 89 f7 48 85 db 48 8b 5c 24 08 75 07 e8 20 4d 1b 00 eb 06 e8 19 4d 1b 00 fb 48 c7 c7 60 41 d2 8c <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 59 bd [ 157.966053][ C0] RSP: 0018:ffffc9000ccb75a0 EFLAGS: 00000293 [ 157.966070][ C0] RAX: ffffffff816a4327 RBX: ffffffff816a41e1 RCX: ffff88802d6dbc00 [ 157.966086][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8cd24160 [ 157.966085][ T58] ? assign_work+0x400/0x400 [ 157.966100][ C0] RBP: ffffc9000ccb7690 R08: ffffffff90da75c7 R09: 1ffffffff21b4eb8 [ 157.966115][ C0] R10: dffffc0000000000 R11: fffffbfff21b4eb9 R12: dffffc0000000000 [ 157.966118][ T58] ? assign_work+0x39e/0x400 [ 157.966130][ C0] R13: ffffc9000ccb7700 R14: 0000000000000041 R15: 0000000000000041 [ 157.966148][ C0] ? vprintk_emit+0x301/0x600 [ 157.966149][ T58] worker_thread+0xa55/0xfc0 [ 157.966174][ C0] ? vprintk_emit+0x447/0x600 [ 157.966206][ T58] kthread+0x2fa/0x390 [ 157.966205][ C0] ? vprintk_emit+0x301/0x600 [ 157.966224][ T58] ? pr_cont_work+0x560/0x560 [ 157.966230][ C0] ? printk_sprint+0x460/0x460 [ 157.966250][ T58] ? kthread_blkcg+0xd0/0xd0 [ 157.966255][ C0] ? _printk+0xd0/0x110 [ 157.966269][ T58] ret_from_fork+0x48/0x80 [ 157.966274][ C0] ? copy_from_kernel_nofault+0x1d2/0x320 [ 157.966290][ T58] ? kthread_blkcg+0xd0/0xd0 [ 157.966311][ T58] ret_from_fork_asm+0x11/0x20 [ 157.966315][ C0] _printk+0xd0/0x110 [ 157.966355][ T58] [ 157.966344][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 157.966706][ T58] Kernel Offset: disabled