last executing test programs: 23m17.532971948s ago: executing program 32 (id=2239): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r2, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 22m40.584576987s ago: executing program 33 (id=2521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0xae, &(0x7f0000000680)=ANY=[], 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 22m36.316372996s ago: executing program 34 (id=2548): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0x1000) 20m18.367578004s ago: executing program 35 (id=3000): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) 13m4.657257952s ago: executing program 36 (id=5540): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r0, 0x4, 0x2400) 10m8.703175883s ago: executing program 37 (id=8409): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x2}, 0x8) 9m0.890620764s ago: executing program 4 (id=9231): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x8000}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000002c0)={r1, 0x1, 0x2000, 0x8000}) 9m0.6048096s ago: executing program 4 (id=9233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r0, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x271092ad2b94f172}}}], 0x18}}], 0x1, 0x24000084) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x51, 0x80, 0xfe, 0x0, 0x9, 0x9, 0x8, 0x58, 0x0, 0x17, 0x9}, 0xe) recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/21, 0x15}, 0x1ff}], 0x4000000000001bf, 0x40000023, 0x0) 8m59.52478137s ago: executing program 4 (id=9243): socket(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') close(0x3) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) 8m59.140645507s ago: executing program 4 (id=9248): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000006fc0)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000046b000/0x2000)=nil, 0x2000}, 0x5}) 8m58.830789064s ago: executing program 4 (id=9253): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xc0010015, 0xec000000, 0x1}]}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x48) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000000200)={0x7, 'veth1_vlan\x00', {0x4}, 0xc}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x3}, &(0x7f0000000180)=0x28) setsockopt$inet_mreqsrc(r4, 0x0, 0x25, &(0x7f0000000040)={@multicast1, @empty, @local}, 0xc) r5 = openat(0xffffffffffffff9c, 0x0, 0x4642, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x2010, r5, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) 8m55.478514767s ago: executing program 4 (id=9265): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000001e3aff070000000003000000181100008ec9913df3dff15b9e934e476b2c8cca6c175f141f4d43aed573464e3c54b5fb181ccea7e07752b1f35fe4efd73ab23cbf7d526fa6cd5427695ccaaabed3a446391f2d8e4b51696073b16ea3481bf4e2337c28423a9790ff57d85de3ee9354970a15e4b0068e21b9be0c"], &(0x7f0000000a00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0x1], &(0x7f0000000ac0)=[{0x2, 0x2, 0xd, 0x2}, {0x3, 0x3, 0x5, 0x1}], 0x10, 0x8000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003e3680a7131df43af74a42b722af9d2ecd6f5bb6d6d93cddbd5f1fab799b3e6d0cd8d21d60a5171db355a1b15e1281c0b332a0dc64b4fff7df2a8b06e2e7d92eb1e48ca86ccf6b2a012dd3b612c4bc4702f106a9d9e3f6d47d3889381d1e42d5250cc40c46508c13b20af0f5a94691c332a878b8018903f91f17dbc6658d95eb1619ea7b415750f2346e4f8bb5005d4"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m40.297415304s ago: executing program 38 (id=9265): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000001e3aff070000000003000000181100008ec9913df3dff15b9e934e476b2c8cca6c175f141f4d43aed573464e3c54b5fb181ccea7e07752b1f35fe4efd73ab23cbf7d526fa6cd5427695ccaaabed3a446391f2d8e4b51696073b16ea3481bf4e2337c28423a9790ff57d85de3ee9354970a15e4b0068e21b9be0c"], &(0x7f0000000a00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0x9, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0x1], &(0x7f0000000ac0)=[{0x2, 0x2, 0xd, 0x2}, {0x3, 0x3, 0x5, 0x1}], 0x10, 0x8000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003e3680a7131df43af74a42b722af9d2ecd6f5bb6d6d93cddbd5f1fab799b3e6d0cd8d21d60a5171db355a1b15e1281c0b332a0dc64b4fff7df2a8b06e2e7d92eb1e48ca86ccf6b2a012dd3b612c4bc4702f106a9d9e3f6d47d3889381d1e42d5250cc40c46508c13b20af0f5a94691c332a878b8018903f91f17dbc6658d95eb1619ea7b415750f2346e4f8bb5005d4"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m57.885156193s ago: executing program 6 (id=9657): unshare(0xc020680) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) 7m57.554637254s ago: executing program 6 (id=9660): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x1, 0xfffffffffffffffc, 0x800000df}) write$P9_RLINK(r0, &(0x7f00000002c0)={0x7, 0x47, 0x1}, 0x7) 7m57.387317981s ago: executing program 6 (id=9662): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000880)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x1, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) 7m57.148641543s ago: executing program 6 (id=9663): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00', 0x152) 7m56.913607731s ago: executing program 6 (id=9666): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8100202}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000085}, 0x24040884) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x3, 0x66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}) 7m53.503798642s ago: executing program 6 (id=9687): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x82, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x10040], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x9, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x5, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x8, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x103], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x100, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xfffe, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m53.046894889s ago: executing program 39 (id=9687): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x82, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5b2, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x10007, 0x4, 0x3c5b, 0x1, 0xb, 0x40000009, 0xfffffffd, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0x11, 0x0, 0xffffffff, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8b, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x10040], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8002, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x9, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x6, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x5, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x8, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0xffffffff, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x103], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x100, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2002, 0xf, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x8, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7b, 0x20100, 0x9602, 0x4, 0x2, 0xfffe, 0x6, 0x1, 0x10080, 0x6, 0x2, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 7m37.3696813s ago: executing program 0 (id=9801): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)}, {0x0}], 0x2}) 7m34.607325666s ago: executing program 0 (id=9813): socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1}, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) 7m34.259620816s ago: executing program 0 (id=9815): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cbe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xd, 0x0, &(0x7f00000000c0)) 7m32.510008855s ago: executing program 0 (id=9823): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, 0x0, &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 7m32.298023424s ago: executing program 0 (id=9825): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0x1143f3, 0x35ef0}) 7m23.616871337s ago: executing program 0 (id=9853): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d00000524060001052400fdff0d240f0100000000000000000006241a0000000905970308000400000904010000020d00000904010102020d00000905820200020008080905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x2d, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0xd, 0x7f, 0xb, 0x20, 0x9}, 0x8, &(0x7f0000000940)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x1}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1, 0x10, 0x10, 0x10, 0x10, 0x10, 0x2, 0x10, 0xe, 0x10, 0xd, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m23.416664184s ago: executing program 40 (id=9853): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000202505a1a440000102030109025c0002010000000904000001020d00000524060001052400fdff0d240f0100000000000000000006241a0000000905970308000400000904010000020d00000904010102020d00000905820200020008080905"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$printer(0x4, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0xa0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x6, 0x2d, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x110, 0xd, 0x7f, 0xb, 0x20, 0x9}, 0x8, &(0x7f0000000940)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x1}]}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x1, 0x10, 0x10, 0x10, 0x10, 0x10, 0x2, 0x10, 0xe, 0x10, 0xd, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3m47.512931222s ago: executing program 1 (id=10932): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x845c5000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) acct(0xfffffffffffffffe) 3m43.513493041s ago: executing program 1 (id=10939): syz_open_dev$hidraw(0x0, 0x0, 0x280) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0a090720020100040600"], 0xd) socket$unix(0x1, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, 0x0, 0x4000080) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0)="04", 0x1, 0x11, 0x0, 0x1a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) io_submit(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x28682, 0x0) 3m43.348992732s ago: executing program 1 (id=10942): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) mount$9p_virtio(&(0x7f0000000080), 0x0, 0x0, 0x8002, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xb053, 0x2, 0xfffffffe, 0x338, 0x0, r0}, 0x0, 0x0) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m41.883737506s ago: executing program 1 (id=10946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 3m40.703014421s ago: executing program 1 (id=10948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 3m40.557932797s ago: executing program 1 (id=10949): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) splice(r0, 0x0, r2, 0x0, 0x3ca, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xffdd) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) write(0xffffffffffffffff, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x80) 3m25.288217356s ago: executing program 41 (id=10949): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) splice(r0, 0x0, r2, 0x0, 0x3ca, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xffdd) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) write(0xffffffffffffffff, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x80) 3m0.342589371s ago: executing program 5 (id=11050): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0xffffd000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xfffffd21, &(0x7f0000000000)=ANY=[]) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)=""/4096, 0x1000}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m56.80202804s ago: executing program 5 (id=11057): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) 2m53.586293328s ago: executing program 5 (id=11061): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x105700, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0xa4, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0x15, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0x4, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x3000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0x1500, 0x3000, [0x9, 0x204, 0x5b, 0x8]}) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0xc0105500, &(0x7f0000000040)=ANY=[@ANYRESHEX=r3]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m50.866133752s ago: executing program 5 (id=11068): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) 2m49.238567186s ago: executing program 5 (id=11070): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0x0, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m46.430400368s ago: executing program 5 (id=11073): socket$kcm(0x2, 0x3, 0x2) close(0x3) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2m30.932946588s ago: executing program 42 (id=11073): socket$kcm(0x2, 0x3, 0x2) close(0x3) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0xbd, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 25.30586014s ago: executing program 9 (id=11291): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_delete(r4) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) flock(r5, 0x1) 24.177322844s ago: executing program 8 (id=11293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x800, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) 23.454954744s ago: executing program 9 (id=11295): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 22.676052956s ago: executing program 8 (id=11297): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0x1, {0xe803, 0x1, 0x406, 0x870}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 21.397953631s ago: executing program 8 (id=11299): mount(&(0x7f0000000140)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='affs\x00', 0x200001, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB]) chroot(0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = msgget$private(0x0, 0x6c2) msgsnd(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="037cd3"], 0x2000, 0x0) 20.089382788s ago: executing program 7 (id=11302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(r4) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x8000}, 0x14) 19.198566003s ago: executing program 2 (id=11303): openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x7f) r5 = accept4(r4, 0x0, 0x0, 0x0) write(r5, &(0x7f0000000040)="cb", 0xfffffdef) 16.411996507s ago: executing program 2 (id=11305): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8be2bf425eeba3c277", 0x1cc}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 16.411067525s ago: executing program 7 (id=11306): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x60642, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 15.948599159s ago: executing program 9 (id=11307): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') 13.260850468s ago: executing program 7 (id=11309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 13.228530262s ago: executing program 8 (id=11310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x80000000, 0xffffffff, 0x0, 0xfffffffb, 0x20001, 0x249}]}) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000040)={0xa, 0x4e21, 0x5, @private2}, 0x1c, &(0x7f0000002980)=[{&(0x7f0000000700)}], 0x1}, 0x200000c0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) read$FUSE(r4, &(0x7f0000004c80)={0x2020}, 0x2020) setsockopt(r4, 0xd442, 0x7, &(0x7f0000000100), 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 12.151922687s ago: executing program 9 (id=11311): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x301200, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x100, r4}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 12.149407899s ago: executing program 2 (id=11312): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$userns(r0, &(0x7f00000002c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40000) close(0x3) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r4, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) 11.41230433s ago: executing program 7 (id=11314): sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_getscheduler(0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280), 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x40047459, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) 8.88076415s ago: executing program 9 (id=11315): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xdbc97000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x0) 8.857690255s ago: executing program 2 (id=11316): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x4208, r3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x8, r4, 0x0, 0x4, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0) 7.680449032s ago: executing program 7 (id=11318): write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@private2, @in6=@empty, 0x0, 0x57, 0x0, 0x0, 0xa, 0x0, 0x110, 0x32}, {0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffe, 0x2000000, 0x2, 0x80000000}, {0x7, 0x0, 0x4}, 0x7, 0x0, 0x1, 0x0, 0x3}, {{@in6=@local, 0x3, 0x6c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x3507, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) 7.679250064s ago: executing program 2 (id=11319): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 7.524817436s ago: executing program 8 (id=11320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 5.013447197s ago: executing program 2 (id=11321): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x191) creat(&(0x7f0000000000)='./file0\x00', 0x168) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x71, 0x40000009, 0xffffffffffffffff, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r1, 0x161, 0x40000867, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 5.012324091s ago: executing program 7 (id=11322): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x637b, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x800008d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x7a, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0x8, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf5, 0xd, 0x7fffffffffffe, 0x6, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.961978427s ago: executing program 3 (id=11323): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0xf2a, 0x714, 0x38e8, 0x8, 0x80, 0x40008, 0x40}, &(0x7f0000000140)=0x9c) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x56, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.59213037s ago: executing program 8 (id=11324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r0, 0x1c5ed000) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x400f00, &(0x7f0000000080)={0x0, 0x2909, 0x20, 0x1, 0x3cc, 0x0, 0x0}, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.349382693s ago: executing program 3 (id=11325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, 0x0, 0x0) 2.491161635s ago: executing program 3 (id=11326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r4 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x83, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') 1.652583903s ago: executing program 3 (id=11327): socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x6ba, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x14, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.067947555s ago: executing program 3 (id=11328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x204008, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [], 0x6b}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad60", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000140)=@tcp, 0x1}, 0x20) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x400) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x40811) 836.849µs ago: executing program 9 (id=11329): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) capset(0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 0s ago: executing program 3 (id=11330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0xf0, 0x12, 0x0, 0x70bd2c, 0x25dfdbfb, {0x2a, 0x1, 0x4, 0x4, {0x4e20, 0x4e24, [0xb780, 0xb5, 0xb0, 0x4], [0x0, 0x400, 0x7], 0x0, [0x448, 0x72]}, 0x4, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x5c, 0x1, "aa2cd75eee8792fc5ca92ed05e0b9fac2e0d46cb06566321b6eb53f6109d9c060c8b981e0dc9a86fce37357cd64f79b5bb50f7af5d2fac35ac884d135d68d51094cb0da5eee1f14d26cd29fa7846f0af509017920236077f"}, @INET_DIAG_REQ_BYTECODE={0x41, 0x1, "27199d48bb8d294da7a9f1e92c39fe4d5e522150568e554a4f22cb47746893fe340fda822d603f95480b346f6deacbb2f09b6dda2aed2672450afb09a2"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x840}, 0x4040090) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): VLAN 0 to HW filter on device team0 [ 1323.529987][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.533565][ T5966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1323.600766][T31451] block nbd64: NBD_DISCONNECT [ 1323.658480][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.658567][ T5966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.008305][ T5966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.008326][ T5966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.202724][T31612] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10102'. [ 1324.486135][T31451] udevd[31451]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1325.312202][T31167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1325.747945][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.482293][T31167] veth0_vlan: entered promiscuous mode [ 1326.576596][T31167] veth1_vlan: entered promiscuous mode [ 1326.811871][T31167] veth0_macvtap: entered promiscuous mode [ 1326.869087][T31167] veth1_macvtap: entered promiscuous mode [ 1326.981715][T31167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.056917][T31167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.197330][ T7950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.197761][ T7950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.197921][ T7950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.197955][ T7950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.332579][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1328.388872][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.388895][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.678778][ T7950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.678801][ T7950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.476707][T31738] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10129'. [ 1330.850116][T31744] netlink: 'syz.7.10131': attribute type 10 has an invalid length. [ 1331.476966][T31744] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1331.505914][ T7939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1331.674996][T21975] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1331.825263][T21975] usb 3-1: Using ep0 maxpacket: 32 [ 1331.830965][T21975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.830998][T21975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.831035][T21975] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1331.831056][T21975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.833278][T31769] loop2: detected capacity change from 0 to 7 [ 1331.863073][T31769] Dev loop2: unable to read RDB block 7 [ 1331.863125][T31769] loop2: unable to read partition table [ 1331.863339][T31769] loop2: partition table beyond EOD, truncated [ 1331.863370][T31769] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1331.942172][T21975] usb 3-1: config 0 descriptor?? [ 1332.369919][T21975] usbhid 3-1:0.0: can't add hid device: -71 [ 1332.370050][T21975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1332.420821][T21975] usb 3-1: USB disconnect, device number 37 [ 1333.428714][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1336.305198][T21975] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1336.324953][T15777] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1336.464243][T21975] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1336.464271][T21975] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.484880][T15777] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1336.484907][T15777] usb 3-1: config 0 has no interface number 0 [ 1336.487837][T15777] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1336.487866][T15777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.487885][T15777] usb 3-1: Product: syz [ 1336.487899][T15777] usb 3-1: Manufacturer: syz [ 1336.487913][T15777] usb 3-1: SerialNumber: syz [ 1336.527299][T15777] usb 3-1: config 0 descriptor?? [ 1336.550830][T21975] usb 8-1: config 0 descriptor?? [ 1336.730961][T15777] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1336.766754][T15777] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1336.767461][T15777] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1336.767573][T15777] usb 3-1: media controller created [ 1336.850851][T15777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.282684][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1338.009758][T15777] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1338.338497][T21975] usb 8-1: Cannot set autoneg [ 1338.338787][T21975] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1338.392572][T21975] usb 8-1: USB disconnect, device number 5 [ 1338.401238][T15777] usb 3-1: USB disconnect, device number 38 [ 1339.186653][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.802402][T31913] smc: adding net device bond0 with user defined pnetid SYZ2 [ 1340.816885][T31913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.851354][T31913] team0: Failed to send port change of device bond0 via netlink (err -105) [ 1340.851528][T31913] team0: Failed to send options change via netlink (err -105) [ 1340.851545][T31913] team0: Port device bond0 added [ 1341.118048][T31933] 9p: Bad value for 'wfdno' [ 1342.744897][T15777] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1342.914936][T15777] usb 8-1: Using ep0 maxpacket: 32 [ 1342.917376][T15777] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1342.917407][T15777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.950654][T15777] usb 8-1: config 0 descriptor?? [ 1343.032708][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1343.160620][T15777] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1343.184689][T15777] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1343.196423][T15777] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1343.196479][T15777] usb 8-1: media controller created [ 1343.256153][T15777] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1343.520839][T15777] DVB: Unable to find symbol dib7000p_attach() [ 1343.520857][T15777] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1343.725049][T15777] rc_core: IR keymap rc-dib0700-rc5 not found [ 1343.725071][T15777] Registered IR keymap rc-empty [ 1343.725378][T15777] dvb-usb: could not initialize remote control. [ 1343.725388][T15777] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1343.728938][T15777] usb 8-1: USB disconnect, device number 6 [ 1343.812791][T15777] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1344.308779][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.876035][T32096] Bluetooth: MGMT ver 1.23 [ 1348.906287][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1349.426032][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1349.699093][T32137] netlink: 'syz.7.10237': attribute type 10 has an invalid length. [ 1349.699118][T32137] netlink: 55 bytes leftover after parsing attributes in process `syz.7.10237'. [ 1350.148041][T32146] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10240'. [ 1354.858346][T32223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10259'. [ 1354.936899][ T7955] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.937534][ T7955] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.937558][ T7955] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.937576][ T7955] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1354.937738][T32223] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10259'. [ 1355.205813][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.206325][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1355.329006][T32231] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1355.333635][T32231] /dev/nullb0: Can't open blockdev [ 1355.429117][T32232] geneve2: entered promiscuous mode [ 1356.119394][T32247] netlink: 7 bytes leftover after parsing attributes in process `syz.1.10268'. [ 1356.455004][ T5630] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1356.482841][T32260] overlayfs: failed to clone upperpath [ 1356.626847][ T5630] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.626905][ T5630] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1356.626919][ T5630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.661574][ T5630] usb 8-1: config 0 descriptor?? [ 1356.704043][ T5630] pwc: Askey VC010 type 2 USB webcam detected. [ 1357.107036][ T5630] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1357.107777][ T5630] pwc: recv_control_msg error -32 req 02 val 2700 [ 1357.108785][ T5630] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1357.109639][ T5630] pwc: recv_control_msg error -32 req 04 val 1000 [ 1357.110562][ T5630] pwc: recv_control_msg error -32 req 04 val 1300 [ 1357.313121][ T5630] pwc: recv_control_msg error -71 req 02 val 2000 [ 1357.388847][ T5630] pwc: recv_control_msg error -71 req 02 val 2100 [ 1357.396458][ T5630] pwc: recv_control_msg error -71 req 04 val 1500 [ 1357.397188][ T5630] pwc: recv_control_msg error -71 req 02 val 2500 [ 1357.397996][ T5630] pwc: recv_control_msg error -71 req 02 val 2400 [ 1357.402919][ T5630] pwc: recv_control_msg error -71 req 02 val 2600 [ 1357.403802][ T5630] pwc: recv_control_msg error -71 req 02 val 2900 [ 1357.408738][ T5630] pwc: recv_control_msg error -71 req 02 val 2800 [ 1357.409865][ T5630] pwc: recv_control_msg error -71 req 04 val 1100 [ 1357.413685][ T5630] pwc: recv_control_msg error -71 req 04 val 1200 [ 1357.530870][ T5630] pwc: Registered as video103. [ 1357.585904][ T5630] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input71 [ 1357.625497][ T5630] usb 8-1: USB disconnect, device number 7 [ 1359.785015][ T31] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 1359.958221][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1359.958254][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.958292][ T31] usb 8-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1359.958315][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.009718][ T31] usb 8-1: config 0 descriptor?? [ 1360.311075][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1360.497379][ T31] elan 0003:04F3:0755.0039: failed to start in urb: -90 [ 1360.513563][ T31] elan 0003:04F3:0755.0039: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.7-1/input0 [ 1360.720462][ T31] usb 8-1: USB disconnect, device number 8 [ 1360.758101][T32357] fido_id[32357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1360.788688][T32361] netlink: 'syz.3.10302': attribute type 1 has an invalid length. [ 1360.788711][T32361] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10302'. [ 1360.788733][T32361] netlink: 658 bytes leftover after parsing attributes in process `syz.3.10302'. [ 1360.788749][T32361] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10302'. [ 1360.945817][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1361.497834][T32384] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1361.591505][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.591560][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.192617][T32396] loop2: detected capacity change from 0 to 7 [ 1362.211709][T32396] loop2: [ 1362.211741][T32396] loop2: partition table partially beyond EOD, truncated [ 1362.424894][ T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1362.661507][ T31] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1362.661538][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.697853][ T31] usb 6-1: config 0 descriptor?? [ 1362.722241][ T31] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1363.529364][ T31] gspca_sunplus: reg_w_riv err -71 [ 1363.529460][ T31] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1363.532643][ T31] usb 6-1: USB disconnect, device number 4 [ 1364.595505][ T5630] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1364.746160][ T5630] usb 3-1: Using ep0 maxpacket: 32 [ 1364.751017][ T5630] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1364.751044][ T5630] usb 3-1: config 0 has no interface number 0 [ 1364.766270][ T5630] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1364.766301][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.766319][ T5630] usb 3-1: Product: syz [ 1364.766333][ T5630] usb 3-1: Manufacturer: syz [ 1364.766348][ T5630] usb 3-1: SerialNumber: syz [ 1364.771535][ T5630] usb 3-1: config 0 descriptor?? [ 1364.779123][ T5630] smsc95xx v2.0.0 [ 1365.206335][ T5630] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1365.206368][ T5630] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1365.356379][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1366.442930][ T5630] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1366.443243][ T5630] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1366.455163][ T5630] usb 3-1: USB disconnect, device number 39 [ 1366.708233][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1367.032316][T32498] netlink: 884 bytes leftover after parsing attributes in process `syz.5.10346'. [ 1367.842238][T32528] a9ff30bb9: entered allmulticast mode [ 1367.869827][T32528] tunl0: entered allmulticast mode [ 1367.869954][T32528] gre0: entered allmulticast mode [ 1367.870031][T32528] gretap0: entered allmulticast mode [ 1367.870104][T32528] erspan0: entered allmulticast mode [ 1367.870187][T32528] ip_vti0: entered allmulticast mode [ 1367.870279][T32528] ip6_vti0: entered allmulticast mode [ 1367.870398][T32528] sit0: entered allmulticast mode [ 1367.870514][T32528] ip6tnl0: entered allmulticast mode [ 1367.870596][T32528] ip6gre0: entered allmulticast mode [ 1367.870680][T32528] ip6gretap0: entered allmulticast mode [ 1367.870756][T32528] vcan0: entered allmulticast mode [ 1367.870844][T32528] bond0: entered allmulticast mode [ 1367.870853][T32528] bond_slave_0: entered allmulticast mode [ 1367.870864][T32528] bond_slave_1: entered allmulticast mode [ 1367.871200][T32528] team0: entered allmulticast mode [ 1367.871211][T32528] team_slave_0: entered allmulticast mode [ 1367.871221][T32528] team_slave_1: entered allmulticast mode [ 1367.871231][T32528] veth0_to_bridge: entered allmulticast mode [ 1367.871472][T32528] dummy0: entered allmulticast mode [ 1367.871663][T32528] nlmon0: entered allmulticast mode [ 1367.871757][T32528] caif0: entered allmulticast mode [ 1367.872166][T32528] batadv0: entered allmulticast mode [ 1367.872257][T32528] vxcan0: entered allmulticast mode [ 1367.872372][T32528] vxcan1: entered allmulticast mode [ 1367.872473][T32528] veth0: entered allmulticast mode [ 1367.872563][T32528] veth1: entered allmulticast mode [ 1367.872679][T32528] wg0: entered allmulticast mode [ 1367.872839][T32528] wg1: entered allmulticast mode [ 1367.872930][T32528] wg2: entered allmulticast mode [ 1368.063154][T32528] bridge_slave_0: entered allmulticast mode [ 1368.063392][T32528] veth1_to_bridge: entered allmulticast mode [ 1368.093192][T32528] bridge_slave_1: entered allmulticast mode [ 1368.093389][T32528] veth0_to_bond: entered allmulticast mode [ 1368.099944][T32528] veth1_to_bond: entered allmulticast mode [ 1368.101158][T32528] veth0_to_team: entered allmulticast mode [ 1368.104469][T32528] veth1_to_team: entered allmulticast mode [ 1368.109008][T32528] veth0_to_batadv: entered allmulticast mode [ 1368.109197][T32528] batadv_slave_0: entered allmulticast mode [ 1368.109380][T32528] veth1_to_batadv: entered allmulticast mode [ 1368.109546][T32528] batadv_slave_1: entered allmulticast mode [ 1368.109719][T32528] xfrm0: entered allmulticast mode [ 1368.116668][T32528] veth0_to_hsr: entered allmulticast mode [ 1368.116848][T32528] hsr_slave_0: entered allmulticast mode [ 1368.117041][T32528] veth1_to_hsr: entered allmulticast mode [ 1368.119588][T32528] hsr_slave_1: entered allmulticast mode [ 1368.119795][T32528] hsr0: entered allmulticast mode [ 1368.119954][T32528] veth1_virt_wifi: entered allmulticast mode [ 1368.120108][T32528] veth0_virt_wifi: entered allmulticast mode [ 1368.124108][T32528] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1368.124428][T32528] veth0_vlan: entered allmulticast mode [ 1368.124585][T32528] vlan0: entered allmulticast mode [ 1368.128783][T32528] vlan1: entered allmulticast mode [ 1368.364813][T32528] macvlan1: entered allmulticast mode [ 1368.365034][T32528] ipvlan0: entered allmulticast mode [ 1368.365213][T32528] ipvlan1: entered allmulticast mode [ 1368.365327][T32528] veth1_macvtap: entered allmulticast mode [ 1368.365420][T32528] veth0_macvtap: entered allmulticast mode [ 1368.365513][T32528] macvtap0: entered allmulticast mode [ 1368.365619][T32528] macsec0: entered allmulticast mode [ 1368.365697][T32528] geneve0: entered allmulticast mode [ 1368.365835][T32528] geneve1: entered allmulticast mode [ 1368.365959][T32528] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1368.366064][T32528] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 1368.366175][T32528] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 1368.366286][T32528] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 1368.366429][T32528] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1368.366532][T32528] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1368.366644][T32528] vxlan0: entered allmulticast mode [ 1368.366723][T32528] xfrm1: entered allmulticast mode [ 1368.366815][T32528] ipip0: entered allmulticast mode [ 1368.498019][T32528] vxlan1: entered allmulticast mode [ 1368.565329][T32528] ip6gre1: entered allmulticast mode [ 1368.616585][T32528] bridge1: entered allmulticast mode [ 1368.636220][T32528] C: entered allmulticast mode [ 1368.743825][T32528] bond1: entered allmulticast mode [ 1368.791259][T32528] 7: entered allmulticast mode [ 1368.792195][T32528] ip6tnl1: entered allmulticast mode [ 1368.812736][T32528] macvlan2: entered allmulticast mode [ 1368.812967][T32528] vxlan2: entered allmulticast mode [ 1368.813121][T32528] ip6tnl2: entered allmulticast mode [ 1368.818343][T32528] bond2: entered allmulticast mode [ 1368.818570][T32528] syztnl1: entered allmulticast mode [ 1368.818698][T32528] syztnl0: entered allmulticast mode [ 1368.818821][T32528] macvtap1: entered allmulticast mode [ 1368.818981][T32528] ip6tnl3: entered allmulticast mode [ 1368.822316][T32528] sit1: entered allmulticast mode [ 1368.892769][T32528] macvlan3: entered allmulticast mode [ 1368.900351][T32528] macvlan4: entered allmulticast mode [ 1368.937795][T32528] gre1: entered allmulticast mode [ 1368.952115][T30707] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1368.974065][T30707] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.006128][T30707] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.485911][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1369.485934][ T37] audit: type=1800 audit(2000000002.550:1891): pid=32557 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.10364" name="bus" dev="ramfs" ino=118552 res=0 errno=0 [ 1369.635322][ T5939] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1369.650562][T32568] binder: 32567:32568 ioctl c0306201 0 returned -14 [ 1369.785114][ T5939] usb 8-1: Using ep0 maxpacket: 8 [ 1369.788528][ T5939] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1369.788557][ T5939] usb 8-1: config 0 has no interface number 0 [ 1369.788606][ T5939] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1369.788629][ T5939] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1369.788653][ T5939] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1369.788678][ T5939] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1369.788720][ T5939] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1369.788742][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.799474][ T5939] usb 8-1: config 0 descriptor?? [ 1369.892467][ T5939] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1370.099481][T21975] usb 8-1: USB disconnect, device number 9 [ 1370.099655][ C0] ldusb 8-1:0.55: usb_submit_urb failed (-19) [ 1370.123152][T21975] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1370.535157][ T5939] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1370.695373][ T5939] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1370.695404][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.695424][ T5939] usb 3-1: Product: syz [ 1370.695438][ T5939] usb 3-1: Manufacturer: syz [ 1370.695453][ T5939] usb 3-1: SerialNumber: syz [ 1370.744332][ T5939] usb 3-1: config 0 descriptor?? [ 1370.756168][T32599] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10374'. [ 1370.756196][T32599] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10374'. [ 1370.958745][ T5939] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1371.191358][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.839133][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1372.759625][ T5939] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1372.796376][ T5939] usb 3-1: USB disconnect, device number 40 [ 1373.584961][ T5939] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1373.735026][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 1373.737470][ T5939] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1373.737498][ T5939] usb 3-1: config 0 has no interface number 0 [ 1373.740120][ T5939] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1373.740149][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.740169][ T5939] usb 3-1: Product: syz [ 1373.740184][ T5939] usb 3-1: Manufacturer: syz [ 1373.740198][ T5939] usb 3-1: SerialNumber: syz [ 1373.775287][ T5939] usb 3-1: config 0 descriptor?? [ 1373.806862][ T5939] smsc95xx v2.0.0 [ 1374.880581][ T5939] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1374.880602][ T5939] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1374.880976][ T5939] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1374.881155][ T5939] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1374.973295][ T5939] usb 3-1: USB disconnect, device number 41 [ 1375.447403][T32671] pim6reg1: entered promiscuous mode [ 1375.447430][T32671] pim6reg1: entered allmulticast mode [ 1375.946930][ T5939] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1376.090781][T32690] overlayfs: failed to clone upperpath [ 1376.101131][ T5939] usb 8-1: Using ep0 maxpacket: 32 [ 1376.103182][ T5939] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1376.103213][ T5939] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1376.103233][ T5939] usb 8-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1376.103244][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.155370][ T5939] usb 8-1: config 0 descriptor?? [ 1376.316517][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1376.397556][ T5939] usbhid 8-1:0.0: can't add hid device: -71 [ 1376.397685][ T5939] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1376.489190][ T5939] usb 8-1: USB disconnect, device number 10 [ 1376.974856][T21446] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1377.134901][T21446] usb 8-1: Using ep0 maxpacket: 32 [ 1377.146107][T21446] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 1377.146141][T21446] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1377.146176][T21446] usb 8-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 1377.146199][T21446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.152123][T21446] usb 8-1: config 0 descriptor?? [ 1377.587007][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1377.648588][T21446] input: HID 054c:03d5 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:054C:03D5.003A/input/input72 [ 1377.820586][T21446] sony 0003:054C:03D5.003A: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.7-1/input0 [ 1377.861833][T21446] usb 8-1: USB disconnect, device number 11 [ 1378.108881][T32738] fido_id[32738]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1380.075170][ T5630] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1380.228143][ T5630] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.228212][ T5630] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1380.228235][ T5630] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.279256][ T5630] usb 3-1: config 0 descriptor?? [ 1380.294423][ T5630] pwc: Askey VC010 type 2 USB webcam detected. [ 1380.730054][ T5630] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1380.731075][ T5630] pwc: recv_control_msg error -32 req 02 val 2700 [ 1380.731923][ T5630] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1380.732653][ T5630] pwc: recv_control_msg error -32 req 04 val 1000 [ 1380.733625][ T5630] pwc: recv_control_msg error -32 req 04 val 1300 [ 1380.734800][ T5630] pwc: recv_control_msg error -32 req 04 val 1400 [ 1380.936884][ T5630] pwc: recv_control_msg error -71 req 02 val 2100 [ 1380.938682][ T5630] pwc: recv_control_msg error -71 req 04 val 1500 [ 1380.939891][ T5630] pwc: recv_control_msg error -71 req 02 val 2500 [ 1380.940357][ T5630] pwc: recv_control_msg error -71 req 02 val 2400 [ 1380.940828][ T5630] pwc: recv_control_msg error -71 req 02 val 2600 [ 1380.941278][ T5630] pwc: recv_control_msg error -71 req 02 val 2900 [ 1380.941728][ T5630] pwc: recv_control_msg error -71 req 02 val 2800 [ 1380.942412][ T5630] pwc: recv_control_msg error -71 req 04 val 1100 [ 1380.942883][ T5630] pwc: recv_control_msg error -71 req 04 val 1200 [ 1381.043691][ T5630] pwc: Registered as video103. [ 1381.051489][ T5630] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input73 [ 1381.065768][ T5630] usb 3-1: USB disconnect, device number 42 [ 1381.976131][ T363] loop2: detected capacity change from 0 to 7 [ 1381.993413][ T363] Dev loop2: unable to read RDB block 7 [ 1381.993461][ T363] loop2: unable to read partition table [ 1381.993692][ T363] loop2: partition table beyond EOD, truncated [ 1381.993710][ T363] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1382.072223][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1383.049113][ T382] kvm: faulting far call emulation tainted memory [ 1383.346927][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1384.770771][ T421] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1387.827483][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.155004][T21446] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1388.345067][T21446] usb 3-1: Using ep0 maxpacket: 16 [ 1388.347229][T21446] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1388.347259][T21446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1388.347285][T21446] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1388.349780][T21446] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1388.349808][T21446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.349827][T21446] usb 3-1: Product: syz [ 1388.349842][T21446] usb 3-1: Manufacturer: syz [ 1388.349856][T21446] usb 3-1: SerialNumber: syz [ 1388.445073][T21446] usb 3-1: config 0 descriptor?? [ 1388.447686][ T484] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1388.496761][T21446] hub 3-1:0.0: bad descriptor, ignoring hub [ 1388.496801][T21446] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1388.569916][T21446] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input74 [ 1388.599988][ T5630] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 1388.614306][ T5630] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1388.759419][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1389.121932][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1389.780426][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1389.861569][ T5630] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1390.075137][ T5630] usb 6-1: Using ep0 maxpacket: 32 [ 1390.077615][ T5630] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 1390.077640][ T5630] usb 6-1: config 0 has no interface number 0 [ 1390.077687][ T5630] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1390.081347][ T5630] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1390.081375][ T5630] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.081394][ T5630] usb 6-1: Product: syz [ 1390.081408][ T5630] usb 6-1: Manufacturer: syz [ 1390.081422][ T5630] usb 6-1: SerialNumber: syz [ 1390.087471][ T5630] usb 6-1: config 0 descriptor?? [ 1390.090664][ T512] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1390.215472][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1390.366463][ T512] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1392.035215][ T5630] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1392.035249][ T5630] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1392.035531][ T5630] asix 6-1:0.188: probe with driver asix failed with error -71 [ 1392.128639][ T5630] usb 6-1: USB disconnect, device number 5 [ 1393.605320][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1394.172157][ T7935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1394.343448][ T558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10504'. [ 1394.393468][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 1395.632843][ T583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10513'. [ 1395.706956][ T583] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10513'. [ 1397.282975][ T611] bridge2: entered allmulticast mode [ 1397.500704][ T616] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10525'. [ 1397.859933][T21446] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1397.962759][ T5630] usb 3-1: USB disconnect, device number 43 [ 1398.013250][T21446] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.013277][T21446] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1398.038295][T21446] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1398.038318][T21446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1398.038329][T21446] usb 6-1: SerialNumber: syz [ 1398.095050][T15777] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1398.258783][T15777] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.258816][T15777] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1398.258837][T15777] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1398.258877][T15777] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1398.258899][T15777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.292662][T15777] usb 8-1: config 0 descriptor?? [ 1398.366601][T21446] usb 6-1: 0:2 : does not exist [ 1398.680859][ T628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10530'. [ 1398.737449][ T629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10530'. [ 1398.888990][T15777] plantronics 0003:047F:FFFF.003C: reserved main item tag 0xd [ 1398.928449][T15777] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 1398.995562][T21446] usb 6-1: USB disconnect, device number 6 [ 1399.081763][T31451] udevd[31451]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1399.122533][ T31] usb 8-1: USB disconnect, device number 12 [ 1399.204915][ T634] fido_id[634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 1399.470252][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10533'. [ 1399.758626][ T640] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1400.003915][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1400.634828][T21446] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1400.679248][ T5630] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1400.785055][T21446] usb 8-1: Using ep0 maxpacket: 16 [ 1400.790718][T21446] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.790770][T21446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1400.790795][T21446] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1400.790815][T21446] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1400.790835][T21446] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1400.792956][T21446] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1400.792982][T21446] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1400.792999][T21446] usb 8-1: Manufacturer: syz [ 1400.847737][T21446] usb 8-1: config 0 descriptor?? [ 1400.866838][ T5630] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1400.866865][ T5630] usb 3-1: config 0 has no interface number 0 [ 1400.866913][ T5630] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1400.869989][ T5630] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1400.870018][ T5630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.870038][ T5630] usb 3-1: Product: syz [ 1400.870052][ T5630] usb 3-1: Manufacturer: syz [ 1400.870067][ T5630] usb 3-1: SerialNumber: syz [ 1400.939407][ T5630] usb 3-1: config 0 descriptor?? [ 1401.158798][ T678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10546'. [ 1401.245014][T21446] rc_core: IR keymap rc-hauppauge not found [ 1401.245035][T21446] Registered IR keymap rc-empty [ 1401.245206][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.325225][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.346908][T21446] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1401.349723][T21446] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input76 [ 1401.372612][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.385830][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.541886][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.555324][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.708836][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.737611][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.754891][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.774905][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.795101][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.814898][T21446] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1401.857275][T21446] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1401.857302][T21446] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1401.860576][ T5630] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1401.874863][T21446] usb 8-1: USB disconnect, device number 13 [ 1402.314873][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1402.466666][ T31] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1402.466695][ T31] usb 6-1: config 1 has no interface number 0 [ 1402.466740][ T31] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.466766][ T31] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1402.466800][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 173, changing to 11 [ 1402.466825][ T31] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34113, setting to 1024 [ 1402.475603][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1402.475633][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.475652][ T31] usb 6-1: Product: syz [ 1402.475665][ T31] usb 6-1: Manufacturer: syz [ 1402.475679][ T31] usb 6-1: SerialNumber: syz [ 1402.751162][ T685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1403.124047][ T5630] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1403.124075][ T5630] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1403.124337][ T5630] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1403.170777][ T5630] usb 3-1: USB disconnect, device number 44 [ 1403.355681][ T685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1403.375330][ T31] cdc_ncm 6-1:1.1: bind() failure [ 1403.582632][ T5630] usb 6-1: USB disconnect, device number 7 [ 1404.039755][ T731] netlink: 'syz.7.10566': attribute type 4 has an invalid length. [ 1404.102608][ T733] netlink: 'syz.7.10566': attribute type 4 has an invalid length. [ 1405.745755][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1410.245218][ T5796] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1410.334963][ T814] netlink: 'syz.3.10594': attribute type 1 has an invalid length. [ 1410.394876][ T5796] usb 8-1: Using ep0 maxpacket: 32 [ 1410.404604][ T5796] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1410.441603][ T5796] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1410.441634][ T5796] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1410.441654][ T5796] usb 8-1: Product: syz [ 1410.441667][ T5796] usb 8-1: Manufacturer: syz [ 1410.441682][ T5796] usb 8-1: SerialNumber: syz [ 1410.490355][ T5796] usb 8-1: config 0 descriptor?? [ 1410.491376][ T811] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1410.594304][ T814] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1410.616161][ T817] veth0_to_bond: left allmulticast mode [ 1410.668309][ T817] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1411.506423][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1412.794483][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.065712][ T5630] usb 8-1: USB disconnect, device number 14 [ 1413.141209][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10604'. [ 1413.141408][ T850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10604'. [ 1413.477668][ T859] binder: BINDER_SET_CONTEXT_MGR already set [ 1413.477685][ T859] binder: 858:859 ioctl 4018620d 200000000040 returned -16 [ 1415.711900][ T883] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 1416.187005][ T888] veth1_macvtap: left promiscuous mode [ 1416.187034][ T888] macsec0: entered promiscuous mode [ 1416.258469][ T889] veth1_macvtap: entered promiscuous mode [ 1416.258819][ T889] macsec0: left promiscuous mode [ 1416.605831][ T5630] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1416.609322][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.959438][ T5630] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1416.961365][ T5630] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1416.961401][ T5630] usb 3-1: can't read configurations, error -71 [ 1418.599553][ T7955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.032679][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10636'. [ 1420.032696][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10636'. [ 1421.742230][ T977] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1421.746906][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.014828][ T5939] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1422.164905][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 1422.168569][ T5939] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 1422.168598][ T5939] usb 6-1: config 0 has no interface number 0 [ 1422.168630][ T5939] usb 6-1: config 0 interface 23 has no altsetting 0 [ 1422.168664][ T5939] usb 6-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b [ 1422.168688][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.174502][ T5939] usb 6-1: config 0 descriptor?? [ 1422.909202][ T5939] usb 6-1: string descriptor 0 read error: -71 [ 1422.912725][ T5939] gspca_main: mr97310a-2.14.0 probing 08ca:0111 [ 1422.912852][ T5939] gspca_mr97310a: reg write [21] error -22 [ 1422.924992][ T5939] mr97310a 6-1:0.23: probe with driver mr97310a failed with error -22 [ 1422.965238][ T5939] usb 6-1: USB disconnect, device number 8 [ 1423.030726][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.030798][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.185490][ T5801] Bluetooth: hci3: command 0x1003 tx timeout [ 1423.194422][ T5800] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1423.699172][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.106982][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 1426.077780][T21446] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1426.492770][T21446] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1426.492812][T21446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1426.492836][T21446] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1426.492856][T21446] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1426.492900][T21446] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1426.492922][T21446] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.572741][T21446] usb 6-1: config 0 descriptor?? [ 1427.434330][ T1052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.488787][ T1052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.508133][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.545571][T21446] plantronics 0003:047F:FFFF.003D: ignoring exceeding usage max [ 1427.588754][T21446] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1428.908201][ T1089] usb 6-1: string descriptor 0 read error: -71 [ 1429.474359][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1430.075120][ T5939] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 1430.299821][ T5939] usb 6-1: device firmware changed [ 1430.352369][ T5796] usb 6-1: USB disconnect, device number 9 [ 1430.514815][ T5796] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1430.734181][ T5939] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1430.737068][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.737117][ T5796] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1430.737141][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.747028][ T5796] usb 6-1: config 0 descriptor?? [ 1430.901982][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1430.902069][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.902109][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1430.902133][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.991972][ T5939] usb 3-1: config 0 descriptor?? [ 1431.138904][ T5939] hub 3-1:0.0: USB hub found [ 1431.217270][ T5939] hub 3-1:0.0: 1 port detected [ 1431.233333][ T5796] logitech-djreceiver 0003:046D:C71F.003E: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0 [ 1431.388678][ T5796] usb 6-1: USB disconnect, device number 10 [ 1432.183911][ T5939] hub 3-1:0.0: activate --> -90 [ 1432.222472][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10708'. [ 1432.252807][ T5939] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 1432.257038][ T31] usb 3-1: USB disconnect, device number 47 [ 1432.264150][T30710] usb 3-1: Failed to suspend device, error -19 [ 1432.506833][ T1180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1432.902936][ T31] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1433.052679][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 1433.062281][ T31] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1433.062309][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.062327][ T31] usb 8-1: Product: syz [ 1433.062341][ T31] usb 8-1: Manufacturer: syz [ 1433.062355][ T31] usb 8-1: SerialNumber: syz [ 1433.096576][ T31] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1433.096598][ T31] r8152-cfgselector 8-1: config 0 descriptor?? [ 1433.271478][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.467302][ T31] r8152-cfgselector 8-1: Unknown version 0x0000 [ 1433.467798][ T31] r8152-cfgselector 8-1: bad CDC descriptors [ 1433.522454][ T31] r8152-cfgselector 8-1: USB disconnect, device number 15 [ 1435.459312][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1436.034870][ T31] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1436.184826][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 1436.187143][ T31] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1436.187202][ T31] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1436.187225][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1436.187249][ T31] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1436.187272][ T31] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1436.187313][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1436.187336][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.594435][ T1232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.651608][ T9] usb 6-1: USB disconnect, device number 11 [ 1438.061409][ T1257] kvm: emulating exchange as write [ 1438.157637][ T1259] bond0: (slave dummy0): Releasing backup interface [ 1438.247046][ T1259] bridge_slave_0: left allmulticast mode [ 1438.247079][ T1259] bridge_slave_0: left promiscuous mode [ 1438.247443][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.386479][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.555153][ T1259] bridge_slave_1: left allmulticast mode [ 1438.555183][ T1259] bridge_slave_1: left promiscuous mode [ 1438.555451][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.687150][ T1259] bond0: (slave bond_slave_0): Releasing backup interface [ 1438.800920][ T1259] bond0: (slave bond_slave_1): Releasing backup interface [ 1439.423540][ T1259] team0: Port device team_slave_0 removed [ 1439.500977][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1439.546374][ T1259] team0: Port device team_slave_1 removed [ 1439.547430][ T1259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1439.547457][ T1259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1439.547874][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1439.564203][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1439.602311][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1439.615450][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1439.709908][ T1259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1439.709930][ T1259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.777370][ T1259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1439.978861][ T1279] lo speed is unknown, defaulting to 1000 [ 1440.464349][ T1279] chnl_net:caif_netlink_parms(): no params data found [ 1440.551002][ T31] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 1440.699642][ T31] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1440.699672][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.699690][ T31] usb 6-1: Product: syz [ 1440.699699][ T31] usb 6-1: Manufacturer: syz [ 1440.699708][ T31] usb 6-1: SerialNumber: syz [ 1440.748318][ T31] usb 6-1: config 0 descriptor?? [ 1440.781476][ T31] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1440.972546][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1441.065495][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.065789][ T1279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.068941][ T1279] bridge_slave_0: entered allmulticast mode [ 1441.098498][ T1279] bridge_slave_0: entered promiscuous mode [ 1441.101511][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.101631][ T1279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.101850][ T1279] bridge_slave_1: entered allmulticast mode [ 1441.534597][ T31] gspca_stk1135: reg_w 0x0 err -110 [ 1441.536707][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.536754][ T31] gspca_stk1135: Sensor write failed [ 1441.536943][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.536984][ T31] gspca_stk1135: Sensor write failed [ 1441.537238][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.537281][ T31] gspca_stk1135: Sensor read failed [ 1441.537444][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.537488][ T31] gspca_stk1135: Sensor read failed [ 1441.537530][ T31] gspca_stk1135: Detected sensor type unknown (0x0) [ 1441.537751][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.537792][ T31] gspca_stk1135: Sensor read failed [ 1441.538007][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.538049][ T31] gspca_stk1135: Sensor read failed [ 1441.538262][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.538304][ T31] gspca_stk1135: Sensor write failed [ 1441.538496][ T31] gspca_stk1135: serial bus timeout: status=0x00 [ 1441.538537][ T31] gspca_stk1135: Sensor write failed [ 1441.539675][ T31] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 1441.673830][ T1279] bridge_slave_1: entered promiscuous mode [ 1441.744917][T29023] Bluetooth: hci2: command tx timeout [ 1441.832736][ T1279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1441.859473][ T1279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.934614][ T1279] team0: Port device team_slave_0 added [ 1441.947066][ T1279] team0: Port device team_slave_1 added [ 1442.054928][ T31] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1442.138057][ T1279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1442.138075][ T1279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.138102][ T1279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1442.141283][ T1279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1442.141297][ T1279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1442.141311][ T1279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.214855][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 1442.217098][ T31] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1442.217161][ T31] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1442.217183][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1442.217207][ T31] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1442.217230][ T31] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1442.217271][ T31] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1442.217293][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.395757][ T1279] hsr_slave_0: entered promiscuous mode [ 1442.397105][ T1279] hsr_slave_1: entered promiscuous mode [ 1442.398018][ T1279] debugfs: 'hsr0' already exists in 'hsr' [ 1442.398044][ T1279] Cannot create hsr debugfs directory [ 1442.563240][ T31] usb 8-1: GET_CAPABILITIES returned 0 [ 1442.563289][ T31] usbtmc 8-1:16.0: can't read capabilities [ 1443.101131][T15777] usb 8-1: USB disconnect, device number 16 [ 1443.102375][ T1312] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 1443.104541][ T1330] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1443.290403][ T1279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.290441][ T1279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.399908][ T5796] usb 6-1: USB disconnect, device number 12 [ 1443.533656][ T7944] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.446194][T29023] Bluetooth: hci2: command tx timeout [ 1445.242404][ T1279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.242428][ T1279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.818705][ T1279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.818740][ T1279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.066373][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1446.600703][ T1392] syzkaller1: entered promiscuous mode [ 1446.600829][ T1392] syzkaller1: entered allmulticast mode [ 1446.616889][ T1383] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1446.687938][ T5630] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1446.847153][ T5630] usb 6-1: config 127 has an invalid interface number: 124 but max is 0 [ 1446.847182][ T5630] usb 6-1: config 127 has no interface number 0 [ 1446.847232][ T5630] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=1d.4f [ 1446.847255][ T5630] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.180082][ T5630] peak_usb 6-1:127.124: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1447.640750][ T5630] peak_usb 6-1:127.124 can0: sending command failure: -22 [ 1447.640778][ T5630] peak_usb 6-1:127.124 can0: sending command failure: -22 [ 1447.640806][ T5630] peak_usb 6-1:127.124 can0: sending command failure: -22 [ 1447.742052][T29023] Bluetooth: hci2: command tx timeout [ 1449.336551][ T5630] peak_usb 6-1:127.124: probe with driver peak_usb failed with error -22 [ 1449.385394][ T5630] usb 6-1: USB disconnect, device number 13 [ 1449.864284][T29023] Bluetooth: hci2: command tx timeout [ 1449.875372][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1450.274556][ T1279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1450.274593][ T1279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.860017][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.157672][ T1459] ceph: No mds server is up or the cluster is laggy [ 1453.879446][ T1495] binder: 1494:1495 ioctl c0306201 200000000300 returned -14 [ 1454.208681][ T1498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1454.341900][ T1279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1454.590553][ T1279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1455.085140][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1455.189560][ T1279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1455.495911][ T1279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1456.031653][ T1279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1456.277852][ T1279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1456.736646][T15255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1456.736803][T15255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1456.864084][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1456.864319][ T7935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.587642][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1458.015466][ T1279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1458.157364][ T1545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10811'. [ 1458.967014][ T1279] veth0_vlan: entered promiscuous mode [ 1459.064468][ T1279] veth1_vlan: entered promiscuous mode [ 1459.334010][ T1279] veth0_macvtap: entered promiscuous mode [ 1459.373339][ T1279] veth1_macvtap: entered promiscuous mode [ 1459.438064][ T1279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1459.507419][ T1279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1459.620347][ T6903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.620819][ T6903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.621800][ T6903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.624563][ T6903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.800697][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.815036][T29023] Bluetooth: hci5: unexpected Set CIG Parameters response data [ 1461.820516][T29023] Bluetooth: hci5: unexpected event for opcode 0x2062 [ 1461.843219][ T7935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.843240][ T7935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.990129][ T1565] loop8: detected capacity change from 0 to 8 [ 1461.991300][ T1565] Dev loop8: unable to read RDB block 8 [ 1461.991343][ T1565] loop8: unable to read partition table [ 1461.991559][ T1565] loop8: partition table beyond EOD, truncated [ 1461.991577][ T1565] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1462.140039][ T1567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10821'. [ 1462.162126][T15255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.162150][T15255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.651159][ T1586] kvm: MONITOR instruction emulated as NOP! [ 1463.369578][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1464.034212][ T31] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1464.595026][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 1464.597003][ T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1464.599468][ T31] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1464.599497][ T31] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1464.599517][ T31] usb 3-1: Product: syz [ 1464.599531][ T31] usb 3-1: Manufacturer: syz [ 1464.599545][ T31] usb 3-1: SerialNumber: syz [ 1464.658930][ T31] usb 3-1: config 0 descriptor?? [ 1464.682818][ T1609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1464.870779][ T1618] overlayfs: failed to clone upperpath [ 1465.164780][ T31] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1465.409585][ T37] audit: type=1800 audit(2000000098.470:1892): pid=1624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.7.10840" name="/" dev="sockfs" ino=126660 res=0 errno=0 [ 1465.544341][ T31] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1465.544471][ T31] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1465.547047][ T31] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.547077][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.547096][ T31] usb 6-1: Product: syz [ 1465.547109][ T31] usb 6-1: Manufacturer: syz [ 1465.547123][ T31] usb 6-1: SerialNumber: syz [ 1465.758025][ T31] cdc_mbim 6-1:1.0: skipping garbage [ 1465.829995][T29023] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1465.841179][T29023] Bluetooth: hci5: Injecting HCI hardware error event [ 1465.848214][T29023] Bluetooth: hci5: hardware error 0x00 [ 1465.964484][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1466.108756][ T1621] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1466.665263][ T5796] usb 3-1: USB disconnect, device number 48 [ 1466.755389][ T1621] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1466.755829][ T31] cdc_mbim 6-1:1.0: setting rx_max = 16384 [ 1466.993736][ T31] cdc_mbim 6-1:1.0: setting tx_max = 16384 [ 1467.036835][ T31] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1467.719166][ T1659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.802559][ T1659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.821116][ T31] wwan wwan0: port wwan0mbim0 attached [ 1467.843702][ T31] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 4e:80:74:ce:1f:04 [ 1467.868710][ T31] usb 6-1: USB disconnect, device number 14 [ 1467.870970][ T31] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1468.384848][T29023] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1468.850195][ T31] wwan wwan0: port wwan0mbim0 disconnected [ 1469.111648][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.686115][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1472.849798][ T1740] netlink: 'syz.3.10875': attribute type 83 has an invalid length. [ 1474.996362][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1477.813655][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1480.364883][ T1825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1480.661465][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.466649][T15777] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1481.638110][T15777] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1481.638140][T15777] usb 8-1: config 1 has no interface number 0 [ 1481.638177][T15777] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1481.638192][T15777] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1481.638209][T15777] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 173, changing to 11 [ 1481.638223][T15777] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 34113, setting to 1024 [ 1481.640775][T15777] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1481.640806][T15777] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.640825][T15777] usb 8-1: Product: syz [ 1481.640838][T15777] usb 8-1: Manufacturer: syz [ 1481.640852][T15777] usb 8-1: SerialNumber: syz [ 1481.745232][ T1851] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1481.936647][ T1849] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1482.795473][ T1849] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1482.873698][T15777] cdc_ncm 8-1:1.1: bind() failure [ 1483.015668][ T9] usb 8-1: USB disconnect, device number 17 [ 1483.205889][T30710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.281723][ T37] audit: type=1800 audit(2000000117.450:1893): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.10925" name="nullb0" dev="tmpfs" ino=9226 res=0 errno=0 [ 1484.471613][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.471682][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.926457][ T5848] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1485.099703][ T5848] usb 8-1: Using ep0 maxpacket: 16 [ 1485.110526][ T5848] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1485.110553][ T5848] usb 8-1: config 1 has no interface number 0 [ 1485.110598][ T5848] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1485.110623][ T5848] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1485.110646][ T5848] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1485.136332][ T5848] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1485.136362][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.136382][ T5848] usb 8-1: Product: syz [ 1485.136395][ T5848] usb 8-1: Manufacturer: syz [ 1485.136409][ T5848] usb 8-1: SerialNumber: syz [ 1485.159063][ T1889] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1485.159245][ T1889] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1485.570380][ T1889] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1485.570525][ T1889] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1485.989643][ T5848] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1486.275214][ T5848] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1486.299723][ T5848] aqc111 8-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 46:82:71:cb:93:91 [ 1486.351225][ T5848] usb 8-1: USB disconnect, device number 18 [ 1486.354472][ T5848] aqc111 8-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1486.398213][ T72] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1486.846400][ T5848] aqc111 8-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1486.846564][ T5848] aqc111 8-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1486.846680][ T5848] aqc111 8-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1488.950165][T30710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1492.146307][ T7935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1495.031835][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1496.205165][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1496.388220][ T9] usb 3-1: config 0 has an invalid interface number: 195 but max is 0 [ 1496.388249][ T9] usb 3-1: config 0 has no interface number 0 [ 1496.388297][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=75.f1 [ 1496.388320][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.541182][ T9] usb 3-1: config 0 descriptor?? [ 1496.675028][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.195/input/input77 [ 1497.014861][ T2000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.015533][ T2000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.035435][ T5146] bcm5974 3-1:0.195: could not read from device [ 1498.213014][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1499.244911][ T9] usb 3-1: USB disconnect, device number 49 [ 1500.273849][ T72] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.351857][ T2028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10969'. [ 1500.578991][ T2028] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1501.234258][ T2036] binder: BINDER_SET_CONTEXT_MGR already set [ 1501.234274][ T2036] binder: 2035:2036 ioctl 4018620d 200000004a80 returned -16 [ 1503.787299][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1505.681835][ T7955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1506.805812][ T2069] ceph: No mds server is up or the cluster is laggy [ 1506.976536][ T2063] ceph: No mds server is up or the cluster is laggy [ 1506.977162][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1506.979086][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1507.010923][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 1507.011121][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 1507.057510][ T2079] binder: BINDER_SET_CONTEXT_MGR already set [ 1507.057526][ T2079] binder: 2078:2079 ioctl 4018620d 200000004a80 returned -16 [ 1507.258464][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 1507.258618][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 1507.875968][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 1507.876174][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 1507.876818][ T5796] libceph: connect (1)[c::]:6789 error -101 [ 1507.876992][ T5796] libceph: mon0 (1)[c::]:6789 connect error [ 1508.399935][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1508.400128][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1508.998274][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1509.049809][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1509.100860][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1509.125241][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1509.128302][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1509.436018][ T6903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1509.803313][ T2095] lo speed is unknown, defaulting to 1000 [ 1510.462677][ T2106] binder: BINDER_SET_CONTEXT_MGR already set [ 1510.462693][ T2106] binder: 2103:2106 ioctl 4018620d 200000000100 returned -16 [ 1511.270701][T29023] Bluetooth: hci3: command tx timeout [ 1511.749068][ T7935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.961156][ T2120] netlink: 'syz.7.10994': attribute type 1 has an invalid length. [ 1511.961179][ T2120] netlink: 'syz.7.10994': attribute type 4 has an invalid length. [ 1511.961194][ T2120] netlink: 15334 bytes leftover after parsing attributes in process `syz.7.10994'. [ 1512.597262][T21446] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1512.754472][T21446] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1513.017586][ T2133] syz_tun: entered allmulticast mode [ 1513.203496][ T2131] syz_tun: left allmulticast mode [ 1513.333986][ T2095] chnl_net:caif_netlink_parms(): no params data found [ 1513.717763][T29023] Bluetooth: hci3: command tx timeout [ 1515.482338][ T7950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1516.132435][ T2095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.132577][ T2095] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.132857][ T2095] bridge_slave_0: entered allmulticast mode [ 1516.150357][ T2095] bridge_slave_0: entered promiscuous mode [ 1516.242218][T29023] Bluetooth: hci3: command tx timeout [ 1516.260927][ T2095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.261052][ T2095] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.261340][ T2095] bridge_slave_1: entered allmulticast mode [ 1516.263991][ T2095] bridge_slave_1: entered promiscuous mode [ 1518.411747][ T5800] Bluetooth: hci3: command tx timeout [ 1518.519736][T21446] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 1518.535747][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.694930][T21446] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1518.694963][T21446] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1518.695006][T21446] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1518.695030][T21446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.042130][T21446] usb 8-1: usb_control_msg returned -32 [ 1519.042181][T21446] usbtmc 8-1:16.0: can't read capabilities [ 1520.089474][ T2095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.172437][ T9] usb 8-1: USB disconnect, device number 19 [ 1520.366898][ T2095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.239848][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1521.634856][ T9] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1522.654763][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1522.657483][ T9] usb 8-1: config 0 has an invalid interface number: 111 but max is 0 [ 1522.657510][ T9] usb 8-1: config 0 has no interface number 0 [ 1522.660579][ T9] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1522.660609][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.660629][ T9] usb 8-1: Product: syz [ 1522.660644][ T9] usb 8-1: Manufacturer: syz [ 1522.660658][ T9] usb 8-1: SerialNumber: syz [ 1522.719717][ T9] usb 8-1: config 0 descriptor?? [ 1523.919355][ T9] snd-usb-6fire 8-1:0.111: unable to receive device firmware state. [ 1523.919400][ T9] snd-usb-6fire 8-1:0.111: probe with driver snd-usb-6fire failed with error -110 [ 1524.024257][ T9] usb 8-1: USB disconnect, device number 20 [ 1524.200794][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.695329][ T7950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.467315][ T2095] team0: Port device team_slave_0 added [ 1525.547032][ T2095] team0: Port device team_slave_1 added [ 1527.179316][ T7950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1527.342908][ T2095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.342925][ T2095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.342946][ T2095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1527.460433][ T2095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.460452][ T2095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1527.460480][ T2095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1527.654941][T15777] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1527.874847][T21446] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1527.879982][T15777] usb 8-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1527.880013][T15777] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1527.975278][T15777] usb 8-1: config 0 descriptor?? [ 1527.998906][T15777] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1528.022838][ T7950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.041280][T21446] usb 3-1: Using ep0 maxpacket: 8 [ 1528.043155][T21446] usb 3-1: config 252 has an invalid interface number: 32 but max is 0 [ 1528.043171][T21446] usb 3-1: config 252 has no interface number 0 [ 1528.043199][T21446] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1528.043211][T21446] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.111139][T21446] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1528.111158][T21446] pvrusb2: ********** [ 1528.111165][T21446] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1528.111178][T21446] pvrusb2: Important functionality might not be entirely working. [ 1528.111187][T21446] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1528.111199][T21446] pvrusb2: ********** [ 1528.140168][ T2095] hsr_slave_0: entered promiscuous mode [ 1528.141584][ T2095] hsr_slave_1: entered promiscuous mode [ 1528.142516][ T2095] debugfs: 'hsr0' already exists in 'hsr' [ 1528.142540][ T2095] Cannot create hsr debugfs directory [ 1528.840937][ T2275] overlayfs: failed to clone upperpath [ 1528.872082][ T7950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1528.872268][ T2363] pvrusb2: Invalid write control endpoint [ 1528.883195][ T2275] netlink: 116 bytes leftover after parsing attributes in process `syz.3.11037'. [ 1528.930999][T21446] usb 3-1: USB disconnect, device number 50 [ 1529.324935][ T2363] pvrusb2: Invalid write control endpoint [ 1529.324951][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1529.324960][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1529.324969][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1529.324978][ T2363] pvrusb2: Device being rendered inoperable [ 1529.325015][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1529.325081][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1529.326178][ T2363] pvrusb2: Attached sub-driver cx25840 [ 1529.326189][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1529.326199][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1529.374544][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.981959][ T2291] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1530.046752][ T5630] usb 8-1: USB disconnect, device number 21 [ 1530.072702][ T2291] kvm: pic: non byte read [ 1530.156875][ T2291] kvm: pic: level sensitive irq not supported [ 1530.157456][ T2291] kvm: pic: non byte read [ 1530.157900][ T2291] kvm: pic: level sensitive irq not supported [ 1530.157955][ T2291] kvm: pic: non byte read [ 1530.158248][ T2291] kvm: pic: level sensitive irq not supported [ 1530.158304][ T2291] kvm: pic: non byte read [ 1530.158541][ T2291] kvm: pic: level sensitive irq not supported [ 1530.158671][ T2291] kvm: pic: non byte read [ 1530.172550][ T2291] kvm: pic: level sensitive irq not supported [ 1530.172771][ T2291] kvm: pic: non byte read [ 1532.624798][ T5796] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1532.786506][ T5796] usb 6-1: Using ep0 maxpacket: 32 [ 1532.807043][ T5796] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1532.807072][ T5796] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1532.807092][ T5796] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1532.807147][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1532.807168][ T5796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1532.807191][ T5796] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1532.807232][ T5796] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1532.807254][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.812335][ T5796] usb 6-1: config 0 descriptor?? [ 1533.066936][ T5796] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1533.091670][ T5796] usb 6-1: USB disconnect, device number 15 [ 1533.120955][ T5796] usblp0: removed [ 1534.414828][ T5796] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1534.569716][ T5796] usb 6-1: Using ep0 maxpacket: 32 [ 1534.583698][ T5796] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 1534.583729][ T5796] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1534.583749][ T5796] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1534.583822][ T5796] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1534.583844][ T5796] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1534.583868][ T5796] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1534.583909][ T5796] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1534.583933][ T5796] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.602081][ T5796] usb 6-1: config 0 descriptor?? [ 1535.409630][ T6903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.768906][ T5796] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1535.795161][ T5796] usb 6-1: USB disconnect, device number 16 [ 1535.803139][ T5796] usblp0: removed [ 1535.880513][ T2335] tipc: Failed to remove unknown binding: 66,1,1/0:2642970986/2642970988 [ 1539.044287][ T7950] bridge_slave_1: left allmulticast mode [ 1539.044318][ T7950] bridge_slave_1: left promiscuous mode [ 1539.044594][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.871447][ T7950] bridge_slave_0: left allmulticast mode [ 1539.871478][ T7950] bridge_slave_0: left promiscuous mode [ 1539.871761][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.414053][ T7939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.430350][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.193714][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.193791][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.890831][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1547.893136][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1553.586718][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1553.588524][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1555.426257][ T7950] bond1 (unregistering): (slave veth3): Releasing active interface [ 1555.516065][ T7950] bond1 (unregistering): Released all slaves [ 1555.527200][ T7950] bond2 (unregistering): Released all slaves [ 1555.541045][ T7950] bond3 (unregistering): Released all slaves [ 1558.625439][ T7939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1558.986624][ T7950] team0: Port device bond0 removed [ 1558.989824][ T7950] smc: removing net device bond0 with user defined pnetid SYZ2 [ 1558.990371][ T7950] bond0 (unregistering): Released all slaves [ 1559.385343][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1560.838110][ T7950] bond4 (unregistering): Released all slaves [ 1563.172944][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1563.211478][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1563.221643][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1563.275235][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1563.314921][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1563.758291][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1564.907797][T29023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1564.951239][T29023] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1565.851952][T30699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1565.871538][T29023] Bluetooth: hci1: command tx timeout [ 1565.873220][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1565.880658][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1565.889951][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1566.125000][ T7950] !9: left promiscuous mode [ 1567.299740][ T7950] tipc: Disabling bearer [ 1567.299972][ T7950] tipc: Left network mode [ 1567.354524][ T2537] lo speed is unknown, defaulting to 1000 [ 1567.672427][ T7950] rxrpc: Call ffff888057779180 still in use (1,Complete,1489,0)! [ 1567.905318][ T5800] Bluetooth: hci1: command tx timeout [ 1567.994214][ T5801] Bluetooth: hci2: command tx timeout [ 1568.013642][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1568.045079][ T5801] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1568.077651][ T5801] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1568.100087][ T5801] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1568.113300][ T5801] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1568.174964][ T2554] lo speed is unknown, defaulting to 1000 [ 1568.971428][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1569.002537][ T2574] SQUASHFS error: Failed to read block 0x0: -5 [ 1569.344921][ T2575] lo speed is unknown, defaulting to 1000 [ 1569.996539][ T5801] Bluetooth: hci1: command tx timeout [ 1570.009913][ T5800] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1570.009943][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1570.009971][ T5800] Tainted: [L]=SOFTLOCKUP [ 1570.009978][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1570.009990][ T5800] Workqueue: hci4 hci_rx_work [ 1570.010120][ T5800] Call Trace: [ 1570.010129][ T5800] [ 1570.010137][ T5800] dump_stack_lvl+0xe8/0x150 [ 1570.010170][ T5800] sysfs_create_dir_ns+0x271/0x2a0 [ 1570.010250][ T5800] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1570.010303][ T5800] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1570.010330][ T5800] ? rt_spin_unlock+0x160/0x200 [ 1570.010355][ T5800] kobject_add_internal+0x631/0xd10 [ 1570.010393][ T5800] kobject_add+0x163/0x240 [ 1570.010425][ T5800] ? __pfx_kobject_add+0x10/0x10 [ 1570.010459][ T5800] ? get_device_parent+0x370/0x3a0 [ 1570.010520][ T5800] device_add+0x408/0xb80 [ 1570.010548][ T5800] hci_conn_add_sysfs+0xd5/0x210 [ 1570.010608][ T5800] le_conn_complete_evt+0xf1d/0x1430 [ 1570.010675][ T5800] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1570.010701][ T5800] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1570.010728][ T5800] ? lockdep_hardirqs_on+0x7a/0x110 [ 1570.010785][ T5800] ? skb_pull_data+0xfb/0x200 [ 1570.010864][ T5800] hci_le_conn_complete_evt+0x187/0x470 [ 1570.010895][ T5800] hci_event_packet+0x7af/0x12c0 [ 1570.010952][ T5800] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1570.010974][ T5800] ? __pfx_hci_event_packet+0x10/0x10 [ 1570.011003][ T5800] ? rt_spin_unlock+0x14f/0x200 [ 1570.011034][ T5800] ? hci_send_to_monitor+0xe2/0x590 [ 1570.011060][ T5800] hci_rx_work+0x3ee/0x1030 [ 1570.011095][ T5800] ? process_scheduled_works+0xa0f/0x17a0 [ 1570.011128][ T5800] process_scheduled_works+0xaec/0x17a0 [ 1570.011191][ T5800] ? __pfx_process_scheduled_works+0x10/0x10 [ 1570.011220][ T5800] ? do_raw_spin_lock+0x12b/0x2f0 [ 1570.011252][ T5800] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1570.011279][ T5800] ? schedule+0x90/0x360 [ 1570.011311][ T5800] worker_thread+0xda6/0x1360 [ 1570.011360][ T5800] kthread+0x726/0x8b0 [ 1570.011386][ T5800] ? __pfx_worker_thread+0x10/0x10 [ 1570.011405][ T5800] ? __pfx_kthread+0x10/0x10 [ 1570.011426][ T5800] ? rt_spin_unlock+0x14f/0x200 [ 1570.011451][ T5800] ? rt_spin_unlock+0x160/0x200 [ 1570.011470][ T5800] ? __pfx_kthread+0x10/0x10 [ 1570.011496][ T5800] ret_from_fork+0x51b/0xa40 [ 1570.011519][ T5800] ? __pfx_ret_from_fork+0x10/0x10 [ 1570.011538][ T5800] ? __switch_to+0xc82/0x1410 [ 1570.011571][ T5800] ? __pfx_kthread+0x10/0x10 [ 1570.011594][ T5800] ret_from_fork_asm+0x1a/0x30 [ 1570.011637][ T5800] [ 1570.029344][ T5800] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1570.029394][ T5800] Bluetooth: hci4: failed to register connection device [ 1570.065742][ T5800] Bluetooth: hci2: command tx timeout [ 1570.236198][ T5800] Bluetooth: hci6: command tx timeout [ 1570.610267][ T2537] chnl_net:caif_netlink_parms(): no params data found [ 1570.977086][ T2554] chnl_net:caif_netlink_parms(): no params data found [ 1571.117432][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1571.267595][ T2645] netlink: 260 bytes leftover after parsing attributes in process `syz.7.11113'. [ 1571.267638][ T2645] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11113'. [ 1571.267647][ T2645] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11113'. [ 1571.340757][ T2537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.340923][ T2537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.341137][ T2537] bridge_slave_0: entered allmulticast mode [ 1571.343799][ T2537] bridge_slave_0: entered promiscuous mode [ 1571.393667][ T2537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.393841][ T2537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.394102][ T2537] bridge_slave_1: entered allmulticast mode [ 1571.418228][ T2537] bridge_slave_1: entered promiscuous mode [ 1571.464295][ T2575] chnl_net:caif_netlink_parms(): no params data found [ 1571.530359][ T2537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.627491][ T2537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.776073][ T2554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.776193][ T2554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.776359][ T2554] bridge_slave_0: entered allmulticast mode [ 1571.785564][ T2554] bridge_slave_0: entered promiscuous mode [ 1571.844042][ T2554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.844127][ T2554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.844374][ T2554] bridge_slave_1: entered allmulticast mode [ 1572.005045][ T2554] bridge_slave_1: entered promiscuous mode [ 1572.065466][ T5801] Bluetooth: hci1: command tx timeout [ 1572.145754][ T5801] Bluetooth: hci2: command tx timeout [ 1572.304833][ T5801] Bluetooth: hci6: command tx timeout [ 1572.719577][ T2537] team0: Port device team_slave_0 added [ 1573.728938][ T2537] team0: Port device team_slave_1 added [ 1574.013068][ T2698] tipc: Enabling of bearer rejected, failed to enable media [ 1574.280940][ T2554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1574.333734][ T5801] Bluetooth: hci2: command tx timeout [ 1574.387600][ T5801] Bluetooth: hci6: command tx timeout [ 1574.690698][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1574.809215][ T2554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1574.841578][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.842337][ T2575] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.842487][ T2575] bridge_slave_0: entered allmulticast mode [ 1574.843860][ T2575] bridge_slave_0: entered promiscuous mode [ 1574.882997][ T2537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.883009][ T2537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.883023][ T2537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.883945][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.884067][ T2575] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.884272][ T2575] bridge_slave_1: entered allmulticast mode [ 1574.888661][ T2575] bridge_slave_1: entered promiscuous mode [ 1574.944952][ T2537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.944970][ T2537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.945007][ T2537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.960432][ T2554] team0: Port device team_slave_0 added [ 1575.013864][ T2554] team0: Port device team_slave_1 added [ 1575.093087][ T2575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.146980][ T2575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.217241][ T2554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.217258][ T2554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.217284][ T2554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.275427][ T2537] hsr_slave_0: entered promiscuous mode [ 1575.276358][ T2537] hsr_slave_1: entered promiscuous mode [ 1575.276920][ T2537] debugfs: 'hsr0' already exists in 'hsr' [ 1575.276935][ T2537] Cannot create hsr debugfs directory [ 1575.319265][ T2554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.319283][ T2554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.319310][ T2554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.366497][ T2575] team0: Port device team_slave_0 added [ 1575.389393][ T2575] team0: Port device team_slave_1 added [ 1575.547778][ T2575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1575.547796][ T2575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.547821][ T2575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.568309][ T2554] hsr_slave_0: entered promiscuous mode [ 1575.569661][ T2554] hsr_slave_1: entered promiscuous mode [ 1575.570573][ T2554] debugfs: 'hsr0' already exists in 'hsr' [ 1575.570597][ T2554] Cannot create hsr debugfs directory [ 1575.585188][ T2575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.585206][ T2575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1575.585242][ T2575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1576.200419][ T2575] hsr_slave_0: entered promiscuous mode [ 1576.201966][ T2575] hsr_slave_1: entered promiscuous mode [ 1576.203007][ T2575] debugfs: 'hsr0' already exists in 'hsr' [ 1576.203032][ T2575] Cannot create hsr debugfs directory [ 1576.233010][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1576.464878][ T5801] Bluetooth: hci6: command tx timeout [ 1577.265039][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 1578.290334][ T2554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.663248][ T2554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.025781][ T2554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.349855][ T2554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.745970][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1579.940327][ T2537] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1579.991784][ T2537] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1580.043519][ T2537] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1580.109582][ T2537] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1580.357736][ T2554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1580.413061][ T2554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1580.458662][ T2554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1580.523024][ T2554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1580.841824][ T2575] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1580.912669][ T2575] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1580.989451][ T2575] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1581.053866][ T2575] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1581.319620][ T2537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.457798][ T2537] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.506400][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.506619][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.540571][ T2554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.572703][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.573593][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.694090][ T2554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.718974][ T2575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1581.759181][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.759284][ T7955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.765371][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1581.827807][T30705] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.828971][T30705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1581.892199][ T2575] 8021q: adding VLAN 0 to HW filter on device team0 [ 1581.939498][T30699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1581.939669][T30699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1581.974080][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1581.974208][ T7955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.673212][ T2537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.718953][ T2575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.780677][ T2554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1582.929645][ T2554] veth0_vlan: entered promiscuous mode [ 1582.967965][ T2554] veth1_vlan: entered promiscuous mode [ 1583.136113][ T2554] veth0_macvtap: entered promiscuous mode [ 1583.179024][ T2554] veth1_macvtap: entered promiscuous mode [ 1583.281310][ T2554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.312996][ T2554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.377782][T30705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.383936][T30705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.391709][T30705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.397433][T30705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.403254][ T2537] veth0_vlan: entered promiscuous mode [ 1583.650641][ T2537] veth1_vlan: entered promiscuous mode [ 1583.937916][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.937936][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.002829][ T2537] veth0_macvtap: entered promiscuous mode [ 1584.067418][ T2537] veth1_macvtap: entered promiscuous mode [ 1584.102135][T30703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1584.102158][T30703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1584.153376][ T2575] veth0_vlan: entered promiscuous mode [ 1584.184977][ T2537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1584.207652][ T2537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1584.208295][ T2575] veth1_vlan: entered promiscuous mode [ 1584.246086][ T7944] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.248182][ T7944] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.250948][ T7944] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.251014][ T7944] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1584.828387][ T2575] veth0_macvtap: entered promiscuous mode [ 1584.902346][ T2575] veth1_macvtap: entered promiscuous mode [ 1585.084205][ T2575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.144463][ T2575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.166272][ T7944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1585.166288][ T7944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1585.293275][ T7944] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.303008][ T7944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.304082][ T7944] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.304125][ T7944] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.498904][ T5801] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1585.498934][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1585.498964][ T5801] Tainted: [L]=SOFTLOCKUP [ 1585.498972][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1585.498986][ T5801] Workqueue: hci2 hci_rx_work [ 1585.499021][ T5801] Call Trace: [ 1585.499028][ T5801] [ 1585.499037][ T5801] dump_stack_lvl+0xe8/0x150 [ 1585.499069][ T5801] sysfs_create_dir_ns+0x271/0x2a0 [ 1585.499095][ T5801] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1585.499120][ T5801] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1585.499148][ T5801] ? rt_spin_unlock+0x160/0x200 [ 1585.499172][ T5801] kobject_add_internal+0x631/0xd10 [ 1585.499212][ T5801] kobject_add+0x163/0x240 [ 1585.499247][ T5801] ? __pfx_kobject_add+0x10/0x10 [ 1585.499292][ T5801] ? get_device_parent+0x370/0x3a0 [ 1585.499324][ T5801] device_add+0x408/0xb80 [ 1585.499353][ T5801] hci_conn_add_sysfs+0xd5/0x210 [ 1585.499387][ T5801] le_conn_complete_evt+0xf1d/0x1430 [ 1585.499419][ T5801] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1585.499441][ T5801] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1585.499466][ T5801] ? lockdep_hardirqs_on+0x7a/0x110 [ 1585.499495][ T5801] ? skb_pull_data+0xfb/0x200 [ 1585.499524][ T5801] hci_le_conn_complete_evt+0x187/0x470 [ 1585.499554][ T5801] hci_event_packet+0x7af/0x12c0 [ 1585.499592][ T5801] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1585.499615][ T5801] ? __pfx_hci_event_packet+0x10/0x10 [ 1585.499643][ T5801] ? rt_spin_unlock+0x14f/0x200 [ 1585.499673][ T5801] ? hci_send_to_monitor+0xe2/0x590 [ 1585.499703][ T5801] hci_rx_work+0x3ee/0x1030 [ 1585.499741][ T5801] ? process_scheduled_works+0xa0f/0x17a0 [ 1585.499775][ T5801] process_scheduled_works+0xaec/0x17a0 [ 1585.499835][ T5801] ? __pfx_process_scheduled_works+0x10/0x10 [ 1585.499864][ T5801] ? do_raw_spin_lock+0x12b/0x2f0 [ 1585.499897][ T5801] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1585.499925][ T5801] ? schedule+0x90/0x360 [ 1585.499954][ T5801] worker_thread+0xda6/0x1360 [ 1585.499990][ T5801] ? __kthread_parkme+0x19c/0x1f0 [ 1585.500017][ T5801] kthread+0x726/0x8b0 [ 1585.500063][ T5801] ? __pfx_worker_thread+0x10/0x10 [ 1585.500084][ T5801] ? __pfx_kthread+0x10/0x10 [ 1585.500107][ T5801] ? rt_spin_unlock+0x14f/0x200 [ 1585.500133][ T5801] ? rt_spin_unlock+0x160/0x200 [ 1585.500153][ T5801] ? __pfx_kthread+0x10/0x10 [ 1585.500178][ T5801] ret_from_fork+0x51b/0xa40 [ 1585.500203][ T5801] ? __pfx_ret_from_fork+0x10/0x10 [ 1585.500222][ T5801] ? __switch_to+0xc82/0x1410 [ 1585.500262][ T5801] ? __pfx_kthread+0x10/0x10 [ 1585.500289][ T5801] ret_from_fork_asm+0x1a/0x30 [ 1585.500335][ T5801] [ 1585.500367][ T5801] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1585.500410][ T5801] Bluetooth: hci2: failed to register connection device [ 1586.523145][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1586.837829][ T7955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1586.837852][ T7955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1587.650260][ T7955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1588.420982][ T7955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.421005][ T7955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.435924][ T7944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.435947][ T7944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1592.825779][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1593.108985][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1593.265949][ T7939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1597.134730][T21446] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1597.314795][T21446] usb 8-1: Using ep0 maxpacket: 32 [ 1597.317076][T21446] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1597.317107][T21446] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.349870][T21446] usb 8-1: config 0 descriptor?? [ 1597.378344][ T31] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1597.654777][ T31] usb 10-1: Using ep0 maxpacket: 16 [ 1597.657835][ T31] usb 10-1: config 0 has no interfaces? [ 1597.695050][ T31] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1597.695136][ T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.695157][ T31] usb 10-1: Product: syz [ 1597.695171][ T31] usb 10-1: Manufacturer: syz [ 1597.695186][ T31] usb 10-1: SerialNumber: syz [ 1598.686095][ T31] usb 10-1: config 0 descriptor?? [ 1598.749144][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.026642][T30710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1599.131872][T21446] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1599.171372][T21446] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1599.175090][T21446] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1599.175143][T21446] usb 8-1: media controller created [ 1599.342221][T21446] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1599.935496][T21446] DVB: Unable to find symbol dib7000p_attach() [ 1599.935513][T21446] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1600.468611][T21446] rc_core: IR keymap rc-dib0700-rc5 not found [ 1600.468681][T21446] Registered IR keymap rc-empty [ 1600.471226][T21446] dvb-usb: could not initialize remote control. [ 1600.471262][T21446] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1600.965899][T21446] usb 8-1: USB disconnect, device number 22 [ 1601.095984][ T31] usb 10-1: USB disconnect, device number 20 [ 1601.132994][T21446] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1602.196419][ T37] audit: type=1326 audit(2000000235.360:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3142 comm="syz.8.11159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x0 [ 1602.799537][T31691] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1603.197729][T31691] usb 10-1: config 0 has no interfaces? [ 1603.197769][T31691] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1603.197793][T31691] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.355109][T31691] usb 10-1: config 0 descriptor?? [ 1603.648160][T31691] usb 10-1: USB disconnect, device number 21 [ 1604.218647][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1604.922385][ T3185] ptrace attach of "./syz-executor exec"[3186] was attempted by "./syz-executor exec"[3185] [ 1605.906847][T30707] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1606.475144][ T9] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1606.634858][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1606.646433][ T9] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1606.646460][ T9] usb 10-1: config 0 has no interface number 0 [ 1606.646507][ T9] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1606.662244][ T9] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1606.662275][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.662294][ T9] usb 10-1: Product: syz [ 1606.662308][ T9] usb 10-1: Manufacturer: syz [ 1606.662322][ T9] usb 10-1: SerialNumber: syz [ 1606.687771][ T9] usb 10-1: config 0 descriptor?? [ 1606.690060][ T3190] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1607.136897][ T3190] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1607.353387][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.353460][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.308485][ T3210] binder: 3209:3210 ioctl c0306201 0 returned -14 [ 1609.575106][ T9] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1609.575395][ T9] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1609.664569][ T9] usb 10-1: USB disconnect, device number 22 [ 1610.284239][ T7935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1610.797319][ T3232] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11173'. [ 1611.058646][ T3241] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1611.059377][ T3241] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1611.623852][ T7939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1616.959171][ T7955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1616.995868][T30710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1618.322087][ T3299] tipc: Enabling of bearer rejected, failed to enable media [ 1620.474373][ T3323] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1620.474404][ T3323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1620.474495][ T3323] vhci_hcd vhci_hcd.0: Device attached [ 1620.644801][ T5939] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1620.781320][ T5796] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1620.831338][ T5939] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1620.866358][ T5939] usb 8-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 1620.866390][ T5939] usb 8-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 1620.866412][ T5939] usb 8-1: Manufacturer: syz [ 1620.907721][ T5939] usb 8-1: config 0 descriptor?? [ 1621.154848][ T5939] usb 8-1: USB disconnect, device number 23 [ 1621.214828][ T3325] vhci_hcd: connection closed [ 1622.568623][ T5796] usb 47-1: device descriptor read/64, error -71 [ 1622.597175][ T7955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1622.606065][T15255] vhci_hcd vhci_hcd.7: stop threads [ 1622.606094][T15255] vhci_hcd vhci_hcd.7: release socket [ 1622.653381][T15255] vhci_hcd vhci_hcd.7: disconnect device [ 1622.754224][ T5796] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1622.783976][ T7955] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1622.962557][ T3338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1623.995398][ T3338] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1628.132912][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1628.741889][T30697] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1633.812092][T30704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1635.320271][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1636.659361][ T3435] netlink: 'syz.9.11218': attribute type 3 has an invalid length. [ 1636.975084][ T3434] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1636.975152][ T3434] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1636.979518][ T3434] vhci_hcd vhci_hcd.0: Device attached [ 1637.521721][ T3436] vhci_hcd: connection closed [ 1637.580167][ T6903] vhci_hcd vhci_hcd.9: stop threads [ 1637.580234][ T6903] vhci_hcd vhci_hcd.9: release socket [ 1637.580336][ T6903] vhci_hcd vhci_hcd.9: disconnect device [ 1639.383186][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1640.934097][ T6903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1643.233248][ T3469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11216'. [ 1643.887087][T15777] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1644.040082][ T3478] kvm: kvm [3477]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x166 [ 1644.058035][T15777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.058068][T15777] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1644.058105][T15777] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1644.058126][T15777] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.096957][T15777] usb 3-1: config 0 descriptor?? [ 1644.604206][T15777] usbhid 3-1:0.0: can't add hid device: -71 [ 1644.604333][T15777] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1644.655083][T15777] usb 3-1: USB disconnect, device number 51 [ 1645.358042][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1645.689780][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11229'. [ 1646.678727][ T72] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1650.865255][ T3509] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1651.170312][ T3551] kvm: kvm [3550]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x3000 [ 1652.719220][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1656.059679][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1658.550672][ T3621] overlayfs: failed to resolve './file1': -2 [ 1663.682865][ T6903] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1669.028401][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.029538][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.437145][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1672.117978][T30704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1674.142373][ T3715] QAT: failed to copy from user cfg_data. [ 1675.580106][ T3676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1678.096629][ T5966] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1680.956467][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1681.306409][ T37] audit: type=1326 audit(2000000314.480:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.306462][ T37] audit: type=1326 audit(2000000314.480:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.307633][ T37] audit: type=1326 audit(2000000314.480:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.307678][ T37] audit: type=1326 audit(2000000314.480:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.307717][ T37] audit: type=1326 audit(2000000314.480:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.308256][ T37] audit: type=1326 audit(2000000314.480:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.308306][ T37] audit: type=1326 audit(2000000314.480:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.308348][ T37] audit: type=1326 audit(2000000314.480:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.317805][ T37] audit: type=1326 audit(2000000314.490:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1681.317856][ T37] audit: type=1326 audit(2000000314.490:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=3754 comm="syz.8.11285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75338baeb9 code=0x7ffc0000 [ 1682.373925][ T3762] kvm_intel: kvm [3761]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x40000000386 [ 1684.058241][ T7939] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1687.030645][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 1687.083824][T30704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1689.885265][T15255] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1692.095439][ T3822] Bluetooth: hci2: command 0x0406 tx timeout [ 1692.095484][ T3822] Bluetooth: hci6: command 0x0406 tx timeout [ 1692.466546][ T3390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1696.110171][ T7935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1699.218524][ T3676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1703.634086][T30705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1704.746408][T30704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1709.106325][T30703] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1710.507231][ T7935] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1713.729374][ T38] INFO: task kworker/u8:19:7950 blocked for more than 145 seconds. [ 1713.729405][ T38] Tainted: G L syzkaller #0 [ 1713.729418][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1713.729429][ T38] task:kworker/u8:19 state:D stack:20000 pid:7950 tgid:7950 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1713.729491][ T38] Workqueue: netns cleanup_net [ 1713.729612][ T38] Call Trace: [ 1713.729620][ T38] [ 1713.729636][ T38] __schedule+0x1472/0x4fe0 [ 1713.729667][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1713.729700][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1713.729737][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1713.729761][ T38] ? __pfx___schedule+0x10/0x10 [ 1713.729796][ T38] ? schedule+0x90/0x360 [ 1713.729824][ T38] schedule+0x164/0x360 [ 1713.729851][ T38] rxrpc_destroy_all_calls+0x57e/0x6a0 [ 1713.729945][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1713.729977][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1713.730001][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1713.730027][ T38] ? __timer_delete_sync+0x53e/0x610 [ 1713.730068][ T38] rxrpc_exit_net+0x6f/0xc0 [ 1713.730125][ T38] ops_undo_list+0x49f/0x940 [ 1713.730157][ T38] ? rt_spin_unlock+0x1d0/0x200 [ 1713.730177][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1713.730204][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1713.730230][ T38] ? rt_spin_unlock+0x160/0x200 [ 1713.730255][ T38] cleanup_net+0x4e5/0x7b0 [ 1713.730287][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1713.730321][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 1713.730353][ T38] ? process_scheduled_works+0xa0f/0x17a0 [ 1713.730386][ T38] process_scheduled_works+0xaec/0x17a0 [ 1713.730446][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1713.730473][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1713.730505][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1713.730541][ T38] ? schedule+0x90/0x360 [ 1713.730575][ T38] worker_thread+0xda6/0x1360 [ 1713.730622][ T38] kthread+0x726/0x8b0 [ 1713.730650][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1713.730670][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.730692][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1713.730719][ T38] ? rt_spin_unlock+0x160/0x200 [ 1713.730739][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.730765][ T38] ret_from_fork+0x51b/0xa40 [ 1713.730789][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1713.730809][ T38] ? __switch_to+0xc82/0x1410 [ 1713.730843][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.730869][ T38] ret_from_fork_asm+0x1a/0x30 [ 1713.730915][ T38] [ 1713.731019][ T38] [ 1713.731019][ T38] Showing all locks held in the system: [ 1713.731032][ T38] 1 lock held by khungtaskd/38: [ 1713.731044][ T38] #0: ffffffff8dbc77c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1713.731129][ T38] 2 locks held by getty/5551: [ 1713.731140][ T38] #0: ffff88814dfb90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1713.731231][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1713.731285][ T38] 3 locks held by kworker/u8:19/7950: [ 1713.731296][ T38] #0: ffff88801aad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 1713.731352][ T38] #1: ffffc9000d947bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 1713.731404][ T38] #2: ffffffff8ef2caa0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xfe/0x7b0 [ 1713.731461][ T38] 2 locks held by syz-executor/30622: [ 1713.731474][ T38] 5 locks held by kworker/u8:13/30705: [ 1713.731486][ T38] 3 locks held by kworker/1:4/31060: [ 1713.731507][ T38] 8 locks held by kworker/u8:4/3390: [ 1713.731521][ T38] 2 locks held by syz.2.11321/3948: [ 1713.731541][ T38] 2 locks held by syz.8.11324/3950: [ 1713.731553][ T38] 3 locks held by syz.3.11330/3978: [ 1713.731564][ T38] 4 locks held by dhcpcd-run-hook/3981: [ 1713.731576][ T38] [ 1713.731581][ T38] ============================================= [ 1713.731581][ T38] [ 1713.731598][ T38] NMI backtrace for cpu 0 [ 1713.731617][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1713.731643][ T38] Tainted: [L]=SOFTLOCKUP [ 1713.731650][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1713.731661][ T38] Call Trace: [ 1713.731671][ T38] [ 1713.731681][ T38] dump_stack_lvl+0xe8/0x150 [ 1713.731709][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1713.731730][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1713.731752][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1713.731774][ T38] sys_info+0x135/0x170 [ 1713.731801][ T38] watchdog+0xf90/0xfe0 [ 1713.731832][ T38] ? watchdog+0x209/0xfe0 [ 1713.731864][ T38] kthread+0x726/0x8b0 [ 1713.731890][ T38] ? __pfx_watchdog+0x10/0x10 [ 1713.731915][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.731935][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1713.731960][ T38] ? rt_spin_unlock+0x160/0x200 [ 1713.731978][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.732002][ T38] ret_from_fork+0x51b/0xa40 [ 1713.732025][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1713.732043][ T38] ? __switch_to+0xc82/0x1410 [ 1713.732074][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.732098][ T38] ret_from_fork_asm+0x1a/0x30 [ 1713.732140][ T38] [ 1713.732148][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1713.732186][ C1] NMI backtrace for cpu 1 [ 1713.732211][ C1] CPU: 1 UID: 0 PID: 3979 Comm: syz.9.11329 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1713.732236][ C1] Tainted: [L]=SOFTLOCKUP [ 1713.732243][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1713.732254][ C1] RIP: 0033:0x7f710f90019a [ 1713.732273][ C1] Code: 48 83 c2 08 48 39 d5 75 e7 48 8d 50 08 48 8b 04 24 48 29 c2 48 89 d5 48 c1 fd 03 e9 00 fc ff ff 4c 89 e6 49 83 c4 08 48 89 0e <4c> 39 e5 0f 85 4d ff ff ff e9 a3 fe ff ff 48 89 ea e9 ca fe ff ff [ 1713.732298][ C1] RSP: 002b:00007ffe70293d90 EFLAGS: 00000212 [ 1713.732314][ C1] RAX: 00007f710f7d7bd0 RBX: 00007f71107d5720 RCX: ffffffff8b081210 [ 1713.732329][ C1] RDX: ffffffff8b081210 RSI: 00007f710f7d7bd8 RDI: 00007f710f48f008 [ 1713.732343][ C1] RBP: 00007f710f88f000 R08: 00007f710fc90000 R09: 00007f710fca6038 [ 1713.732356][ C1] R10: 0000000000000001 R11: 0000000000000009 R12: 00007f710f7d7be0 [ 1713.732368][ C1] R13: 00007f710fca6038 R14: 00007f710f48f008 R15: 0000000000000001 [ 1713.732381][ C1] FS: 000055558b6b2500 GS: 0000000000000000 [ 1713.733187][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1713.733210][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1713.733237][ T38] Tainted: [L]=SOFTLOCKUP [ 1713.733245][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1713.733257][ T38] Call Trace: [ 1713.733266][ T38] [ 1713.733275][ T38] vpanic+0x1e0/0x670 [ 1713.733305][ T38] panic+0xc5/0xd0 [ 1713.733329][ T38] ? __pfx_panic+0x10/0x10 [ 1713.733363][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1713.733388][ T38] watchdog+0xfda/0xfe0 [ 1713.733419][ T38] ? watchdog+0x209/0xfe0 [ 1713.733458][ T38] kthread+0x726/0x8b0 [ 1713.733483][ T38] ? __pfx_watchdog+0x10/0x10 [ 1713.733506][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.733523][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1713.733551][ T38] ? rt_spin_unlock+0x160/0x200 [ 1713.733568][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.733588][ T38] ret_from_fork+0x51b/0xa40 [ 1713.733608][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1713.733626][ T38] ? __switch_to+0xc82/0x1410 [ 1713.733654][ T38] ? __pfx_kthread+0x10/0x10 [ 1713.733674][ T38] ret_from_fork_asm+0x1a/0x30 [ 1713.733712][ T38] [ 1713.734119][ T38] Kernel Offset: disabled