last executing test programs: 15m17.747142137s ago: executing program 32 (id=349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socket$netlink(0x10, 0x3, 0xb) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {0x1, 0xd}, {0x6}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x5d}], 0x1, 0x10022, 0x0) 14m30.346825905s ago: executing program 5 (id=583): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x208, 0x4) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/135, 0x87}, {&(0x7f0000000780)="029993440c7a1d95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="b1f5", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d40)=[{0x0}, {&(0x7f0000000340)="dab21893738567132a3dc52e13cbf903e064055d98736be7e2ee9668845fa45220f1a5c9687c01274d5268f23e30e8b99f7eceb0422b7a608243bb44e1bba038", 0x40}, {&(0x7f00000008c0)="20c048210440d8394cdcb9ee88a6b7584a3e07b1b1d67f42b2dda515bffbb8de861e60d4ee6dad62", 0x28}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 14m30.194424827s ago: executing program 5 (id=584): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 14m29.802400422s ago: executing program 1 (id=588): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 14m29.516332409s ago: executing program 5 (id=593): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 14m29.4323718s ago: executing program 1 (id=594): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000034000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf0f000000000000b7020000000000008500000095000000b7000000000000009500000010000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0xf7, &(0x7f0000000880)=""/4092}, 0x3d) 14m29.110496599s ago: executing program 1 (id=598): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60c01, 0x190) dup3(r0, r3, 0x6700000000000000) 14m28.959690821s ago: executing program 5 (id=599): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x33, &(0x7f0000000040), 0x10) 14m28.850537168s ago: executing program 1 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r0, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) 14m28.683930821s ago: executing program 5 (id=605): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x19383fb31bd4d798}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 14m28.586298078s ago: executing program 1 (id=606): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='yeah', 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x307, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe498}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {0x800000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x2, 0x0, 0x8}, &(0x7f0000000180)={0x80009, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0xa00}, 0x20) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000009c0)="38683f236ec70a", 0x7}], 0x2}}], 0x1, 0xc0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) 14m28.422850529s ago: executing program 5 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 14m26.234717006s ago: executing program 1 (id=623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmmsg(r3, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}], 0x1}, 0xe}], 0x1, 0x40002080, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r6, 0x8004745a, &(0x7f0000005280)) 14m13.19739582s ago: executing program 33 (id=608): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 14m13.097526997s ago: executing program 34 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 14m10.700089996s ago: executing program 35 (id=623): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$kcm(0x1e, 0x5, 0x0) recvmmsg(r3, &(0x7f0000005240)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}], 0x1}, 0xe}], 0x1, 0x40002080, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @rand_addr=0x1}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r6, 0x8004745a, &(0x7f0000005280)) 7m2.484881302s ago: executing program 8 (id=2752): r0 = syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6m58.270285021s ago: executing program 8 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) 6m56.708685484s ago: executing program 8 (id=2770): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1ff001}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/213, 0xd5}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000a00)=""/4111, 0x100f}, {&(0x7f0000000000)=""/237, 0xed}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f00000004c0)=""/215, 0xd7}, {&(0x7f0000005e80)=""/4113, 0x1011}, {&(0x7f0000001a40)=""/4098, 0x1002}, {&(0x7f0000000440)=""/117, 0x75}], 0x5}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40012042, 0x0) 6m56.392149774s ago: executing program 8 (id=2772): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000200)={0xfffffffc, 0x0, 0x6, 0x0, 0xff, "db8f2d2b3b7596160c6981acf8805944823a7f"}) unshare(0x40020000) 6m52.709889949s ago: executing program 8 (id=2776): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0}) 6m52.518297435s ago: executing program 8 (id=2777): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 6m36.620375639s ago: executing program 36 (id=2777): socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 6m17.931940487s ago: executing program 6 (id=2837): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 6m17.689329208s ago: executing program 6 (id=2839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300002a00028008000500", @ANYRES32=r9], 0x44}}, 0x8000) 6m15.014760266s ago: executing program 6 (id=2843): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @remote, 0xfffffffc}}}, 0x3a) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x4}}, 0x2e) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = fcntl$dupfd(r2, 0x406, r3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$cgroup_type(r4, &(0x7f0000000380), 0x9) 6m14.87015143s ago: executing program 6 (id=2844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x11) 6m12.405689185s ago: executing program 6 (id=2847): syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m9.218457432s ago: executing program 6 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) unshare(0x64000600) 5m54.069665392s ago: executing program 37 (id=2852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) unshare(0x64000600) 1m45.125817426s ago: executing program 3 (id=3300): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 1m44.848644302s ago: executing program 3 (id=3301): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r0, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ac0)="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", 0x3b3}], 0x1}}], 0x1, 0x40) 1m44.114514493s ago: executing program 3 (id=3304): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00806e08000000e0000001140001800d2a790758"], 0x40}}, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x809000}}, 0x50) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 1m43.715135562s ago: executing program 3 (id=3306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m42.032551911s ago: executing program 3 (id=3308): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) 1m41.698407138s ago: executing program 3 (id=3309): socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r4 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x178}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0xe, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1m26.257167687s ago: executing program 38 (id=3309): socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r2, 0x1) pselect6(0x40, &(0x7f0000000140)={0x1, 0x4, 0x3, 0xff, 0x4, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3938700}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x50, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb8a}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r4 = syz_io_uring_setup(0x837, &(0x7f0000001200)={0x0, 0x679a, 0x80, 0x6, 0x178}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_REMOVE={0x7, 0xe, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 14.871027205s ago: executing program 9 (id=3487): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="1a", 0x1}], 0x1, 0xc, 0x0) 14.150458996s ago: executing program 9 (id=3490): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000211000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) syz_usb_connect(0x0, 0x81, 0x0, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0xa5a1, 0x400, 0x7, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 14.087166807s ago: executing program 0 (id=3491): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x4, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x77, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) fdatasync(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x34}}, 0x200080c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) epoll_create(0x1) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 12.639837319s ago: executing program 2 (id=3497): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000fc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000640)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f00000001c0)={0x20, 0x0, 0xc4, "0f14654351151c111531c2bfa0c897f8d35ac3d45666ffe4baabb230e46d8c0f5740cd547c6c6255889f1ad84f155dc647b14555c15b373c8e898d46cfd47715c6e2505e354a0aed56472277f5852b8def87c52ce80ae3416bfcb03d0d73496a34352de8b1457bddb06dc07604579f7e9e312643f67aa8ff7f9a03b185a64996b5f7ac20f5ead953489426e3f603c074f1900166b675100236b3c0f3a50c2da19e5379343b99c3f882561fe88a53dc10bb52c30c86228ffad8f04e28e69e95d471d9c846"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0xe0, 0x8}}, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x2a}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "5f8b"}, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000700)={0x40, 0x19, 0x2, "a6b2"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x400}, &(0x7f00000007c0)={0x40, 0x1c, 0x1}, 0x0, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000740)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.238370184s ago: executing program 7 (id=3498): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x40000000000002}]}], {0x14}}, 0x60}}, 0x4040) 10.576504338s ago: executing program 4 (id=3500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) 10.566644906s ago: executing program 7 (id=3501): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x104) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x40884) r2 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x97, 0x1, 0x2, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x800009, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x2c, {0x8, 0xffffffff}, 0x3, 0x6}}) sendmsg$rds(r0, &(0x7f00000020c0)={&(0x7f0000000640)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x20008011}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) recvmmsg(r0, &(0x7f0000008800), 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, &(0x7f0000000540)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) 9.586200679s ago: executing program 7 (id=3502): syz_open_dev$vim2m(0x0, 0x3fe, 0x2) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x0, 0x20}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="1f", 0x1}], 0x1}, 0x40) socket$netlink(0x10, 0x3, 0x15) 9.392526528s ago: executing program 4 (id=3503): r0 = syz_open_procfs(0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @private=0xa010102}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x24, {0x2, 0x4e20, @local}, 'veth0_to_bridge\x00'}) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 8.610745301s ago: executing program 2 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x40) 8.446234502s ago: executing program 0 (id=3505): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @broadcast}, 0x10) 8.357354257s ago: executing program 9 (id=3506): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x8, 0x1, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x60400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) 8.054490195s ago: executing program 2 (id=3507): mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10) socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000c51000/0x4000)=nil, 0x4000, 0x400000060}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 7.822336561s ago: executing program 2 (id=3508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 6.215877992s ago: executing program 9 (id=3509): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 6.215349164s ago: executing program 2 (id=3510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) 6.184884729s ago: executing program 0 (id=3511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000a54f00000000000000100800010001"], 0x1c}}, 0x0) close(0x3) 5.029098721s ago: executing program 2 (id=3512): syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.76650921s ago: executing program 7 (id=3513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdir(&(0x7f0000000280)='./file0\x00', 0x324) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x11) 4.607444068s ago: executing program 0 (id=3514): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec59080600010800060400022781aaaaaa2aac1414bbaaaaaaaaaa0009"], 0x0) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x181a00) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_disconnect(r0) r1 = fsopen(&(0x7f0000000280)='ocfs2_dlmfs\x00', 0x1) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000440)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffffff, {0x8}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x0, 0x0, 0x5, 0x83, @tick, {0xfd}, {0x1}, @note={0x81}}, {0x6, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0x7, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x1, 0xd93}, {0xba, 0x3}, {0xdb}, @note={0xfc, 0x10, 0x7, 0x6, 0x73ec}}], 0x70) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) 3.692251354s ago: executing program 7 (id=3515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}]}]}, 0x74}}, 0x0) 3.392803905s ago: executing program 7 (id=3516): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x4, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x77, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x5) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800, 0x0) fdatasync(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x34}}, 0x200080c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0000000043c9e264f7740800b6d3b912fda82514657beb7b2a4de5f77f15a3cd51c8984ad27cbce219585bd1ae867733bffd2bc7b77a8af654746fc286f00bf8f9555a563f9fd226b0849121cd5b79bd0cea43dd354022a6e1f50dc3aac666c5e3ccf5a39f5c91ba6493935871c8fcacac6693576e26625c1d4bf3d76dbf80130c16a88ffb5ae97bdc76d2306f077692814bcc0593e2eeea56ac8344a7cd6d2f67a8f282d4a00afb9a9479df647ea863855bd32aeaba5c62e3b930055a6986469f7d5da941469842e6e0a52475d94708114f2f25fe5f086d75f5d57c30b0e0534b13fbfcfa7027236d003c12af2b5932824ccffa352a199ef98b4b1b7397f5d7dc09f8eb10bdd53cb39549e09865a9a44b3d48a784d867f82964bd2a090b899f4e07476501be47bf330000ef700339a6cb9dcdb345a0561e00", @ANYRESOCT, @ANYBLOB="000068bd7000fcdbdf25880000"], 0x20}, 0x1, 0x0, 0x0, 0x20004010}, 0x4881) epoll_create(0x1) rseq(&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 3.180931629s ago: executing program 4 (id=3517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.918553801s ago: executing program 4 (id=3518): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0xb4b, 0x9, 0x18, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r2, 0x1ff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xffe0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 2.564640451s ago: executing program 9 (id=3519): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=@getpolicy={0x5c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfb, {{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x10, 0x4e23, 0x0, 0xa, 0xa0, 0x80, 0x3b}, 0x6e6bb9, 0x2}, [@policy_type={0xa, 0x10, {0x2}}]}, 0x5c}}, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000300)={0x1fd, 0x80, 0x180, &(0x7f0000000780)=[0xf04, 0x8001, 0x6, 0x5, 0xd, 0x4, 0x5, 0xffffffffffffffff, 0x0, 0x6, 0xfffffffffffffffc, 0xffffffff, 0x1, 0x10001, 0x100000001, 0x7, 0x6, 0xfffffffeffffffff, 0x8000000000000001, 0x1, 0xb8, 0x5, 0x6, 0xfb28, 0xd2, 0x2, 0xdcde, 0x47b, 0x655, 0xfffffffffffffffd, 0x100, 0x60000000000, 0x6, 0x100000000000001, 0x10000, 0xa3e, 0x5686, 0x4, 0x1, 0x106, 0x3b, 0x9, 0x2, 0x10, 0x8000, 0x4b, 0x100, 0x2, 0x5, 0xe, 0x3, 0x7f, 0x4, 0x2, 0x7, 0x5, 0x6, 0x8000000000000000, 0xffff, 0x3, 0x8, 0x6, 0x7, 0x7, 0x80, 0x2, 0x27fffffffffffd, 0x7ff, 0x3, 0x9, 0x9d01, 0x5, 0x9, 0x1, 0x0, 0x1, 0x80000000000, 0x7fffffff, 0x6, 0x779a00c2, 0x6, 0x3, 0xb2, 0x0, 0x21, 0x5, 0x1, 0xb069, 0x7, 0x40, 0x61, 0xe, 0x6, 0x6, 0x8, 0x9, 0x9, 0x8, 0x4, 0x1, 0x4, 0x2, 0x1, 0x1, 0x8, 0x6, 0x1, 0x4, 0xfff, 0x7, 0x1, 0x2, 0x2, 0x7f80000000000, 0x6, 0x0, 0x7fffffff, 0x0, 0xe1, 0x9, 0x8, 0x8000000000000001, 0x5, 0x2558e107, 0x2, 0x7, 0x0, 0xfffffffffffffffe]}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) fcntl$notify(r1, 0x402, 0x8000000a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x2, 0x9}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f0000000040), &(0x7f0000000040)=[0x0, 0x0], 0x0, 0x2, 0x3, 0x0, r2}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f00000000c0)={0x1b, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008102"]) sendto$inet6(r5, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty, 0x80000000}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x9) shutdown(r5, 0x1) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f00000000c0)={r3}) 2.099376856s ago: executing program 0 (id=3520): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x8, 0x1, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) unshare(0x60400) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) 1.615786568s ago: executing program 4 (id=3521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmmsg$sock(r4, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 42.552008ms ago: executing program 9 (id=3522): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) syz_emit_ethernet(0x4a, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x2, 0x0, 0x3fe, 0x0, 0x32}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x600, 0x0, 0x0) 5.745281ms ago: executing program 4 (id=3523): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f00000001c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000340)={0x0, 0x80000002, 0x0, 0x2}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = gettid() r6 = openat$userio(0xffffffffffffff9c, &(0x7f00000003c0), 0x101001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r6, &(0x7f0000000400)={0x2, 0x1}, 0x2) sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4126, 0x80000001, 0x101e}, 0x0) rt_sigqueueinfo(r5, 0x21, &(0x7f0000000100)={0x1f}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x7, &(0x7f0000000100)=[{0x7, 0x0, 0x5, 0x8}, {0x7f, 0x5, 0x9, 0xe}, {0x7, 0xf7, 0x81, 0x1}, {0x4257, 0x7, 0x40, 0xffffffff}, {0x3, 0xe8, 0xce, 0xfffffffe}, {0x2, 0x4, 0x7, 0x100}, {0x4, 0x6, 0x8, 0x7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000004c0)={0x1, &(0x7f0000000440)=[{0xe6, 0x3, 0x3, 0x8}]}) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter6\x00') write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x900, 0x12) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, &(0x7f0000000040)=0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x80, 0x23456}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 0s ago: executing program 0 (id=3524): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') lseek(r2, 0x6be5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x11a, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x8, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) kernel console output (not intermixed with test programs): onfig 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.225131][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.225170][ T5855] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 629.225193][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.279265][ T5855] usb 4-1: config 0 descriptor?? [ 629.770178][ T5855] hid_parser_main: 10 callbacks suppressed [ 629.770200][ T5855] ft260 0003:0403:6030.0004: unknown main item tag 0x7 [ 629.946752][ T5855] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 630.158263][ T59] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 630.381866][ T5855] ft260 0003:0403:6030.0004: failed to retrieve system status [ 630.382277][ T5855] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -32 [ 630.514971][T13535] fuse: Unknown parameter '0xffffffffffffffff' [ 631.568388][ T6071] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 631.720770][ T6071] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 631.720801][ T6071] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.720844][ T6071] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.720866][ T6071] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.022555][ T6071] usb 9-1: usb_control_msg returned -32 [ 632.022603][ T6071] usbtmc 9-1:16.0: can't read capabilities [ 632.180875][T11721] usb 4-1: USB disconnect, device number 8 [ 633.237882][T13567] erspan0: entered promiscuous mode [ 634.395632][T11721] usb 9-1: USB disconnect, device number 13 [ 634.515601][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.516469][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.013010][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2551'. [ 635.179132][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.235211][T13570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.404898][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.420284][ T1170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.422288][ T1170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.422330][ T1170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.898257][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 637.070349][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 637.070380][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.070400][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 637.070451][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 637.070477][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 637.072807][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 637.072835][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 637.072856][ T9] usb 9-1: Product: syz [ 637.072870][ T9] usb 9-1: Manufacturer: syz [ 637.937861][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 637.937888][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 637.983524][T13611] syz.3.2559 (13611) used greatest stack depth: 17800 bytes left [ 638.143300][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 638.143331][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 638.517613][T13607] lo speed is unknown, defaulting to 1000 [ 640.955714][ T9] usb 9-1: USB disconnect, device number 14 [ 641.819988][T13637] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 647.428456][ T59] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 648.201076][T13690] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 648.711924][T13692] netlink: 'syz.2.2584': attribute type 12 has an invalid length. [ 650.086994][T13698] netlink: 'syz.6.2587': attribute type 1 has an invalid length. [ 650.924650][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2591'. [ 650.924853][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2591'. [ 651.827718][T13716] fuse: Bad value for 'fd' [ 652.971437][T13728] lo speed is unknown, defaulting to 1000 [ 653.818123][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 653.970806][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 653.970836][ T9] usb 9-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 653.970856][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 653.970911][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 653.970936][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 653.973482][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 653.973514][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 653.973534][ T9] usb 9-1: Product: syz [ 653.973548][ T9] usb 9-1: Manufacturer: syz [ 653.995849][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 653.995870][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 653.995970][ T9] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22 [ 655.317152][T13758] bond0: entered promiscuous mode [ 655.350962][T13758] batadv0: entered promiscuous mode [ 655.355953][T13758] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 655.355979][T13758] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 655.387610][T13758] hsr1: entered allmulticast mode [ 655.387632][T13758] bond0: entered allmulticast mode [ 655.387657][T13758] batadv0: entered allmulticast mode [ 655.389088][T13758] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 656.538211][ T5913] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 656.658866][ T31] usb 9-1: USB disconnect, device number 15 [ 656.679556][ T5913] usb 8-1: device descriptor read/64, error -71 [ 656.844668][T13790] bond0: entered promiscuous mode [ 656.844690][T13790] bond_slave_0: entered promiscuous mode [ 656.844925][T13790] bond_slave_1: entered promiscuous mode [ 656.846409][T13790] batadv0: entered promiscuous mode [ 656.847307][T13790] debugfs: 'hsr0' already exists in 'hsr' [ 656.847330][T13790] Cannot create hsr debugfs directory [ 656.847427][T13790] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 656.847443][T13790] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 656.847556][T13790] hsr0: entered allmulticast mode [ 656.912581][T13790] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 656.968082][ T5913] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 657.320483][T13794] lo speed is unknown, defaulting to 1000 [ 658.065047][ T5913] usb 8-1: device descriptor read/64, error -71 [ 658.229856][ T5913] usb usb8-port1: attempt power cycle [ 658.587053][T13800] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2622'. [ 658.628094][ T5913] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 658.657860][ T5913] usb 8-1: device descriptor read/8, error -71 [ 658.898419][ T5913] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 658.956968][ T5913] usb 8-1: device descriptor read/8, error -71 [ 659.068458][ T5913] usb usb8-port1: unable to enumerate USB device [ 659.920135][T13831] netlink: 'syz.2.2631': attribute type 1 has an invalid length. [ 660.048118][T13834] vlan3: entered allmulticast mode [ 660.048139][T13834] bridge0: entered allmulticast mode [ 661.487749][T13840] cgroup: Unknown subsys name 'cpuset' [ 664.581803][T13886] 9pnet_fd: Insufficient options for proto=fd [ 666.751587][T13925] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 667.108219][ T5159] Bluetooth: hci4: command 0x1003 tx timeout [ 667.112960][ T59] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 667.867809][T13944] overlayfs: failed to clone lowerpath [ 668.005320][T13945] overlayfs: failed to clone upperpath [ 668.605649][T13946] lo speed is unknown, defaulting to 1000 [ 673.376020][T13956] kthread_run failed with err -4 [ 675.748068][ T5913] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 676.772811][ T5913] usb 9-1: device descriptor read/64, error -71 [ 677.020502][ T5913] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 677.158424][ T5913] usb 9-1: device descriptor read/64, error -71 [ 677.268820][ T5913] usb usb9-port1: attempt power cycle [ 677.618050][ T5913] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 677.638950][ T5913] usb 9-1: device descriptor read/8, error -71 [ 677.898332][ T5913] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 677.919185][ T5913] usb 9-1: device descriptor read/8, error -71 [ 678.032340][ T5913] usb usb9-port1: unable to enumerate USB device [ 680.299003][T14018] netlink: 'syz.3.2687': attribute type 4 has an invalid length. [ 680.496706][T14018] netlink: 'syz.3.2687': attribute type 4 has an invalid length. [ 681.263406][T14025] netlink: 'syz.2.2691': attribute type 32 has an invalid length. [ 681.263429][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 682.468191][ T6071] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 682.628209][ T6071] usb 8-1: Using ep0 maxpacket: 16 [ 682.631634][ T6071] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.631690][ T6071] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 682.631733][ T6071] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 682.631757][ T6071] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.686433][ T6071] usb 8-1: config 0 descriptor?? [ 682.724129][ T6071] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 683.156683][T14064] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2702'. [ 684.128080][T14084] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 685.200768][ T9] usb 8-1: USB disconnect, device number 22 [ 686.310604][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.804155][T14127] sock: sock_timestamping_bind_phc: sock not bind to device [ 687.464357][T14134] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 688.039653][ T6071] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 688.190996][ T6071] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.191024][ T6071] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 688.193718][ T6071] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 688.193746][ T6071] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.193767][ T6071] usb 9-1: Product: syz [ 688.193781][ T6071] usb 9-1: Manufacturer: syz [ 688.193796][ T6071] usb 9-1: SerialNumber: syz [ 688.203252][ T6071] usb 9-1: config 0 descriptor?? [ 688.896495][T14156] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 690.862151][ T5913] usb 9-1: USB disconnect, device number 20 [ 691.249365][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 691.249382][ T37] audit: type=1326 audit(1758561649.377:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14168 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62b1feec9 code=0x7fc00000 [ 691.529322][T14163] kthread_run failed with err -4 [ 691.848240][T14185] tipc: Failed to remove unknown binding: 66,1,1/55132924:3640190483/3640190485 [ 691.878120][T14188] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2746'. [ 691.920961][T14192] netlink: 'syz.8.2748': attribute type 1 has an invalid length. [ 692.368262][ T5913] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 692.475585][T14208] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 692.540621][ T5913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.540648][ T5913] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 692.543862][ T5913] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 692.543889][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.543910][ T5913] usb 9-1: Product: syz [ 692.543924][ T5913] usb 9-1: Manufacturer: syz [ 692.543938][ T5913] usb 9-1: SerialNumber: syz [ 692.603143][ T5913] usb 9-1: config 0 descriptor?? [ 693.275191][T14216] lo speed is unknown, defaulting to 1000 [ 693.283579][T14223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2760'. [ 693.410300][T14226] netlink: 'syz.2.2762': attribute type 1 has an invalid length. [ 696.221777][ T991] usb 9-1: USB disconnect, device number 21 [ 697.505071][T14254] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 697.505284][T14254] FAT-fs (loop7): unable to read boot sector [ 698.008299][T14261] fuse: Bad value for 'fd' [ 699.582012][T14267] lo speed is unknown, defaulting to 1000 [ 700.383998][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 700.413810][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 700.428460][ T5159] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 700.487002][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 700.496999][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 700.621378][T14278] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 701.002080][T14273] lo speed is unknown, defaulting to 1000 [ 701.948041][ T5913] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 702.100527][ T5913] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.100554][ T5913] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 702.103542][ T5913] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 702.103570][ T5913] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.103590][ T5913] usb 8-1: Product: syz [ 702.103604][ T5913] usb 8-1: Manufacturer: syz [ 702.103618][ T5913] usb 8-1: SerialNumber: syz [ 702.168394][ T5913] usb 8-1: config 0 descriptor?? [ 702.628341][ T59] Bluetooth: hci3: command tx timeout [ 702.969771][T14291] wg2: entered promiscuous mode [ 702.969803][T14291] wg2: entered allmulticast mode [ 704.708581][ T59] Bluetooth: hci3: command tx timeout [ 705.218808][ T991] usb 8-1: USB disconnect, device number 23 [ 705.519722][T14273] chnl_net:caif_netlink_parms(): no params data found [ 706.470507][T14322] lo speed is unknown, defaulting to 1000 [ 707.318221][ T59] Bluetooth: hci3: command tx timeout [ 709.433625][ T59] Bluetooth: hci3: command tx timeout [ 709.489768][T14340] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 710.559907][T14344] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 710.559952][T14344] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 710.559981][T14344] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 710.821776][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.821919][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.822170][T14273] bridge_slave_0: entered allmulticast mode [ 710.838038][T14273] bridge_slave_0: entered promiscuous mode [ 710.853965][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.854143][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.854378][T14273] bridge_slave_1: entered allmulticast mode [ 710.871208][T14273] bridge_slave_1: entered promiscuous mode [ 710.878334][T14348] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2791'. [ 711.175336][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.189739][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.608215][T14273] team0: Port device team_slave_0 added [ 711.634346][T14273] team0: Port device team_slave_1 added [ 712.882234][T14359] sch_fq: defrate 0 ignored. [ 713.456855][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.456874][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.456899][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.496745][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.496760][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.496784][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.450701][ T37] audit: type=1326 audit(1758561673.397:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450757][ T37] audit: type=1326 audit(1758561673.397:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450797][ T37] audit: type=1326 audit(1758561673.397:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450839][ T37] audit: type=1326 audit(1758561673.397:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450879][ T37] audit: type=1326 audit(1758561673.397:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450918][ T37] audit: type=1326 audit(1758561673.397:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450959][ T37] audit: type=1326 audit(1758561673.397:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 715.450999][ T37] audit: type=1326 audit(1758561673.407:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14367 comm="syz.7.2796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 717.858012][T14377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.860322][T14377] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.938055][T14377] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 718.242645][T14273] hsr_slave_0: entered promiscuous mode [ 718.243995][T14273] hsr_slave_1: entered promiscuous mode [ 718.257302][T14273] debugfs: 'hsr0' already exists in 'hsr' [ 718.257329][T14273] Cannot create hsr debugfs directory [ 718.723022][ T5159] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 718.748347][ T5159] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 718.750104][ T5159] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 718.755194][ T5159] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 718.755950][ T5159] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 718.966270][T14399] bond1: left promiscuous mode [ 718.966450][T14399] bond2: left promiscuous mode [ 719.258485][T14402] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 719.776488][T14394] lo speed is unknown, defaulting to 1000 [ 721.138676][ T59] Bluetooth: hci4: command tx timeout [ 721.653609][T14414] devpts: Bad value for 'max' [ 721.978530][T14421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2812'. [ 722.964415][T14394] chnl_net:caif_netlink_parms(): no params data found [ 723.176033][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2816'. [ 723.188033][ T59] Bluetooth: hci4: command tx timeout [ 723.288324][T14273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 723.362545][T14273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 723.432311][T14273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 723.779641][T14273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 723.998586][T14394] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.998750][T14394] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.999015][T14394] bridge_slave_0: entered allmulticast mode [ 724.028190][T14394] bridge_slave_0: entered promiscuous mode [ 724.062736][T14394] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.062879][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.063131][T14394] bridge_slave_1: entered allmulticast mode [ 724.066014][T14394] bridge_slave_1: entered promiscuous mode [ 725.878063][T14486] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 726.275070][ T59] Bluetooth: hci4: command tx timeout [ 726.434442][T14483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2822'. [ 727.170854][T14394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.213816][T14394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.547281][ T59] Bluetooth: hci4: command tx timeout [ 728.830498][T14500] overlayfs: failed to clone lowerpath [ 729.118641][T14508] overlayfs: failed to clone upperpath [ 729.201919][T14394] team0: Port device team_slave_0 added [ 729.228182][T14500] lo speed is unknown, defaulting to 1000 [ 729.344797][T14394] team0: Port device team_slave_1 added [ 729.851670][T14394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.851687][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.851712][T14394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.863027][T14394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.863041][T14394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.863066][T14394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.213541][T14394] hsr_slave_0: entered promiscuous mode [ 731.221793][T14394] hsr_slave_1: entered promiscuous mode [ 731.222809][T14394] debugfs: 'hsr0' already exists in 'hsr' [ 731.222834][T14394] Cannot create hsr debugfs directory [ 732.162687][T14273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.324716][T14273] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.353357][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.353587][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.556478][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.556727][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.031635][T14526] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 733.031811][T14526] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 733.032112][T14526] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 733.934458][T14394] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 734.008113][T14394] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 734.424766][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2833'. [ 734.828054][T14394] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 734.889950][T14542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2834'. [ 735.051674][T14394] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 735.153208][ T37] audit: type=1326 audit(1758561693.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14543 comm="syz.7.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7fc00000 [ 735.153683][ T37] audit: type=1326 audit(1758561693.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14543 comm="syz.7.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7fc00000 [ 735.309156][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.377902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 735.378164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 735.379212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 735.380262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 735.381305][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 736.527891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 736.661087][ T37] audit: type=1326 audit(1758561694.777:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14543 comm="syz.7.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1423beaf79 code=0x7fc00000 [ 736.661148][ T37] audit: type=1326 audit(1758561694.777:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14543 comm="syz.7.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1423beb03f code=0x7fc00000 [ 736.661172][ T37] audit: type=1326 audit(1758561694.777:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14543 comm="syz.7.2835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1423c4eec9 code=0x7fc00000 [ 736.823999][T14560] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2838'. [ 736.941945][T14273] veth0_vlan: entered promiscuous mode [ 737.354992][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2839'. [ 737.355064][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2839'. [ 738.849015][T14577] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 739.159554][T14568] gretap0: entered promiscuous mode [ 739.159677][T14568] macsec2: entered promiscuous mode [ 739.159925][T14568] macsec2: entered allmulticast mode [ 739.159938][T14568] gretap0: entered allmulticast mode [ 740.251772][T14583] overlayfs: failed to clone lowerpath [ 740.727555][ T3662] vlan2: left allmulticast mode [ 740.727595][ T3662] vlan2: left promiscuous mode [ 740.728060][ T3662] bridge0: port 3(vlan2) entered disabled state [ 741.167128][T14586] fuse: Bad value for 'fd' [ 742.303793][ T3662] bridge_slave_1: left allmulticast mode [ 742.303826][ T3662] bridge_slave_1: left promiscuous mode [ 742.304109][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.430438][T14594] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 742.430533][T14594] FAT-fs (loop15): unable to read boot sector [ 744.449074][ T3662] bridge_slave_0: left allmulticast mode [ 744.449106][ T3662] bridge_slave_0: left promiscuous mode [ 744.449524][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.878210][T14612] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 749.684971][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.858785][ T3662] bond3 (unregistering): (slave geneve2): Releasing active interface [ 751.999873][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.058673][ T3662] bond_slave_0: left promiscuous mode [ 752.089827][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.128442][ T3662] bond_slave_1: left promiscuous mode [ 752.128940][ T3662] bond0 (unregistering): Released all slaves [ 752.339839][ T6071] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 752.499929][ T6071] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.499974][ T6071] usb 8-1: config 0 interface 0 has no altsetting 0 [ 752.502314][ T6071] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 752.502340][ T6071] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.502351][ T6071] usb 8-1: Product: syz [ 752.502358][ T6071] usb 8-1: Manufacturer: syz [ 752.502366][ T6071] usb 8-1: SerialNumber: syz [ 752.505616][ T6071] usb 8-1: config 0 descriptor?? [ 752.513601][ T6071] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 752.517785][ T6071] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.529011][ T6071] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 752.529069][ T6071] usb 8-1: media controller created [ 752.615122][ T6071] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.718949][ T6071] DVB: Unable to find symbol tda10046_attach() [ 752.718964][ T6071] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 752.718979][ T6071] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 752.991472][ T3662] bond1 (unregistering): Released all slaves [ 753.170943][ T6071] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 753.251361][ T6071] usb 8-1: USB disconnect, device number 24 [ 753.679475][ T3662] bond2 (unregistering): Released all slaves [ 756.705000][ T3662] bond3 (unregistering): Released all slaves [ 756.941079][T14273] veth1_vlan: entered promiscuous mode [ 756.982734][T14394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.561216][T14652] lo speed is unknown, defaulting to 1000 [ 760.531934][ T5159] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.547097][ T5159] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 760.555687][ T5159] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 760.563815][ T5159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 760.564561][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 761.390388][T14664] sch_fq: defrate 0 ignored. [ 761.522758][T14394] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.589410][T14447] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.589560][T14447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.725694][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.725994][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.914472][T14660] lo speed is unknown, defaulting to 1000 [ 762.242719][T14668] overlayfs: failed to clone lowerpath [ 763.134162][ T5159] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 763.170492][ T5159] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 763.177153][ T5159] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 763.470140][ T5159] Bluetooth: hci2: command tx timeout [ 763.473452][ T5159] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 763.476180][ T5159] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 764.533797][T14677] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 764.533840][T14677] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 764.533859][T14677] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 765.109847][ T37] audit: type=1326 audit(1758561723.217:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14679 comm="syz.3.2866" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1c013eec9 code=0x0 [ 765.844629][ T59] Bluetooth: hci2: command tx timeout [ 766.548309][ T59] Bluetooth: hci6: command tx timeout [ 767.917496][ T59] Bluetooth: hci2: command tx timeout [ 768.841172][T14697] veth0_vlan: entered allmulticast mode [ 769.687992][ T5159] Bluetooth: hci6: command tx timeout [ 770.139672][ T59] Bluetooth: hci2: command tx timeout [ 770.493600][T14670] lo speed is unknown, defaulting to 1000 [ 771.710375][ T3662] hsr_slave_0: left promiscuous mode [ 771.748354][ T59] Bluetooth: hci6: command tx timeout [ 771.753797][ T3662] hsr_slave_1: left promiscuous mode [ 771.755956][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.781857][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.841893][ T59] Bluetooth: hci6: command tx timeout [ 775.081650][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 775.281004][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 781.070553][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 781.093651][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 781.095081][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 781.096643][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 781.100008][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.666436][T14737] lo speed is unknown, defaulting to 1000 [ 783.510274][ T59] Bluetooth: hci0: command tx timeout [ 783.864076][T14660] chnl_net:caif_netlink_parms(): no params data found [ 784.477882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 784.584494][T14763] bond_slave_1: mtu less than device minimum [ 785.487067][T14770] lo speed is unknown, defaulting to 1000 [ 785.716183][ T59] Bluetooth: hci0: command tx timeout [ 786.028337][T14670] chnl_net:caif_netlink_parms(): no params data found [ 786.792596][T14660] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.792813][T14660] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.793019][T14660] bridge_slave_0: entered allmulticast mode [ 786.795804][T14660] bridge_slave_0: entered promiscuous mode [ 786.854763][T14660] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.854853][T14660] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.855038][T14660] bridge_slave_1: entered allmulticast mode [ 786.856648][T14660] bridge_slave_1: entered promiscuous mode [ 788.950373][ T59] Bluetooth: hci0: command tx timeout [ 789.075937][T14791] netlink: 'syz.3.2890': attribute type 1 has an invalid length. [ 789.370897][T14794] vlan2: entered allmulticast mode [ 789.370918][T14794] bridge0: entered allmulticast mode [ 789.375188][T14660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.522868][T14660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.582627][T14670] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.582863][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.583177][T14670] bridge_slave_0: entered allmulticast mode [ 789.590863][T14670] bridge_slave_0: entered promiscuous mode [ 789.730461][T14670] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.730648][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.735719][T14670] bridge_slave_1: entered allmulticast mode [ 789.743484][T14670] bridge_slave_1: entered promiscuous mode [ 790.195294][T14660] team0: Port device team_slave_0 added [ 790.445361][T14660] team0: Port device team_slave_1 added [ 790.771259][T14670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.421488][ T59] Bluetooth: hci0: command tx timeout [ 791.852037][T14670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.853887][T14660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.853903][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.853928][T14660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.855922][T14737] chnl_net:caif_netlink_parms(): no params data found [ 795.000736][T14660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.000753][T14660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.000777][T14660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.380430][T14670] team0: Port device team_slave_0 added [ 795.982073][T14670] team0: Port device team_slave_1 added [ 795.988392][T14839] netlink: 'syz.7.2902': attribute type 29 has an invalid length. [ 797.168462][T14670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.168472][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.168486][T14670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.520093][T14660] hsr_slave_0: entered promiscuous mode [ 797.524957][T14660] hsr_slave_1: entered promiscuous mode [ 797.527191][T14660] debugfs: 'hsr0' already exists in 'hsr' [ 797.527216][T14660] Cannot create hsr debugfs directory [ 797.554814][T14670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.554828][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.554857][T14670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.301545][T14737] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.301760][T14737] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.301969][T14737] bridge_slave_0: entered allmulticast mode [ 798.316232][T14737] bridge_slave_0: entered promiscuous mode [ 798.498952][T14737] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.499112][T14737] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.499312][T14737] bridge_slave_1: entered allmulticast mode [ 798.510098][T14737] bridge_slave_1: entered promiscuous mode [ 799.041631][T14670] hsr_slave_0: entered promiscuous mode [ 799.043229][T14670] hsr_slave_1: entered promiscuous mode [ 799.044242][T14670] debugfs: 'hsr0' already exists in 'hsr' [ 799.044266][T14670] Cannot create hsr debugfs directory [ 799.184022][T14737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.227363][T14737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.521046][T14873] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 800.687011][T14882] netlink: 'syz.3.2910': attribute type 32 has an invalid length. [ 800.776810][T14737] team0: Port device team_slave_0 added [ 801.153699][T14737] team0: Port device team_slave_1 added [ 801.448580][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2911'. [ 801.499857][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2911'. [ 802.381493][T14737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.381510][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.381536][T14737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.512297][ T5913] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 802.541852][T14737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.541863][T14737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.541878][T14737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.930120][T14737] hsr_slave_0: entered promiscuous mode [ 805.953758][T14737] hsr_slave_1: entered promiscuous mode [ 805.963449][T14737] debugfs: 'hsr0' already exists in 'hsr' [ 805.963477][T14737] Cannot create hsr debugfs directory [ 807.503550][ T5913] usb 8-1: unable to get BOS descriptor or descriptor too short [ 807.504618][ T5913] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 807.504640][ T5913] usb 8-1: can't read configurations, error -71 [ 808.079029][T14923] ip6erspan0: entered promiscuous mode [ 808.712779][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.132448][ T3662] bridge_slave_1: left allmulticast mode [ 809.132579][ T3662] bridge_slave_1: left promiscuous mode [ 809.132889][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.196015][ T3662] bridge_slave_0: left allmulticast mode [ 809.196048][ T3662] bridge_slave_0: left promiscuous mode [ 809.196325][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.310500][ T3662] bridge_slave_1: left allmulticast mode [ 809.310521][ T3662] bridge_slave_1: left promiscuous mode [ 809.310670][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.379961][ T3662] bridge_slave_0: left allmulticast mode [ 809.379985][ T3662] bridge_slave_0: left promiscuous mode [ 809.380144][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.798710][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.838829][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.883418][ T3662] bond0 (unregistering): Released all slaves [ 814.348733][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.440785][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.463332][ T3662] bond0 (unregistering): Released all slaves [ 815.909658][T14675] Bluetooth: hci5: command 0x0405 tx timeout [ 815.999539][ T3662] hsr_slave_0: left promiscuous mode [ 816.039774][ T3662] hsr_slave_1: left promiscuous mode [ 816.040780][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.081540][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.348124][ T3662] hsr_slave_0: left promiscuous mode [ 816.390136][ T3662] hsr_slave_1: left promiscuous mode [ 816.391151][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.440073][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.534634][T14964] vim2m vim2m.0: vidioc_s_fmt queue busy [ 816.594237][ T3662] veth1_vlan: left promiscuous mode [ 816.594450][ T3662] veth0_vlan: left promiscuous mode [ 818.339761][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 818.674171][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 820.861436][T14675] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 820.897506][T14675] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 820.923477][T14675] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 820.926550][T14675] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 820.927493][T14675] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 821.383887][T14675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 821.417732][T14675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 821.428676][T14675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 821.449717][T14675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 821.450393][T14675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 823.042817][ T5159] Bluetooth: hci3: command tx timeout [ 823.178948][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 823.399179][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 823.524382][ T5159] Bluetooth: hci4: command tx timeout [ 825.109821][ T5159] Bluetooth: hci3: command tx timeout [ 825.590759][ T5159] Bluetooth: hci4: command tx timeout [ 826.107664][T14959] sit0: left promiscuous mode [ 826.129728][T14959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.131012][T14959] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.161237][T14959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 826.361442][T14970] lo speed is unknown, defaulting to 1000 [ 826.948142][T11721] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 827.098130][T11721] usb 8-1: Using ep0 maxpacket: 16 [ 827.100792][T11721] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 827.100817][T11721] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 827.197444][T11721] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 827.197475][T11721] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.197494][T11721] usb 8-1: Product: syz [ 827.197506][T11721] usb 8-1: Manufacturer: syz [ 827.197520][T11721] usb 8-1: SerialNumber: syz [ 827.197566][ T5159] Bluetooth: hci3: command tx timeout [ 827.534761][T11721] usb 8-1: 0:2 : does not exist [ 827.547677][T11721] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 827.668046][ T5159] Bluetooth: hci4: command tx timeout [ 827.910465][T11721] usb 8-1: USB disconnect, device number 27 [ 828.126798][T14978] udevd[14978]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 828.998274][T14974] lo speed is unknown, defaulting to 1000 [ 829.278938][ T5159] Bluetooth: hci3: command tx timeout [ 829.767508][ T5159] Bluetooth: hci4: command tx timeout [ 831.746063][T14737] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 831.836724][T14737] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 831.914566][T14737] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 832.028048][ T991] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 832.099396][T14737] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 832.164832][T14970] chnl_net:caif_netlink_parms(): no params data found [ 832.178014][ T991] usb 8-1: Using ep0 maxpacket: 16 [ 832.182738][ T991] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 832.185670][ T991] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 832.185692][ T991] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.185703][ T991] usb 8-1: Product: syz [ 832.185710][ T991] usb 8-1: Manufacturer: syz [ 832.185718][ T991] usb 8-1: SerialNumber: syz [ 832.252565][ T991] usb 8-1: config 0 descriptor?? [ 832.282393][ T991] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 832.282426][ T991] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 833.030235][ T991] em28xx 8-1:0.0: chip ID is em2765 [ 833.051775][T14974] chnl_net:caif_netlink_parms(): no params data found [ 833.640041][ T991] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 833.640062][ T991] em28xx 8-1:0.0: board has no eeprom [ 833.918040][ T991] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 833.918060][ T991] em28xx 8-1:0.0: dvb set to bulk mode. [ 833.928503][ T6071] em28xx 8-1:0.0: Binding DVB extension [ 833.997156][ T991] usb 8-1: USB disconnect, device number 28 [ 834.001543][ T991] em28xx 8-1:0.0: Disconnecting em28xx [ 834.269801][T14970] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.269944][T14970] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.270541][T14970] bridge_slave_0: entered allmulticast mode [ 834.292071][ T6071] em28xx 8-1:0.0: Registering input extension [ 834.292443][T14970] bridge_slave_0: entered promiscuous mode [ 834.295876][ T991] em28xx 8-1:0.0: Closing input extension [ 834.466088][ T991] em28xx 8-1:0.0: Freeing device [ 834.903257][T14970] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.903339][T14970] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.903542][T14970] bridge_slave_1: entered allmulticast mode [ 834.907000][T14970] bridge_slave_1: entered promiscuous mode [ 835.943610][T14970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.965573][T14974] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.965810][T14974] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.966068][T14974] bridge_slave_0: entered allmulticast mode [ 835.996698][T14974] bridge_slave_0: entered promiscuous mode [ 836.063534][T14970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.476673][T14974] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.476762][T14974] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.476943][T14974] bridge_slave_1: entered allmulticast mode [ 836.489580][T14974] bridge_slave_1: entered promiscuous mode [ 836.796299][T14970] team0: Port device team_slave_0 added [ 837.233718][T14970] team0: Port device team_slave_1 added [ 837.325335][T14974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.530770][T14974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 838.045136][T14970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 838.045153][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.045187][T14970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.301504][T14970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.301521][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.301545][T14970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.324194][T14974] team0: Port device team_slave_0 added [ 838.604189][T14974] team0: Port device team_slave_1 added [ 840.179683][T14974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.179701][T14974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 840.179723][T14974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.181368][ T3662] bridge_slave_1: left allmulticast mode [ 840.181398][ T3662] bridge_slave_1: left promiscuous mode [ 840.181651][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.531313][ T3662] bridge_slave_0: left allmulticast mode [ 840.531345][ T3662] bridge_slave_0: left promiscuous mode [ 840.531643][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.770625][ T3662] bridge_slave_1: left allmulticast mode [ 840.770660][ T3662] bridge_slave_1: left promiscuous mode [ 840.770925][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.025017][T14675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 841.059320][T14675] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 841.062209][T14675] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 841.086310][T14675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 841.108549][T14675] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 841.239485][ T3662] bridge_slave_0: left allmulticast mode [ 841.239517][ T3662] bridge_slave_0: left promiscuous mode [ 841.239795][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.548611][ T37] audit: type=1326 audit(1758561799.667:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15107 comm="syz.7.2947" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1423c4eec9 code=0x0 [ 842.251589][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.342049][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.443421][ T3662] bond0 (unregistering): Released all slaves [ 842.868767][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 842.968860][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.063409][ T3662] bond0 (unregistering): Released all slaves [ 843.268164][T14675] Bluetooth: hci2: command tx timeout [ 843.366533][T14974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.366549][T14974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.366574][T14974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.812946][T14970] hsr_slave_0: entered promiscuous mode [ 843.814354][T14970] hsr_slave_1: entered promiscuous mode [ 843.815268][T14970] debugfs: 'hsr0' already exists in 'hsr' [ 843.815291][T14970] Cannot create hsr debugfs directory [ 845.132332][T14974] hsr_slave_0: entered promiscuous mode [ 845.209660][T14974] hsr_slave_1: entered promiscuous mode [ 845.216134][T14974] debugfs: 'hsr0' already exists in 'hsr' [ 845.216163][T14974] Cannot create hsr debugfs directory [ 845.230474][T15102] lo speed is unknown, defaulting to 1000 [ 845.348507][T14675] Bluetooth: hci2: command tx timeout [ 845.430133][ T3662] hsr_slave_0: left promiscuous mode [ 845.519813][ T3662] hsr_slave_1: left promiscuous mode [ 845.524489][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.571008][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.845043][ T3662] hsr_slave_0: left promiscuous mode [ 845.885993][ T3662] hsr_slave_1: left promiscuous mode [ 845.894655][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.919714][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.458114][T14675] Bluetooth: hci2: command tx timeout [ 847.801093][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 848.062198][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 849.508229][T14675] Bluetooth: hci2: command tx timeout [ 850.148859][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 850.308994][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 854.500244][T15176] vlan3: entered allmulticast mode [ 854.500265][T15176] bridge0: entered allmulticast mode [ 854.658442][T15102] chnl_net:caif_netlink_parms(): no params data found [ 855.033650][T15184] ip6erspan0: entered promiscuous mode [ 855.938210][T15102] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.938350][T15102] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.938636][T15102] bridge_slave_0: entered allmulticast mode [ 855.941661][T15102] bridge_slave_0: entered promiscuous mode [ 856.370112][T15102] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.370260][T15102] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.370524][T15102] bridge_slave_1: entered allmulticast mode [ 856.373563][T15102] bridge_slave_1: entered promiscuous mode [ 857.345039][T14970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 857.406595][T15102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.429035][T14970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 857.504217][T15102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.528662][T14970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 860.033219][T14970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 860.564789][T15102] team0: Port device team_slave_0 added [ 860.667038][T15102] team0: Port device team_slave_1 added [ 861.317974][T15102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.317992][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.318017][T15102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.406551][T15102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.406567][T15102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.406593][T15102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.458701][T14974] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 861.656202][T14974] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 861.766507][T14974] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 861.866124][T14974] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 863.360049][T15102] hsr_slave_0: entered promiscuous mode [ 863.361413][T15102] hsr_slave_1: entered promiscuous mode [ 863.363107][T15102] debugfs: 'hsr0' already exists in 'hsr' [ 863.363131][T15102] Cannot create hsr debugfs directory [ 863.933655][ T3662] bridge_slave_1: left allmulticast mode [ 863.933678][ T3662] bridge_slave_1: left promiscuous mode [ 863.933833][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.018914][ T3662] bridge_slave_0: left allmulticast mode [ 864.018936][ T3662] bridge_slave_0: left promiscuous mode [ 864.019158][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.581590][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.712211][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 866.778490][ T3662] bond0 (unregistering): Released all slaves [ 867.131880][T15259] lo speed is unknown, defaulting to 1000 [ 868.628815][ T3662] hsr_slave_0: left promiscuous mode [ 868.668287][ T3662] hsr_slave_1: left promiscuous mode [ 868.672522][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.728133][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.793054][ T3662] team0 (unregistering): Port device team_slave_1 removed [ 869.851784][T15280] netlink: 4400 bytes leftover after parsing attributes in process `syz.7.2987'. [ 869.994841][ T3662] team0 (unregistering): Port device team_slave_0 removed [ 870.158686][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.302769][T14970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.060728][T14970] 8021q: adding VLAN 0 to HW filter on device team0 [ 872.543814][T14974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.571355][T14441] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.571507][T14441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.676310][T15286] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 872.693562][T15286] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 872.782437][T14448] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.782600][T14448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.821027][T15286] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 872.823307][T15286] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 872.956336][T14974] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.110848][T14441] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.111062][T14441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.282724][T15286] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 873.283018][T15286] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 873.389904][T15286] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 873.475585][T14441] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.475746][T14441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.640574][T15286] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 873.640759][T15286] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 873.726941][T15286] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 874.033329][T15286] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 874.034577][T15286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 874.055007][T15295] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2989'. [ 874.194114][T15286] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 874.206450][T15102] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 874.623532][T15102] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 874.687337][T15102] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 874.713505][T14675] Bluetooth: hci1: command 0x0406 tx timeout [ 874.755112][T15102] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 874.869239][T14675] Bluetooth: hci5: command 0x0405 tx timeout [ 875.357944][T14675] Bluetooth: hci3: command 0x0c1a tx timeout [ 875.591098][T14675] Bluetooth: hci4: command 0x0c1a tx timeout [ 875.628338][T14970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.883248][T15102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 876.031931][T15102] 8021q: adding VLAN 0 to HW filter on device team0 [ 876.068520][T14675] Bluetooth: hci2: command 0x0c1a tx timeout [ 876.107361][T14458] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.107506][T14458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 876.430655][ T3662] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.430815][ T3662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 876.713630][T14974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.767441][T14970] veth0_vlan: entered promiscuous mode [ 876.796989][T14675] Bluetooth: hci1: command 0x0406 tx timeout [ 876.920109][T14970] veth1_vlan: entered promiscuous mode [ 876.996655][T14675] Bluetooth: hci5: command 0x0405 tx timeout [ 877.339932][T14970] veth0_macvtap: entered promiscuous mode [ 877.418773][T14970] veth1_macvtap: entered promiscuous mode [ 877.433715][T14675] Bluetooth: hci3: command 0x0c1a tx timeout [ 877.581400][T14970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.668732][T14675] Bluetooth: hci4: command 0x0c1a tx timeout [ 877.680344][T14970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.753403][ T1124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.754978][ T1124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.758034][ T1124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.758596][ T1124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.149337][T14675] Bluetooth: hci2: command 0x0c1a tx timeout [ 878.512134][T15336] lo speed is unknown, defaulting to 1000 [ 878.569080][T14974] veth0_vlan: entered promiscuous mode [ 878.741015][T15102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.741819][T14974] veth1_vlan: entered promiscuous mode [ 878.786007][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.786028][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.107911][T14974] veth0_macvtap: entered promiscuous mode [ 879.132104][ T3575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.132123][ T3575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.154170][T14974] veth1_macvtap: entered promiscuous mode [ 879.341845][T14974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.383995][T14974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.439353][T14448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.442052][T14448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.443088][T14448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.443456][T14448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.517941][T14675] Bluetooth: hci3: command 0x0c1a tx timeout [ 879.756626][T14675] Bluetooth: hci4: command 0x0c1a tx timeout [ 880.228209][T14675] Bluetooth: hci2: command 0x0c1a tx timeout [ 880.256489][T14441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.256508][T14441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.448097][T15102] veth0_vlan: entered promiscuous mode [ 880.509844][T14458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 880.509864][T14458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 880.510810][T15102] veth1_vlan: entered promiscuous mode [ 880.940498][T15358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.241554][T15369] overlayfs: missing 'lowerdir' [ 881.870085][T15102] veth0_macvtap: entered promiscuous mode [ 882.017588][T15102] veth1_macvtap: entered promiscuous mode [ 882.303396][T15102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 882.377455][T15102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.580372][ T1124] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.585970][ T3662] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.586258][ T3662] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.587560][ T3662] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.996900][ T3662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.996920][ T3662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.740191][T14448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.740212][T14448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.882114][T15406] lo speed is unknown, defaulting to 1000 [ 886.925164][T15411] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3010'. [ 890.119491][T15433] lo speed is unknown, defaulting to 1000 [ 890.320243][T15437] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3015'. [ 890.797395][T15339] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 891.007943][T15339] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 891.007974][T15339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.173068][T15339] usb 10-1: config 0 descriptor?? [ 891.192218][T15339] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 896.501171][ T5913] IPVS: starting estimator thread 0... [ 896.598523][T15473] IPVS: using max 7 ests per chain, 16800 per kthread [ 898.135612][ T5913] usb 10-1: USB disconnect, device number 2 [ 900.967610][T15503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3034'. [ 900.967625][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3034'. [ 901.112305][T15503] bond3: entered promiscuous mode [ 901.112333][T15503] bond3: entered allmulticast mode [ 901.116034][T15503] 8021q: adding VLAN 0 to HW filter on device bond3 [ 901.484379][T15515] netlink: 4400 bytes leftover after parsing attributes in process `syz.9.3039'. [ 901.518977][T15515] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 902.948345][T15531] lo speed is unknown, defaulting to 1000 [ 903.465012][ T5913] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 903.641689][ T37] audit: type=1326 audit(1758561861.617:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15538 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c013eec9 code=0x7fc00000 [ 903.689475][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 903.790620][T15535] could not allocate digest TFM handle xcbc(aes) [ 903.796468][ T5913] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 903.796496][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.796514][ T5913] usb 5-1: Product: syz [ 903.796528][ T5913] usb 5-1: Manufacturer: syz [ 903.796540][ T5913] usb 5-1: SerialNumber: syz [ 903.891709][ T5913] usb 5-1: config 0 descriptor?? [ 903.897254][ T5913] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 904.381925][ T37] audit: type=1326 audit(1758561862.507:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15538 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1c00daf79 code=0x7fc00000 [ 904.381977][ T37] audit: type=1326 audit(1758561862.507:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15538 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fd1c00db03f code=0x7fc00000 [ 904.382014][ T37] audit: type=1326 audit(1758561862.507:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15538 comm="syz.3.3047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd1c013eec9 code=0x7fc00000 [ 904.941100][ T5913] gspca_ov534_9: reg_w failed -71 [ 905.018705][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3049'. [ 905.237933][ T5913] gspca_ov534_9: Unknown sensor 0000 [ 905.238011][ T5913] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 905.240773][ T5913] usb 5-1: USB disconnect, device number 2 [ 906.507922][ T6071] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 906.602377][ T37] audit: type=1326 audit(1758561864.717:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15574 comm="syz.7.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 906.602408][ T37] audit: type=1326 audit(1758561864.717:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15574 comm="syz.7.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 906.602430][ T37] audit: type=1326 audit(1758561864.717:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15574 comm="syz.7.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 906.602452][ T37] audit: type=1326 audit(1758561864.717:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15574 comm="syz.7.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 906.602473][ T37] audit: type=1326 audit(1758561864.717:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15574 comm="syz.7.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 906.602494][ T37] audit: type=1326 audit(1758561864.717:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15574 comm="syz.7.3057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1423c50de7 code=0x7ffc0000 [ 906.667938][ T6071] usb 5-1: Using ep0 maxpacket: 32 [ 908.022459][T15548] team0 (unregistering): Port device team_slave_0 removed [ 908.122085][T15548] team0 (unregistering): Port device team_slave_1 removed [ 909.083558][T15570] vti0: entered promiscuous mode [ 909.083979][T15570] vti0: entered allmulticast mode [ 909.114876][T15572] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3055'. [ 909.672697][T15582] could not allocate digest TFM handle xcbc(aes) [ 910.409873][T15591] lo speed is unknown, defaulting to 1000 [ 913.365451][ T6071] usb 5-1: unable to get BOS descriptor or descriptor too short [ 913.366347][ T6071] usb 5-1: unable to read config index 0 descriptor/start: -32 [ 913.366362][ T6071] usb 5-1: chopping to 0 config(s) [ 913.366376][ T6071] usb 5-1: can't read configurations, error -32 [ 913.598034][ T6071] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 913.672828][T15599] kthread_run failed with err -4 [ 913.738091][ T6071] usb 5-1: device descriptor read/64, error -32 [ 913.941963][ T6071] usb usb5-port1: attempt power cycle [ 914.318015][ T6071] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 914.346232][ T6071] usb 5-1: device descriptor read/8, error -32 [ 914.612465][ T6071] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 914.661472][ T6071] usb 5-1: device descriptor read/8, error -32 [ 914.775704][ T6071] usb usb5-port1: unable to enumerate USB device [ 915.374385][T15614] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3067'. [ 915.982399][T15627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.258265][ T1232] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 917.559896][ T1232] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.563764][ T1232] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 917.563793][ T1232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 917.563812][ T1232] usb 10-1: SerialNumber: syz [ 917.636222][ T1232] usb 10-1: bad CDC descriptors [ 917.901700][ T31] usb 10-1: USB disconnect, device number 3 [ 918.727187][T15632] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 919.150721][T15664] sch_fq: defrate 0 ignored. [ 919.718024][ T6071] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 919.900044][ T6071] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 919.900074][ T6071] usb 5-1: config 0 has no interface number 0 [ 919.900123][ T6071] usb 5-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 919.935256][ T6071] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 919.935274][ T6071] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.935285][ T6071] usb 5-1: Product: syz [ 919.935293][ T6071] usb 5-1: Manufacturer: syz [ 919.935300][ T6071] usb 5-1: SerialNumber: syz [ 919.969271][ T6071] usb 5-1: config 0 descriptor?? [ 920.069360][ T6071] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 920.542383][T15672] netlink: 'syz.7.3082': attribute type 11 has an invalid length. [ 920.746257][T15674] binder_alloc: 15673: binder_alloc_buf, no vma [ 925.048821][ T5913] usb 5-1: USB disconnect, device number 7 [ 925.780562][T15714] trusted_key: syz.7.3094 sent an empty control message without MSG_MORE. [ 926.540459][T15719] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3095'. [ 926.559232][T15389] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 926.728024][T15389] usb 8-1: Using ep0 maxpacket: 16 [ 926.740793][T15389] usb 8-1: config 0 has an invalid interface number: 109 but max is 0 [ 926.740820][T15389] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.740830][T15389] usb 8-1: config 0 has no interface number 0 [ 927.218738][T15389] usb 8-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e [ 927.218771][T15389] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.218791][T15389] usb 8-1: Product: syz [ 927.218806][T15389] usb 8-1: Manufacturer: syz [ 927.218819][T15389] usb 8-1: SerialNumber: syz [ 927.225225][T15389] usb 8-1: config 0 descriptor?? [ 927.232920][T15389] cdc_acm 8-1:0.109: Zero length descriptor references [ 927.232945][T15389] cdc_acm 8-1:0.109: probe with driver cdc_acm failed with error -22 [ 927.752966][T15728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 931.196990][ T6071] usb 8-1: USB disconnect, device number 29 [ 931.471679][T15752] ip6erspan0: entered promiscuous mode [ 931.601529][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.482605][T15769] netlink: 'syz.4.3108': attribute type 29 has an invalid length. [ 933.484686][T15769] netlink: 'syz.4.3108': attribute type 29 has an invalid length. [ 933.487289][T15769] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3108'. [ 933.819857][T15774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 935.289688][T15791] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 935.289951][T15791] syzkaller1: linktype set to 774 [ 935.763707][T15803] loop4: detected capacity change from 0 to 7 [ 935.773103][T15803] Dev loop4: unable to read RDB block 7 [ 935.773137][T15803] loop4: unable to read partition table [ 935.773392][T15803] loop4: partition table beyond EOD, truncated [ 935.773404][T15803] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 938.578582][T15833] loop2: detected capacity change from 0 to 7 [ 938.675744][T15833] Dev loop2: unable to read RDB block 7 [ 938.675769][T15833] loop2: AHDI p1 p2 p3 [ 938.675788][T15833] loop2: partition table partially beyond EOD, truncated [ 938.675959][T15833] loop2: p1 start 1601398130 is beyond EOD, truncated [ 938.675969][T15833] loop2: p2 start 1702059890 is beyond EOD, truncated [ 938.941440][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3129'. [ 940.405920][T15339] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 940.532201][T15339] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 940.798352][ T5913] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 940.835833][T15861] fido_id[15861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 940.937953][ T5913] usb 10-1: device descriptor read/64, error -71 [ 941.198000][ T5913] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 941.337953][ T5913] usb 10-1: device descriptor read/64, error -71 [ 941.458519][ T5913] usb usb10-port1: attempt power cycle [ 941.798301][ T5913] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 941.818484][ T5913] usb 10-1: device descriptor read/8, error -71 [ 942.017472][ T37] kauditd_printk_skb: 25 callbacks suppressed [ 942.017490][ T37] audit: type=1326 audit(1758561900.137:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 942.020091][ T37] audit: type=1326 audit(1758561900.137:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 942.071448][ T37] audit: type=1326 audit(1758561900.187:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 942.071699][ T37] audit: type=1326 audit(1758561900.187:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 942.072000][ T37] audit: type=1326 audit(1758561900.187:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 942.072026][ T37] audit: type=1326 audit(1758561900.187:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.2.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 942.098019][ T5913] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 942.120723][ T5913] usb 10-1: device descriptor read/8, error -71 [ 942.228667][ T5913] usb usb10-port1: unable to enumerate USB device [ 943.957285][T15893] sctp: [Deprecated]: syz.9.3144 (pid 15893) Use of int in max_burst socket option. [ 943.957285][T15893] Use struct sctp_assoc_value instead [ 944.411928][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3146'. [ 944.537498][T15899] vlan2: entered allmulticast mode [ 944.537512][T15899] bridge0: entered allmulticast mode [ 945.097016][T15903] lo speed is unknown, defaulting to 1000 [ 948.407520][ T37] audit: type=1326 audit(1758561906.527:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15915 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c013eec9 code=0x7ffc0000 [ 948.413942][ T37] audit: type=1326 audit(1758561906.537:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15915 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c013eec9 code=0x7ffc0000 [ 948.414334][ T37] audit: type=1326 audit(1758561906.537:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15915 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd1c013eec9 code=0x7ffc0000 [ 948.414959][ T37] audit: type=1326 audit(1758561906.537:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15915 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c013eec9 code=0x7ffc0000 [ 948.415928][ T37] audit: type=1326 audit(1758561906.537:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15915 comm="syz.3.3150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c013eec9 code=0x7ffc0000 [ 950.908013][ T5913] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 951.067950][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 951.072481][ T37] audit: type=1326 audit(1758561909.187:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15946 comm="syz.9.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 951.073064][ T37] audit: type=1326 audit(1758561909.187:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15946 comm="syz.9.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 951.073522][ T37] audit: type=1326 audit(1758561909.187:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15946 comm="syz.9.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 951.073901][ T37] audit: type=1326 audit(1758561909.187:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15946 comm="syz.9.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 951.074388][ T37] audit: type=1326 audit(1758561909.187:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15946 comm="syz.9.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 951.371495][ T5913] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 951.371524][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 951.377009][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 951.377027][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.377038][ T5913] usb 5-1: Product: syz [ 951.377045][ T5913] usb 5-1: Manufacturer: syz [ 951.377053][ T5913] usb 5-1: SerialNumber: syz [ 951.620251][ T5913] usb 5-1: 0:2 : does not exist [ 951.637689][ T5913] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 951.812249][ T5913] usb 5-1: USB disconnect, device number 8 [ 951.958916][T15949] lo speed is unknown, defaulting to 1000 [ 952.109045][T15705] udevd[15705]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.290926][T15958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 954.823975][T15992] lo speed is unknown, defaulting to 1000 [ 955.238011][ T6071] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 955.388106][ T6071] usb 3-1: Using ep0 maxpacket: 16 [ 955.392978][ T6071] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 955.393006][ T6071] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 955.397491][ T6071] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.397518][ T6071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.397538][ T6071] usb 3-1: Product: syz [ 955.397558][ T6071] usb 3-1: Manufacturer: syz [ 955.397572][ T6071] usb 3-1: SerialNumber: syz [ 955.733428][ T6071] usb 3-1: 0:2 : does not exist [ 955.757459][ T6071] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 957.264337][ T6071] usb 3-1: USB disconnect, device number 6 [ 957.513854][T15705] udevd[15705]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.987939][ T6071] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 959.140490][ T6071] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 959.140519][ T6071] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 959.140538][ T6071] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 959.140589][ T6071] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 959.140615][ T6071] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 959.143216][ T6071] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 959.143243][ T6071] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 959.143263][ T6071] usb 10-1: Product: syz [ 959.143277][ T6071] usb 10-1: Manufacturer: syz [ 959.363418][ T6071] cdc_wdm 10-1:1.0: skipping garbage [ 959.363441][ T6071] cdc_wdm 10-1:1.0: skipping garbage [ 959.428274][ T6071] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 959.428295][ T6071] cdc_wdm 10-1:1.0: Unknown control protocol [ 960.034643][T16058] input: syz1 as /devices/virtual/input/input24 [ 960.545747][T16058] netlink: 'syz.7.3189': attribute type 1 has an invalid length. [ 962.045810][T15339] usb 10-1: USB disconnect, device number 8 [ 962.481293][T16062] gretap1: entered allmulticast mode [ 962.505116][T16062] bond2: (slave gretap1): making interface the new active one [ 962.524916][T16062] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 964.637428][T16087] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 964.641796][T16087] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 966.404656][T16114] lo speed is unknown, defaulting to 1000 [ 969.037518][T16128] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3206'. [ 969.374511][T16132] vim2m vim2m.0: vidioc_s_fmt queue busy [ 969.520800][T16124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 970.347686][T16133] vlan2: entered allmulticast mode [ 970.347708][T16133] bridge0: entered allmulticast mode [ 970.353148][T16133] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 971.317542][T16141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3209'. [ 971.724671][T16153] loop9: detected capacity change from 0 to 3 [ 972.004028][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.005041][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.005615][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.006344][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.043179][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.043579][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.044749][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.046928][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.085535][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 972.086321][T15705] Buffer I/O error on dev loop9, logical block 0, async page read [ 979.784902][T16235] lo speed is unknown, defaulting to 1000 [ 981.377886][ T1232] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 981.393982][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3234'. [ 981.572003][ T1232] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 981.572031][ T1232] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 981.572050][ T1232] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 981.572102][ T1232] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 981.572127][ T1232] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 981.574541][ T1232] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 981.574567][ T1232] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 981.574585][ T1232] usb 8-1: Product: syz [ 981.574599][ T1232] usb 8-1: Manufacturer: syz [ 981.803503][ T1232] cdc_wdm 8-1:1.0: skipping garbage [ 981.804772][ T1232] cdc_wdm 8-1:1.0: skipping garbage [ 981.983150][ T1232] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 981.983171][ T1232] cdc_wdm 8-1:1.0: Unknown control protocol [ 984.142371][T15339] usb 8-1: USB disconnect, device number 30 [ 985.567423][T16260] pim6reg: entered allmulticast mode [ 986.491567][T16275] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3241'. [ 986.664925][T16279] netlink: 'syz.3.3242': attribute type 32 has an invalid length. [ 988.127950][T15389] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 988.257949][T15389] usb 5-1: device descriptor read/64, error -71 [ 988.340736][T11721] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 988.440947][ T37] audit: type=1326 audit(1758561946.567:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16306 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 988.443395][ T37] audit: type=1326 audit(1758561946.567:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16306 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 988.454432][ T37] audit: type=1326 audit(1758561946.577:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16306 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 988.454483][ T37] audit: type=1326 audit(1758561946.577:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16306 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 988.454521][ T37] audit: type=1326 audit(1758561946.577:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16306 comm="syz.7.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 988.507987][T15389] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 988.540893][T11721] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 988.540922][T11721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.540942][T11721] usb 3-1: Product: syz [ 988.540955][T11721] usb 3-1: Manufacturer: syz [ 988.540968][T11721] usb 3-1: SerialNumber: syz [ 988.638116][T15389] usb 5-1: device descriptor read/64, error -71 [ 988.750998][T15389] usb usb5-port1: attempt power cycle [ 989.088110][T15389] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 989.113026][T15389] usb 5-1: device descriptor read/8, error -71 [ 989.367995][T15389] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 989.530813][T15389] usb 5-1: device descriptor read/8, error -71 [ 989.693204][T15389] usb usb5-port1: unable to enumerate USB device [ 990.301131][T16325] netlink: 'syz.7.3255': attribute type 32 has an invalid length. [ 990.479672][T11721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 990.480159][T11721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 990.480648][T11721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 990.480696][T11721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 990.481454][T11721] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 991.341372][T16329] lo speed is unknown, defaulting to 1000 [ 991.610450][T11721] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 991.647553][T11721] usb 3-1: USB disconnect, device number 7 [ 992.577291][ T37] audit: type=1326 audit(1758561950.697:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16345 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c44eceec9 code=0x7ffc0000 [ 992.577345][ T37] audit: type=1326 audit(1758561950.697:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16345 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c44eceec9 code=0x7ffc0000 [ 992.630984][ T37] audit: type=1326 audit(1758561950.757:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16345 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8c44eceec9 code=0x7ffc0000 [ 992.631034][ T37] audit: type=1326 audit(1758561950.757:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16345 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c44eceec9 code=0x7ffc0000 [ 992.631074][ T37] audit: type=1326 audit(1758561950.757:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16345 comm="syz.4.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c44eceec9 code=0x7ffc0000 [ 993.032036][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.508029][T15389] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 995.638053][T15389] usb 10-1: device descriptor read/64, error -71 [ 995.888004][T15389] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 996.107973][T15389] usb 10-1: device descriptor read/64, error -71 [ 996.190749][ T37] audit: type=1326 audit(1758561954.307:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 996.190804][ T37] audit: type=1326 audit(1758561954.307:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 996.202901][ T37] audit: type=1326 audit(1758561954.317:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 996.202949][ T37] audit: type=1326 audit(1758561954.317:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 996.202988][ T37] audit: type=1326 audit(1758561954.317:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16381 comm="syz.2.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f434187eec9 code=0x7ffc0000 [ 996.218523][T15389] usb usb10-port1: attempt power cycle [ 996.605924][T15389] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 996.619889][T15389] usb 10-1: device descriptor read/8, error -71 [ 997.281430][T16387] lo speed is unknown, defaulting to 1000 [ 998.128074][T15389] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 998.197517][T15389] usb 10-1: device descriptor read/8, error -71 [ 998.423520][T15389] usb usb10-port1: unable to enumerate USB device [ 998.704436][T16400] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 998.704495][T16400] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3276'. [ 999.164337][T16397] lo speed is unknown, defaulting to 1000 [ 999.576940][T16412] vim2m vim2m.0: vidioc_s_fmt queue busy [ 999.592708][T16399] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1002.640817][ T37] audit: type=1326 audit(1758561960.767:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16453 comm="syz.7.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 1002.642746][ T37] audit: type=1326 audit(1758561960.767:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16453 comm="syz.7.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 1002.644991][ T37] audit: type=1326 audit(1758561960.767:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16453 comm="syz.7.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 1002.645199][ T37] audit: type=1326 audit(1758561960.767:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16453 comm="syz.7.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 1002.645557][ T37] audit: type=1326 audit(1758561960.767:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16453 comm="syz.7.3284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x7ffc0000 [ 1004.348318][ T1232] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1004.477949][ T1232] usb 10-1: device descriptor read/64, error -71 [ 1004.781679][ T1232] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1004.940545][ T1232] usb 10-1: device descriptor read/64, error -71 [ 1005.058261][ T1232] usb usb10-port1: attempt power cycle [ 1005.483003][ T1232] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1005.500668][ T1232] usb 10-1: device descriptor read/8, error -71 [ 1005.971773][T16479] lo speed is unknown, defaulting to 1000 [ 1006.537886][ T1232] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1006.558830][ T1232] usb 10-1: device descriptor read/8, error -71 [ 1006.674453][ T1232] usb usb10-port1: unable to enumerate USB device [ 1007.625832][T16496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'. [ 1008.988223][T15389] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1009.157928][T15389] usb 5-1: Using ep0 maxpacket: 32 [ 1009.162104][T15389] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1009.162122][T15389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.162133][T15389] usb 5-1: Product: syz [ 1009.162140][T15389] usb 5-1: Manufacturer: syz [ 1009.162148][T15389] usb 5-1: SerialNumber: syz [ 1009.360286][T15389] usb 5-1: config 0 descriptor?? [ 1009.379426][T15389] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1010.003396][ T37] audit: type=1326 audit(1758561968.117:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16502 comm="syz.4.3296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c44eceec9 code=0x0 [ 1010.142240][T15389] gspca_ov534_9: reg_w failed -71 [ 1010.437899][T15389] gspca_ov534_9: Unknown sensor 0000 [ 1010.437998][T15389] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1010.441060][T15389] usb 5-1: USB disconnect, device number 13 [ 1010.497978][ T1232] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1010.648029][ T1232] usb 3-1: device descriptor read/64, error -71 [ 1010.908176][ T1232] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1010.951653][T16533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1011.048157][ T1232] usb 3-1: device descriptor read/64, error -71 [ 1011.158717][ T1232] usb usb3-port1: attempt power cycle [ 1011.652009][T16539] lo speed is unknown, defaulting to 1000 [ 1012.506296][ T1232] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1012.607159][ T1232] usb 3-1: device descriptor read/8, error -71 [ 1012.858119][ T1232] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1013.013312][ T1232] usb 3-1: device descriptor read/8, error -71 [ 1013.121941][ T1232] usb usb3-port1: unable to enumerate USB device [ 1013.680189][T16549] netlink: 'syz.3.3309': attribute type 20 has an invalid length. [ 1013.680223][T16549] IPv6: NLM_F_CREATE should be specified when creating new route [ 1013.686639][T16549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1013.686657][T16549] IPv6: NLM_F_CREATE should be set when creating new route [ 1016.828060][T15339] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1016.828197][ T1232] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1017.050798][T15339] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1017.050837][T15339] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.050876][T15339] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1017.050900][T15339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.247926][ T1232] usb 5-1: Using ep0 maxpacket: 16 [ 1017.252493][ T1232] usb 5-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1017.252519][ T1232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1017.290910][T15339] usb 10-1: config 0 descriptor?? [ 1017.303283][ T1232] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1017.303311][ T1232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.303321][ T1232] usb 5-1: Product: syz [ 1017.303329][ T1232] usb 5-1: Manufacturer: syz [ 1017.303336][ T1232] usb 5-1: SerialNumber: syz [ 1017.588127][ T1232] usb 5-1: 0:2 : does not exist [ 1017.724400][ T1232] usb 5-1: USB disconnect, device number 14 [ 1017.833277][T15339] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 1017.833315][T15339] pantherlord 0003:0E8F:0003.0006: unknown main item tag 0x0 [ 1017.917294][T15339] pantherlord 0003:0E8F:0003.0006: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.9-1/input0 [ 1017.917340][T15339] pantherlord 0003:0E8F:0003.0006: no output reports found [ 1017.933895][T16579] udevd[16579]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1018.020384][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3319'. [ 1018.541746][ T1232] usb 10-1: USB disconnect, device number 17 [ 1018.765385][T16584] fido_id[16584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1019.909632][T16593] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1019.938182][T16594] lo speed is unknown, defaulting to 1000 [ 1021.667887][ T991] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1022.147866][ T991] usb 3-1: Using ep0 maxpacket: 16 [ 1026.592658][ T991] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1026.593632][ T991] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1026.593655][ T991] usb 3-1: can't read configurations, error -71 [ 1027.528483][T16634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.802273][ T5913] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1029.070680][ T5913] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 1029.070700][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.136798][ T5913] usb 5-1: config 0 descriptor?? [ 1030.477275][ T5913] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1030.477580][ T5913] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1030.537847][ T5913] usb 5-1: USB disconnect, device number 15 [ 1031.444551][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1031.484903][T16663] tun0: tun_chr_ioctl cmd 2147767517 [ 1031.526659][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1031.532273][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1031.558944][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1031.565178][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1031.793282][T16661] lo speed is unknown, defaulting to 1000 [ 1033.241456][T16671] hub 9-0:1.0: USB hub found [ 1033.253001][T16671] hub 9-0:1.0: 1 port detected [ 1033.765115][T14675] Bluetooth: hci0: command tx timeout [ 1033.881166][T16663] lo speed is unknown, defaulting to 1000 [ 1035.216237][T16683] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1035.841679][T14675] Bluetooth: hci0: command tx timeout [ 1036.649947][T16661] chnl_net:caif_netlink_parms(): no params data found [ 1037.918683][T14675] Bluetooth: hci0: command tx timeout [ 1038.559173][T16712] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1038.682554][T16661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.682636][T16661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.682819][T16661] bridge_slave_0: entered allmulticast mode [ 1038.684331][T16661] bridge_slave_0: entered promiscuous mode [ 1038.686053][T16661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.686128][T16661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.686247][T16661] bridge_slave_1: entered allmulticast mode [ 1038.692347][T16661] bridge_slave_1: entered promiscuous mode [ 1039.458295][T16726] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1040.000742][T14675] Bluetooth: hci0: command tx timeout [ 1040.523386][T16663] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1040.705799][T16661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.757422][T16661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.518539][T16661] team0: Port device team_slave_0 added [ 1042.521784][T16756] netlink: 4400 bytes leftover after parsing attributes in process `syz.4.3365'. [ 1042.584986][T16661] team0: Port device team_slave_1 added [ 1042.593597][T16762] netlink: 'syz.9.3368': attribute type 1 has an invalid length. [ 1043.115023][T16765] vlan2: entered allmulticast mode [ 1043.115038][T16765] bridge0: entered allmulticast mode [ 1043.144297][T16765] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 1043.583008][T16771] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1044.395240][T16661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.395256][T16661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.395281][T16661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.492065][T16661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.492083][T16661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.492108][T16661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.637435][ T37] audit: type=1326 audit(1758562002.737:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 1044.637492][ T37] audit: type=1326 audit(1758562002.737:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 1044.637532][ T37] audit: type=1326 audit(1758562002.737:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 1044.637571][ T37] audit: type=1326 audit(1758562002.737:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 1044.637618][ T37] audit: type=1326 audit(1758562002.737:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f084a21eec9 code=0x7ffc0000 [ 1044.637657][ T37] audit: type=1326 audit(1758562002.737:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f084a220de7 code=0x7ffc0000 [ 1044.637696][ T37] audit: type=1326 audit(1758562002.737:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f084a220d5c code=0x7ffc0000 [ 1044.647979][ T37] audit: type=1326 audit(1758562002.737:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f084a220c94 code=0x7ffc0000 [ 1044.648027][ T37] audit: type=1326 audit(1758562002.737:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f084a220c94 code=0x7ffc0000 [ 1044.648065][ T37] audit: type=1326 audit(1758562002.737:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16772 comm="syz.9.3371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f084a21db2a code=0x7ffc0000 [ 1047.394998][T16661] hsr_slave_0: entered promiscuous mode [ 1047.396459][T16661] hsr_slave_1: entered promiscuous mode [ 1047.397443][T16661] debugfs: 'hsr0' already exists in 'hsr' [ 1047.397464][T16661] Cannot create hsr debugfs directory [ 1047.877950][ T991] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1048.641806][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1048.641842][ T991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1048.641879][ T991] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1048.641903][ T991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.903326][ T991] usb 3-1: config 0 descriptor?? [ 1049.392006][ T991] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 1049.392042][ T991] pantherlord 0003:0E8F:0003.0007: unknown main item tag 0x0 [ 1049.408564][ T991] pantherlord 0003:0E8F:0003.0007: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.2-1/input0 [ 1049.408597][ T991] pantherlord 0003:0E8F:0003.0007: no output reports found [ 1049.560735][T16788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1050.101880][T15339] usb 3-1: USB disconnect, device number 14 [ 1050.652995][T16815] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1051.650409][T16807] fido_id[16807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1051.947999][T15389] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1052.174688][T15389] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1052.174717][T15389] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1052.174736][T15389] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1052.174813][T15389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1052.174839][T15389] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1052.176750][T15389] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1052.176778][T15389] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1052.176798][T15389] usb 3-1: Product: syz [ 1052.176811][T15389] usb 3-1: Manufacturer: syz [ 1052.339404][T15389] cdc_wdm 3-1:1.0: skipping garbage [ 1052.339418][T15389] cdc_wdm 3-1:1.0: skipping garbage [ 1052.387667][T15389] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1052.387688][T15389] cdc_wdm 3-1:1.0: Unknown control protocol [ 1052.798582][ T1232] usb 3-1: USB disconnect, device number 15 [ 1054.710568][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.208003][T15339] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1056.548886][T15339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.548903][T15339] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.548927][T15339] usb 3-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 1056.548939][T15339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.601585][T15339] usb 3-1: config 0 descriptor?? [ 1059.238417][ T1232] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1059.435500][T16863] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1060.321741][ T1232] usb 8-1: Using ep0 maxpacket: 16 [ 1060.323938][ T1232] usb 8-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1060.323953][ T1232] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1060.325801][ T1232] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1060.325817][ T1232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.325827][ T1232] usb 8-1: Product: syz [ 1060.325835][ T1232] usb 8-1: Manufacturer: syz [ 1060.325842][ T1232] usb 8-1: SerialNumber: syz [ 1060.468512][ T31] usb 3-1: USB disconnect, device number 16 [ 1060.586598][T16661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1060.595220][ T1232] usb 8-1: 0:2 : does not exist [ 1060.699665][ T1232] usb 8-1: USB disconnect, device number 31 [ 1060.713404][T16661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1060.805722][T16579] udevd[16579]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1060.870605][T16661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1060.933516][T16661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1061.323014][T16661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.369349][T16661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.461808][T14458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.462345][T14458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.541193][T14458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.541413][T14458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.751116][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1062.751132][ T37] audit: type=1326 audit(1758562020.867:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16884 comm="syz.7.3402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1423c4eec9 code=0x0 [ 1062.942873][T16897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.570601][T16907] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1063.597080][T15339] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1064.534488][T15339] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.536597][T15339] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1064.536618][T15339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1064.536628][T15339] usb 5-1: SerialNumber: syz [ 1064.604626][T15339] usb 5-1: bad CDC descriptors [ 1064.825196][T15339] usb 5-1: USB disconnect, device number 16 [ 1064.873300][T16661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.478658][T16661] veth0_vlan: entered promiscuous mode [ 1065.658768][T16661] veth1_vlan: entered promiscuous mode [ 1065.940385][T16661] veth0_macvtap: entered promiscuous mode [ 1065.952078][T16661] veth1_macvtap: entered promiscuous mode [ 1066.116752][T16661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1066.171858][T16661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1066.301866][T14453] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.376886][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.391610][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.419899][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.321656][T14449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.321675][T14449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.688966][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.688989][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.567874][ T991] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1070.697884][ T991] usb 8-1: device descriptor read/64, error -71 [ 1071.083458][ T991] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1071.201820][T16978] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1071.817879][ T991] usb 8-1: device descriptor read/64, error -71 [ 1071.944103][ T991] usb usb8-port1: attempt power cycle [ 1072.337509][ T991] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1072.377210][ T991] usb 8-1: device descriptor read/8, error -71 [ 1072.647986][ T991] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1072.688566][ T991] usb 8-1: device descriptor read/8, error -71 [ 1072.798289][ T991] usb usb8-port1: unable to enumerate USB device [ 1074.819363][T17003] sch_fq: defrate 0 ignored. [ 1076.209313][T15389] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1076.368022][T15389] usb 1-1: Using ep0 maxpacket: 32 [ 1076.372783][T15389] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1076.372801][T15389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.372815][T15389] usb 1-1: Product: syz [ 1076.372823][T15389] usb 1-1: Manufacturer: syz [ 1076.372830][T15389] usb 1-1: SerialNumber: syz [ 1076.380703][T15389] usb 1-1: config 0 descriptor?? [ 1076.680815][T15389] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1077.484675][T15389] gspca_ov534_9: reg_w failed -71 [ 1077.807855][T15389] gspca_ov534_9: Unknown sensor 0000 [ 1077.807945][T15389] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 1077.811865][T15389] usb 1-1: USB disconnect, device number 2 [ 1087.328739][T17131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3455'. [ 1087.663554][T14445] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.739902][T14445] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.740913][T14445] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1087.740936][T14445] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1093.680492][T17163] netlink: 'syz.4.3464': attribute type 46 has an invalid length. [ 1093.680516][T17163] netlink: 'syz.4.3464': attribute type 19 has an invalid length. [ 1093.918875][T17168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1093.957942][T11721] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 1093.988511][T17168] vlan2: entered allmulticast mode [ 1094.149388][T11721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1094.149421][T11721] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.149461][T11721] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1094.149496][T11721] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.156239][T11721] usb 10-1: config 0 descriptor?? [ 1094.614410][T11721] pantherlord 0003:0E8F:0003.0008: unknown main item tag 0x0 [ 1094.614434][T11721] pantherlord 0003:0E8F:0003.0008: unknown main item tag 0x0 [ 1094.659770][T17178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 1094.724198][T11721] pantherlord 0003:0E8F:0003.0008: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.9-1/input0 [ 1094.724231][T11721] pantherlord 0003:0E8F:0003.0008: no output reports found [ 1094.778304][ T9065] usb 10-1: USB disconnect, device number 18 [ 1095.149783][T17181] fido_id[17181]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1096.821208][T17204] netlink: 'syz.4.3479': attribute type 19 has an invalid length. [ 1097.090696][T17207] tipc: Enabled bearer , priority 10 [ 1097.967896][ T1232] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1098.130360][ T1232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1098.130379][ T1232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1098.130400][ T1232] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 1098.130412][ T1232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.133742][ T1232] usb 5-1: config 0 descriptor?? [ 1098.624631][ T1232] pantherlord 0003:0E8F:0003.0009: unknown main item tag 0x0 [ 1098.624673][ T1232] pantherlord 0003:0E8F:0003.0009: unknown main item tag 0x0 [ 1098.684306][ T1232] pantherlord 0003:0E8F:0003.0009: hidraw0: USB HID v0.00 Device [HID 0e8f:0003] on usb-dummy_hcd.4-1/input0 [ 1098.684340][ T1232] pantherlord 0003:0E8F:0003.0009: no output reports found [ 1098.789987][ T31] usb 5-1: USB disconnect, device number 17 [ 1099.662664][T17225] fido_id[17225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1103.297875][ T991] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1103.456456][ T991] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1103.456488][ T991] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.456508][ T991] usb 3-1: Product: syz [ 1103.456520][ T991] usb 3-1: Manufacturer: syz [ 1103.456533][ T991] usb 3-1: SerialNumber: syz [ 1105.130650][ T991] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1105.131223][ T991] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1105.131697][ T991] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1105.131748][ T991] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1105.132545][ T991] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1105.232579][ T991] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1105.275065][ T991] usb 3-1: USB disconnect, device number 17 [ 1109.357830][ T1232] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1109.520726][ T1232] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1109.520760][ T1232] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.520779][ T1232] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1109.520837][ T1232] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.520862][ T1232] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.523197][ T1232] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1109.523224][ T1232] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1109.523243][ T1232] usb 10-1: Product: syz [ 1109.523257][ T1232] usb 10-1: Manufacturer: syz [ 1109.678149][ T1232] cdc_wdm 10-1:1.0: skipping garbage [ 1109.678170][ T1232] cdc_wdm 10-1:1.0: skipping garbage [ 1109.711625][ T1232] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1109.711639][ T1232] cdc_wdm 10-1:1.0: Unknown control protocol [ 1110.586920][T17316] cdc_wdm 10-1:1.0: Error submitting int urb - -90 [ 1110.937946][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1111.090529][ T31] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1111.090561][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1111.093636][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1111.093662][ T31] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1111.093682][ T31] usb 1-1: Product: syz [ 1111.093696][ T31] usb 1-1: Manufacturer: syz [ 1111.093709][ T31] usb 1-1: SerialNumber: syz [ 1111.101973][ T31] usb 1-1: config 0 descriptor?? [ 1111.196898][ T31] usb 1-1: selecting invalid altsetting 0 [ 1111.388054][ T31] usb 1-1: USB disconnect, device number 3 [ 1111.645463][T15704] udevd[15704]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1111.900686][ T991] usb 10-1: USB disconnect, device number 19 [ 1115.858661][ C1] ------------[ cut here ]------------ [ 1115.858681][ C1] WARNING: CPU: 1 PID: 0 at kernel/time/hrtimer.c:1052 hrtimer_forward+0x1d6/0x2b0 [ 1115.858712][ C1] Modules linked in: [ 1115.858728][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1115.858742][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1115.858750][ C1] RIP: 0010:hrtimer_forward+0x1d6/0x2b0 [ 1115.858766][ C1] Code: 4c 89 33 48 8b 04 24 eb 07 e8 66 34 12 00 31 c0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 4b 34 12 00 90 <0f> 0b 90 eb df 48 89 e8 4c 09 f8 48 c1 e8 20 74 0a 48 89 e8 31 d2 [ 1115.858776][ C1] RSP: 0018:ffffc90000a78bd0 EFLAGS: 00010006 [ 1115.858787][ C1] RAX: ffffffff81ac39f5 RBX: ffff8880b883b508 RCX: ffff88801c69d940 [ 1115.858796][ C1] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000010000 [ 1115.858804][ C1] RBP: 00000000000692fb R08: 0000000000010000 R09: 0000000000010000 [ 1115.858811][ C1] R10: dffffc0000000000 R11: ffffffff8167a830 R12: ffff8880b883b520 [ 1115.858820][ C1] R13: 000000003891623b R14: 1ffff110171076a4 R15: 0000000000000001 [ 1115.858829][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 1115.858839][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1115.858847][ C1] CR2: 00007f5475e30c6a CR3: 0000000059c32000 CR4: 00000000003526f0 [ 1115.858858][ C1] Call Trace: [ 1115.858864][ C1] [ 1115.858871][ C1] ? read_tsc+0x9/0x20 [ 1115.858888][ C1] dl_task_timer+0xa42/0x12d0 [ 1115.858914][ C1] ? __pfx_dl_task_timer+0x10/0x10 [ 1115.858936][ C1] ? __pfx_dl_task_timer+0x10/0x10 [ 1115.858949][ C1] __hrtimer_run_queues+0x503/0xd40 [ 1115.858979][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1115.858994][ C1] ? read_tsc+0x9/0x20 [ 1115.859012][ C1] hrtimer_interrupt+0x45d/0xa90 [ 1115.859048][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1115.859066][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1115.859084][ C1] [ 1115.859088][ C1] [ 1115.859093][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1115.859108][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1115.859124][ C1] Code: 13 b3 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 26 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1115.859134][ C1] RSP: 0018:ffffc900001d7de0 EFLAGS: 000002c6 [ 1115.859143][ C1] RAX: 6c65ac82b07bd600 RBX: ffffffff81955f48 RCX: 6c65ac82b07bd600 [ 1115.859152][ C1] RDX: 0000000000000001 RSI: ffffffff8d03ad5b RDI: ffffffff8b621680 [ 1115.859161][ C1] RBP: ffffc900001d7f20 R08: ffff8880b893341b R09: 1ffff11017126683 [ 1115.859170][ C1] R10: dffffc0000000000 R11: ffffed1017126684 R12: ffffffff8f1d6230 [ 1115.859178][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d3b28 [ 1115.859189][ C1] ? do_idle+0x1e8/0x510 [ 1115.859207][ C1] default_idle+0x13/0x20 [ 1115.859218][ C1] default_idle_call+0x74/0xb0 [ 1115.859230][ C1] do_idle+0x1e8/0x510 [ 1115.859246][ C1] ? __pfx_do_idle+0x10/0x10 [ 1115.859256][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1115.859285][ C1] cpu_startup_entry+0x44/0x60 [ 1115.859296][ C1] start_secondary+0x101/0x110 [ 1115.859309][ C1] common_startup_64+0x13e/0x147 [ 1115.859338][ C1] [ 1115.859348][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1115.859357][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1115.859370][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1115.859377][ C1] Call Trace: [ 1115.859382][ C1] [ 1115.859388][ C1] dump_stack_lvl+0x99/0x250 [ 1115.859406][ C1] ? __asan_memcpy+0x40/0x70 [ 1115.859416][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1115.859428][ C1] ? __pfx__printk+0x10/0x10 [ 1115.859447][ C1] vpanic+0x281/0x750 [ 1115.859460][ C1] ? __pfx__printk+0x10/0x10 [ 1115.859469][ C1] ? __pfx_vpanic+0x10/0x10 [ 1115.859481][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1115.859499][ C1] panic+0xb9/0xc0 [ 1115.859511][ C1] ? __pfx_panic+0x10/0x10 [ 1115.859531][ C1] __warn+0x31b/0x4b0 [ 1115.859543][ C1] ? hrtimer_forward+0x1d6/0x2b0 [ 1115.859555][ C1] ? hrtimer_forward+0x1d6/0x2b0 [ 1115.859567][ C1] report_bug+0x2be/0x4f0 [ 1115.859579][ C1] ? hrtimer_forward+0x1d6/0x2b0 [ 1115.859595][ C1] ? hrtimer_forward+0x1d6/0x2b0 [ 1115.859606][ C1] ? hrtimer_forward+0x1d8/0x2b0 [ 1115.859617][ C1] handle_bug+0x84/0x160 [ 1115.859627][ C1] exc_invalid_op+0x1a/0x50 [ 1115.859636][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1115.859645][ C1] RIP: 0010:hrtimer_forward+0x1d6/0x2b0 [ 1115.859656][ C1] Code: 4c 89 33 48 8b 04 24 eb 07 e8 66 34 12 00 31 c0 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 4b 34 12 00 90 <0f> 0b 90 eb df 48 89 e8 4c 09 f8 48 c1 e8 20 74 0a 48 89 e8 31 d2 [ 1115.859663][ C1] RSP: 0018:ffffc90000a78bd0 EFLAGS: 00010006 [ 1115.859671][ C1] RAX: ffffffff81ac39f5 RBX: ffff8880b883b508 RCX: ffff88801c69d940 [ 1115.859678][ C1] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000010000 [ 1115.859683][ C1] RBP: 00000000000692fb R08: 0000000000010000 R09: 0000000000010000 [ 1115.859689][ C1] R10: dffffc0000000000 R11: ffffffff8167a830 R12: ffff8880b883b520 [ 1115.859695][ C1] R13: 000000003891623b R14: 1ffff110171076a4 R15: 0000000000000001 [ 1115.859704][ C1] ? __pfx_read_tsc+0x10/0x10 [ 1115.859714][ C1] ? hrtimer_forward+0x1d5/0x2b0 [ 1115.859728][ C1] ? read_tsc+0x9/0x20 [ 1115.859740][ C1] dl_task_timer+0xa42/0x12d0 [ 1115.859758][ C1] ? __pfx_dl_task_timer+0x10/0x10 [ 1115.859775][ C1] ? __pfx_dl_task_timer+0x10/0x10 [ 1115.859786][ C1] __hrtimer_run_queues+0x503/0xd40 [ 1115.859809][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1115.859820][ C1] ? read_tsc+0x9/0x20 [ 1115.859834][ C1] hrtimer_interrupt+0x45d/0xa90 [ 1115.859860][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1115.859874][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1115.859886][ C1] [ 1115.859889][ C1] [ 1115.859893][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1115.859901][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1115.859913][ C1] Code: 13 b3 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 26 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1115.859920][ C1] RSP: 0018:ffffc900001d7de0 EFLAGS: 000002c6 [ 1115.859927][ C1] RAX: 6c65ac82b07bd600 RBX: ffffffff81955f48 RCX: 6c65ac82b07bd600 [ 1115.859933][ C1] RDX: 0000000000000001 RSI: ffffffff8d03ad5b RDI: ffffffff8b621680 [ 1115.859939][ C1] RBP: ffffc900001d7f20 R08: ffff8880b893341b R09: 1ffff11017126683 [ 1115.859946][ C1] R10: dffffc0000000000 R11: ffffed1017126684 R12: ffffffff8f1d6230 [ 1115.859952][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038d3b28 [ 1115.859960][ C1] ? do_idle+0x1e8/0x510 [ 1115.859973][ C1] default_idle+0x13/0x20 [ 1115.859981][ C1] default_idle_call+0x74/0xb0 [ 1115.859990][ C1] do_idle+0x1e8/0x510 [ 1115.860001][ C1] ? __pfx_do_idle+0x10/0x10 [ 1115.860009][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1115.860030][ C1] cpu_startup_entry+0x44/0x60 [ 1115.860038][ C1] start_secondary+0x101/0x110 [ 1115.860048][ C1] common_startup_64+0x13e/0x147 [ 1115.860064][ C1] [ 1116.951413][ C1] Shutting down cpus with NMI [ 1116.951739][ C1] Kernel Offset: disabled