last executing test programs: 2m38.786039001s ago: executing program 0 (id=505): socket(0x10, 0x803, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0x7c9a, 0x8, 0x5, 0x3c4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2m38.471006056s ago: executing program 0 (id=507): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/21, 0x15}}], 0x1, 0x22, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m38.305537807s ago: executing program 0 (id=509): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000bbb1f8bdc5"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000001c0)=0x2001) r1 = fcntl$dupfd(r0, 0x0, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r1, &(0x7f0000000000)=[{0x0}], 0x1) 2m38.134023826s ago: executing program 0 (id=510): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 2m37.083224407s ago: executing program 0 (id=518): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x20000080) 2m36.712664098s ago: executing program 0 (id=523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/260, 0x104}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) write$sndseq(r2, &(0x7f0000000480)=[{0x50, 0xeb, 0xf3, 0xaf, @tick=0xd63, {0x68, 0x80}, {0x5, 0x8}, @note={0x3, 0x7, 0x4, 0xcf}}], 0x1c) 2m36.144471252s ago: executing program 32 (id=523): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x2) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/260, 0x104}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001240)={0x0, 0x2, 0x0, 0x0, 0x0, "001bf1000000000000002000"}) r1 = syz_open_pts(r0, 0x101) r2 = dup3(r1, r0, 0x0) write$sndseq(r2, &(0x7f0000000480)=[{0x50, 0xeb, 0xf3, 0xaf, @tick=0xd63, {0x68, 0x80}, {0x5, 0x8}, @note={0x3, 0x7, 0x4, 0xcf}}], 0x1c) 1m43.563795412s ago: executing program 3 (id=898): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000140)="0f492466b80500000066b9d4f800000f01d9d3d80ff5610066b8478700000f23c80f21f86635080000000f23f8650f01c30f01c2660fe49e920066b9800000c00f326635002000000f303e650f23d3", 0x4f}], 0x1, 0x1d, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m42.832883879s ago: executing program 3 (id=907): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800080000000f000000000000004500002801ffff"], 0xffbf) 1m42.61478365s ago: executing program 5 (id=908): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"3c2486910284ed923431d4c5d5fbf514fd00", r3, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000380)=0x800) poll(&(0x7f0000000200)=[{r4, 0x25}], 0x1, 0xe8) 1m42.33342762s ago: executing program 3 (id=913): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m42.199774175s ago: executing program 5 (id=916): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r2], 0x58}}, 0x0) 1m41.975369136s ago: executing program 5 (id=919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x0) 1m41.809313902s ago: executing program 1 (id=921): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) syz_io_uring_setup(0x468, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r1, 0x5101) 1m41.646818883s ago: executing program 5 (id=924): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1m41.567164113s ago: executing program 1 (id=925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r0, 0x40000000) 1m41.334493669s ago: executing program 1 (id=927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 1m41.231083579s ago: executing program 5 (id=929): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x200, 0x0, 0x0, 0x109}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3518, 0x0, 0x0, 0x0, 0x0) 1m41.22800556s ago: executing program 3 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m40.999579269s ago: executing program 3 (id=934): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000000ec0)=""/4096, 0x1000) 1m40.908810601s ago: executing program 1 (id=935): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 1m40.84804314s ago: executing program 1 (id=936): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r1}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r0}) 1m40.811239836s ago: executing program 5 (id=937): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0xff}}]}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0x4}}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m40.214576433s ago: executing program 33 (id=937): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x81, 0xff}}]}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0x4}}]}}]}, 0x3c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m40.194628285s ago: executing program 1 (id=940): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) move_mount(r0, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) 1m40.024499243s ago: executing program 34 (id=940): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) move_mount(r0, &(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140)={0x0, 0x2119, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x6f58, 0x0, 0x0, 0x0, 0x0) 1m40.01758046s ago: executing program 3 (id=942): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2000000a}, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 1m39.946468841s ago: executing program 35 (id=942): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2000000a}, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000003, 0x0, {0xfffe}}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 1m31.869812248s ago: executing program 4 (id=983): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x103d82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, 0x0, 0x4000008) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x8014) ioctl$TCXONC(r0, 0x540a, 0x2) 1m31.787958544s ago: executing program 4 (id=984): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfff7fffd, 0x2}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 1m31.65581337s ago: executing program 4 (id=986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd26, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x64, 0x2, [@TCA_BPF_ACT={0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x4, 0x7, 0x3}, 0x6}}]}, {0x4, 0x3f}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 1m30.803901406s ago: executing program 4 (id=988): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, 0x0, r0, 0x0, 0x46) 1m30.615411311s ago: executing program 4 (id=990): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m30.386790786s ago: executing program 4 (id=991): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 1m29.874602875s ago: executing program 36 (id=991): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 7.189324031s ago: executing program 8 (id=1458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x7, 0x6}]}}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x2}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 6.921058177s ago: executing program 8 (id=1460): fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000010c0)=ANY=[@ANYBLOB="0100000000000000074d564b"]) 6.487081924s ago: executing program 8 (id=1464): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009140)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)) 6.120265435s ago: executing program 8 (id=1467): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYRES32], 0x70}}, 0x0) 5.291861507s ago: executing program 2 (id=1471): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xca000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000480)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.856999001s ago: executing program 2 (id=1472): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x6c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0x6c}}, 0x0) 3.893135942s ago: executing program 6 (id=1478): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xffffffffffffffff, 0x5}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 3.45258806s ago: executing program 7 (id=1480): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) setxattr$trusted_overlay_upper(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002000), &(0x7f0000002040)=ANY=[@ANYBLOB="00fba804087b7d771d54d18609118e0e8c8db5e998053080bd3ef11ad03de7bfa8c8fabf6fcedf742c871245de6dcc025854a044d507cf8df912b767ed4c5080c060b5a38f86ae9f32cafd26f95256e2956e3c869d3cc7d7a13dda7a78eb5ea290b0cf1cf3835c7626266ef17fb83fc34a8eb144bd42bcfafee79e1d076a31affdccfbdac13631609bbe38c19da4644d0ad1b61e3dce41f4ea4783876bdeea3cbbb54dcee2747b9a"], 0xa8, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) umount2(&(0x7f0000002100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.43417607s ago: executing program 6 (id=1481): r0 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe6c, 0x2, 0x1, 0x8000001}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) close_range(r0, 0xffffffffffffffff, 0x0) 3.17498649s ago: executing program 6 (id=1482): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000080000580001c0"]) 3.144064754s ago: executing program 9 (id=1483): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f00000001c0)) 2.980424428s ago: executing program 9 (id=1484): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(r1, 0xffffffffffffffff, 0x0) 2.813420854s ago: executing program 6 (id=1485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 2.757288778s ago: executing program 8 (id=1486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000002c0)=0x18, 0x4) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.724202554s ago: executing program 7 (id=1487): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r4, 0x0, 0x0, r5], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) 2.640049013s ago: executing program 2 (id=1488): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002f00)=""/130, 0x82}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)=""/118, 0x76}], 0x1}, 0xd335}], 0x2, 0x2120, 0x0) 2.511581237s ago: executing program 9 (id=1489): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0, 0xfffffffffffffe3c}], 0x1, 0x0, 0x0, 0x4004801}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.458318231s ago: executing program 6 (id=1490): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x20000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x266a, 0x41e3, 0x2, 0x0, 0x55) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2.447581111s ago: executing program 7 (id=1491): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x810, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x8000000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x6000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000100)={0xf000}) 1.918465627s ago: executing program 9 (id=1492): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe04], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x758, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = dup(r0) write$uinput_user_dev(r1, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x12, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x83, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x80000008, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x1, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x9, 0x2, 0x76c4, 0xfffffffd, 0x4, 0x401, 0x10000, 0xd, 0x2, 0x9, 0x20010, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x9, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x0, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0xb, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) read$FUSE(r1, &(0x7f0000002c40)={0x2020}, 0x2020) 1.594571635s ago: executing program 7 (id=1493): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/../file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1.255188078s ago: executing program 6 (id=1494): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 993.02108ms ago: executing program 2 (id=1495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) futex(0x0, 0x0, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x3000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setrlimit(0x2, &(0x7f0000000080)={0xffffffffffffffff}) mlockall(0x7) brk(0x689d80000000) 992.282044ms ago: executing program 9 (id=1496): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000980)={r1, r2, 0x0, 0x63ca, 0xc2, 0x4b, 0x169, 0x9, 0x10, 0x81, 0x6, 0xdc93}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)}) 740.693333ms ago: executing program 2 (id=1497): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6800008, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 632.744617ms ago: executing program 9 (id=1498): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 350.392056ms ago: executing program 7 (id=1499): r0 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) 244.354438ms ago: executing program 8 (id=1500): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x800, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x20d302, 0x0}, 0x0) r2 = dup3(r0, r1, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0) 152.780967ms ago: executing program 2 (id=1501): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$dsp(r1, &(0x7f00000000c0)=""/229, 0xe5) r2 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f00000000c0)=""/159) 0s ago: executing program 7 (id=1502): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x3, {0x3, 0x4000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, r1, {0x7, 0x28, 0x2, 0xc0000, 0x0, 0xfff9, 0x0, 0x8000}}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024"], 0x1ec}}, 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') kernel console output (not intermixed with test programs): s: Mfr=0, Product=0, SerialNumber=0 [ 154.461591][ T5886] usb 5-1: config 0 descriptor?? [ 154.715112][ T7092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 154.743730][ T5886] usb 5-1: string descriptor 0 read error: -71 [ 154.763091][ T5886] usb 5-1: USB disconnect, device number 7 [ 155.660208][ T7151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 156.361021][ T5820] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 156.567939][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 156.611532][ T5820] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 156.631417][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.652732][ T5820] usb 5-1: Product: syz [ 156.657710][ T5820] usb 5-1: Manufacturer: syz [ 156.697954][ T5820] usb 5-1: SerialNumber: syz [ 156.768432][ T5820] usb 5-1: config 0 descriptor?? [ 156.807218][ T5820] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 156.832630][ T24] IPVS: starting estimator thread 0... [ 156.949126][ T7174] IPVS: using max 25 ests per chain, 60000 per kthread [ 157.108593][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 157.280666][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 157.291602][ T7175] loop2: detected capacity change from 0 to 3 [ 157.316214][ T7175] ldm_validate_privheads(): Disk read failed. [ 157.323593][ T7175] Dev loop2: unable to read RDB block 3 [ 157.334936][ T7175] loop2: unable to read partition table [ 157.341267][ T7175] loop2: partition table beyond EOD, truncated [ 157.357755][ T7175] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.397320][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.415950][ T9] usb 4-1: too many configurations: 105, using maximum allowed: 8 [ 157.438189][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 157.445858][ T9] usb 4-1: can't read configurations, error -71 [ 157.466518][ T5820] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 157.490502][ T5820] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 157.511424][ T7188] netlink: 'syz.2.437': attribute type 4 has an invalid length. [ 157.558105][ T5820] usb 5-1: USB disconnect, device number 8 [ 158.417206][ T5820] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 158.643665][ T5820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.668044][ T5820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 158.698297][ T5820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.718330][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 158.740964][ T5820] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 158.754631][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.762965][ T5820] usb 3-1: Product: syz [ 158.775618][ T5820] usb 3-1: Manufacturer: syz [ 158.786810][ T5820] usb 3-1: SerialNumber: syz [ 158.822837][ T5820] usb 3-1: config 0 descriptor?? [ 158.844557][ T5820] usb 3-1: ucan: probing device on interface #0 [ 158.863007][ T5820] usb 3-1: ucan: invalid EP count (1) [ 158.881010][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 158.889524][ T5820] usb 3-1: ucan: probe failed; try to update the device firmware [ 158.904303][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 158.923857][ T9] usb 2-1: config 0 has no interface number 0 [ 158.933837][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 158.953336][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 158.969564][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.982447][ T9] usb 2-1: Product: syz [ 158.986793][ T9] usb 2-1: Manufacturer: syz [ 158.993703][ T9] usb 2-1: SerialNumber: syz [ 159.035531][ T9] usb 2-1: config 0 descriptor?? [ 159.055236][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 159.083723][ T9] em28xx 2-1:0.132: Video interface 132 found: [ 159.375112][ T5886] usb 3-1: USB disconnect, device number 8 [ 159.428115][ T5820] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.468881][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 159.500082][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 159.573677][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.460'. [ 159.598607][ T5820] usb 4-1: Using ep0 maxpacket: 8 [ 159.613617][ T5820] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 159.623363][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.632619][ T5820] usb 4-1: Product: syz [ 159.636943][ T5820] usb 4-1: Manufacturer: syz [ 159.642085][ T5820] usb 4-1: SerialNumber: syz [ 159.658604][ T5820] usb 4-1: config 0 descriptor?? [ 159.667963][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 159.682659][ T24] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 159.696172][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.707544][ T24] usb 5-1: Product: syz [ 159.715168][ T24] usb 5-1: Manufacturer: syz [ 159.721153][ T24] usb 5-1: SerialNumber: syz [ 159.736801][ T24] usb 5-1: config 0 descriptor?? [ 159.876753][ T5820] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 160.107707][ T9] em28xx 2-1:0.132: failed to read eeprom (err=-110) [ 160.117977][ T9] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 160.181642][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 160.223932][ T24] gspca_sunplus: reg_w_riv err -71 [ 160.232224][ T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 160.283580][ T24] usb 5-1: USB disconnect, device number 9 [ 160.349849][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 160.378030][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 160.428359][ T5877] em28xx 2-1:0.132: Registering V4L2 extension [ 160.476332][ T9] usb 2-1: USB disconnect, device number 14 [ 160.486336][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 160.726432][ T5877] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 160.734515][ T5877] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 160.742485][ T5877] em28xx 2-1:0.132: No AC97 audio processor [ 160.764758][ T5877] usb 2-1: Decoder not found [ 160.770028][ T5877] em28xx 2-1:0.132: failed to create media graph [ 160.776435][ T5877] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 160.809722][ T5877] em28xx 2-1:0.132: Remote control support is not available for this card. [ 160.828379][ T9] em28xx 2-1:0.132: Closing input extension [ 160.865080][ T9] em28xx 2-1:0.132: Freeing device [ 160.950204][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 161.121775][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 161.144751][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 161.154842][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.167562][ T10] usb 1-1: Product: syz [ 161.172664][ T10] usb 1-1: Manufacturer: syz [ 161.179053][ T10] usb 1-1: SerialNumber: syz [ 161.236930][ T10] usb 1-1: config 0 descriptor?? [ 161.266743][ T10] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 161.310753][ T5820] usb write operation failed. (-71) [ 161.340795][ T5820] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.389443][ T5820] dvbdev: DVB: registering new adapter (Terratec H7) [ 161.398335][ T5820] usb 4-1: media controller created [ 161.410324][ T5820] usb read operation failed. (-71) [ 161.427546][ T5820] usb write operation failed. (-71) [ 161.459166][ T5820] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 161.593265][ T5820] usb 4-1: USB disconnect, device number 12 [ 162.398244][ T7324] netlink: 44 bytes leftover after parsing attributes in process `syz.2.484'. [ 162.513848][ T10] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 162.718963][ T5889] usb 1-1: USB disconnect, device number 9 [ 163.871227][ T5820] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 164.056806][ T5820] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.096547][ T5820] usb 3-1: config 0 has no interface number 0 [ 164.111881][ T5820] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 164.157966][ T5820] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 164.189887][ T5820] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 164.208292][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.235512][ T5820] usb 3-1: config 0 descriptor?? [ 164.272276][ T7363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.325411][ T5820] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 164.613166][ T24] usb 3-1: USB disconnect, device number 9 [ 164.613242][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 165.423259][ T7398] netlink: 27 bytes leftover after parsing attributes in process `syz.1.512'. [ 165.704199][ T7402] netlink: 'syz.1.513': attribute type 3 has an invalid length. [ 166.188105][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.364805][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 166.391053][ T10] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 166.415314][ T10] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 166.426649][ T10] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 166.436190][ T10] usb 4-1: config 250 has no interface number 0 [ 166.444448][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 166.456718][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 166.528922][ T10] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 166.566536][ T10] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 166.594676][ T10] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 166.622658][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.627346][ T10] usb 4-1: config 250 interface 228 has no altsetting 0 [ 166.668192][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 166.677736][ T10] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 166.694331][ T10] usb 4-1: Product: syz [ 166.703950][ T10] usb 4-1: SerialNumber: syz [ 166.750650][ T10] hub 4-1:250.228: bad descriptor, ignoring hub [ 166.762361][ T10] hub 4-1:250.228: probe with driver hub failed with error -5 [ 166.815936][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.943353][ T10] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 167.069243][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.101774][ T7426] loop2: detected capacity change from 0 to 7 [ 167.184033][ T7426] loop2: [ 167.187161][ T7426] loop2: partition table partially beyond EOD, truncated [ 167.415536][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.558322][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'. [ 167.616998][ T7407] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 167.738612][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 167.822780][ T34] bridge_slave_1: left allmulticast mode [ 167.846155][ T34] bridge_slave_1: left promiscuous mode [ 167.868188][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.907445][ T34] bridge_slave_0: left allmulticast mode [ 167.920103][ T34] bridge_slave_0: left promiscuous mode [ 167.926055][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.926105][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 167.964754][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 167.975234][ T24] usb 5-1: config 0 has no interface number 0 [ 167.999304][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 168.018099][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.028726][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.048161][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.056923][ T24] usb 5-1: Product: syz [ 168.061411][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.070103][ T24] usb 5-1: Manufacturer: syz [ 168.074834][ T24] usb 5-1: SerialNumber: syz [ 168.085038][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.093527][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.106407][ T24] usb 5-1: config 0 descriptor?? [ 168.127260][ T24] smsc95xx v2.0.0 [ 168.143080][ T837] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 168.217645][ T837] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 168.400192][ T837] usb 4-1: USB disconnect, device number 13 [ 168.423357][ T837] usblp0: removed [ 168.539679][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 168.578214][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 168.919012][ T30] audit: type=1326 audit(1748024264.062:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.000433][ T30] audit: type=1326 audit(1748024264.062:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.033155][ T30] audit: type=1326 audit(1748024264.062:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.094886][ T30] audit: type=1326 audit(1748024264.062:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.121295][ T30] audit: type=1326 audit(1748024264.062:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.189149][ T30] audit: type=1326 audit(1748024264.062:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.244444][ T30] audit: type=1326 audit(1748024264.082:2535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.285776][ T30] audit: type=1326 audit(1748024264.092:2536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.311980][ T30] audit: type=1326 audit(1748024264.092:2537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.312981][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.334650][ T30] audit: type=1326 audit(1748024264.092:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7457 comm="syz.2.537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd87ff8e969 code=0x7ffc0000 [ 169.376054][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.387260][ T34] bond0 (unregistering): Released all slaves [ 169.423067][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 169.450308][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 169.507240][ T24] usb 5-1: USB disconnect, device number 10 [ 170.158158][ T5838] Bluetooth: hci0: command tx timeout [ 170.283403][ T34] hsr_slave_0: left promiscuous mode [ 170.303094][ T34] hsr_slave_1: left promiscuous mode [ 170.323155][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.344946][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.403519][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.421408][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.544159][ T34] veth1_macvtap: left promiscuous mode [ 170.565999][ T34] veth0_macvtap: left promiscuous mode [ 170.582065][ T7511] netlink: 'syz.4.551': attribute type 1 has an invalid length. [ 170.598252][ T34] veth1_vlan: left promiscuous mode [ 170.613903][ T34] veth0_vlan: left promiscuous mode [ 170.675238][ T7517] netlink: 3 bytes leftover after parsing attributes in process `syz.4.551'. [ 171.406077][ T34] team0 (unregistering): Port device team_slave_1 removed [ 171.452053][ T34] team0 (unregistering): Port device team_slave_0 removed [ 171.905798][ T7511] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 171.937233][ T7517] batadv1: entered promiscuous mode [ 171.957679][ T7517] batadv1: entered allmulticast mode [ 172.245287][ T5838] Bluetooth: hci0: command tx timeout [ 172.391069][ T7543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 172.543149][ T7447] chnl_net:caif_netlink_parms(): no params data found [ 173.607764][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.629506][ T7447] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.678382][ T7447] bridge_slave_0: entered allmulticast mode [ 173.720341][ T7447] bridge_slave_0: entered promiscuous mode [ 173.752704][ T7447] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.762551][ T7447] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.772312][ T34] IPVS: stop unused estimator thread 0... [ 173.781631][ T7447] bridge_slave_1: entered allmulticast mode [ 173.811239][ T7447] bridge_slave_1: entered promiscuous mode [ 173.861492][ T7586] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.041019][ T7447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.081711][ T7447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.319218][ T5838] Bluetooth: hci0: command tx timeout [ 174.365234][ T7447] team0: Port device team_slave_0 added [ 174.394503][ T7447] team0: Port device team_slave_1 added [ 174.594345][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.614913][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.679206][ T7447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.729067][ T7447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.736202][ T7447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.853598][ T7447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.044165][ T7447] hsr_slave_0: entered promiscuous mode [ 175.073278][ T7447] hsr_slave_1: entered promiscuous mode [ 175.106962][ T7447] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.126715][ T7447] Cannot create hsr debugfs directory [ 176.398070][ T5838] Bluetooth: hci0: command tx timeout [ 176.603881][ T7447] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.681465][ T7447] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.749681][ T7447] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.779622][ T7447] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.049870][ T7447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.129729][ T7447] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.180762][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.188047][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.254492][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.261780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.517799][ T7447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.680861][ T7447] veth0_vlan: entered promiscuous mode [ 177.732177][ T7447] veth1_vlan: entered promiscuous mode [ 177.862304][ T7447] veth0_macvtap: entered promiscuous mode [ 177.883831][ T7447] veth1_macvtap: entered promiscuous mode [ 177.950698][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.000278][ T7447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.021649][ T7679] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.065696][ T7447] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.091113][ T7447] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.105061][ T7447] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.128065][ T7447] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.420091][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.439149][ T7686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 178.456109][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.550950][ T994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.567178][ T994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.091048][ T7699] trusted_key: syz.3.596 sent an empty control message without MSG_MORE. [ 179.175099][ T7702] input: syz1 as /devices/virtual/input/input16 [ 179.558129][ T5820] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 179.730542][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 179.759247][ T5820] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 179.796232][ T5820] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 179.824342][ T5820] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.852067][ T5820] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 179.868049][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.886738][ T5820] usb 4-1: Product: syz [ 179.896639][ T5820] usb 4-1: Manufacturer: syz [ 179.908059][ T5820] usb 4-1: SerialNumber: syz [ 180.339212][ T5820] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 180.496995][ T7746] netlink: 'syz.1.609': attribute type 1 has an invalid length. [ 180.624649][ T7748] bond1: (slave gretap1): making interface the new active one [ 180.642575][ T7748] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 181.144038][ T5820] usb 4-1: failed to read current rate; disabling the check [ 181.489395][ T5820] usb 4-1: USB disconnect, device number 14 [ 181.622208][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 181.622230][ T30] audit: type=1326 audit(1748024276.742:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7775 comm="syz.5.617" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15bc38e969 code=0x0 [ 181.657532][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.578692][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 183.729882][ T7817] netlink: 52 bytes leftover after parsing attributes in process `syz.2.629'. [ 183.768307][ T5889] usb 6-1: Using ep0 maxpacket: 16 [ 183.778605][ T5889] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 183.801248][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.829126][ T5889] usb 6-1: Product: syz [ 183.840539][ T5889] usb 6-1: Manufacturer: syz [ 183.861490][ T5889] usb 6-1: SerialNumber: syz [ 183.879988][ T5889] usb 6-1: config 0 descriptor?? [ 184.329425][ T5889] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 184.349172][ T5889] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 184.399261][ T5889] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 184.420816][ T5889] usb 6-1: media controller created [ 184.524211][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.534644][ T7811] dtv5100: wlen = 0, aborting. [ 184.574070][ T7839] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 184.639977][ T5889] zl10353_read_register: readreg error (reg=127, ret==0) [ 184.651866][ T5889] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 184.667752][ T5889] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 184.710647][ T5889] usb 6-1: USB disconnect, device number 2 [ 184.719227][ T7839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 184.801968][ T5889] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 184.828926][ T5820] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 185.024644][ T5820] usb 3-1: config index 0 descriptor too short (expected 31, got 27) [ 185.036727][ T5820] usb 3-1: config 1 interface 0 has no altsetting 0 [ 185.069127][ T5820] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 185.098813][ T5820] usb 3-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 185.107062][ T5820] usb 3-1: Product: syz [ 185.118956][ T5820] usb 3-1: Manufacturer: syz [ 185.133745][ T5820] usb 3-1: SerialNumber: syz [ 185.668904][ T1146] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 185.780441][ T1146] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 185.877749][ T5820] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 186.301803][ T5889] usb 3-1: USB disconnect, device number 10 [ 186.321226][ T5889] usblp0: removed [ 187.081197][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.653'. [ 187.257922][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 187.448082][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 187.476503][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.509217][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.543232][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.600617][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.620459][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.639902][ T9] usb 3-1: config 0 descriptor?? [ 188.052227][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.663'. [ 188.102664][ T9] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 188.110406][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.663'. [ 188.133305][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 188.152766][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 188.167740][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 188.206139][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 188.228106][ T9] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 188.401764][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input17 [ 188.548470][ T9] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 188.642471][ T9] usb 3-1: USB disconnect, device number 11 [ 188.767518][ T7952] fido_id[7952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 189.288196][ T7971] netlink: 'syz.1.671': attribute type 12 has an invalid length. [ 189.325910][ T7971] netlink: 'syz.1.671': attribute type 29 has an invalid length. [ 189.364596][ T7971] netlink: 148 bytes leftover after parsing attributes in process `syz.1.671'. [ 189.401994][ T7971] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 189.436858][ T7971] netlink: 43 bytes leftover after parsing attributes in process `syz.1.671'. [ 189.488327][ T5909] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 189.728470][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 189.746064][ T5909] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 189.754348][ T5909] usb 4-1: config 0 has no interface number 0 [ 189.777988][ T5909] usb 4-1: too many endpoints for config 0 interface 41 altsetting 2: 171, using maximum allowed: 30 [ 189.796123][ T5909] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 189.817927][ T5909] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.837273][ T5909] usb 4-1: config 0 interface 41 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 171 [ 189.851455][ T5909] usb 4-1: config 0 interface 41 has no altsetting 0 [ 189.865716][ T5909] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 189.882561][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.903707][ T5909] usb 4-1: Product: syz [ 189.913018][ T5909] usb 4-1: Manufacturer: syz [ 189.927229][ T5909] usb 4-1: SerialNumber: syz [ 189.963282][ T5909] usb 4-1: config 0 descriptor?? [ 189.975624][ T30] audit: type=1326 audit(1748024285.112:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7927 comm="syz.4.660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f688f98e969 code=0x0 [ 190.026169][ T7969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.034320][ T7969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.276490][ T7969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.308343][ T7969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 190.866504][ T7996] netlink: 'syz.2.677': attribute type 4 has an invalid length. [ 190.924650][ T7997] netlink: 'syz.2.677': attribute type 4 has an invalid length. [ 190.951118][ T5909] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 191.385298][ T8005] netlink: 277 bytes leftover after parsing attributes in process `syz.5.679'. [ 191.415894][ T5909] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 191.488063][ T5909] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 191.497769][ T5909] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 191.562852][ T5909] usb 4-1: USB disconnect, device number 15 [ 193.350751][ T8051] ======================================================= [ 193.350751][ T8051] WARNING: The mand mount option has been deprecated and [ 193.350751][ T8051] and is ignored by this kernel. Remove the mand [ 193.350751][ T8051] option from the mount to silence this warning. [ 193.350751][ T8051] ======================================================= [ 193.792861][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.970020][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 194.004180][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.038925][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.071214][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.080887][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.099209][ T10] usb 4-1: Product: syz [ 194.103454][ T10] usb 4-1: Manufacturer: syz [ 194.134127][ T10] usb 4-1: SerialNumber: syz [ 194.391270][ T10] usb 4-1: 0:2 : does not exist [ 194.402614][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.413354][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.424329][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 194.588381][ T10] usb 4-1: USB disconnect, device number 16 [ 194.714449][ T5979] udevd[5979]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.755302][ T8091] input: syz1 as /devices/virtual/input/input18 [ 195.528363][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 195.743655][ T5889] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 195.788131][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.827656][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 195.887971][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 195.913735][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 195.960345][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.005660][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.049847][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.089193][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.110575][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.148497][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.197916][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.231476][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.272036][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.308361][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.357923][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.393794][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.427992][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.483773][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.538283][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.547288][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.598482][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.636581][ T5889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.678353][ T5889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.710898][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.730907][ T5889] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 196.757942][ T5889] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 196.789503][ T5889] usb 4-1: Product: syz [ 196.793743][ T5889] usb 4-1: Manufacturer: syz [ 196.827920][ T5889] usb 4-1: SerialNumber: syz [ 196.857155][ T5889] usb 4-1: config 0 descriptor?? [ 196.918367][ T5889] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 198.348627][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 198.388647][ T5889] usb 4-1: USB disconnect, device number 17 [ 198.428845][ T5889] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 198.889871][ T8171] input: syz0 as /devices/virtual/input/input19 [ 198.896329][ T8171] input: failed to attach handler leds to device input19, error: -6 [ 199.574188][ T8189] fuse: root generation should be zero [ 199.593203][ T8199] loop2: detected capacity change from 0 to 7 [ 199.628650][ T8199] Dev loop2: unable to read RDB block 7 [ 199.634312][ T8199] loop2: unable to read partition table [ 199.668341][ T8199] loop2: partition table beyond EOD, truncated [ 199.678833][ T8199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.910588][ T8206] batadv_slave_0: entered promiscuous mode [ 199.985457][ T8206] team0: entered promiscuous mode [ 200.019521][ T8206] team_slave_0: entered promiscuous mode [ 200.026739][ T8206] team_slave_1: entered promiscuous mode [ 200.266205][ T8204] team0: left promiscuous mode [ 200.326253][ T8204] team_slave_0: left promiscuous mode [ 200.369619][ T8204] team_slave_1: left promiscuous mode [ 200.376402][ T8204] batadv_slave_0: left promiscuous mode [ 200.665712][ T8230] loop6: detected capacity change from 0 to 63 [ 200.733563][ T8230] buffer_io_error: 14 callbacks suppressed [ 200.733579][ T8230] Buffer I/O error on dev loop6, logical block 0, async page read [ 200.904815][ T8230] Buffer I/O error on dev loop6, logical block 1, async page read [ 201.088878][ T8230] Buffer I/O error on dev loop6, logical block 2, async page read [ 201.149575][ T8230] Buffer I/O error on dev loop6, logical block 3, async page read [ 201.210073][ T8230] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.242993][ T8230] Buffer I/O error on dev loop6, logical block 1, async page read [ 201.273084][ T8242] input: syz1 as /devices/virtual/input/input20 [ 201.298511][ T8230] Buffer I/O error on dev loop6, logical block 2, async page read [ 201.326195][ T8230] Buffer I/O error on dev loop6, logical block 3, async page read [ 201.356673][ T5979] Buffer I/O error on dev loop6, logical block 0, async page read [ 201.400300][ T5979] Buffer I/O error on dev loop6, logical block 1, async page read [ 201.768364][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 201.867442][ T8258] bond1: entered allmulticast mode [ 201.939691][ T8258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.006919][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.046649][ T8261] batadv_slave_0: entered promiscuous mode [ 202.064343][ T8261] batadv_slave_0: entered allmulticast mode [ 202.153566][ T8261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.204227][ T8261] bond1: (slave batadv_slave_0): making interface the new active one [ 202.232570][ T8261] bond1: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 203.147987][ T5889] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 203.511934][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 203.515519][ T5889] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 203.515550][ T5889] usb 4-1: config 0 has no interface number 0 [ 203.515595][ T5889] usb 4-1: config 0 interface 2 has no altsetting 0 [ 203.518244][ T5889] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 203.518276][ T5889] usb 4-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 203.518298][ T5889] usb 4-1: Product: syz [ 203.518314][ T5889] usb 4-1: Manufacturer: syz [ 203.518331][ T5889] usb 4-1: SerialNumber: syz [ 203.521349][ T5889] usb 4-1: config 0 descriptor?? [ 204.383272][ T8331] gretap0: entered promiscuous mode [ 204.424446][ T8331] vlan2: entered promiscuous mode [ 204.646131][ T8341] netlink: 'syz.4.776': attribute type 1 has an invalid length. [ 204.930189][ T8348] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.990396][ T8348] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.016606][ T8348] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.035554][ T8348] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 205.057425][ T8348] bond2: (slave geneve2): making interface the new active one [ 205.075211][ T8348] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 205.119402][ T8348] syz.4.776 (8348) used greatest stack depth: 20408 bytes left [ 205.774385][ T8366] vlan0: entered allmulticast mode [ 205.791887][ T8366] bond0: entered allmulticast mode [ 205.805788][ T8366] bond_slave_0: entered allmulticast mode [ 205.824278][ T8366] bond_slave_1: entered allmulticast mode [ 205.907106][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.241634][ T5889] usb 4-1: USB disconnect, device number 18 [ 206.407785][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.3.791'. [ 206.550536][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.232178][ T8408] gtp0: entered promiscuous mode [ 209.635884][ T8447] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 209.688719][ T8447] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 210.955874][ T30] audit: type=1326 audit(1748024306.082:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.118029][ T30] audit: type=1326 audit(1748024306.102:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.149015][ T8497] loop4: detected capacity change from 0 to 7 [ 211.171912][ T8497] Dev loop4: unable to read RDB block 7 [ 211.189322][ T8497] loop4: AHDI p3 p4 [ 211.217306][ T8497] loop4: partition table partially beyond EOD, truncated [ 211.249382][ T30] audit: type=1326 audit(1748024306.102:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.276438][ T8497] loop4: p3 start 4294967295 is beyond EOD, truncated [ 211.477996][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.490318][ T30] audit: type=1326 audit(1748024306.102:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.612227][ T30] audit: type=1326 audit(1748024306.102:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.676316][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 211.686446][ T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 211.697517][ T30] audit: type=1326 audit(1748024306.102:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.701804][ T837] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 211.747505][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.766294][ T30] audit: type=1326 audit(1748024306.102:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.808772][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 211.819672][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.827712][ T24] usb 3-1: Product: syz [ 211.840838][ T24] usb 3-1: Manufacturer: syz [ 211.845985][ T30] audit: type=1326 audit(1748024306.102:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.872330][ T24] usb 3-1: SerialNumber: syz [ 211.913983][ T30] audit: type=1326 audit(1748024306.102:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 211.966736][ T30] audit: type=1326 audit(1748024306.102:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8488 comm="syz.1.820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fadbd32ab39 code=0x7ffc0000 [ 212.008087][ T837] usb 4-1: Using ep0 maxpacket: 32 [ 212.055462][ T837] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 212.082688][ T837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.111390][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 212.141363][ T837] usb 4-1: config 0 descriptor?? [ 212.161190][ T837] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 212.457431][ T10] usb 3-1: USB disconnect, device number 12 [ 212.464464][ T8500] usblp0:failed reading printer status (-71) [ 212.536131][ T8521] usblp0: removed [ 212.596694][ T8527] loop3: detected capacity change from 0 to 1 [ 212.625445][ T8527] Dev loop3: unable to read RDB block 1 [ 212.643708][ T8527] loop3: unable to read partition table [ 212.659855][ T8527] loop3: partition table beyond EOD, truncated [ 212.677018][ T8527] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.576090][ T8556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.579015][ T837] gspca_vc032x: reg_w err -71 [ 213.596164][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.602827][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.608880][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.619578][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.625109][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.631110][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.636643][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.644373][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.650228][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.655896][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.661911][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.667547][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.673565][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.679568][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.685093][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.692479][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.706905][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.712891][ T837] gspca_vc032x: I2c Bus Busy Wait 00 [ 213.722891][ T837] gspca_vc032x: Unknown sensor... [ 213.729607][ T837] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 213.746670][ T837] usb 4-1: USB disconnect, device number 19 [ 214.030912][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.5.844'. [ 214.125456][ T8562] bond1: (slave batadv_slave_0): Releasing active interface [ 214.406385][ T5838] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 214.416254][ T5838] Bluetooth: hci2: Injecting HCI hardware error event [ 214.425835][ T5838] Bluetooth: hci2: hardware error 0x00 [ 214.487085][ T8569] netlink: 428 bytes leftover after parsing attributes in process `syz.2.847'. [ 214.514865][ T8569] netlink: 'syz.2.847': attribute type 2 has an invalid length. [ 214.525082][ T8569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.847'. [ 215.078946][ T5889] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 215.122019][ T8590] netlink: 'syz.5.856': attribute type 16 has an invalid length. [ 215.147168][ T8590] netlink: 'syz.5.856': attribute type 17 has an invalid length. [ 215.236907][ T8590] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.265042][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 215.289504][ T5889] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 215.308047][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.374028][ T5889] usb 5-1: config 0 descriptor?? [ 215.413257][ T8586] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 215.584994][ T8601] KVM: debugfs: duplicate directory 8601-4 [ 215.593048][ T8603] netlink: 'syz.1.862': attribute type 39 has an invalid length. [ 215.878348][ T5889] elan 0003:04F3:0755.0009: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 216.099193][ T10] usb 5-1: USB disconnect, device number 11 [ 216.260280][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.866'. [ 216.291165][ T8616] netlink: 28 bytes leftover after parsing attributes in process `syz.5.866'. [ 216.308445][ T8616] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 216.320437][ T8616] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 216.558298][ T5838] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 216.958018][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 216.958189][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 217.040286][ T8642] netlink: 165 bytes leftover after parsing attributes in process `syz.5.875'. [ 217.053622][ T8642] netlink: 277 bytes leftover after parsing attributes in process `syz.5.875'. [ 217.073203][ T8640] vlan2: entered allmulticast mode [ 217.086758][ T8640] bond0: entered allmulticast mode [ 217.092226][ T8640] bond_slave_0: entered allmulticast mode [ 217.099596][ T8640] bond_slave_1: entered allmulticast mode [ 218.588769][ T8678] netlink: 'syz.5.886': attribute type 30 has an invalid length. [ 218.637376][ T8678] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.646596][ T8678] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.655404][ T8678] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.664167][ T8678] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.703280][ T8678] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.713327][ T8678] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.723508][ T8678] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.732752][ T8678] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.379248][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 219.846949][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 220.014676][ T8710] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 220.538297][ T8726] syzkaller1: entered promiscuous mode [ 220.555311][ T8726] syzkaller1: entered allmulticast mode [ 221.623909][ T8759] kvm: emulating exchange as write [ 222.204627][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 222.372084][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.437931][ T7128] bridge0: port 3(syz_tun) entered disabled state [ 222.472025][ T7128] syz_tun (unregistering): left allmulticast mode [ 222.482461][ T7128] syz_tun (unregistering): left promiscuous mode [ 222.491048][ T7128] bridge0: port 3(syz_tun) entered disabled state [ 222.569660][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.764728][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.011400][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.519628][ T34] bridge_slave_1: left allmulticast mode [ 223.540386][ T8794] netlink: 'syz.4.945': attribute type 1 has an invalid length. [ 223.558090][ T34] bridge_slave_1: left promiscuous mode [ 223.563982][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.621856][ T34] bridge_slave_0: left allmulticast mode [ 223.638328][ T34] bridge_slave_0: left promiscuous mode [ 223.659963][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.795837][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.807173][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.815956][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.832298][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.840368][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.117748][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.137587][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.147466][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.156514][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.171385][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 224.196815][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.217620][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.234315][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.253201][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.273364][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 224.587614][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.601622][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.611935][ T34] bond0 (unregistering): Released all slaves [ 224.733969][ T34] bond1 (unregistering): Released all slaves [ 224.756525][ T8794] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 225.808168][ T34] hsr_slave_0: left promiscuous mode [ 225.847515][ T34] hsr_slave_1: left promiscuous mode [ 225.858784][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.866380][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.900530][ T34] veth1_macvtap: left promiscuous mode [ 225.916653][ T34] veth0_macvtap: left promiscuous mode [ 225.922801][ T34] veth1_vlan: left promiscuous mode [ 225.928763][ T34] veth0_vlan: left promiscuous mode [ 225.932113][ T5841] Bluetooth: hci0: command tx timeout [ 226.246261][ T5841] Bluetooth: hci2: command tx timeout [ 226.318687][ T5841] Bluetooth: hci4: command tx timeout [ 226.644293][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 226.704020][ T34] team0 (unregistering): Port device team_slave_1 removed [ 226.756540][ T34] team0 (unregistering): Port device team_slave_0 removed [ 227.986523][ T8806] chnl_net:caif_netlink_parms(): no params data found [ 228.007919][ T5841] Bluetooth: hci0: command tx timeout [ 228.199689][ T8805] chnl_net:caif_netlink_parms(): no params data found [ 228.200535][ T8888] input: syz1 as /devices/virtual/input/input21 [ 228.318085][ T5841] Bluetooth: hci2: command tx timeout [ 228.398086][ T5841] Bluetooth: hci4: command tx timeout [ 228.552874][ T8799] chnl_net:caif_netlink_parms(): no params data found [ 229.105796][ T8806] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.114283][ T8806] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.123146][ T8806] bridge_slave_0: entered allmulticast mode [ 229.132049][ T8806] bridge_slave_0: entered promiscuous mode [ 229.173831][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.194168][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.205270][ T8805] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.213269][ T8805] bridge_slave_0: entered allmulticast mode [ 229.223553][ T8805] bridge_slave_0: entered promiscuous mode [ 229.251311][ T8806] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.261739][ T8806] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.270282][ T8806] bridge_slave_1: entered allmulticast mode [ 229.280073][ T8806] bridge_slave_1: entered promiscuous mode [ 229.287210][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.297555][ T8805] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.305411][ T8805] bridge_slave_1: entered allmulticast mode [ 229.313767][ T8805] bridge_slave_1: entered promiscuous mode [ 229.349417][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.435858][ T8805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.446720][ T8799] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.455183][ T8799] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.463525][ T8799] bridge_slave_0: entered allmulticast mode [ 229.471886][ T8799] bridge_slave_0: entered promiscuous mode [ 229.500025][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.587341][ T8805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.632356][ T8799] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.640332][ T8799] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.647618][ T8799] bridge_slave_1: entered allmulticast mode [ 229.656576][ T8799] bridge_slave_1: entered promiscuous mode [ 229.674304][ T8806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.709973][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.749786][ T8805] team0: Port device team_slave_0 added [ 229.823559][ T8806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.851255][ T8805] team0: Port device team_slave_1 added [ 230.021282][ T8799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.078117][ T5841] Bluetooth: hci0: command tx timeout [ 230.202953][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.203993][ T8939] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 230.243386][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.270947][ T8805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.285903][ T8805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.293260][ T8805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.326938][ T8805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.342201][ T8799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.359611][ T8806] team0: Port device team_slave_0 added [ 230.371131][ T8806] team0: Port device team_slave_1 added [ 230.398070][ T5841] Bluetooth: hci2: command tx timeout [ 230.478150][ T5841] Bluetooth: hci4: command tx timeout [ 230.627148][ T8799] team0: Port device team_slave_0 added [ 230.635956][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.647078][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.685796][ T8806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.735580][ T8799] team0: Port device team_slave_1 added [ 230.751321][ T8806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.759720][ T8806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.786270][ T8806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.002752][ T8805] hsr_slave_0: entered promiscuous mode [ 231.016042][ T8805] hsr_slave_1: entered promiscuous mode [ 231.023703][ T8805] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.033460][ T8805] Cannot create hsr debugfs directory [ 231.169396][ T8806] hsr_slave_0: entered promiscuous mode [ 231.176220][ T8806] hsr_slave_1: entered promiscuous mode [ 231.190044][ T8806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.200744][ T8806] Cannot create hsr debugfs directory [ 231.211687][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.245719][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.294780][ T8799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.524617][ T8799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.563272][ T8799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.594979][ T8799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.665568][ T34] bridge_slave_1: left allmulticast mode [ 231.672220][ T34] bridge_slave_1: left promiscuous mode [ 231.682158][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.691976][ T34] bridge_slave_0: left allmulticast mode [ 231.699330][ T34] bridge_slave_0: left promiscuous mode [ 231.705131][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.105593][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.116416][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.128720][ T34] bond0 (unregistering): Released all slaves [ 232.158290][ T5841] Bluetooth: hci0: command tx timeout [ 232.415483][ T8799] hsr_slave_0: entered promiscuous mode [ 232.434642][ T8799] hsr_slave_1: entered promiscuous mode [ 232.442310][ T8799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.450132][ T8799] Cannot create hsr debugfs directory [ 232.478732][ T5841] Bluetooth: hci2: command tx timeout [ 232.561203][ T5841] Bluetooth: hci4: command tx timeout [ 233.354550][ T34] hsr_slave_0: left promiscuous mode [ 233.361552][ T34] hsr_slave_1: left promiscuous mode [ 233.368744][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.376210][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.384448][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.392948][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.440345][ T34] veth1_macvtap: left promiscuous mode [ 233.445961][ T34] veth0_macvtap: left promiscuous mode [ 233.460764][ T34] veth1_vlan: left promiscuous mode [ 233.466175][ T34] veth0_vlan: left promiscuous mode [ 233.943527][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.962328][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.972747][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.982789][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.991349][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.606776][ T34] team0 (unregistering): Port device team_slave_1 removed [ 234.656517][ T34] team0 (unregistering): Port device team_slave_0 removed [ 235.579825][ T8805] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 235.594930][ T8805] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 235.677336][ T8805] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 235.713708][ T8805] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 235.900532][ T8806] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 235.930451][ T8806] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 235.992174][ T8806] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 236.051263][ T8999] chnl_net:caif_netlink_parms(): no params data found [ 236.080368][ T5838] Bluetooth: hci3: command tx timeout [ 236.089742][ T8806] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 236.167206][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.185806][ T34] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.317092][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.331258][ T34] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.445451][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.458936][ T34] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.703021][ T8799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 236.730377][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.742415][ T34] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 236.816040][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.840128][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.847404][ T8999] bridge_slave_0: entered allmulticast mode [ 236.856582][ T8999] bridge_slave_0: entered promiscuous mode [ 236.865853][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.873431][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.880846][ T8999] bridge_slave_1: entered allmulticast mode [ 236.888286][ T8999] bridge_slave_1: entered promiscuous mode [ 236.895885][ T8799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 236.927542][ T8799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 236.943341][ T8799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.121602][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.242594][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.294775][ T8805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.541590][ T8999] team0: Port device team_slave_0 added [ 237.555538][ T34] bridge_slave_1: left allmulticast mode [ 237.566294][ T34] bridge_slave_1: left promiscuous mode [ 237.573305][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.584703][ T34] bridge_slave_0: left allmulticast mode [ 237.595790][ T34] bridge_slave_0: left promiscuous mode [ 237.604096][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.905456][ T34] bond2 (unregistering): (slave geneve2): Releasing active interface [ 238.136089][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.146237][ T34] bond_slave_0: left allmulticast mode [ 238.154189][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.167935][ T5838] Bluetooth: hci3: command tx timeout [ 238.178939][ T34] bond_slave_1: left allmulticast mode [ 238.186067][ T34] bond0 (unregistering): Released all slaves [ 238.440476][ T34] bond1 (unregistering): Released all slaves [ 238.490749][ T34] bond2 (unregistering): Released all slaves [ 238.545071][ T8999] team0: Port device team_slave_1 added [ 238.713325][ T8805] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.847568][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.859225][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.901035][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.929726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.936903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.955823][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.963040][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.011076][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.021042][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.048771][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.117384][ T8806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.230690][ T8999] hsr_slave_0: entered promiscuous mode [ 239.237222][ T8999] hsr_slave_1: entered promiscuous mode [ 239.356855][ T34] hsr_slave_0: left promiscuous mode [ 239.367779][ T34] hsr_slave_1: left promiscuous mode [ 239.377466][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.391716][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.405223][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.414251][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.467442][ T34] veth1_macvtap: left promiscuous mode [ 239.473205][ T34] veth0_macvtap: left promiscuous mode [ 239.486695][ T34] veth1_vlan: left promiscuous mode [ 239.492681][ T34] veth0_vlan: left promiscuous mode [ 239.944160][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.956904][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.975482][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.984557][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.999391][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 240.236306][ T34] team0 (unregistering): Port device team_slave_1 removed [ 240.243799][ T5841] Bluetooth: hci3: command tx timeout [ 240.290558][ T34] team0 (unregistering): Port device team_slave_0 removed [ 240.811310][ T8806] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.947405][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.954597][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.982021][ T8799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.038690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.045894][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.167373][ T8799] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.263287][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.270523][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.334677][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.341948][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.411410][ T8805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.781076][ T8999] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 241.832404][ T8806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.846588][ T8999] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 241.902143][ T8999] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 241.947691][ T8805] veth0_vlan: entered promiscuous mode [ 241.988137][ T8999] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 242.007458][ T8799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.050940][ T9073] chnl_net:caif_netlink_parms(): no params data found [ 242.076859][ T8805] veth1_vlan: entered promiscuous mode [ 242.088661][ T5841] Bluetooth: hci1: command tx timeout [ 242.296457][ T8805] veth0_macvtap: entered promiscuous mode [ 242.318700][ T5841] Bluetooth: hci3: command tx timeout [ 242.326025][ T9073] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.335464][ T9073] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.344305][ T9073] bridge_slave_0: entered allmulticast mode [ 242.352779][ T9073] bridge_slave_0: entered promiscuous mode [ 242.364801][ T8805] veth1_macvtap: entered promiscuous mode [ 242.380813][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.388840][ T9073] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.396184][ T9073] bridge_slave_1: entered allmulticast mode [ 242.411450][ T9073] bridge_slave_1: entered promiscuous mode [ 242.442596][ T8806] veth0_vlan: entered promiscuous mode [ 242.483007][ T9073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.515710][ T8806] veth1_vlan: entered promiscuous mode [ 242.537311][ T9073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.606989][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.656983][ T9073] team0: Port device team_slave_0 added [ 242.714578][ T8805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.732294][ T8799] veth0_vlan: entered promiscuous mode [ 242.745817][ T9073] team0: Port device team_slave_1 added [ 242.844690][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.852665][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.890493][ T9073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.912756][ T9073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.925123][ T9073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.953299][ T9073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.973656][ T8799] veth1_vlan: entered promiscuous mode [ 243.006747][ T8805] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.016703][ T8805] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.028585][ T8805] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.037358][ T8805] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.067145][ T8806] veth0_macvtap: entered promiscuous mode [ 243.135996][ T8806] veth1_macvtap: entered promiscuous mode [ 243.187024][ T9073] hsr_slave_0: entered promiscuous mode [ 243.194124][ T9073] hsr_slave_1: entered promiscuous mode [ 243.200932][ T9073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.209469][ T9073] Cannot create hsr debugfs directory [ 243.324882][ T8799] veth0_macvtap: entered promiscuous mode [ 243.385963][ T8799] veth1_macvtap: entered promiscuous mode [ 243.422558][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.488446][ T8806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.528112][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.530808][ T8806] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.536010][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.547318][ T8806] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.575811][ T8806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.590202][ T8806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.609391][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.691035][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.768693][ T8799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.836884][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.848903][ T8799] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.857672][ T8799] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.866963][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.878104][ T8799] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.886884][ T8799] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.937057][ T8999] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.046635][ T9073] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.168928][ T5841] Bluetooth: hci1: command tx timeout [ 244.187676][ T9073] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.271523][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.278766][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.360891][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.363561][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.368121][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.389443][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.522118][ T9073] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.727171][ T9073] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.785191][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.800354][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.989994][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.017394][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.105006][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.296996][ T9073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.353685][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.375468][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.399887][ T9073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.449471][ T9073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.502418][ T9073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.707597][ T8999] veth0_vlan: entered promiscuous mode [ 245.810069][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.6.939'. [ 245.834579][ T8999] veth1_vlan: entered promiscuous mode [ 246.018824][ T8999] veth0_macvtap: entered promiscuous mode [ 246.044024][ T8999] veth1_macvtap: entered promiscuous mode [ 246.172724][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.205601][ T9073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.248090][ T5841] Bluetooth: hci1: command tx timeout [ 246.307415][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.329047][ T8999] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.338400][ T8999] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.347267][ T8999] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.397713][ T8999] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.447065][ T9073] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.523438][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.530675][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.700988][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.708202][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.328055][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.357605][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.530941][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.596680][ T9073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.607969][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.073979][ T9073] veth0_vlan: entered promiscuous mode [ 248.274684][ T9190] netlink: 'syz.7.1023': attribute type 5 has an invalid length. [ 248.317467][ T9073] veth1_vlan: entered promiscuous mode [ 248.325066][ T5841] Bluetooth: hci1: command tx timeout [ 248.343575][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.9.992'. [ 248.455178][ T9195] netlink: 'syz.9.992': attribute type 5 has an invalid length. [ 248.657645][ T9208] syz_tun: entered allmulticast mode [ 248.740244][ T9201] syz_tun: left allmulticast mode [ 248.777097][ T9073] veth0_macvtap: entered promiscuous mode [ 248.864158][ T9073] veth1_macvtap: entered promiscuous mode [ 248.966587][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.035271][ T9073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.058829][ T9216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.066556][ T9216] IPv6: NLM_F_CREATE should be set when creating new route [ 249.113233][ T9073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.157913][ T9073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.166704][ T9073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.237863][ T9073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.709602][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.745808][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.864350][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.882015][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.930293][ T9330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1062'. [ 255.878096][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.891457][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.133124][ T9397] netlink: 'syz.7.1084': attribute type 10 has an invalid length. [ 256.171847][ T9397] syz_tun: entered promiscuous mode [ 256.181648][ T9399] loop6: detected capacity change from 0 to 7 [ 256.214989][ T5979] Dev loop6: unable to read RDB block 7 [ 256.220362][ T9397] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 256.224562][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1084'. [ 256.258402][ T5979] loop6: AHDI p1 p2 p3 p4 [ 256.262929][ T5979] loop6: partition table partially beyond EOD, truncated [ 256.282091][ T5979] loop6: p1 start 926365495 is beyond EOD, truncated [ 256.304981][ T5979] loop6: p2 size 47 extends beyond EOD, truncated [ 256.332756][ T5979] loop6: p3 start 1886353253 is beyond EOD, truncated [ 256.354786][ T9399] Dev loop6: unable to read RDB block 7 [ 256.375838][ T9399] loop6: AHDI p1 p2 p3 p4 [ 256.417164][ T9399] loop6: partition table partially beyond EOD, truncated [ 256.431440][ T9399] loop6: p1 start 926365495 is beyond EOD, truncated [ 256.468397][ T9399] loop6: p2 size 47 extends beyond EOD, truncated [ 256.558217][ T9399] loop6: p3 start 1886353253 is beyond EOD, truncated [ 256.845083][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 256.970594][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 257.226126][ T9439] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1097'. [ 257.258374][ T9435] netlink: 2108 bytes leftover after parsing attributes in process `syz.9.1095'. [ 257.326207][ T9435] netlink: 1260 bytes leftover after parsing attributes in process `syz.9.1095'. [ 257.577918][ T9126] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 257.751387][ T9126] usb 8-1: Using ep0 maxpacket: 16 [ 257.795883][ T9126] usb 8-1: config 0 has no interfaces? [ 257.813527][ T9126] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 257.841662][ T9126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.875368][ T9126] usb 8-1: Product: syz [ 257.897887][ T9126] usb 8-1: Manufacturer: syz [ 257.902569][ T9126] usb 8-1: SerialNumber: syz [ 257.958336][ T9126] usb 8-1: config 0 descriptor?? [ 258.221755][ T9446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.279168][ T9446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.315355][ T9126] usb 8-1: USB disconnect, device number 2 [ 258.768425][ T9126] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 258.823624][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 258.823645][ T30] audit: type=1326 audit(1748024353.962:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.9.1109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41d358e969 code=0x0 [ 258.977710][ T9126] usb 8-1: Using ep0 maxpacket: 16 [ 258.990137][ T9126] usb 8-1: config 0 has an invalid interface number: 237 but max is 0 [ 259.021647][ T9126] usb 8-1: config 0 has no interface number 0 [ 259.044090][ T9126] usb 8-1: config 0 interface 237 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.084794][ T9126] usb 8-1: config 0 interface 237 has no altsetting 0 [ 259.126995][ T9126] usb 8-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=2a.b3 [ 259.145440][ T9126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.166016][ T9126] usb 8-1: Product: syz [ 259.171623][ T9126] usb 8-1: Manufacturer: syz [ 259.176490][ T9126] usb 8-1: SerialNumber: syz [ 259.200695][ T9126] usb 8-1: config 0 descriptor?? [ 259.217348][ T9126] em28xx 8-1:0.237: New device syz syz @ 480 Mbps (eb1a:e303, interface 237, class 237) [ 259.247438][ T9126] em28xx 8-1:0.237: Video interface 237 found: [ 259.541803][ T9506] loop2: detected capacity change from 0 to 7 [ 259.555160][ T9506] loop2: [ 259.562867][ T9506] loop2: partition table partially beyond EOD, truncated [ 259.812525][ T9126] em28xx 8-1:0.237: chip ID is em2710/2820 [ 260.113978][ T9126] em28xx 8-1:0.237: reading from i2c device at 0xa0 failed (error=-5) [ 260.136766][ T9126] em28xx 8-1:0.237: board has no eeprom [ 260.228162][ T9126] em28xx 8-1:0.237: Identified as Kaiomy TVnPC U2 (card=63) [ 260.258126][ T9126] em28xx 8-1:0.237: analog set to bulk mode. [ 260.285543][ T9127] em28xx 8-1:0.237: Registering V4L2 extension [ 260.311400][ T9126] usb 8-1: USB disconnect, device number 3 [ 260.366477][ T9126] em28xx 8-1:0.237: Disconnecting em28xx [ 260.684020][ T9538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.702833][ T9127] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 260.896397][ T9127] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 261.122562][ T9127] DVB: Unable to find symbol xc2028_attach() [ 261.164720][ T9127] tuner: 1-0061: Tuner has no way to set tv freq [ 261.187915][ T9127] em28xx 8-1:0.237: Config register raw data: 0xffffffed [ 261.246194][ T9127] em28xx 8-1:0.237: AC97 chip type couldn't be determined [ 261.278876][ T9127] em28xx 8-1:0.237: No AC97 audio processor [ 261.285348][ T9127] tuner: 1-0061: Tuner has no way to set tv freq [ 261.354513][ T9127] videodev: could not get a free minor [ 261.382383][ T9127] em28xx 8-1:0.237: can't register radio device [ 261.407054][ T9127] em28xx 8-1:0.237: V4L2 device video103 deregistered [ 261.498108][ T9127] em28xx 8-1:0.237: Registering input extension [ 261.540949][ T9126] em28xx 8-1:0.237: Closing input extension [ 261.610535][ T5888] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 261.689788][ T9126] em28xx 8-1:0.237: Freeing device [ 261.800696][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 261.826720][ T5888] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 261.865672][ T5888] usb 3-1: config 0 has no interface number 0 [ 261.900198][ T5888] usb 3-1: config 0 interface 12 has no altsetting 0 [ 261.964034][ T5888] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 262.009455][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.052953][ T5888] usb 3-1: Product: syz [ 262.064348][ T5888] usb 3-1: Manufacturer: syz [ 262.069280][ T5888] usb 3-1: SerialNumber: syz [ 262.080624][ T5888] usb 3-1: config 0 descriptor?? [ 262.258113][ T5877] [U]  [ 262.367253][ T9577] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1133'. [ 262.397981][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1133'. [ 263.053146][ T9595] vcan0: tx drop: invalid sa for name 0x0000000000000007 [ 263.564230][ T5888] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 263.617885][ T5888] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 263.625263][ T5888] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 263.660943][ T5888] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 263.696627][ T5888] usb 3-1: USB disconnect, device number 13 [ 265.183342][ T9652] syzkaller0: entered promiscuous mode [ 265.209605][ T9652] syzkaller0: entered allmulticast mode [ 265.400092][ T9658] kernel read not supported for file /eth0 (pid: 9658 comm: syz.6.1157) [ 265.461802][ T30] audit: type=1800 audit(1748024360.592:2617): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1157" name="eth0" dev="mqueue" ino=31611 res=0 errno=0 [ 265.593629][ T9634] syz.7.1151 (9634): drop_caches: 2 [ 268.726891][ T9697] bond0: entered promiscuous mode [ 268.737883][ T9697] bond_slave_0: entered promiscuous mode [ 268.743886][ T9697] bond_slave_1: entered promiscuous mode [ 268.773626][ T9697] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 268.819462][ T9697] bond0: left promiscuous mode [ 268.832258][ T9697] bond_slave_0: left promiscuous mode [ 268.843168][ T9697] bond_slave_1: left promiscuous mode [ 268.902793][ T9710] loop2: detected capacity change from 0 to 7 [ 268.952592][ T9710] loop2: [POWERTEC] p1 p2 p3 [ 268.986405][ T9710] loop2: p1 size 1114112 extends beyond EOD, truncated [ 269.041941][ T9710] loop2: p2 start 393215 is beyond EOD, truncated [ 269.076881][ T9710] loop2: p3 start 1635021614 is beyond EOD, truncated [ 269.303044][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 269.768253][ T9127] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 269.977878][ T9127] usb 3-1: Using ep0 maxpacket: 8 [ 270.018193][ T9127] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 270.027906][ T9127] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.081951][ T9127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.115615][ T9127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.167966][ T9127] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.213393][ T9127] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 270.246658][ T9127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.504464][ T9127] usb 3-1: GET_CAPABILITIES returned 0 [ 270.528342][ T9127] usbtmc 3-1:16.0: can't read capabilities [ 270.864915][ T5866] usb 3-1: USB disconnect, device number 14 [ 270.868063][ T9730] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 271.918326][ T5888] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 272.129038][ T5888] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.164195][ T5888] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.241897][ T5888] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.291324][ T5888] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.553727][ T5888] usb 10-1: GET_CAPABILITIES returned 0 [ 272.581436][ T5888] usbtmc 10-1:16.0: can't read capabilities [ 272.830653][ T9126] usb 10-1: USB disconnect, device number 2 [ 275.876675][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1225'. [ 276.285532][ T5866] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 276.332943][ T30] audit: type=1326 audit(1748024371.472:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9855 comm="syz.6.1214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f603f58e969 code=0x0 [ 276.480231][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 276.489335][ T5866] usb 10-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 276.535348][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.590944][ T5866] usb 10-1: config 0 descriptor?? [ 276.647140][ T5866] gspca_main: sq930x-2.14.0 probing 041e:403c [ 277.241756][ T9924] kvm: MONITOR instruction emulated as NOP! [ 278.119147][ T5866] gspca_sq930x: reg_w 0105 bc00 failed -71 [ 278.136217][ T5866] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 278.194416][ T5866] usb 10-1: USB disconnect, device number 3 [ 278.998527][ T9983] netlink: 'syz.2.1252': attribute type 13 has an invalid length. [ 279.307744][ T9983] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.315681][ T9983] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.725287][ T9983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.778538][ T9983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.932176][ T9983] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.942323][ T9983] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.954204][ T9983] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.963848][ T9983] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.455541][ T5909] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 280.619103][ T5909] usb 3-1: Using ep0 maxpacket: 32 [ 280.636372][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.655399][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.668419][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 280.677597][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.698868][ T5909] usb 3-1: config 0 descriptor?? [ 280.716257][ T5909] hub 3-1:0.0: USB hub found [ 280.758343][ T5877] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 280.915259][ T5909] hub 3-1:0.0: 1 port detected [ 280.938183][ T5877] usb 10-1: Using ep0 maxpacket: 16 [ 280.951903][ T5877] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 280.963867][ T5877] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.985591][ T5877] usb 10-1: Product: syz [ 281.003867][ T5877] usb 10-1: Manufacturer: syz [ 281.018117][ T5877] usb 10-1: SerialNumber: syz [ 281.034606][ T5877] usb 10-1: config 0 descriptor?? [ 281.044340][ T5877] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 281.284306][T10046] loop2: detected capacity change from 0 to 7 [ 281.326505][T10046] Dev loop2: unable to read RDB block 7 [ 281.347498][T10046] loop2: unable to read partition table [ 281.368252][T10046] loop2: partition table beyond EOD, truncated [ 281.382692][T10046] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 281.530245][ T5909] hub 3-1:0.0: activate --> -90 [ 281.734976][ T5866] usb 3-1: USB disconnect, device number 15 [ 281.741200][ T5909] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 282.266521][ T5877] usb 10-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 282.502577][ T5877] usb 10-1: USB disconnect, device number 4 [ 282.566784][ T5877] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 282.624703][ T5877] ssu100 10-1:0.0: device disconnected [ 283.468108][T10092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967291 (274877906624 ns) > initial count (30400 ns). Using initial count to start timer. [ 283.534677][T10096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.858203][ T24] IPVS: starting estimator thread 0... [ 283.963723][T10108] IPVS: using max 25 ests per chain, 60000 per kthread [ 284.164118][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1286'. [ 284.224056][T10121] binder: 10120:10121 ioctl c0306201 200000000640 returned -22 [ 284.278404][T10119] vcan0: entered promiscuous mode [ 284.283663][T10119] vcan0: entered allmulticast mode [ 284.667032][T10112] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.685189][T10112] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 284.721658][T10112] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 284.754827][T10112] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.767444][T10112] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 284.815998][T10112] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 284.855945][T10112] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 284.868134][T10112] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 284.884050][T10112] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 284.904779][T10112] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.924918][T10112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.953760][T10112] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 284.981400][T10112] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.989390][T10112] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 285.001629][T10112] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 285.235510][T10151] syzkaller1: entered promiscuous mode [ 285.251852][T10151] syzkaller1: entered allmulticast mode [ 285.287935][ T9126] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 285.450222][ T9126] usb 3-1: Using ep0 maxpacket: 8 [ 285.475625][ T9126] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 285.528992][ T9126] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 285.537164][ T9126] usb 3-1: config 0 has no interface number 0 [ 285.598417][ T9126] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.621862][ T9126] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 285.655078][ T9126] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 285.673264][ T9126] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 285.725776][ T9126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.785373][ T9126] usb 3-1: config 0 descriptor?? [ 285.812149][T10143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.318364][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.473683][ T9126] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input23 [ 286.802656][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.877921][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 286.951438][ T9126] usb 3-1: USB disconnect, device number 16 [ 286.957576][ C0] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 286.968058][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.038913][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.318858][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1308'. [ 288.399989][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 288.877955][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.958243][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 289.038696][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 289.123352][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.182898][T10259] capability: warning: `syz.2.1324' uses 32-bit capabilities (legacy support in use) [ 289.298273][ T9126] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 289.478154][ T9126] usb 8-1: Using ep0 maxpacket: 8 [ 289.516164][ T9126] usb 8-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 289.551563][ T9126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.576218][ T9126] usb 8-1: Product: syz [ 289.596302][ T9126] usb 8-1: Manufacturer: syz [ 289.601606][ T9126] usb 8-1: SerialNumber: syz [ 289.625099][ T9126] usb 8-1: config 0 descriptor?? [ 289.644875][ T9126] gspca_main: se401-2.14.0 probing 047d:5003 [ 290.050727][ T9126] gspca_se401: Too many frame sizes [ 290.109304][ T5909] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 290.253778][ T24] usb 8-1: USB disconnect, device number 4 [ 290.290670][ T5909] usb 7-1: Using ep0 maxpacket: 8 [ 290.302598][ T5909] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 290.327978][ T5909] usb 7-1: config 0 has no interface number 0 [ 290.345507][ T5909] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.376879][ T5909] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 290.418255][ T5909] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 290.438777][ T5909] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 290.456355][ T5909] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 290.477002][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.487131][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.503268][ T5909] usb 7-1: config 0 descriptor?? [ 290.519696][ T5909] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 290.958125][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.057919][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.084913][T10291] netlink: 'syz.9.1330': attribute type 4 has an invalid length. [ 291.120608][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.177917][ T5909] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 291.198136][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.268199][T10291] netlink: 'syz.9.1330': attribute type 4 has an invalid length. [ 291.354203][ T5909] usb 8-1: Using ep0 maxpacket: 32 [ 291.364382][ T5909] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 291.374857][ T5909] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 291.432728][ T5909] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 291.463027][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.503315][ T5909] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.524908][ T5909] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.583183][ T5909] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 291.627757][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.673410][ T5909] usb 8-1: config 0 descriptor?? [ 291.935374][ T5909] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 292.011064][ T5909] usb 8-1: USB disconnect, device number 5 [ 292.060494][ T5909] usblp1: removed [ 292.470766][ T9045] usb 7-1: USB disconnect, device number 2 [ 292.470803][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 292.486113][ T9045] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 292.497890][ T5909] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 292.698178][ T5909] usb 8-1: Using ep0 maxpacket: 32 [ 292.728844][ T5909] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.737277][ T5909] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.758870][ T5909] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.768816][ T5909] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.782477][ T5909] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 292.792974][ T5909] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 292.849994][ T5909] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 292.898965][ T5909] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.933779][ T5909] usb 8-1: config 0 descriptor?? [ 293.327940][ T9126] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 293.432748][ T5909] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.512343][ T9126] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.523763][ T9126] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 293.546337][ T9126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.583853][ T9126] usb 10-1: config 0 descriptor?? [ 293.628626][ T9127] usb 8-1: USB disconnect, device number 6 [ 293.664735][ T9127] usblp0: removed [ 293.809527][ T9126] usbhid 10-1:0.0: can't add hid device: -71 [ 293.815693][ T9126] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 293.897429][ T9126] usb 10-1: USB disconnect, device number 5 [ 294.101719][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 294.325370][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.352717][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.378563][ T9126] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 294.378796][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.467968][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.516135][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.558937][ T24] usb 7-1: config 0 descriptor?? [ 294.568099][ T9126] usb 10-1: Using ep0 maxpacket: 32 [ 294.609244][ T9126] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.645759][ T9126] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 294.678958][ T9126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.756637][ T9126] usb 10-1: config 0 descriptor?? [ 294.787536][ T9126] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 294.836727][ T9126] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 295.013405][ T24] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 295.127430][ T24] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 295.252408][ T10] usb 10-1: USB disconnect, device number 6 [ 295.274612][ T10] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 295.318100][ T9126] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 295.488630][ T9126] usb 9-1: Using ep0 maxpacket: 16 [ 295.530671][ T9126] usb 9-1: config index 0 descriptor too short (expected 65316, got 36) [ 295.554693][ T9126] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 295.584201][ T9126] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 295.610162][ T9126] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.641193][ T9126] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.652291][ T9126] usb 9-1: config 0 interface 0 has no altsetting 0 [ 295.660319][ T9126] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 295.670070][ T9126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.841862][ T9126] usb 9-1: config 0 descriptor?? [ 296.395663][ T9126] hid (null): unknown global tag 0xc [ 296.404367][ T9126] hid (null): report_id 0 is invalid [ 296.410309][ T9126] hid (null): unknown global tag 0xe [ 296.559279][ T9126] hid (null): unknown global tag 0xc [ 296.573680][ T9126] hid (null): unknown global tag 0xd [ 296.593126][ T9126] hid (null): report_id 3636381312 is invalid [ 296.619692][ T9126] hid (null): unknown global tag 0xe [ 296.649846][ T10] usb 7-1: USB disconnect, device number 3 [ 296.692352][ T9126] hid (null): invalid report_size 15733 [ 296.758933][ T9126] hid (null): global environment stack underflow [ 296.765351][ T9126] hid (null): invalid report_size 59091 [ 296.808668][ T9126] hid (null): unknown global tag 0xe [ 296.814049][ T9126] hid (null): invalid report_size 659322949 [ 296.883626][ T9126] hid (null): invalid report_size 40509 [ 296.907558][ T9126] hid (null): report_id 49840 is invalid [ 296.985734][ T9126] usb 9-1: USB disconnect, device number 2 [ 297.689333][T10419] syz.7.1356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 297.689601][T10419] CPU: 1 UID: 0 PID: 10419 Comm: syz.7.1356 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 297.689627][T10419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.689645][T10419] Call Trace: [ 297.689654][T10419] [ 297.689665][T10419] dump_stack_lvl+0x189/0x250 [ 297.689714][T10419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.689744][T10419] ? __pfx__printk+0x10/0x10 [ 297.689773][T10419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 297.689796][T10419] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 297.689820][T10419] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 297.689845][T10419] warn_alloc+0x214/0x310 [ 297.689876][T10419] ? __pfx___schedule+0x10/0x10 [ 297.689905][T10419] ? __pfx_warn_alloc+0x10/0x10 [ 297.689934][T10419] ? kasan_save_track+0x4f/0x80 [ 297.689969][T10419] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 297.689995][T10419] ? xskq_create+0x56/0x170 [ 297.690020][T10419] ? __x64_sys_setsockopt+0x18b/0x220 [ 297.690048][T10419] ? do_syscall_64+0xf6/0x210 [ 297.690073][T10419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.690105][T10419] __vmalloc_node_range_noprof+0x125/0x12c0 [ 297.690168][T10419] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.690202][T10419] ? __kasan_kmalloc+0x93/0xb0 [ 297.690234][T10419] vmalloc_user_noprof+0x74/0x80 [ 297.690263][T10419] ? xskq_create+0xbf/0x170 [ 297.690287][T10419] xskq_create+0xbf/0x170 [ 297.690315][T10419] xsk_init_queue+0xb0/0x110 [ 297.690342][T10419] xsk_setsockopt+0x43f/0x710 [ 297.690368][T10419] ? __pfx_xsk_setsockopt+0x10/0x10 [ 297.690400][T10419] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 297.690422][T10419] ? __pfx_xsk_setsockopt+0x10/0x10 [ 297.690445][T10419] do_sock_setsockopt+0x257/0x3e0 [ 297.690472][T10419] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 297.690494][T10419] ? __fget_files+0x2a/0x420 [ 297.690524][T10419] ? __fget_files+0x3a0/0x420 [ 297.690549][T10419] ? __fget_files+0x2a/0x420 [ 297.690582][T10419] __x64_sys_setsockopt+0x18b/0x220 [ 297.690613][T10419] do_syscall_64+0xf6/0x210 [ 297.690640][T10419] ? clear_bhb_loop+0x60/0xb0 [ 297.690667][T10419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.690691][T10419] RIP: 0033:0x7f828458e969 [ 297.690724][T10419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.690745][T10419] RSP: 002b:00007f828538a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.690775][T10419] RAX: ffffffffffffffda RBX: 00007f82847b6080 RCX: 00007f828458e969 [ 297.690792][T10419] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 297.690807][T10419] RBP: 00007f8284610ab1 R08: 0000000000000004 R09: 0000000000000000 [ 297.690822][T10419] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.690837][T10419] R13: 0000000000000000 R14: 00007f82847b6080 R15: 00007f82848dfa28 [ 297.690873][T10419] [ 297.690883][T10419] Mem-Info: [ 298.049181][T10419] active_anon:26497 inactive_anon:0 isolated_anon:0 [ 298.049181][T10419] active_file:15884 inactive_file:39947 isolated_file:0 [ 298.049181][T10419] unevictable:768 dirty:453 writeback:0 [ 298.049181][T10419] slab_reclaimable:11042 slab_unreclaimable:123373 [ 298.049181][T10419] mapped:30368 shmem:18266 pagetables:1454 [ 298.049181][T10419] sec_pagetables:0 bounce:0 [ 298.049181][T10419] kernel_misc_reclaimable:0 [ 298.049181][T10419] free:1276648 free_pcp:2263 free_cma:0 [ 298.049245][T10419] Node 0 active_anon:105988kB inactive_anon:0kB active_file:63536kB inactive_file:159580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121472kB dirty:1808kB writeback:0kB shmem:71528kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12552kB pagetables:5816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 298.049308][T10419] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 298.049364][T10419] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.049429][T10419] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 298.049481][T10419] Node 0 DMA32 free:1188072kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:105980kB inactive_anon:0kB active_file:63536kB inactive_file:159488kB unevictable:1536kB writepending:1808kB present:3129332kB managed:2564108kB mlocked:0kB bounce:0kB free_pcp:1852kB local_pcp:776kB free_cma:0kB [ 298.049542][T10419] lowmem_reserve[]: 0 0 0 0 0 [ 298.049589][T10419] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 298.049647][T10419] lowmem_reserve[]: 0 0 0 0 0 [ 298.049694][T10419] Node 1 Normal free:3903160kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7180kB local_pcp:0kB free_cma:0kB [ 298.049762][T10419] lowmem_reserve[]: 0 0 0 0 0 [ 298.049812][T10419] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.050016][T10419] Node 0 DMA32: 2*4kB (ME) 72*8kB (ME) 50*16kB (UME) 102*32kB (UME) 113*64kB (UME) 54*128kB (UME) 23*256kB (UM) 6*512kB (M) 11*1024kB (UME) 3*2048kB (UME) 279*4096kB (UM) = 1187944kB [ 298.050223][T10419] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.050350][T10419] Node 1 Normal: 251*4kB (UME) 68*8kB (UME) 42*16kB (UME) 232*32kB (UME) 99*64kB (UME) 43*128kB (UME) 15*256kB (UM) 8*512kB (UME) 5*1024kB (UE) 3*2048kB (UME) 943*4096kB (M) = 3903212kB [ 298.050559][T10419] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.050578][T10419] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 298.050596][T10419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.050615][T10419] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 298.050633][T10419] 74093 total pagecache pages [ 298.050643][T10419] 0 pages in swap cache [ 298.050652][T10419] Free swap = 124996kB [ 298.050661][T10419] Total swap = 124996kB [ 298.050672][T10419] 2097051 pages RAM [ 298.050681][T10419] 0 pages HighMem/MovableOnly [ 298.050690][T10419] 424366 pages reserved [ 298.050699][T10419] 0 pages cma reserved [ 299.022192][T10446] loop9: detected capacity change from 0 to 7 [ 299.072979][ T5979] loop9: [POWERTEC] p1 p2 p3 p4 [ 299.103924][ T5979] loop9: p1 start 1600481121 is beyond EOD, truncated [ 299.144319][ T5979] loop9: p2 start 4294910286 is beyond EOD, truncated [ 299.161876][ T5979] loop9: p3 size 1680801792 extends beyond EOD, truncated [ 299.185559][ T5979] loop9: p4 start 131072 is beyond EOD, truncated [ 299.238795][T10446] loop9: [POWERTEC] p1 p2 p3 p4 [ 299.244674][T10446] loop9: p1 start 1600481121 is beyond EOD, truncated [ 299.262156][T10446] loop9: p2 start 4294910286 is beyond EOD, truncated [ 299.275390][T10446] loop9: p3 size 1680801792 extends beyond EOD, truncated [ 299.305779][T10446] loop9: p4 start 131072 is beyond EOD, truncated [ 299.399523][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 299.546558][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 302.650664][T10531] ALSA: seq fatal error: cannot create timer (-22) [ 303.068689][ T5887] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 303.267915][ T5887] usb 8-1: Using ep0 maxpacket: 32 [ 303.285036][ T5887] usb 8-1: config 0 interface 0 has no altsetting 0 [ 303.305442][ T5887] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 303.336694][ T5887] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.383655][ T5887] usb 8-1: Product: syz [ 303.402540][ T5887] usb 8-1: Manufacturer: syz [ 303.408959][ T5887] usb 8-1: SerialNumber: syz [ 303.420675][ T5887] usb 8-1: config 0 descriptor?? [ 303.435993][ T5887] gs_usb 8-1:0.0: Required endpoints not found [ 303.675274][ T5887] usb 8-1: USB disconnect, device number 7 [ 303.889214][T10581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.193685][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.210534][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.225322][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.250816][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.263385][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.272366][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.288347][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.297533][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.305660][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.327142][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.345826][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.357691][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.383391][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.421776][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.440594][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.474938][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.504377][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.547909][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.555830][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.588070][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.595907][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.677377][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.714598][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.745323][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.776826][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.817336][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.845345][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.857325][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.874697][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: unknown main item tag 0x0 [ 304.902250][ T5887] hid-generic 0000:007F:FFFFFFFE.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.052845][T10617] fido_id[10617]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 307.016686][T10660] syzkaller0: entered promiscuous mode [ 307.047519][T10660] syzkaller0: entered allmulticast mode [ 311.409845][T10726] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1435'. [ 313.627958][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 313.787883][ T10] usb 10-1: Using ep0 maxpacket: 16 [ 313.796476][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 313.823829][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.850139][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.869333][ T10] usb 10-1: Product: syz [ 313.873716][ T10] usb 10-1: Manufacturer: syz [ 313.887074][ T10] usb 10-1: SerialNumber: syz [ 313.905633][ T10] usb 10-1: config 0 descriptor?? [ 313.915990][ T10] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 313.942663][ T10] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 314.519811][ T10] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 314.626529][T10802] bridge_slave_0: default FDB implementation only supports local addresses [ 315.387441][ T10] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 315.623716][ T10] em28xx 10-1:0.0: board has no eeprom [ 315.767941][ T10] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 315.867928][ T10] em28xx 10-1:0.0: dvb set to bulk mode. [ 315.899610][ T9126] em28xx 10-1:0.0: Binding DVB extension [ 315.976678][ T10] usb 10-1: USB disconnect, device number 7 [ 316.015206][ T10] em28xx 10-1:0.0: Disconnecting em28xx [ 316.136016][ T9126] em28xx 10-1:0.0: Registering input extension [ 316.158865][ T10] em28xx 10-1:0.0: Closing input extension [ 316.241775][ T10] em28xx 10-1:0.0: Freeing device [ 316.444815][T10833] KVM: debugfs: duplicate directory 10833-4 [ 317.162407][T10858] netlink: 'syz.8.1467': attribute type 13 has an invalid length. [ 317.263986][T10862] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1467'. [ 317.293166][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.308217][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.643729][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.652398][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.426764][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1472'. [ 318.487489][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1474'. [ 318.570355][T10858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.772117][T10858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.772196][T10858] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.794462][T10858] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.812616][T10858] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.840946][T10858] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.211965][T10915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.837970][T10952] input: syz1 as /devices/virtual/input/input25 [ 322.986474][ T8806] bond0: (slave syz_tun): Releasing backup interface [ 323.182810][T10685] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.222503][ T5877] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 323.339068][T10685] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.424995][T10685] slab kmalloc-512 start ffff88807ddd1c00 pointer offset 0 size 512 [ 323.434038][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.438969][T10685] list_del corruption. next->prev should be ffff888052c92000, but was ffffffff99d1d880. (next=ffff88807ddd1c00) [ 323.459046][T10685] ------------[ cut here ]------------ [ 323.465962][T10685] kernel BUG at lib/list_debug.c:67! [ 323.472039][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.472091][ T5877] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 323.472115][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.475316][ T5877] usb 3-1: config 0 descriptor?? [ 323.492460][T10685] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 323.510880][T10685] CPU: 1 UID: 0 PID: 10685 Comm: kworker/u8:9 Not tainted 6.15.0-rc7-syzkaller-00112-geccf6f2f6ab9 #0 PREEMPT(full) [ 323.523125][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.533278][T10685] Workqueue: netns cleanup_net [ 323.538083][T10685] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 323.545136][T10685] Code: 8c 34 43 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 2d 06 63 fd 49 8b 56 08 48 c7 c7 60 fb c1 8b 48 89 de 4c 89 f1 e8 97 aa 68 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.564785][T10685] RSP: 0018:ffffc9000cae7760 EFLAGS: 00010246 [ 323.570882][T10685] RAX: 000000000000006d RBX: ffff888052c92000 RCX: fca4a711a0d87c00 [ 323.578888][T10685] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 323.589866][T10685] RBP: 0000000000000000 R08: ffffc9000cae7447 R09: 1ffff9200195ce88 [ 323.597868][T10685] R10: dffffc0000000000 R11: fffff5200195ce89 R12: 1ffff1100fbba381 [ 323.606845][T10685] R13: dffffc0000000000 R14: ffff88807ddd1c00 R15: ffff88807ddd1c08 [ 323.614833][T10685] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 323.623765][T10685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.630347][T10685] CR2: 00007f25f9223368 CR3: 000000005fffe000 CR4: 00000000003526f0 [ 323.638409][T10685] Call Trace: [ 323.641707][T10685] [ 323.644640][T10685] __nsim_dev_port_del+0x24/0x1b0 [ 323.649672][T10685] nsim_dev_reload_destroy+0x288/0x490 [ 323.655146][T10685] nsim_dev_reload_down+0x8a/0xc0 [ 323.660171][T10685] devlink_reload+0x1b3/0x8d0 [ 323.664859][T10685] ? xa_get_mark+0x67/0x7b0 [ 323.669373][T10685] ? __pfx_devlink_reload+0x10/0x10 [ 323.674584][T10685] ? xa_get_mark+0x70f/0x7b0 [ 323.679192][T10685] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 323.684661][T10685] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 323.690653][T10685] ? class_remove_file_ns+0x121/0x160 [ 323.696054][T10685] cleanup_net+0x594/0xbd0 [ 323.700481][T10685] ? __pfx_cleanup_net+0x10/0x10 [ 323.705434][T10685] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.710646][T10685] ? process_scheduled_works+0x9ec/0x17a0 [ 323.716367][T10685] ? process_scheduled_works+0x9ec/0x17a0 [ 323.722100][T10685] process_scheduled_works+0xadb/0x17a0 [ 323.727658][T10685] ? __pfx_process_scheduled_works+0x10/0x10 [ 323.733653][T10685] worker_thread+0x8a0/0xda0 [ 323.738251][T10685] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 323.744589][T10685] ? __kthread_parkme+0x7b/0x200 [ 323.749534][T10685] kthread+0x70e/0x8a0 [ 323.753612][T10685] ? __pfx_worker_thread+0x10/0x10 [ 323.758729][T10685] ? __pfx_kthread+0x10/0x10 [ 323.763324][T10685] ? __pfx_kthread+0x10/0x10 [ 323.767916][T10685] ? _raw_spin_unlock_irq+0x23/0x50 [ 323.773203][T10685] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.778416][T10685] ? __pfx_kthread+0x10/0x10 [ 323.783013][T10685] ret_from_fork+0x4b/0x80 [ 323.787432][T10685] ? __pfx_kthread+0x10/0x10 [ 323.792028][T10685] ret_from_fork_asm+0x1a/0x30 [ 323.796803][T10685] [ 323.799826][T10685] Modules linked in: [ 323.805144][T10685] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to send rpc fd=3 want=336 sent=0 n=-1 (errno 32: Broken pipe) [ 323.833979][T10685] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 323.844531][T10685] Code: 8c 34 43 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 2d 06 63 fd 49 8b 56 08 48 c7 c7 60 fb c1 8b 48 89 de 4c 89 f1 e8 97 aa 68 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.869799][T10685] RSP: 0018:ffffc9000cae7760 EFLAGS: 00010246 [ 323.947510][T10685] RAX: 000000000000006d RBX: ffff888052c92000 RCX: fca4a711a0d87c00 [ 324.025880][T10685] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 324.065191][T10685] RBP: 0000000000000000 R08: ffffc9000cae7447 R09: 1ffff9200195ce88 [ 324.129979][T10685] R10: dffffc0000000000 R11: fffff5200195ce89 R12: 1ffff1100fbba381 [ 324.146159][T10685] R13: dffffc0000000000 R14: ffff88807ddd1c00 R15: ffff88807ddd1c08 [ 324.168093][T10685] FS: 0000000000000000(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 324.177186][T10685] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.247938][T10685] CR2: 00007f41d42e7d60 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 324.256113][T10685] Kernel panic - not syncing: Fatal exception [ 324.262501][T10685] Kernel Offset: disabled [ 324.266830][T10685] Rebooting in 86400 seconds..