last executing test programs: 15m2.252681494s ago: executing program 4 (id=1673): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 15m2.011184874s ago: executing program 4 (id=1678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15m0.755873122s ago: executing program 4 (id=1684): socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 15m0.43931312s ago: executing program 4 (id=1686): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 15m0.191117042s ago: executing program 4 (id=1688): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000380)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0b8789cd920e9d255229b77b4ea22feb573959197038a3e", 0xa2}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "a0b08e74ddf43e6b", "8000964ef0ac0014c4fa16f6270397fb", '\x00\x00\b\x00', "000000008000"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) 14m58.872065717s ago: executing program 4 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 14m58.353112492s ago: executing program 32 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0xe02}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 10m50.329831341s ago: executing program 2 (id=2728): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05f05a0cc0"], 0x8) keyctl$set_timeout(0xf, 0x0, 0x81) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000000c0), 0x39b, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000001100)={0x0, 0x989680}, 0x1) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, &(0x7f00000003c0)={0x20, 0x8, 0x2, {0x2, 0x9}}, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x2, 0x7, 0x3, "0aa707af", "49c4a0fa"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x18, 0x7, 0x8, 0x81, 0xffff, 0x3}}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x733}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}}, 0x0) 10m47.393800557s ago: executing program 2 (id=2733): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x32, 0x0, &(0x7f0000000400)=[@increfs], 0xfffffcb0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) openat$binder_debug(0xffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000440)=[{&(0x7f0000000cc0)="aac84dd7bfeccc2fcdc1aa2f2377151420826b16", 0x14}], 0x1, 0x6) r5 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c000000000085"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r5, 0x0, 0x8000, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0xfffffef8, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48}) r7 = gettid() add_key$user(0x0, &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) ioctl$SG_BLKTRACESETUP(r2, 0xc0401273, &(0x7f00000002c0)={'\x00', 0x1, 0x4, 0x1, 0x0, 0x40b, r7}) sendmsg$nl_route(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=@ipv6_getrule={0x1c, 0x22, 0x200, 0x70bd25, 0x25dfdbfe, {0xa, 0x10, 0x14, 0x0, 0x4}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x404c861) 10m47.13068476s ago: executing program 2 (id=2735): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x68}, 0x1, 0x7}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x4) r8 = openat$cgroup_ro(r7, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 10m45.540528349s ago: executing program 2 (id=2737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@index_off}]}) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') linkat(r5, &(0x7f0000000040)='./file1\x00', r5, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') 10m44.086050115s ago: executing program 2 (id=2744): r0 = socket$kcm(0x21, 0x2, 0x2) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000680)}], 0x1) r2 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x1, 0x6, 0x4, 0xe, 0x2, 0x7bf}) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311a400000000410c00000002000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) recvfrom$unix(r2, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r5, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) close(r5) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 10m42.437950671s ago: executing program 2 (id=2750): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x200000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000240)=0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000340)={0xfffffffc, 0x4, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1, 0x7ff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 10m24.188709755s ago: executing program 33 (id=2750): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x200000000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000240)=0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000340)={0xfffffffc, 0x4, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/188, 0xbc}], 0x1, 0x7ff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) socket$kcm(0x2d, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}}, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) 10m23.979033159s ago: executing program 1 (id=2765): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) io_uring_enter(r4, 0x40f9, 0x217, 0xa5, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 10m21.04548819s ago: executing program 1 (id=2769): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r6 = io_uring_setup(0x513d, &(0x7f0000000180)={0x0, 0x49d3, 0x4, 0x3, 0x1a7, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES2(r6, 0xd, &(0x7f00000007c0)={0x7, 0x1, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=""/7, 0x7}, {&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000000340)=""/114, 0x72}, {&(0x7f0000000500)=""/2, 0x2}], 0x0}, 0x20) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a300000000008004100736977001400"/56], 0x38}, 0x1, 0x0, 0x0, 0x408d4}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003240)=@nat={'nat\x00', 0x1b, 0x5, 0x568, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x0, 0x4e4, 0x4e4, 0xffffffff, 0x4e4, 0x4e4, 0x5, &(0x7f0000000900), {[{{@uncond, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x8, @local, @broadcast, @icmp_id=0x67, @gre_key=0xe72f}}}}, {{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="93c4e9272298", 0x5a18, 0xb, [0x17, 0x1b, 0x1, 0x6, 0x2f, 0x13, 0x17, 0x13, 0x30, 0x11, 0x1, 0x32, 0x2a, 0x3f, 0x29, 0x20], 0x1, 0x0, 0x6}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x12}, 0xff, 0xff000000, 'pim6reg\x00', 'veth1_vlan\x00', {0xff}, {}, 0x5c, 0x0, 0x20}, 0x0, 0x208, 0x240, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff], @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, [0x0, 0xffffff00, 0xff], 0x4d5, 0x34ff, 0x8, 0x1, 0x10, 0x14}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff, 0xff], @ipv6=@private2, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4d4, 0x3500, 0x3c, 0x1, 0x5, 0x6}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0xffffffff, 0xff, 0xff], @ipv6=@empty, [0xff000000, 0xffffff00], 0x4d6, 0x3503, 0x2f, 0x1, 0xf, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@empty, [0xff, 0xffff00], 0x4d6, 0x3502, 0x8, 0x1, 0x2, 0xc}], 0x4}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffff00, 0xff], 0xfffffff5, 0x6}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x12, @multicast1, @multicast1, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@local, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'pimreg\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x4, 0x1, 0x8}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv4=@rand_addr=0x64010100, @ipv6=@remote, @port=0x4e20, @port=0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x404, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000140)={0xf0f045}) ppoll(&(0x7f0000000080)=[{r8, 0x2046}], 0x1, 0x0, 0x0, 0x0) 10m11.786967992s ago: executing program 1 (id=2782): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x729503, 0x187) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1a3081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, 0x0) shutdown(r2, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r4, 0x0, 0xffffffff004) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(r5, &(0x7f0000000800)='-', 0x1, 0x240080d0, &(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 10m7.102373898s ago: executing program 1 (id=2785): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x13, r1, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f000009df00)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff, 0x1}, 0x20) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}, 0x0, 0x400, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2000000}, 0x1c) shutdown(r6, 0x1) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x0, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9m59.457231003s ago: executing program 1 (id=2803): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000ea0300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m56.769085712s ago: executing program 1 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700a1df000004000030d78eea3632b2b500205acf6a83077c000000e5e9a81a6aca15ca195672adbcf58056208a35abfa2c216b8f46d0e8d6b561ba9365120c331da8435fa772afb15d0cbf896d258b832714a2bce61bab90cc5d9f110edd645c99f830d663a776791df5eab952133aa2b9caeb0ce55e2ac2ade6ac3254fb3b85a77596b1bedc231df6cf9faa00be8011947a1f84b831abc390aec85ae246667d789b96ea0d30e6c4593cc4c85068897a752b0d2bcf9222b322ee998f2c6194229b14beb094e8ceab5af261", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40048c6) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000f80)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x500, 0x4000000, @loopback, 0x9, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x80006e2, 0x60080) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018120000", @ANYRES32=r0, @ANYBLOB="0000000000000007b703000000000000850000001b000000b700000000000000850000007d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 9m41.679353369s ago: executing program 34 (id=2807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700a1df000004000030d78eea3632b2b500205acf6a83077c000000e5e9a81a6aca15ca195672adbcf58056208a35abfa2c216b8f46d0e8d6b561ba9365120c331da8435fa772afb15d0cbf896d258b832714a2bce61bab90cc5d9f110edd645c99f830d663a776791df5eab952133aa2b9caeb0ce55e2ac2ade6ac3254fb3b85a77596b1bedc231df6cf9faa00be8011947a1f84b831abc390aec85ae246667d789b96ea0d30e6c4593cc4c85068897a752b0d2bcf9222b322ee998f2c6194229b14beb094e8ceab5af261", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40048c6) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000f80)=[{{&(0x7f0000000300)=@l2tp6={0xa, 0x500, 0x4000000, @loopback, 0x9, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) syz_open_dev$usbmon(0x0, 0x80006e2, 0x60080) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x180, 0x400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r6, 0xae80, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000100008018120000", @ANYRES32=r0, @ANYBLOB="0000000000000007b703000000000000850000001b000000b700000000000000850000007d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x18) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 7m50.40404022s ago: executing program 7 (id=4218): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 7m50.207169081s ago: executing program 7 (id=4224): unshare(0x400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000b"], 0x0, 0x5a}, 0x20) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0082010105000000852000000400000000000000000300000000000000000000184100000004000000000000000000009500000000000000950000000000000014583000ffffffff18160000", @ANYRES32=r0, @ANYBLOB="000000000000000045abffff00000000183800000400"/32], &(0x7f0000000580)='syzkaller\x00', 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r0, r0, r0, r0, 0xffffffffffffffff, r0], 0x0, 0x10, 0xfffffffe}, 0xc3) 7m49.270502007s ago: executing program 7 (id=4244): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffc}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 7m49.184013547s ago: executing program 7 (id=4246): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5808, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 7m49.051265428s ago: executing program 7 (id=4248): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 7m48.125057951s ago: executing program 7 (id=4264): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 7m47.801570111s ago: executing program 35 (id=4264): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 39.665418122s ago: executing program 5 (id=6630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) madvise(&(0x7f000035d000/0x1000)=nil, 0x1000, 0xf) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_set_self_attr(0x64, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 38.809502461s ago: executing program 5 (id=6633): signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) r3 = dup(r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000014c0)={'syztnl2\x00', 0x0}) 30.202796592s ago: executing program 5 (id=6662): creat(0x0, 0x6a) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x0, 0xffffffff, {0x0, 0x9, 0x0, 0x0, {0x4e25, 0x100, [0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x4], 0x0, [0x1]}, 0xf0fffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "88000000"}]}, 0x54}}, 0x40000) 29.408471921s ago: executing program 5 (id=6664): socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000440)='./file0\x00', 0x40, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0600000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000000081", @ANYRES32=0x0, @ANYRES32], 0x50) 28.718958577s ago: executing program 5 (id=6666): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000dc0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3, "95a77f", 0x2b5, 0xa}]}}}, 0x12) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) 27.225598827s ago: executing program 5 (id=6669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg1\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={0x0, 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000087, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) 20.162542314s ago: executing program 3 (id=6686): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000dc0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3, "95a77f", 0x2b5, 0xa}]}}}, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40440c4) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x48) 16.759494296s ago: executing program 3 (id=6692): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000700)={0x0, 0x1, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x49d, 0xc000000, 0x0, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) 15.833849941s ago: executing program 8 (id=6695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) gettid() bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) 13.984872874s ago: executing program 8 (id=6698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg1\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={0x0, 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000087, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) 11.720133345s ago: executing program 36 (id=6669): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)) getsockname$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg1\x00'}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380), 0xc, &(0x7f0000000580)={0x0, 0x198}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x2000000000000087, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) close(r2) 10.724750872s ago: executing program 8 (id=6703): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r1, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000dc0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3, "95a77f", 0x2b5, 0xa}]}}}, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40440c4) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x2}, 0x48) 10.683066386s ago: executing program 6 (id=6704): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000a40)=""/4096) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) 9.243181048s ago: executing program 6 (id=6706): gettid() mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) chroot(&(0x7f0000000480)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008080}}, {{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x2, 0x4) 9.136301477s ago: executing program 8 (id=6707): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x2, 0x2) preadv2(r3, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000dc0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3, "95a77f", 0x2b5, 0xa}]}}}, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40440c4) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) 7.895361206s ago: executing program 8 (id=6710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) r4 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)) 7.827779304s ago: executing program 3 (id=6711): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe2(0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000700)={0x0, 0x1, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)="352f1938d141676d9b6c59065f664735c08b9d697a645f85b19ba9030648cd046d1f26aad0196458046b81", 0xfffffffffffffe08, 0xebec93e830f96115}) io_uring_enter(r2, 0x49d, 0xc000000, 0x0, 0x0, 0x0) shutdown(r5, 0x1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) 6.286128408s ago: executing program 8 (id=6714): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000140)='/dev/hwrng\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setpgid(0x0, 0x0) 5.100779044s ago: executing program 6 (id=6718): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.805018045s ago: executing program 3 (id=6720): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000180), 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r3, r4}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') 3.214578521s ago: executing program 6 (id=6722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r4, 0x29, 0x39, 0x0, &(0x7f0000000080)) 3.205573513s ago: executing program 3 (id=6723): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) 1.781711552s ago: executing program 6 (id=6726): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 1.657929853s ago: executing program 3 (id=6727): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r1 = syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 1.509708242s ago: executing program 0 (id=6729): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.45788074s ago: executing program 0 (id=6730): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) setpgid(0x0, 0x0) 1.350686303s ago: executing program 0 (id=6731): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 375.705408ms ago: executing program 0 (id=6732): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000180), 0x0, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r4, r3, r4}, &(0x7f0000000700)=""/259, 0x103, &(0x7f0000000400)={&(0x7f0000000100)={'streebog256-generic\x00'}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') open_tree(r5, &(0x7f0000000280)='\x00', 0x89901) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340), 0x0) 218.433952ms ago: executing program 6 (id=6733): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0) r1 = syz_io_uring_setup(0xbdc, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 58.852733ms ago: executing program 0 (id=6734): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) timer_create(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) 0s ago: executing program 0 (id=6735): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xb, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 650.480977][T13042] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 650.481002][T13042] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 650.481028][T13042] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 650.592559][T13042] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 650.750394][T13042] usb 6-1: USB disconnect, device number 7 [ 651.405790][T13530] hsr_slave_0: entered promiscuous mode [ 651.407063][T13530] hsr_slave_1: entered promiscuous mode [ 651.421802][T13530] debugfs: 'hsr0' already exists in 'hsr' [ 651.421829][T13530] Cannot create hsr debugfs directory [ 652.604950][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3340'. [ 652.803997][T13229] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 652.866039][T13229] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 653.073027][T13229] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 653.142063][T13229] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 653.874830][T13530] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 653.915698][T13530] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 654.037134][T13530] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 654.076362][T13530] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 654.149766][T14354] dvmrp17: entered allmulticast mode [ 654.189201][T13229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.195445][T14359] dvmrp17: left allmulticast mode [ 654.278257][ T5892] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 654.438793][ T5892] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 654.438818][ T5892] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 654.438837][ T5892] usb 6-1: config 0 has no interface number 0 [ 654.438882][ T5892] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 654.438903][ T5892] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 654.438939][ T5892] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 654.438961][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.486156][T13229] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.521539][ T5892] usb 6-1: config 0 descriptor?? [ 654.525790][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.530840][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.591422][T11547] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.591812][T11547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.093026][T13530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.188374][ T5892] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.21/input/input28 [ 655.317531][T13530] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.342284][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.342763][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.391600][ T6377] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.391822][ T6377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.365438][ T5892] input: failed to attach handler kbd to device input28, error: -5 [ 656.398537][ T5892] usb 6-1: USB disconnect, device number 8 [ 656.677810][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.392882][T13530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.186238][T13229] veth0_vlan: entered promiscuous mode [ 658.243727][T13229] veth1_vlan: entered promiscuous mode [ 658.379698][T13229] veth0_macvtap: entered promiscuous mode [ 658.419895][T13229] veth1_macvtap: entered promiscuous mode [ 658.530686][T13229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.595787][T13229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.637524][ T6375] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.642458][ T6377] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.666179][ T6377] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.666971][ T6377] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.101256][T14447] bridge0: entered promiscuous mode [ 659.105994][T14447] vlan2: entered promiscuous mode [ 659.544602][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.544622][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.605414][T13530] veth0_vlan: entered promiscuous mode [ 659.709048][T13530] veth1_vlan: entered promiscuous mode [ 659.724974][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.724994][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.768272][T13042] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 659.889559][T13530] veth0_macvtap: entered promiscuous mode [ 659.909903][T13530] veth1_macvtap: entered promiscuous mode [ 659.918271][T13042] usb 4-1: Using ep0 maxpacket: 32 [ 659.931314][T13042] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 659.931341][T13042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.936460][T13042] usb 4-1: config 0 descriptor?? [ 659.975602][T13530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.011910][T13530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.077393][ T1024] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.098293][ T1024] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.102630][ T6377] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.103773][ T6377] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.145215][T13042] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 660.159887][T13042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 660.160947][T13042] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 660.160999][T13042] usb 4-1: media controller created [ 660.228327][T13042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 660.353856][T13042] az6027: usb out operation failed. (-71) [ 660.366197][T13042] az6027: usb out operation failed. (-71) [ 660.366216][T13042] stb0899_attach: Driver disabled by Kconfig [ 660.366225][T13042] az6027: no front-end attached [ 660.366225][T13042] [ 660.366650][T13042] az6027: usb out operation failed. (-71) [ 660.366663][T13042] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 660.402980][T13042] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 660.421256][T13042] dvb-usb: schedule remote query interval to 400 msecs. [ 660.421278][T13042] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 660.424095][T13042] usb 4-1: USB disconnect, device number 24 [ 661.705302][T13042] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 661.907779][ T1024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.907799][ T1024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.122502][ T6377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.122521][ T6377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.508669][T14520] Invalid ELF header magic: != ELF [ 664.622475][T14523] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3428'. [ 664.682899][T14525] netlink: 'syz.5.3429': attribute type 11 has an invalid length. [ 664.821477][T14529] sctp: [Deprecated]: syz.3.3431 (pid 14529) Use of int in maxseg socket option. [ 664.821477][T14529] Use struct sctp_assoc_value instead [ 666.281559][T14580] tipc: Resetting bearer [ 666.841785][T14580] tipc: Disabling bearer [ 667.648663][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 668.088352][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 668.090732][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 668.090764][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 668.090787][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 668.090809][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.090850][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.090871][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.203839][T14652] sg_read: process 27 (syz.7.3488) changed security contexts after opening file descriptor, this is not allowed. [ 668.393704][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 668.393749][ T9] usbtmc 6-1:16.0: can't read capabilities [ 668.609953][ T5896] usb 6-1: USB disconnect, device number 9 [ 668.731213][T14667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 668.748867][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 668.900644][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.900675][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 668.900699][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 668.900719][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 668.900758][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.900779][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.927274][ T9] usb 4-1: config 0 descriptor?? [ 669.272558][T14697] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 669.367417][ T9] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 669.407569][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 670.048416][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 670.216058][ T9] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 670.216086][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.236023][ T9] usb 8-1: config 0 descriptor?? [ 670.244858][ T9] cp210x 8-1:0.0: cp210x converter detected [ 670.644765][ T9] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 670.668670][ T9] usb 8-1: cp210x converter now attached to ttyUSB0 [ 670.676220][T14739] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 670.677461][T14739] macsec1: entered promiscuous mode [ 670.677697][T14739] macsec1: entered allmulticast mode [ 670.677713][T14739] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 670.850427][ T9] usb 8-1: USB disconnect, device number 2 [ 670.865360][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 670.999081][ T9] cp210x 8-1:0.0: device disconnected [ 671.228917][ T31] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 671.379708][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 671.382365][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.382388][ T31] usb 6-1: config 0 has no interfaces? [ 671.385321][ T31] usb 6-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=79.ba [ 671.385345][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.385363][ T31] usb 6-1: Product: syz [ 671.385375][ T31] usb 6-1: Manufacturer: syz [ 671.385387][ T31] usb 6-1: SerialNumber: syz [ 671.398387][ T5902] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 671.455365][ T31] usb 6-1: config 0 descriptor?? [ 671.550932][ T5902] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 671.550957][ T5902] usb 7-1: config 0 has no interface number 0 [ 671.551008][ T5902] usb 7-1: config 0 interface 41 has no altsetting 0 [ 671.554004][ T5902] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 671.554030][ T5902] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.554048][ T5902] usb 7-1: Product: syz [ 671.554061][ T5902] usb 7-1: Manufacturer: syz [ 671.554073][ T5902] usb 7-1: SerialNumber: syz [ 671.569363][ T5902] usb 7-1: config 0 descriptor?? [ 671.711084][ T31] usb 6-1: USB disconnect, device number 10 [ 671.724444][ T988] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 671.932603][ T988] usb 4-1: device firmware changed [ 671.966580][ T5896] usb 4-1: USB disconnect, device number 25 [ 672.148277][ T5896] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 672.313387][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.313413][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 672.314821][ T5896] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 672.314846][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 672.314863][ T5896] usb 4-1: SerialNumber: syz [ 672.592490][ T5896] usb 4-1: 0:2 : does not exist [ 672.603097][ T5902] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 672.623827][ T5902] usb 7-1: USB disconnect, device number 2 [ 672.699507][ T5896] usb 4-1: USB disconnect, device number 26 [ 674.466791][T14889] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000003 [ 674.500859][T14892] netlink: 'syz.7.3600': attribute type 1 has an invalid length. [ 674.693762][T14901] syzkaller1: entered promiscuous mode [ 674.693787][T14901] syzkaller1: entered allmulticast mode [ 674.919494][ T5896] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 675.071327][ T5896] usb 7-1: unable to get BOS descriptor or descriptor too short [ 675.073506][ T5896] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 675.073566][ T5896] usb 7-1: config 1 interface 0 altsetting 195 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 675.073592][ T5896] usb 7-1: config 1 interface 0 has no altsetting 0 [ 675.121901][ T5896] usb 7-1: string descriptor 0 read error: -22 [ 675.122054][ T5896] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 675.122076][ T5896] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.168525][ T5896] cdc_ether 7-1:1.0: skipping garbage [ 675.168545][ T5896] usb 7-1: bad CDC descriptors [ 675.412988][ T31] usb 7-1: USB disconnect, device number 3 [ 675.824710][T14949] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.3627'. [ 677.024726][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3656'. [ 677.072271][ T37] audit: type=1326 audit(1759360398.454:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15006 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 677.073388][ T37] audit: type=1326 audit(1759360398.454:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15006 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 677.073848][ T37] audit: type=1326 audit(1759360398.454:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15006 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 677.074523][ T37] audit: type=1326 audit(1759360398.454:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15006 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 677.077896][ T37] audit: type=1326 audit(1759360398.454:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15006 comm="syz.6.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 677.249173][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 677.400537][ T31] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 677.400581][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 677.403332][ T31] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 677.403359][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.403376][ T31] usb 8-1: Product: syz [ 677.403389][ T31] usb 8-1: Manufacturer: syz [ 677.403401][ T31] usb 8-1: SerialNumber: syz [ 677.479412][ T31] usb 8-1: config 0 descriptor?? [ 677.484368][ T31] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 677.519689][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 677.520627][ T31] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 677.520690][ T31] usb 8-1: media controller created [ 677.574861][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 677.680534][ T31] DVB: Unable to find symbol tda10046_attach() [ 677.680550][ T31] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 677.680563][ T31] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 677.962722][T15039] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 678.518091][ T31] dvb_usb_m920x 8-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 678.547392][ T31] usb 8-1: USB disconnect, device number 3 [ 678.917489][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3686'. [ 679.368330][ T975] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 679.547308][ T975] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 679.547339][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.547357][ T975] usb 6-1: Product: syz [ 679.547370][ T975] usb 6-1: Manufacturer: syz [ 679.547383][ T975] usb 6-1: SerialNumber: syz [ 680.626599][ T975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 680.626655][ T975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 680.666467][ T975] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 680.952226][ T975] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 681.005757][ T975] usb 6-1: USB disconnect, device number 11 [ 681.398348][ T5892] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 681.570835][ T5892] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 681.570862][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.576243][ T5892] usb 7-1: config 0 descriptor?? [ 681.602769][ T5892] cp210x 7-1:0.0: cp210x converter detected [ 681.986736][ T37] audit: type=1326 audit(1759360403.364:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15149 comm="syz.6.3721" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x0 [ 682.088601][ T5892] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 683.049380][T15194] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.055955][T15194] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.517776][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3748'. [ 684.039626][T15194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 684.054964][T15194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 684.163009][ T5892] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 684.163036][ T5892] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 684.190620][ T5892] usb 7-1: cp210x converter now attached to ttyUSB0 [ 684.193440][ T5892] usb 7-1: USB disconnect, device number 4 [ 684.220029][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 684.220505][ T5892] cp210x 7-1:0.0: device disconnected [ 684.981520][ T37] audit: type=1326 audit(1759360406.364:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.981814][ T37] audit: type=1326 audit(1759360406.364:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.982527][ T37] audit: type=1326 audit(1759360406.364:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.985526][ T37] audit: type=1326 audit(1759360406.364:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.986161][ T37] audit: type=1326 audit(1759360406.364:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.986513][ T37] audit: type=1326 audit(1759360406.364:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.986905][ T37] audit: type=1326 audit(1759360406.364:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.987322][ T37] audit: type=1326 audit(1759360406.364:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 684.987825][ T37] audit: type=1326 audit(1759360406.364:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 685.009905][ T37] audit: type=1326 audit(1759360406.364:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15263 comm="syz.6.3773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 685.360891][T15272] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3777'. [ 685.624812][T15284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 685.695676][ T5956] lo speed is unknown, defaulting to 1000 [ 685.695933][ T5956] syz0: Port: 1 Link DOWN [ 685.881405][ T6375] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.883995][ T6375] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.884116][ T6375] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.884148][ T6375] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.897314][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.897383][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.347644][ T1932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.347662][ T1932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.699526][T15317] bridge0: entered allmulticast mode [ 686.700335][T15317] bridge0: left allmulticast mode [ 687.001733][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 687.001756][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3803'. [ 687.001788][T15328] netlink: 'syz.5.3803': attribute type 7 has an invalid length. [ 687.015642][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3803'. [ 687.015664][T15328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3803'. [ 687.015688][T15328] netlink: 'syz.5.3803': attribute type 7 has an invalid length. [ 687.022739][ T6382] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.033518][T11547] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.033561][T11547] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.033593][T11547] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 687.470227][T15347] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 687.470254][T15347] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 687.470344][T15347] vhci_hcd vhci_hcd.0: Device attached [ 687.477354][T15347] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 687.477379][T15347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 687.477477][T15347] vhci_hcd vhci_hcd.0: Device attached [ 687.540154][T15347] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 687.540181][T15347] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 687.540231][T15347] vhci_hcd vhci_hcd.0: Device attached [ 687.550637][T15347] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 687.550663][T15347] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 687.551146][T15347] vhci_hcd vhci_hcd.0: Device attached [ 687.592378][T15356] vhci_hcd: connection closed [ 687.592703][T15353] vhci_hcd: connection closed [ 687.592839][T15351] vhci_hcd: connection closed [ 687.598680][ T6375] vhci_hcd: stop threads [ 687.598697][ T6375] vhci_hcd: release socket [ 687.598773][ T6375] vhci_hcd: disconnect device [ 687.606343][ T6375] vhci_hcd: stop threads [ 687.606354][ T6375] vhci_hcd: release socket [ 687.606417][ T6375] vhci_hcd: disconnect device [ 687.608546][ T6375] vhci_hcd: stop threads [ 687.608557][ T6375] vhci_hcd: release socket [ 687.608623][ T6375] vhci_hcd: disconnect device [ 687.648397][ T5892] vhci_hcd: vhci_device speed not set [ 687.709253][T15358] vhci_hcd: connection closed [ 687.712649][ T6386] vhci_hcd: stop threads [ 687.712666][ T6386] vhci_hcd: release socket [ 687.712734][ T6386] vhci_hcd: disconnect device [ 688.628456][ T975] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 688.796320][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 688.808379][ T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.808404][ T975] usb 4-1: config 0 has no interfaces? [ 688.836762][ T975] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 688.836790][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.836808][ T975] usb 4-1: Product: syz [ 688.836822][ T975] usb 4-1: Manufacturer: syz [ 688.836835][ T975] usb 4-1: SerialNumber: syz [ 688.879554][ T975] usb 4-1: config 0 descriptor?? [ 689.000923][T15398] netlink: 'syz.5.3831': attribute type 29 has an invalid length. [ 689.002091][T15398] netlink: 'syz.5.3831': attribute type 29 has an invalid length. [ 689.003181][T15398] netlink: 500 bytes leftover after parsing attributes in process `syz.5.3831'. [ 689.099485][ T5892] usb 4-1: USB disconnect, device number 27 [ 689.735003][T15435] netlink: 'syz.3.3848': attribute type 9 has an invalid length. [ 689.930208][T15443] sctp: [Deprecated]: syz.5.3853 (pid 15443) Use of int in max_burst socket option. [ 689.930208][T15443] Use struct sctp_assoc_value instead [ 690.308375][ T988] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 690.470492][ T988] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 690.470522][ T988] usb 7-1: config 0 interface 0 has no altsetting 0 [ 690.473615][ T988] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.473640][ T988] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.473658][ T988] usb 7-1: Product: syz [ 690.473670][ T988] usb 7-1: Manufacturer: syz [ 690.473683][ T988] usb 7-1: SerialNumber: syz [ 690.490219][ T988] usb 7-1: config 0 descriptor?? [ 690.533199][ T988] usb 7-1: selecting invalid altsetting 0 [ 690.743499][ T988] usb 7-1: USB disconnect, device number 5 [ 691.808311][T15497] netlink: 14528 bytes leftover after parsing attributes in process `syz.7.3874'. [ 692.443335][T15512] Bluetooth: MGMT ver 1.23 [ 692.891920][T15528] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 692.891920][T15528] The task syz.7.3888 (15528) triggered the difference, watch for misbehavior. [ 693.618324][ T5892] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 693.781782][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.781830][ T5892] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 693.781851][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.788103][ T5892] usb 7-1: config 0 descriptor?? [ 694.047091][ T5892] usbhid 7-1:0.0: can't add hid device: -71 [ 694.047218][ T5892] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 694.073704][ T5892] usb 7-1: USB disconnect, device number 6 [ 694.127473][T15572] IPv4: Oversized IP packet from 172.20.20.24 [ 694.133728][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 694.134719][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 694.552662][ T5892] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 694.718383][ T5892] usb 7-1: Using ep0 maxpacket: 16 [ 694.721775][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.721826][ T5892] usb 7-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 694.721847][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.783021][ T5892] usb 7-1: config 0 descriptor?? [ 695.089711][ T5956] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 695.177883][T15603] batman_adv: batadv0: Adding interface: ip6gretap1 [ 695.177895][T15603] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.177911][T15603] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 695.194889][ T5892] kye 0003:0458:5016.0019: control desc unexpectedly large [ 695.253636][ T5892] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0019/input/input32 [ 695.254971][ T5956] usb 8-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51 [ 695.255004][ T5956] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.255023][ T5956] usb 8-1: Product: syz [ 695.255034][ T5956] usb 8-1: Manufacturer: syz [ 695.255047][ T5956] usb 8-1: SerialNumber: syz [ 695.310746][ T5956] usb 8-1: config 0 descriptor?? [ 695.313976][ T5892] input: HID 0458:5016 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5016.0019/input/input33 [ 695.337817][ T5956] rndis_host 8-1:0.0: More than one union descriptor, skipping ... [ 695.341689][ T5956] usb 8-1: bad CDC descriptors [ 695.359452][ T5956] cdc_acm 8-1:0.0: More than one union descriptor, skipping ... [ 695.398908][ T5892] kye 0003:0458:5016.0019: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.6-1/input0 [ 695.566718][ T5956] usb 8-1: USB disconnect, device number 4 [ 695.822132][ T5956] usb 7-1: USB disconnect, device number 7 [ 696.793844][T15655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3947'. [ 696.948376][ T988] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 697.098563][ T988] usb 8-1: Using ep0 maxpacket: 32 [ 697.101073][ T988] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 697.101098][ T988] usb 8-1: config 0 has no interface number 0 [ 697.101126][ T988] usb 8-1: config 0 interface 85 has no altsetting 0 [ 697.104189][ T988] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 697.104204][ T988] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.104214][ T988] usb 8-1: Product: syz [ 697.104221][ T988] usb 8-1: Manufacturer: syz [ 697.104228][ T988] usb 8-1: SerialNumber: syz [ 697.119146][ T988] usb 8-1: config 0 descriptor?? [ 697.188127][ T988] appletouch 8-1:0.85: Could not find int-in endpoint [ 697.194855][ T988] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 697.197583][ T988] usbhid 8-1:0.85: couldn't find an input interrupt endpoint [ 697.354474][ T988] usb 8-1: USB disconnect, device number 5 [ 697.729079][T15694] netlink: 'syz.3.3963': attribute type 58 has an invalid length. [ 698.310456][T15720] veth1_to_bond: entered allmulticast mode [ 698.741541][T15717] veth1_to_bond: left allmulticast mode [ 699.093613][T15745] ALSA: seq fatal error: cannot create timer (-16) [ 699.489453][ T5892] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 699.667799][ T5892] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 699.667827][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.667918][ T5892] usb 7-1: Product: syz [ 699.667931][ T5892] usb 7-1: Manufacturer: syz [ 699.667944][ T5892] usb 7-1: SerialNumber: syz [ 700.278275][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 700.432378][ T9] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 700.432411][ T9] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 700.432444][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 700.432463][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.487929][T15781] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 700.502271][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 700.738549][ T5896] usb 8-1: USB disconnect, device number 6 [ 700.939745][ T5892] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 700.939801][ T5892] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 700.958342][ T5892] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 701.004386][ T5892] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 701.016187][ T5892] usb 7-1: USB disconnect, device number 8 [ 701.119880][T15810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 701.121442][T15810] bridge0: port 3(bond1) entered blocking state [ 701.121690][T15810] bridge0: port 3(bond1) entered disabled state [ 701.121901][T15810] bond1: entered allmulticast mode [ 701.164619][T15810] bond1: entered promiscuous mode [ 701.185185][T15810] bridge0: port 3(bond1) entered blocking state [ 701.185365][T15810] bridge0: port 3(bond1) entered forwarding state [ 701.223691][ T1932] bridge0: port 3(bond1) entered disabled state [ 701.603981][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 701.603999][ T37] audit: type=1326 audit(1759360422.984:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.605029][ T37] audit: type=1326 audit(1759360422.984:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.605075][ T37] audit: type=1326 audit(1759360422.984:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.659688][ T37] audit: type=1326 audit(1759360423.044:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.660014][ T37] audit: type=1326 audit(1759360423.044:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.660391][ T37] audit: type=1326 audit(1759360423.044:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.660432][ T37] audit: type=1326 audit(1759360423.044:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.687766][ T37] audit: type=1326 audit(1759360423.054:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.687820][ T37] audit: type=1326 audit(1759360423.064:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.687858][ T37] audit: type=1326 audit(1759360423.064:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15837 comm="syz.6.4029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 701.836398][T12996] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 702.005700][T15852] loop2: detected capacity change from 0 to 7 [ 702.017595][T15852] loop2: p1 [ 702.017628][T15852] loop2: partition table partially beyond EOD, truncated [ 702.017736][T15852] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 702.373649][T15863] netlink: 'syz.6.4040': attribute type 1 has an invalid length. [ 702.505276][T15863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 702.562325][T15868] bond2: (slave gretap1): making interface the new active one [ 702.565028][T15868] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 704.680225][T15929] binder: 15927:15929 ioctl 4018620d 0 returned -22 [ 704.732461][T15931] binder: 15927:15931 ioctl c018620c 0 returned -14 [ 705.067911][T15948] loop2: detected capacity change from 0 to 7 [ 705.077456][T15948] loop2: [ 705.077486][T15948] loop2: partition table partially beyond EOD, truncated [ 706.446096][T16006] netlink: 'syz.7.4100': attribute type 10 has an invalid length. [ 706.480780][T16006] team0: Port device dummy0 added [ 706.486809][T16006] netlink: 'syz.7.4100': attribute type 10 has an invalid length. [ 706.492025][T16006] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 706.873285][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.244891][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.283074][T16014] sctp: [Deprecated]: syz.3.4102 (pid 16014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.283074][T16014] Use struct sctp_sack_info instead [ 707.309831][T16006] team0: Port device dummy0 removed [ 707.409929][T16006] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 707.565609][T16021] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4105'. [ 709.065403][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4123'. [ 709.390516][ T10] hid_parser_main: 5 callbacks suppressed [ 709.390539][ T10] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 709.390569][ T10] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 709.390595][ T10] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 709.390620][ T10] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 709.390645][ T10] hid-generic 0006:0004:0009.001A: unknown main item tag 0x0 [ 709.407911][ T10] hid-generic 0006:0004:0009.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 709.638604][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4134'. [ 709.858021][T16093] loop5: detected capacity change from 0 to 7 [ 709.874927][T16093] Dev loop5: unable to read RDB block 7 [ 709.874961][T16093] loop5: unable to read partition table [ 709.875097][T16093] loop5: partition table beyond EOD, truncated [ 709.875109][T16093] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 710.365702][T16097] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 711.662360][T16153] overlayfs: invalid redirect ((null)) [ 712.803752][T16192] binder: 16191:16192 ioctl c0306201 200000002800 returned -14 [ 713.338493][ T10] psmouse serio4: Failed to reset mouse on : -5 [ 717.051521][T16276] tipc: Enabled bearer , priority 10 [ 717.108323][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 718.161172][ T10] input: PS/2 Generic Mouse as /devices/serio4/input/input34 [ 718.390992][ T10] psmouse serio4: Failed to enable mouse on [ 719.078383][ T5892] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 719.240773][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.240804][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.240839][ T5892] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 719.240859][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.245988][ T5892] usb 7-1: config 0 descriptor?? [ 719.664058][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.664095][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.664122][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.664147][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.664174][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.664199][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.664225][ T5892] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 719.727730][ T5892] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 719.893171][ T5892] cp2112 0003:10C4:EA90.001B: Part Number: 0x00 Device Version: 0x00 [ 720.163426][ T1004] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.537557][ T5892] cp2112 0003:10C4:EA90.001B: error reading lock byte: -71 [ 720.565585][ T5892] usb 7-1: USB disconnect, device number 9 [ 720.569891][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 720.610118][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 720.616198][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 720.625536][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 720.627655][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 720.691819][ T1004] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.910897][T16399] lo speed is unknown, defaulting to 1000 [ 721.114091][ T1004] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.171176][T16411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 721.546421][ T1004] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.878309][ T975] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 722.038411][ T975] usb 4-1: Using ep0 maxpacket: 8 [ 722.040591][ T975] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 722.040616][ T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.047225][ T975] usb 4-1: config 0 descriptor?? [ 722.269467][ T975] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 722.319912][T16399] chnl_net:caif_netlink_parms(): no params data found [ 722.390717][ T1004] bridge_slave_1: left allmulticast mode [ 722.390744][ T1004] bridge_slave_1: left promiscuous mode [ 722.390972][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.481763][ T1004] bridge_slave_0: left allmulticast mode [ 722.481794][ T1004] bridge_slave_0: left promiscuous mode [ 722.482052][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.688448][ T5822] Bluetooth: hci0: command tx timeout [ 723.071288][T16461] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 723.083463][T16461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 723.890161][ T975] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 723.890430][ T975] asix 4-1:0.0: probe with driver asix failed with error -71 [ 723.937062][ T975] usb 4-1: USB disconnect, device number 28 [ 723.954989][T16485] netlink: 'syz.5.4312': attribute type 10 has an invalid length. [ 724.773681][ T5822] Bluetooth: hci0: command tx timeout [ 726.850191][ T5822] Bluetooth: hci0: command tx timeout [ 727.619972][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.734957][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 727.948061][ T1004] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 728.088630][ T1004] bond0 (unregistering): Released all slaves [ 728.236215][T16485] team0: Port device dummy0 added [ 728.929177][ T5822] Bluetooth: hci0: command tx timeout [ 731.931139][T16399] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.931283][T16399] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.931501][T16399] bridge_slave_0: entered allmulticast mode [ 731.969976][T16399] bridge_slave_0: entered promiscuous mode [ 732.191008][T16399] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.191138][T16399] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.191375][T16399] bridge_slave_1: entered allmulticast mode [ 732.197464][T16399] bridge_slave_1: entered promiscuous mode [ 732.748511][ T1004] hsr_slave_0: left promiscuous mode [ 732.850488][ T1004] hsr_slave_1: left promiscuous mode [ 732.851508][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.851524][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.900355][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.900374][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.038041][ T1004] veth1_macvtap: left promiscuous mode [ 733.038113][ T1004] veth0_macvtap: left promiscuous mode [ 733.044192][ T1004] veth1_vlan: left promiscuous mode [ 733.044370][ T1004] veth0_vlan: left promiscuous mode [ 735.415358][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 735.545122][ T9] usb 7-1: device descriptor read/64, error -71 [ 735.811874][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 735.942629][ T9] usb 7-1: device descriptor read/64, error -71 [ 736.049281][ T9] usb usb7-port1: attempt power cycle [ 736.418334][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 736.472296][ T9] usb 7-1: device descriptor read/8, error -71 [ 736.718354][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 736.739939][ T9] usb 7-1: device descriptor read/8, error -71 [ 736.849093][ T9] usb usb7-port1: unable to enumerate USB device [ 742.515230][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 742.844806][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 743.646287][T13042] IPVS: starting estimator thread 0... [ 743.736287][T16873] IPVS: using max 8 ests per chain, 19200 per kthread [ 746.656099][T16399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.671576][T16399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.433445][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.435343][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.119945][T16399] team0: Port device team_slave_0 added [ 748.126697][T16399] team0: Port device team_slave_1 added [ 748.236806][T17010] Bluetooth: MGMT ver 1.23 [ 748.485634][T16399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.485651][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.485675][T16399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.540530][T16399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.540547][T16399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.540572][T16399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.604275][T16399] hsr_slave_0: entered promiscuous mode [ 749.699834][T16399] hsr_slave_1: entered promiscuous mode [ 750.754912][T17034] netlink: zone id is out of range [ 750.913803][T17034] netlink: zone id is out of range [ 750.914168][T17034] netlink: zone id is out of range [ 750.914404][T17034] netlink: zone id is out of range [ 750.914637][T17034] netlink: zone id is out of range [ 750.914816][T17034] netlink: zone id is out of range [ 750.914979][T17034] netlink: zone id is out of range [ 750.915407][T17034] netlink: zone id is out of range [ 750.926850][T17034] netlink: zone id is out of range [ 750.927480][T17035] netlink: del zone limit has 4 unknown bytes [ 751.484076][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4555'. [ 752.338764][T17040] veth3: entered promiscuous mode [ 754.874651][T16399] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 756.321529][T16399] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 756.434281][T16399] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 757.394405][T16399] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 758.995595][T16399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.071730][T16399] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.124541][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.124838][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.155118][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.179667][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.303071][T16399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.927454][T16399] veth0_vlan: entered promiscuous mode [ 766.976253][T16399] veth1_vlan: entered promiscuous mode [ 767.085861][T16399] veth0_macvtap: entered promiscuous mode [ 767.196546][T16399] veth1_macvtap: entered promiscuous mode [ 768.066208][T16399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.102413][T16399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.066317][ T6386] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.067468][ T6386] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.067819][ T6386] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.107133][ T6386] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.793801][T12996] Bluetooth: hci2: command 0x0405 tx timeout [ 778.065015][ T6386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.065035][ T6386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.065350][ T6386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.065362][ T6386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.048595][T17272] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 784.025872][T17298] delete_channel: no stack [ 791.235539][T17375] cifs: Unknown parameter 'mode' [ 797.545180][T17427] Invalid source name [ 797.545198][T17427] UBIFS error (pid: 17427): cannot open "./file0", error -22 [ 798.769849][T17435] netfs: Couldn't get user pages (rc=-14) [ 802.771090][ T5902] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 803.798292][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 803.800629][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.800674][ T5902] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 803.800696][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.807284][ T5902] usb 4-1: config 0 descriptor?? [ 804.153849][T17466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.155288][T17466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.993792][ C1] vkms_vblank_simulate: vblank timer overrun [ 805.144318][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.094707][ T5902] usbhid 4-1:0.0: can't add hid device: -71 [ 806.094781][ T5902] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 806.099554][ T5902] usb 4-1: USB disconnect, device number 29 [ 806.711053][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.161338][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.386858][ C1] vkms_vblank_simulate: vblank timer overrun [ 807.829931][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.038291][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.426222][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.593404][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.785332][ C1] vkms_vblank_simulate: vblank timer overrun [ 808.803987][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.804073][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.424792][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.573548][ T6013] kworker/u8:13 (6013) used greatest stack depth: 12696 bytes left [ 809.708307][ C1] vkms_vblank_simulate: vblank timer overrun [ 809.847304][ C1] vkms_vblank_simulate: vblank timer overrun [ 816.555630][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 816.555649][ T37] audit: type=1800 audit(1759360793.938:394): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.4716" name="bus" dev="ramfs" ino=55654 res=0 errno=0 [ 819.128577][T17609] fuse: Unknown parameter 'fd0x0000000000000006' [ 820.529492][T17619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4729'. [ 824.254112][T17642] nvme_fabrics: missing parameter 'transport=%s' [ 824.254126][T17642] nvme_fabrics: missing parameter 'nqn=%s' [ 824.777880][T17651] 9pnet_fd: Insufficient options for proto=fd [ 826.065093][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.316833][T17673] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 829.731419][ C1] vkms_vblank_simulate: vblank timer overrun [ 829.883935][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.094187][ C1] vkms_vblank_simulate: vblank timer overrun [ 830.896260][T17699] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 842.319547][T17771] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 846.925732][T12996] Bluetooth: hci0: command 0x0406 tx timeout [ 852.558574][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4808'. [ 853.028242][ T37] audit: type=1800 audit(1759360829.708:395): pid=17865 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.4810" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 855.858977][T17893] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 862.079403][T17943] input: syz1 as /devices/virtual/input/input35 [ 868.547398][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.251374][T18009] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 869.500321][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.714272][ C1] vkms_vblank_simulate: vblank timer overrun [ 870.753557][T18015] ufs: You didn't specify the type of your ufs filesystem [ 870.753557][T18015] [ 870.753557][T18015] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 870.753557][T18015] [ 870.753557][T18015] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 870.753619][T18015] ufs: ufstype=old is supported read-only [ 873.679927][T18026] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 878.498392][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 878.498466][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 882.998854][T18067] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4876'. [ 885.230980][ T9] IPVS: starting estimator thread 0... [ 886.202710][T18077] IPVS: using max 8 ests per chain, 19200 per kthread [ 887.619855][T18100] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 887.619879][T18100] UDF-fs: Scanning with blocksize 512 failed [ 887.621582][T18100] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 887.621600][T18100] UDF-fs: Scanning with blocksize 1024 failed [ 887.622040][T18100] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 887.622054][T18100] UDF-fs: Scanning with blocksize 2048 failed [ 887.622411][T18100] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 887.622425][T18100] UDF-fs: Scanning with blocksize 4096 failed [ 890.461857][T18118] random: crng reseeded on system resumption [ 891.300051][T18128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4890'. [ 892.348387][T17376] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 892.511033][T18138] ufs: You didn't specify the type of your ufs filesystem [ 892.511033][T18138] [ 892.511033][T18138] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 892.511033][T18138] [ 892.511033][T18138] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 892.512490][T18138] ufs: ufstype=old is supported read-only [ 893.328410][T17376] usb 4-1: Using ep0 maxpacket: 8 [ 895.241048][T18148] Malformed UNC in devname [ 895.241048][T18148] [ 895.241345][T18148] CIFS: VFS: Malformed UNC in devname [ 897.500640][ T988] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 897.648284][ T988] usb 9-1: Using ep0 maxpacket: 32 [ 897.650378][ T988] usb 9-1: config 0 has an invalid interface number: 167 but max is 0 [ 897.650393][ T988] usb 9-1: config 0 has no interface number 0 [ 897.650421][ T988] usb 9-1: config 0 interface 167 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 897.650435][ T988] usb 9-1: config 0 interface 167 altsetting 2 has a duplicate endpoint with address 0x82, skipping [ 897.650447][ T988] usb 9-1: config 0 interface 167 has no altsetting 0 [ 897.663068][ T988] usb 9-1: New USB device found, idVendor=0458, idProduct=701f, bcdDevice=c6.cb [ 897.663457][ T988] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.663478][ T988] usb 9-1: Product: syz [ 897.663490][ T988] usb 9-1: Manufacturer: syz [ 897.663502][ T988] usb 9-1: SerialNumber: syz [ 897.683128][ T988] usb 9-1: config 0 descriptor?? [ 897.703366][ T988] dvb-usb: found a 'VideoWalker DVB-T USB' in warm state. [ 897.703420][ T988] dvb-usb: bulk message failed: -22 (3/0) [ 897.756918][ T988] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 897.760070][ T988] dvbdev: DVB: registering new adapter (VideoWalker DVB-T USB) [ 897.760136][ T988] usb 9-1: media controller created [ 897.873736][ T988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 898.203497][ T988] dvb-usb: bulk message failed: -22 (6/0) [ 898.203679][ T988] dvb-usb: no frontend was attached by 'VideoWalker DVB-T USB' [ 898.211328][ T988] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input36 [ 898.224515][ T988] dvb-usb: schedule remote query interval to 150 msecs. [ 898.224573][ T988] dvb-usb: bulk message failed: -22 (3/0) [ 898.248386][ T988] dvb-usb: VideoWalker DVB-T USB successfully initialized and connected. [ 898.263668][ T988] usb 9-1: USB disconnect, device number 2 [ 898.378651][T17376] usb 4-1: device descriptor read/all, error -110 [ 898.518410][T17376] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 898.654042][ T988] dvb-usb: VideoWalker DVB-T USB successfully deinitialized and disconnected. [ 898.658513][T17376] usb 4-1: device descriptor read/64, error -32 [ 898.768602][T17376] usb usb4-port1: attempt power cycle [ 902.027212][ T5822] Bluetooth: hci4: Malformed Event: 0x13 [ 902.799734][ T975] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 903.557854][ T975] usb 9-1: config 0 has an invalid interface number: 112 but max is 0 [ 903.557881][ T975] usb 9-1: config 0 has no interface number 0 [ 903.577604][ T975] usb 9-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 903.577634][ T975] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.577652][ T975] usb 9-1: Product: syz [ 903.577665][ T975] usb 9-1: Manufacturer: syz [ 903.577679][ T975] usb 9-1: SerialNumber: syz [ 903.640061][ T975] usb 9-1: config 0 descriptor?? [ 903.818892][ T975] mvusb_mdio 9-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 903.876051][ T988] usb 9-1: USB disconnect, device number 3 [ 904.009267][T18272] netlink: 'syz.5.4951': attribute type 5 has an invalid length. [ 904.238279][ T5892] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 904.302886][T18287] : renamed from bridge_slave_0 [ 904.394483][ T5892] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 904.394617][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 42594, setting to 1023 [ 904.397718][ T5892] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 904.397744][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.397762][ T5892] usb 4-1: Product: syz [ 904.397775][ T5892] usb 4-1: Manufacturer: syz [ 904.397788][ T5892] usb 4-1: SerialNumber: syz [ 904.674669][ T5892] usb 4-1: config 0 descriptor?? [ 904.687971][ T5892] hub 4-1:0.0: bad descriptor, ignoring hub [ 904.688094][ T5892] hub 4-1:0.0: probe with driver hub failed with error -5 [ 904.726071][ T5892] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input38 [ 904.744226][ T5892] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 904.897733][ T5892] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 904.976254][ T5892] usb 4-1: USB disconnect, device number 33 [ 905.152762][T18313] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 905.869763][T18353] program syz.3.4990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.029271][T18357] program syz.3.4995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.029552][T18357] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 906.964758][T18383] program syz.8.4998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.965661][T18383] program syz.8.4998 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.965916][T18383] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 907.829407][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5003'. [ 907.966958][T18393] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 909.001818][T18438] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 909.138279][T13042] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 909.288292][T13042] usb 9-1: Using ep0 maxpacket: 32 [ 909.290696][T13042] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.291397][T13042] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.291437][T13042] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 909.291457][T13042] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.297040][T13042] usb 9-1: config 0 descriptor?? [ 909.366175][T13042] hub 9-1:0.0: USB hub found [ 909.596566][T13042] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 909.813080][T13042] usbhid 9-1:0.0: can't add hid device: -71 [ 909.813203][T13042] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 909.838499][T13042] usb 9-1: USB disconnect, device number 4 [ 909.978379][T17376] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 910.167813][T17376] usb 4-1: Using ep0 maxpacket: 16 [ 910.170252][T17376] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.170275][T17376] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 910.176736][T17376] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 910.176760][T17376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.176778][T17376] usb 4-1: Product: syz [ 910.176790][T17376] usb 4-1: Manufacturer: syz [ 910.176809][T17376] usb 4-1: SerialNumber: syz [ 910.479431][T17376] usb 4-1: 0:2 : does not exist [ 910.479503][T17376] usb 4-1: unit 9 not found! [ 910.527271][T17376] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 910.560105][T17376] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 910.585651][T17376] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 910.667624][T17376] usb 4-1: USB disconnect, device number 34 [ 911.068343][ T5892] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 911.155884][T18491] net_ratelimit: 5 callbacks suppressed [ 911.155903][T18491] netlink: ct family unspecified [ 911.155928][T18491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.236230][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 911.239383][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 911.239409][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 911.239431][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 911.239455][ T5892] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 911.239478][ T5892] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 911.278770][ T5892] usb 7-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 911.278797][ T5892] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.278815][ T5892] usb 7-1: Product: syz [ 911.278827][ T5892] usb 7-1: Manufacturer: syz [ 911.278840][ T5892] usb 7-1: SerialNumber: syz [ 911.283934][ T5892] usb 7-1: config 0 descriptor?? [ 911.408252][ T5892] rc_core: IR keymap rc-imon-rsc not found [ 911.408271][ T5892] Registered IR keymap rc-empty [ 911.409854][ T5892] rc rc0: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 911.413501][ T5892] input: iMON Station as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input40 [ 911.577129][ T9] usb 7-1: USB disconnect, device number 14 [ 911.955172][T17376] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 912.023921][T18527] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5068'. [ 912.023952][T18527] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5068'. [ 912.125611][T17376] usb 4-1: Using ep0 maxpacket: 8 [ 912.131874][T17376] usb 4-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 912.131901][T17376] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 912.131919][T17376] usb 4-1: Product: syz [ 912.131931][T17376] usb 4-1: Manufacturer: syz [ 912.131944][T17376] usb 4-1: SerialNumber: syz [ 912.368055][T17376] usb 4-1: config 0 descriptor?? [ 912.653168][ T37] audit: type=1326 audit(1759360890.038:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18540 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 912.653209][ T37] audit: type=1326 audit(1759360890.038:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18540 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 912.678989][ T37] audit: type=1326 audit(1759360890.068:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18540 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 912.679040][ T37] audit: type=1326 audit(1759360890.068:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18540 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 912.679079][ T37] audit: type=1326 audit(1759360890.068:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18540 comm="syz.6.5075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 912.868847][T17376] usb 4-1: USB disconnect, device number 35 [ 913.908525][ T5956] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 914.904345][T18600] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 914.904439][T18600] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 914.904487][T18600] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 914.904574][T18600] comedi comedi3: 8255: I/O port conflict (0xf,4) [ 914.904620][T18600] comedi comedi3: 8255: I/O port conflict (0x800007,4) [ 915.086807][ T5956] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 915.086836][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.086854][ T5956] usb 4-1: Product: syz [ 915.086866][ T5956] usb 4-1: Manufacturer: syz [ 915.086878][ T5956] usb 4-1: SerialNumber: syz [ 915.094229][ T5956] usb 4-1: config 0 descriptor?? [ 915.348045][ T5956] hso 4-1:0.0: Failed to find BULK IN ep [ 915.549065][ T5956] usb 4-1: USB disconnect, device number 36 [ 915.597399][ T37] audit: type=1326 audit(1759360892.978:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18618 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abf57eec9 code=0x7ffc0000 [ 915.600688][ T37] audit: type=1326 audit(1759360892.978:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18618 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abf57eec9 code=0x7ffc0000 [ 915.605902][ T37] audit: type=1326 audit(1759360892.988:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18618 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7abf57eec9 code=0x7ffc0000 [ 915.607969][ T37] audit: type=1326 audit(1759360892.988:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18618 comm="syz.5.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7abf57eec9 code=0x7ffc0000 [ 916.468271][T13042] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 916.611481][T18668] netlink: 'syz.8.5135': attribute type 1 has an invalid length. [ 916.664296][T13042] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 916.664324][T13042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.664342][T13042] usb 4-1: Product: syz [ 916.664354][T13042] usb 4-1: Manufacturer: syz [ 916.664366][T13042] usb 4-1: SerialNumber: syz [ 916.691842][T13042] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 916.895951][ T975] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 917.409328][ T5956] usb 4-1: USB disconnect, device number 37 [ 918.065513][ T975] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 918.082905][ T975] ath9k_htc: Failed to initialize the device [ 918.094979][ T5956] usb 4-1: ath9k_htc: USB layer deinitialized [ 918.263649][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5170'. [ 918.263672][T18737] netlink: 'syz.5.5170': attribute type 1 has an invalid length. [ 918.502001][ T5822] Bluetooth: hci2: unexpected event for opcode 0x204e [ 918.618404][ T5956] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 918.771048][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 918.771077][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 918.771099][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 918.771119][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 918.771155][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 918.771177][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.860317][ T5956] usb 4-1: config 0 descriptor?? [ 919.139424][ T5956] hdpvr 4-1:0.0: firmware version 0x0 dated [ 919.139443][ T5956] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 919.332317][ T5956] hdpvr 4-1:0.0: device init failed [ 919.332427][ T5956] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 919.368955][ T5956] usb 4-1: USB disconnect, device number 38 [ 919.521008][T18773] Unsupported ieee802154 address type: 0 [ 919.883550][T18780] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 919.887289][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5188'. [ 921.788124][T18825] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 921.791703][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5207'. [ 922.212624][ T37] audit: type=1326 audit(1759360899.598:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18845 comm="syz.5.5220" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7abf57eec9 code=0x0 [ 922.319868][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.498457][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.751792][ C1] vkms_vblank_simulate: vblank timer overrun [ 922.983615][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.053545][T18862] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5226'. [ 923.053608][T18862] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5226'. [ 923.699145][T18891] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 923.699802][ T5956] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 923.702624][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5234'. [ 923.883081][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.883113][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.883134][ T5956] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.883173][ T5956] usb 9-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 923.883194][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.940991][ T5822] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 923.956670][ T5956] usb 9-1: config 0 descriptor?? [ 924.409709][ T5956] input: HID 28bd:1903 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:28BD:1903.001C/input/input41 [ 924.439127][ T5956] uclogic 0003:28BD:1903.001C: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:1903] on usb-dummy_hcd.8-1/input0 [ 924.588368][ T975] usb 9-1: USB disconnect, device number 5 [ 925.986646][ C1] vkms_vblank_simulate: vblank timer overrun [ 926.233340][T18998] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 926.233396][T18998] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 926.233442][T18998] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 926.233492][T18998] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 926.233537][T18998] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 926.233582][T18998] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 926.233622][T18998] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 926.233662][T18998] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 926.233703][T18998] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 926.233745][T18998] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 926.233785][T18998] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 926.233828][T18998] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 926.233872][T18998] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 926.233917][T18998] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 926.234005][T18998] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 926.234050][T18998] comedi comedi3: 8255: I/O port conflict (0x400009,4) [ 926.234096][T18998] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 926.234143][T18998] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 926.234270][T18998] comedi comedi3: 8255: I/O port conflict (0x80,4) [ 926.578645][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5295'. [ 927.408601][T13042] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 927.573107][T13042] usb 4-1: Using ep0 maxpacket: 8 [ 927.575855][T13042] usb 4-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 927.575880][T13042] usb 4-1: config 0 has an invalid interface number: 150 but max is 64 [ 927.575899][T13042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.575916][T13042] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 65 [ 927.575935][T13042] usb 4-1: config 0 has no interface number 0 [ 927.575996][T13042] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.576020][T13042] usb 4-1: config 0 interface 150 has no altsetting 0 [ 927.576051][T13042] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 927.576071][T13042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.600610][T13042] usb 4-1: config 0 descriptor?? [ 927.659946][ T5892] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 927.808349][ T5892] usb 9-1: Using ep0 maxpacket: 8 [ 927.811256][ T5892] usb 9-1: unable to get BOS descriptor or descriptor too short [ 927.812741][ T5892] usb 9-1: config 4 has an invalid interface number: 30 but max is 0 [ 927.812763][ T5892] usb 9-1: config 4 has no interface number 0 [ 927.812791][ T5892] usb 9-1: config 4 interface 30 has no altsetting 0 [ 927.816312][ T5892] usb 9-1: string descriptor 0 read error: -22 [ 927.816463][ T5892] usb 9-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 927.816485][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.883802][ T5892] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 927.883835][ T5892] dw2102: su3000_power_ctrl: 1, initialized 0 [ 927.884231][ T5892] dvb-usb: bulk message failed: -22 (2/0) [ 927.895713][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 927.899069][ T5892] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 927.899124][ T5892] usb 9-1: media controller created [ 927.899558][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 927.899572][ T5892] dw2102: i2c transfer failed. [ 927.899590][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 927.899603][ T5892] dw2102: i2c transfer failed. [ 927.899618][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 927.899630][ T5892] dw2102: i2c transfer failed. [ 927.899644][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 927.899656][ T5892] dw2102: i2c transfer failed. [ 927.899670][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 927.899682][ T5892] dw2102: i2c transfer failed. [ 927.899698][ T5892] dvb-usb: bulk message failed: -22 (6/0) [ 927.899710][ T5892] dw2102: i2c transfer failed. [ 927.899718][ T5892] dvb-usb: MAC address: 02:02:02:02:02:02 [ 927.969941][ T5822] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 927.970137][ T5822] Bluetooth: hci4: Injecting HCI hardware error event [ 927.974239][ T5822] Bluetooth: hci4: hardware error 0x00 [ 928.035659][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 928.038736][T13042] usb 4-1: USB disconnect, device number 39 [ 928.135655][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 928.135677][ T5892] dw2102: command 0x0e transfer failed. [ 928.135686][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 928.135698][ T5892] dw2102: command 0x0e transfer failed. [ 928.438393][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 928.438415][ T5892] dw2102: command 0x0e transfer failed. [ 928.438425][ T5892] dvb-usb: bulk message failed: -22 (3/0) [ 928.438438][ T5892] dw2102: command 0x0e transfer failed. [ 928.438446][ T5892] dvb-usb: bulk message failed: -22 (1/0) [ 928.438458][ T5892] dw2102: command 0x51 transfer failed. [ 928.438466][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 928.438479][ T5892] dw2102: i2c probe for address 0x68 failed. [ 928.438490][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 928.438502][ T5892] dw2102: i2c probe for address 0x69 failed. [ 928.438513][ T5892] dvb-usb: bulk message failed: -22 (5/0) [ 928.438524][ T5892] dw2102: i2c probe for address 0x6a failed. [ 928.438534][ T5892] dw2102: probing for demodulator failed. Is the external power switched on? [ 928.438543][ T5892] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 928.778220][ T5892] rc_core: IR keymap rc-tt-1500 not found [ 928.778238][ T5892] Registered IR keymap rc-empty [ 928.781069][ T5892] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 928.783759][ T5892] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input42 [ 928.796074][ T5892] dvb-usb: schedule remote query interval to 250 msecs. [ 928.796096][ T5892] dw2102: su3000_power_ctrl: 0, initialized 1 [ 928.796107][ T5892] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 928.808424][ T5892] usb 9-1: USB disconnect, device number 6 [ 929.283294][ T5892] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 930.048566][ T5822] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 931.565144][T19160] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5364'. [ 931.969518][T13042] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 932.141261][T13042] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.141287][T13042] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 932.141335][T13042] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 932.141356][T13042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.159785][T13042] usb 4-1: config 0 descriptor?? [ 932.195740][T13042] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 932.195790][T13042] dvb-usb: bulk message failed: -22 (3/0) [ 932.262218][T13042] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 932.266772][T13042] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 932.266831][T13042] usb 4-1: media controller created [ 932.275345][T13042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.329436][T13042] dvb-usb: bulk message failed: -22 (6/0) [ 932.329528][T13042] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 932.345521][T13042] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input43 [ 932.359818][T13042] dvb-usb: schedule remote query interval to 150 msecs. [ 932.359837][T13042] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 932.512091][ T5892] usb 4-1: USB disconnect, device number 40 [ 932.640136][T19198] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5383'. [ 933.197317][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 934.188294][ T5956] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 934.338392][ T5956] usb 9-1: Using ep0 maxpacket: 32 [ 934.340793][ T5956] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 934.340817][ T5956] usb 9-1: config 0 has no interface number 0 [ 934.343819][ T5956] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 934.343844][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.343863][ T5956] usb 9-1: Product: syz [ 934.343875][ T5956] usb 9-1: Manufacturer: syz [ 934.343888][ T5956] usb 9-1: SerialNumber: syz [ 934.359611][ T5956] usb 9-1: config 0 descriptor?? [ 934.373349][ T5956] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 934.373373][ T5956] usb 9-1: selecting invalid altsetting 1 [ 934.373388][ T5956] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 934.409428][ T5956] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 934.409810][ T5956] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 934.409856][ T5956] usb 9-1: media controller created [ 934.524810][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.611753][ T5956] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 934.611809][ T5956] zl10353_read_register: readreg error (reg=127, ret==-71) [ 934.612276][ T5956] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 934.758407][ T5956] usb 9-1: USB disconnect, device number 7 [ 935.006992][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 935.276160][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5416'. [ 935.738339][T17376] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 935.900724][T17376] usb 4-1: config 0 has an invalid interface number: 217 but max is 1 [ 935.900751][T17376] usb 4-1: config 0 has no interface number 1 [ 935.900808][T17376] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.900843][T17376] usb 4-1: config 0 interface 217 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 935.900879][T17376] usb 4-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44 [ 935.900900][T17376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.921932][T17376] usb 4-1: config 0 descriptor?? [ 935.927204][T17376] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 936.151804][T17376] gspca_sn9c20x: Write register 1000 failed -71 [ 936.151836][T17376] gspca_sn9c20x: Device initialization failed [ 936.151924][T17376] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 936.174907][T17376] usb 4-1: USB disconnect, device number 41 [ 937.955317][T19345] pimreg: tun_chr_ioctl cmd 1074812118 [ 938.206274][T19359] program syz.8.5454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 938.405335][T19365] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5458'. [ 938.490470][ T5892] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 938.507789][ T5892] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 940.893450][T19453] syz_tun: entered allmulticast mode [ 940.895746][T19452] syz_tun: left allmulticast mode [ 941.273869][T19465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5502'. [ 941.899030][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.899102][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.190883][T19499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5518'. [ 943.570885][T19527] netlink: 146840 bytes leftover after parsing attributes in process `syz.5.5530'. [ 948.321703][T19672] loop8: detected capacity change from 0 to 8 [ 948.354351][T19672] Dev loop8: unable to read RDB block 8 [ 948.354403][T19672] loop8: unable to read partition table [ 948.354623][T19672] loop8: partition table beyond EOD, truncated [ 948.354640][T19672] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 950.811097][T19722] veth1_to_bond: entered allmulticast mode [ 950.811325][T19722] veth1_to_bond: entered promiscuous mode [ 950.812217][T19720] veth1_to_bond: left promiscuous mode [ 950.812483][T19720] veth1_to_bond: left allmulticast mode [ 952.030984][T19742] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5625'. [ 952.436123][T19760] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 952.468316][T17376] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 952.613012][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.630603][T17376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.630633][T17376] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.630667][T17376] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 952.630687][T17376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.639097][T17376] usb 7-1: config 0 descriptor?? [ 953.076126][T17376] pyra 0003:1E7D:2CF6.001E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 953.374680][T19781] hub 8-0:1.0: USB hub found [ 953.375231][T19781] hub 8-0:1.0: 1 port detected [ 953.669038][T17376] pyra 0003:1E7D:2CF6.001E: couldn't init struct pyra_device [ 953.669084][T17376] pyra 0003:1E7D:2CF6.001E: couldn't install mouse [ 953.674245][T17376] pyra 0003:1E7D:2CF6.001E: probe with driver pyra failed with error -71 [ 953.716672][T17376] usb 7-1: USB disconnect, device number 15 [ 953.809885][T19798] binder: 19797:19798 ioctl c018620b 200000000700 returned -14 [ 954.092989][T19804] 9pnet: p9_errstr2errno: server reported unknown error @cF S [ 954.360341][T19818] syzkaller1: entered promiscuous mode [ 954.360366][T19818] syzkaller1: entered allmulticast mode [ 954.832471][ C0] vkms_vblank_simulate: vblank timer overrun [ 954.993324][ C0] vkms_vblank_simulate: vblank timer overrun [ 955.282114][T19850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5673'. [ 955.848372][T13042] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 956.008721][T13042] usb 4-1: Using ep0 maxpacket: 16 [ 956.029393][T13042] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 956.029421][T13042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.029438][T13042] usb 4-1: Product: syz [ 956.029451][T13042] usb 4-1: Manufacturer: syz [ 956.029462][T13042] usb 4-1: SerialNumber: syz [ 956.037775][T13042] usb 4-1: config 0 descriptor?? [ 956.080112][T13042] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 956.267902][T13042] gp8psk: usb in 128 operation failed. [ 956.274019][T13042] gp8psk: usb in 137 operation failed. [ 956.274038][T13042] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 956.275032][T13042] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 956.275087][T13042] usb 4-1: media controller created [ 956.328972][T13042] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 956.356610][T13042] gp8psk_fe: Frontend revision 1 attached [ 956.356663][T13042] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 956.380762][T13042] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 956.621931][T13042] gp8psk: usb in 138 operation failed. [ 956.621950][T13042] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 956.621962][T13042] gp8psk: found Genpix USB device pID = 201 (hex) [ 956.667836][T13042] usb 4-1: USB disconnect, device number 42 [ 956.827957][T13042] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 957.279540][T19929] netlink: 'syz.6.5709': attribute type 1 has an invalid length. [ 957.279563][T19929] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.5709'. [ 957.758264][ T5896] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 957.914234][T19958] vivid-007: disconnect [ 957.922006][T19954] vivid-007: reconnect [ 958.157755][T19966] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5727'. [ 958.160669][ T5896] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 958.160694][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.160710][ T5896] usb 9-1: Product: syz [ 958.160722][ T5896] usb 9-1: Manufacturer: syz [ 958.160734][ T5896] usb 9-1: SerialNumber: syz [ 958.206436][ T5896] usb 9-1: config 0 descriptor?? [ 959.098476][ T5896] usb 9-1: USB disconnect, device number 8 [ 960.871604][ T5896] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 961.022679][ T5896] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.026496][ T5896] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.026523][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.026541][ T5896] usb 4-1: Product: syz [ 961.026554][ T5896] usb 4-1: Manufacturer: syz [ 961.026566][ T5896] usb 4-1: SerialNumber: syz [ 962.101737][ T5896] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 962.101777][ T5896] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 962.101794][ T5896] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 962.305272][ T5896] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 962.332696][ T5896] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 962.338962][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5763'. [ 962.369389][ T5896] usb 4-1: USB disconnect, device number 43 [ 962.373356][ T5896] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 962.396165][T20060] vxlan0: entered promiscuous mode [ 962.599990][ T57] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.610794][ T57] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.611117][ T57] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 962.611909][ T57] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.337513][T20093] netlink: 67 bytes leftover after parsing attributes in process `syz.5.5779'. [ 964.338735][T17376] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 964.508389][T17376] usb 9-1: Using ep0 maxpacket: 16 [ 964.529169][T17376] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 964.529195][T17376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.529213][T17376] usb 9-1: Product: syz [ 964.529226][T17376] usb 9-1: Manufacturer: syz [ 964.529238][T17376] usb 9-1: SerialNumber: syz [ 964.534417][T17376] usb 9-1: config 0 descriptor?? [ 964.538021][T17376] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 964.551360][T17376] usb 9-1: Detected FT232H [ 964.741276][T17376] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 965.168750][T17376] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 965.365657][T17376] usb 9-1: USB disconnect, device number 9 [ 965.528697][T17376] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 965.529192][T17376] ftdi_sio 9-1:0.0: device disconnected [ 966.027083][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5814'. [ 966.716324][ T988] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 966.716359][ T988] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 966.716420][ T988] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 966.720240][ T988] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 966.748602][T17376] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 966.908542][T17376] usb 4-1: Using ep0 maxpacket: 16 [ 966.911129][T17376] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 966.911157][T17376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 966.917866][T17376] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 966.917892][T17376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.917910][T17376] usb 4-1: Product: syz [ 966.917923][T17376] usb 4-1: Manufacturer: syz [ 966.917935][T17376] usb 4-1: SerialNumber: syz [ 966.939134][T17376] usb 4-1: config 0 descriptor?? [ 966.954668][T17376] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 966.954700][T17376] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 967.158299][ T988] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 967.313411][ T988] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 967.313443][ T988] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.313471][ T988] usb 9-1: config 0 interface 0 has no altsetting 0 [ 967.314226][ T988] usb 9-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 967.314249][ T988] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.341900][ T988] usb 9-1: config 0 descriptor?? [ 967.610465][T17376] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 967.611741][T17376] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 967.785878][ T988] uclogic 0003:28BD:0075.0020: interface is invalid, ignoring [ 967.823633][T17376] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 967.823657][T17376] em28xx 4-1:0.0: No AC97 audio processor [ 967.834123][T17376] usb 4-1: USB disconnect, device number 44 [ 967.836252][T17376] em28xx 4-1:0.0: Disconnecting em28xx [ 967.853457][T17376] em28xx 4-1:0.0: Freeing device [ 967.962917][ T988] usb 9-1: USB disconnect, device number 10 [ 969.910270][ C0] vkms_vblank_simulate: vblank timer overrun [ 970.046554][T20268] netlink: 'syz.6.5856': attribute type 4 has an invalid length. [ 971.202187][ T5896] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 971.211130][ T975] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 971.971856][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.369966][ T5896] usb 9-1: Using ep0 maxpacket: 16 [ 972.383245][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.383275][ T975] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.383296][ T975] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 972.383335][ T975] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 972.383357][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.408950][ T5896] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 972.408974][ T5896] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 972.408991][ T5896] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 972.416109][ T975] usb 7-1: config 0 descriptor?? [ 972.417811][ T5896] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 972.417835][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.417851][ T5896] usb 9-1: Product: syz [ 972.417862][ T5896] usb 9-1: Manufacturer: syz [ 972.417875][ T5896] usb 9-1: SerialNumber: syz [ 972.854834][ T5896] usb 9-1: 0:2 : does not exist [ 972.862389][ T5896] usb 9-1: 1:0: cannot get min/max values for control 2 (id 1) [ 972.923263][ T5896] usb 9-1: USB disconnect, device number 11 [ 972.935314][ T975] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 973.094746][ T975] usb 7-1: USB disconnect, device number 16 [ 973.868426][ T5956] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 974.024297][ T5956] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 974.024327][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.024346][ T5956] usb 9-1: Product: syz [ 974.024358][ T5956] usb 9-1: Manufacturer: syz [ 974.024371][ T5956] usb 9-1: SerialNumber: syz [ 974.063429][ T5956] usb 9-1: config 0 descriptor?? [ 974.836883][ T5956] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 974.992813][T20362] netlink: 452 bytes leftover after parsing attributes in process `syz.5.5898'. [ 975.261787][T20370] syzkaller1: entered promiscuous mode [ 975.261813][T20370] syzkaller1: entered allmulticast mode [ 975.442440][ T5956] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 975.446675][ T5956] usb 9-1: USB disconnect, device number 12 [ 975.652906][T20383] netlink: 'syz.6.5907': attribute type 10 has an invalid length. [ 976.431346][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5922'. [ 976.449974][ T37] audit: type=1400 audit(1759360953.838:406): lsm=SMACK fn=smack_inode_permission action=denied subject="@.-&#^" object="_" requested=rw pid=20412 comm="syz.3.5920" name="video36" dev="devtmpfs" ino=1043 [ 977.064100][T20437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5934'. [ 977.064123][T20437] tipc: Started in network mode [ 977.064137][T20437] tipc: Node identity 7, cluster identity 4711 [ 977.064147][T20437] tipc: Node number set to 7 [ 978.182749][T20445] tipc: Failed to remove unknown binding: 66,3,3/10005162:1290881872/1290881873 [ 978.707195][T20471] atomic_op ffff888060b3f218 conn xmit_atomic 0000000000000000 [ 979.252652][T20499] kvm: emulating exchange as write [ 980.686889][T20547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5980'. [ 980.754852][T20550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.908747][T20594] overlayfs: invalid redirect (./file0) [ 982.588424][T17376] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 982.864807][T13042] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 983.419151][T13042] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 983.419180][T13042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.449242][T13042] usb 7-1: config 0 descriptor?? [ 983.455998][T13042] gspca_main: spca508-2.14.0 probing 8086:0110 [ 983.478386][T17376] usb 4-1: Using ep0 maxpacket: 16 [ 983.480870][T17376] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.480905][T17376] usb 4-1: config 0 interface 0 has no altsetting 0 [ 983.480936][T17376] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 983.480957][T17376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.487521][T17376] usb 4-1: config 0 descriptor?? [ 983.736346][T13042] gspca_spca508: reg_read err -32 [ 983.742885][T13042] gspca_spca508: reg_read err -32 [ 983.743802][T13042] gspca_spca508: reg_read err -32 [ 983.745136][T13042] gspca_spca508: reg_read err -32 [ 983.747807][T13042] gspca_spca508: reg_read err -32 [ 983.922768][T17376] nzxt-smart2 0003:1E71:2009.0022: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 983.959784][T13042] gspca_spca508: reg write: error -71 [ 983.959881][T13042] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 983.983323][T13042] usb 7-1: USB disconnect, device number 17 [ 984.430288][T17376] usb 4-1: USB disconnect, device number 45 [ 986.665100][T20681] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 986.693392][T20681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6037'. [ 986.707186][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.256017][ C1] vkms_vblank_simulate: vblank timer overrun [ 987.315837][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.071449][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.238951][ C1] vkms_vblank_simulate: vblank timer overrun [ 988.760918][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.204943][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.326510][T20720] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 989.653493][T20731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 990.212449][ T37] audit: type=1800 audit(1759360967.518:407): pid=20752 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.6068" name="bus" dev="overlay" ino=1759 res=0 errno=0 [ 990.216377][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.405122][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.559700][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.919420][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.276881][ C1] vkms_vblank_simulate: vblank timer overrun [ 991.638396][T17376] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 991.790928][T17376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.790959][T17376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.790995][T17376] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 991.791016][T17376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.900374][T17376] usb 9-1: config 0 descriptor?? [ 992.805461][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 992.948382][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 992.951273][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 992.951359][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 992.951382][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 992.955439][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 992.955464][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 992.955534][ T9] usb 7-1: SerialNumber: syz [ 993.033799][T17376] cm6533_jd 0003:0D8C:0022.0023: unknown main item tag 0x0 [ 993.051501][T20773] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 993.070763][T17376] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.0023/input/input44 [ 993.181384][T17376] cm6533_jd 0003:0D8C:0022.0023: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 993.253418][ T975] usb 9-1: USB disconnect, device number 13 [ 993.289568][T20773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.289978][T20773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.422401][ T9] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 993.437925][ T9] usb 7-1: USB disconnect, device number 18 [ 994.616393][T20812] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 994.708810][T20816] tipc: Started in network mode [ 994.708838][T20816] tipc: Node identity ac14140f, cluster identity 4711 [ 994.709128][T20816] tipc: New replicast peer: 255.255.255.255 [ 994.711664][T20816] tipc: Enabled bearer , priority 10 [ 995.319338][T20829] IPVS: Scheduler module ip_vs_sip not found [ 995.354408][T20837] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 995.848505][ T975] tipc: Node number set to 2886997007 [ 996.120778][T11547] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.120823][T11547] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.120857][T11547] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.120888][T11547] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 996.221678][T20869] syzkaller0: entered allmulticast mode [ 996.341426][T20868] syzkaller0 (unregistering): left allmulticast mode [ 998.538301][T13042] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 998.694373][T13042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.694403][T13042] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.694434][T13042] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 998.694453][T13042] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.754095][T13042] usb 7-1: config 0 descriptor?? [ 999.252300][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.252339][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.252365][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.252389][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.252413][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.252438][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.252462][T13042] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 999.268960][T13042] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 999.455409][T13042] cp2112 0003:10C4:EA90.0024: Part Number: 0x00 Device Version: 0x00 [ 999.807310][ C0] vkms_vblank_simulate: vblank timer overrun [ 999.945315][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.473329][T13042] cp2112 0003:10C4:EA90.0024: error reading lock byte: -32 [ 1000.512376][T13042] usb 7-1: USB disconnect, device number 19 [ 1000.796628][T20974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1001.193242][T20993] Bluetooth: MGMT ver 1.23 [ 1001.298456][T21001] binder: 21000:21001 ioctl c0306201 0 returned -14 [ 1002.709003][T21018] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -26339, delta: 1 [ 1002.709040][T21018] ref_ctr increment failed for inode: 0xaf3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88802372c500 [ 1003.252500][T19055] Bluetooth: hci2: command 0x0405 tx timeout [ 1003.252749][ T5822] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1003.349105][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.349150][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.176512][T21047] loop2: detected capacity change from 0 to 7 [ 1004.198448][T21047] Dev loop2: unable to read RDB block 7 [ 1004.198502][T21047] loop2: unable to read partition table [ 1004.198732][T21047] loop2: partition table beyond EOD, truncated [ 1004.198749][T21047] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1007.518499][ T975] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1007.664796][T21100] binder: BINDER_SET_CONTEXT_MGR already set [ 1007.664811][T21100] binder: 21099:21100 ioctl 4018620d 2000000002c0 returned -16 [ 1007.668453][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 1007.670699][ T975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1007.670726][ T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1007.676839][ T975] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1007.676864][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.676880][ T975] usb 4-1: Product: syz [ 1007.676892][ T975] usb 4-1: Manufacturer: syz [ 1007.676905][ T975] usb 4-1: SerialNumber: syz [ 1007.701202][ T975] usb 4-1: config 0 descriptor?? [ 1007.706799][ T975] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1007.706828][ T975] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1008.830844][ T975] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1008.833190][ T975] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1009.450083][ T975] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1009.823065][ T975] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1009.823514][ T975] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1009.823939][ T975] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1009.824348][ T975] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1009.824756][ T975] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1009.871121][ T975] usb 4-1: USB disconnect, device number 46 [ 1011.164114][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6223'. [ 1014.941154][T17376] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1015.098352][T17376] usb 4-1: Using ep0 maxpacket: 16 [ 1015.102469][T17376] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1015.102499][T17376] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1015.105699][T17376] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1015.105726][T17376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.105745][T17376] usb 4-1: Product: syz [ 1015.105757][T17376] usb 4-1: Manufacturer: syz [ 1015.105770][T17376] usb 4-1: SerialNumber: syz [ 1015.267104][T17376] usb 4-1: config 0 descriptor?? [ 1015.281450][T17376] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1015.281481][T17376] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1016.407711][T17376] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1016.415131][T17376] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1018.510067][T17376] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1018.513443][T17376] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1018.513865][T17376] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1018.514264][T17376] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1018.514671][T17376] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1018.515083][T17376] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1018.569536][T17376] usb 4-1: USB disconnect, device number 47 [ 1022.057120][T21281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1039.905008][T21514] tipc: Enabled bearer , priority 0 [ 1039.905589][T21514] syzkaller0: entered promiscuous mode [ 1039.905602][T21514] syzkaller0: entered allmulticast mode [ 1041.315735][T21519] tipc: Resetting bearer [ 1041.731470][T21519] tipc: Disabling bearer [ 1043.357181][T17376] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1043.898330][T17376] usb 9-1: Using ep0 maxpacket: 8 [ 1043.901080][T17376] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.901247][T17376] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1043.901272][T17376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1043.901298][T17376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1043.901321][T17376] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1043.904638][T17376] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1043.904662][T17376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1043.904680][T17376] usb 9-1: Product: syz [ 1043.904691][T17376] usb 9-1: Manufacturer: syz [ 1043.904702][T17376] usb 9-1: SerialNumber: syz [ 1044.034193][T17376] usb 9-1: config 0 descriptor?? [ 1044.346911][T17376] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1044.346935][T17376] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1045.210217][T17376] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1045.210241][T17376] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -110 [ 1045.210552][T17376] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1045.248922][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.411683][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.441810][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.603211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.696289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1045.897217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.238977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.283800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.344834][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.400842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.668440][ C0] vkms_vblank_simulate: vblank timer overrun [ 1046.739395][T13042] usb 9-1: USB disconnect, device number 14 [ 1047.182575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.384132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.570968][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.223324][ C0] vkms_vblank_simulate: vblank timer overrun [ 1049.566217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1061.273075][T21714] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1061.293520][T21715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6415'. [ 1065.048104][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.048298][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1071.739969][T21804] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6441'. [ 1086.955527][ T37] audit: type=1326 audit(1759361064.008:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1086.955581][ T37] audit: type=1326 audit(1759361064.008:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1086.955621][ T37] audit: type=1326 audit(1759361064.108:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1086.955662][ T37] audit: type=1326 audit(1759361064.108:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1086.955701][ T37] audit: type=1326 audit(1759361064.108:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1086.955741][ T37] audit: type=1326 audit(1759361064.208:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1087.708600][ T37] audit: type=1326 audit(1759361065.088:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1087.710266][ T37] audit: type=1326 audit(1759361065.098:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21910 comm="syz.6.6478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac3a9eec9 code=0x7ffc0000 [ 1089.244526][ T37] audit: type=1804 audit(1759361066.608:416): pid=21942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.6484" name="/newroot/258/file1" dev="fuse" ino=1 res=1 errno=0 [ 1102.032478][ T37] audit: type=1800 audit(1759361079.418:417): pid=22037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.6513" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1110.770207][T22124] netlink: 'syz.6.6537': attribute type 2 has an invalid length. [ 1110.770259][T22124] netlink: 'syz.6.6537': attribute type 1 has an invalid length. [ 1110.778794][T22124] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6537'. [ 1112.828385][ T31] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1112.980142][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1112.980175][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.980212][ T31] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1112.980233][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.999534][ T31] usb 7-1: config 0 descriptor?? [ 1114.273655][ T31] usbhid 7-1:0.0: can't add hid device: -71 [ 1114.273777][ T31] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1115.948727][ T31] usb 7-1: USB disconnect, device number 20 [ 1116.944923][T22175] Invalid source name [ 1120.334343][T22189] ubi31: attaching mtd0 [ 1120.441432][T22189] ubi31: scanning is finished [ 1120.441478][T22189] ubi31: empty MTD device detected [ 1121.602640][T22215] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6559'. [ 1122.793762][T22189] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1122.793789][T22189] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1122.793803][T22189] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1122.793817][T22189] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1122.793831][T22189] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1122.793845][T22189] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1122.793858][T22189] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3225458581 [ 1122.793874][T22189] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1122.796993][T22217] ubi31: background thread "ubi_bgt31d" started, PID 22217 [ 1123.838911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.019583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.345524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.629101][ C1] vkms_vblank_simulate: vblank timer overrun [ 1124.875717][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.233423][ C1] vkms_vblank_simulate: vblank timer overrun [ 1125.831663][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.032294][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.349394][ C1] vkms_vblank_simulate: vblank timer overrun [ 1126.350400][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.350465][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.468935][T22279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6587'. [ 1131.721108][ T56] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 1136.238368][ T5902] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1136.418138][ T5902] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1136.418910][ T5902] usb 4-1: config 0 has no interface number 0 [ 1136.420423][ T5902] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1136.423585][ T5902] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1136.423610][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.423629][ T5902] usb 4-1: Product: syz [ 1136.423642][ T5902] usb 4-1: Manufacturer: syz [ 1136.423654][ T5902] usb 4-1: SerialNumber: syz [ 1136.432132][ T5902] usb 4-1: config 0 descriptor?? [ 1136.547004][ T5902] smsc75xx v1.0.0 [ 1136.547021][ T5902] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1136.547282][ T5902] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1136.777705][ T5902] usb 4-1: USB disconnect, device number 48 [ 1145.793033][T22400] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1148.978357][ T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1149.218364][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1149.220705][ T31] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.220775][ T31] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.223308][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 1149.223333][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.223350][ T31] usb 4-1: Product: syz [ 1149.223361][ T31] usb 4-1: Manufacturer: syz [ 1149.223368][ T31] usb 4-1: SerialNumber: syz [ 1149.355417][ T31] usb 4-1: bad CDC descriptors [ 1149.362592][ T31] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 1149.362682][ T31] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 1150.722850][T13042] usb 4-1: USB disconnect, device number 49 [ 1151.174786][T22449] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1155.873442][T22479] overlayfs: missing 'lowerdir' [ 1179.010098][T19055] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1179.225967][T19055] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1179.246954][T19055] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1179.269184][T19055] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1179.275793][T19055] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1179.786609][T22645] lo speed is unknown, defaulting to 1000 [ 1181.648753][ T5822] Bluetooth: hci5: command tx timeout [ 1181.694644][T22645] chnl_net:caif_netlink_parms(): no params data found [ 1181.988568][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1184.258307][ T5822] Bluetooth: hci5: command tx timeout [ 1185.350930][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1187.087740][ T5822] Bluetooth: hci5: command tx timeout [ 1187.492508][T13042] ================================================================== [ 1187.492524][T13042] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.492556][T13042] Read of size 8 at addr ffffc90015584008 by task kworker/1:4/13042 [ 1187.492570][T13042] [ 1187.492592][T13042] CPU: 1 UID: 0 PID: 13042 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.492612][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1187.492624][T13042] Workqueue: usb_hub_wq hub_event [ 1187.492650][T13042] Call Trace: [ 1187.492660][T13042] [ 1187.492669][T13042] dump_stack_lvl+0x189/0x250 [ 1187.492688][T13042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.492704][T13042] ? __pfx__printk+0x10/0x10 [ 1187.492724][T13042] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1187.492742][T13042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1187.492758][T13042] ? __virt_addr_valid+0xdc/0x5c0 [ 1187.492776][T13042] ? __virt_addr_valid+0xdc/0x5c0 [ 1187.492794][T13042] print_report+0xca/0x240 [ 1187.492815][T13042] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.492835][T13042] kasan_report+0x118/0x150 [ 1187.492857][T13042] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.492880][T13042] __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.492902][T13042] kcov_remote_start+0x2b0/0x6f0 [ 1187.492926][T13042] hub_event+0x158/0x4a20 [ 1187.492945][T13042] ? __lock_acquire+0xab9/0xd20 [ 1187.492976][T13042] ? do_raw_spin_lock+0x121/0x290 [ 1187.492996][T13042] ? look_up_lock_class+0x74/0x170 [ 1187.493012][T13042] ? register_lock_class+0x51/0x320 [ 1187.493037][T13042] ? __lock_acquire+0xab9/0xd20 [ 1187.493061][T13042] ? __pfx_hub_event+0x10/0x10 [ 1187.493079][T13042] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.493103][T13042] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.493118][T13042] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.493138][T13042] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.493160][T13042] process_scheduled_works+0xae1/0x17b0 [ 1187.493193][T13042] ? __pfx_process_scheduled_works+0x10/0x10 [ 1187.493221][T13042] worker_thread+0x8a0/0xda0 [ 1187.493243][T13042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.493263][T13042] ? __kthread_parkme+0x7b/0x200 [ 1187.493290][T13042] kthread+0x711/0x8a0 [ 1187.493308][T13042] ? __pfx_worker_thread+0x10/0x10 [ 1187.493328][T13042] ? __pfx_kthread+0x10/0x10 [ 1187.493343][T13042] ? rt_spin_unlock+0x150/0x200 [ 1187.493365][T13042] ? rt_spin_unlock+0x161/0x200 [ 1187.493383][T13042] ? __pfx_kthread+0x10/0x10 [ 1187.493400][T13042] ret_from_fork+0x439/0x7d0 [ 1187.493422][T13042] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.493453][T13042] ? __switch_to_asm+0x39/0x70 [ 1187.493469][T13042] ? __switch_to_asm+0x33/0x70 [ 1187.493485][T13042] ? __pfx_kthread+0x10/0x10 [ 1187.493501][T13042] ret_from_fork_asm+0x1a/0x30 [ 1187.493524][T13042] [ 1187.493531][T13042] [ 1187.493535][T13042] The buggy address belongs to a vmalloc virtual mapping [ 1187.493551][T13042] Memory state around the buggy address: [ 1187.493560][T13042] ffffc90015583f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1187.493572][T13042] ffffc90015583f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1187.493582][T13042] >ffffc90015584000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1187.493591][T13042] ^ [ 1187.493600][T13042] ffffc90015584080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1187.493611][T13042] ffffc90015584100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1187.493619][T13042] ================================================================== [ 1187.493634][T13042] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1187.493650][T13042] CPU: 1 UID: 0 PID: 13042 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1187.493669][T13042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1187.493680][T13042] Workqueue: usb_hub_wq hub_event [ 1187.493697][T13042] Call Trace: [ 1187.493703][T13042] [ 1187.493710][T13042] dump_stack_lvl+0x99/0x250 [ 1187.493726][T13042] ? __asan_memcpy+0x40/0x70 [ 1187.493743][T13042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1187.493759][T13042] ? __pfx__printk+0x10/0x10 [ 1187.493783][T13042] vpanic+0x281/0x750 [ 1187.493801][T13042] ? __pfx_vpanic+0x10/0x10 [ 1187.493822][T13042] panic+0xb9/0xc0 [ 1187.493837][T13042] ? __pfx_panic+0x10/0x10 [ 1187.493852][T13042] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1187.493870][T13042] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1187.493890][T13042] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.493910][T13042] check_panic_on_warn+0x89/0xb0 [ 1187.493929][T13042] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.493947][T13042] end_report+0x78/0x160 [ 1187.493966][T13042] kasan_report+0x129/0x150 [ 1187.493986][T13042] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.494011][T13042] __list_del_entry_valid_or_report+0xb5/0x190 [ 1187.494033][T13042] kcov_remote_start+0x2b0/0x6f0 [ 1187.494056][T13042] hub_event+0x158/0x4a20 [ 1187.494075][T13042] ? __lock_acquire+0xab9/0xd20 [ 1187.494106][T13042] ? do_raw_spin_lock+0x121/0x290 [ 1187.494124][T13042] ? look_up_lock_class+0x74/0x170 [ 1187.494141][T13042] ? register_lock_class+0x51/0x320 [ 1187.494166][T13042] ? __lock_acquire+0xab9/0xd20 [ 1187.494190][T13042] ? __pfx_hub_event+0x10/0x10 [ 1187.494209][T13042] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.494233][T13042] ? _raw_spin_unlock_irq+0x23/0x50 [ 1187.494248][T13042] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.494268][T13042] ? process_scheduled_works+0x9ef/0x17b0 [ 1187.494288][T13042] process_scheduled_works+0xae1/0x17b0 [ 1187.494317][T13042] ? __pfx_process_scheduled_works+0x10/0x10 [ 1187.494343][T13042] worker_thread+0x8a0/0xda0 [ 1187.494363][T13042] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1187.494381][T13042] ? __kthread_parkme+0x7b/0x200 [ 1187.494403][T13042] kthread+0x711/0x8a0 [ 1187.494419][T13042] ? __pfx_worker_thread+0x10/0x10 [ 1187.494444][T13042] ? __pfx_kthread+0x10/0x10 [ 1187.494458][T13042] ? rt_spin_unlock+0x150/0x200 [ 1187.494479][T13042] ? rt_spin_unlock+0x161/0x200 [ 1187.494497][T13042] ? __pfx_kthread+0x10/0x10 [ 1187.494514][T13042] ret_from_fork+0x439/0x7d0 [ 1187.494536][T13042] ? __pfx_ret_from_fork+0x10/0x10 [ 1187.494560][T13042] ? __switch_to_asm+0x39/0x70 [ 1187.494576][T13042] ? __switch_to_asm+0x33/0x70 [ 1187.494593][T13042] ? __pfx_kthread+0x10/0x10 [ 1187.494609][T13042] ret_from_fork_asm+0x1a/0x30 [ 1187.494634][T13042] [ 1187.494895][T13042] Kernel Offset: disabled