last executing test programs: 6m24.169817374s ago: executing program 4 (id=5): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m24.035045196s ago: executing program 4 (id=7): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x2400c031) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 6m23.979631857s ago: executing program 4 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m23.429027415s ago: executing program 4 (id=10): syz_clone(0x40100000, &(0x7f0000000500), 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000a40)="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") 6m22.994708221s ago: executing program 4 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f0000000580), &(0x7f0000000200)=""/28}, 0x20) sync() syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6m18.788610213s ago: executing program 4 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6m3.506555887s ago: executing program 32 (id=23): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 4m42.404974237s ago: executing program 0 (id=267): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000680)={{}, {}, [], {}, [], {0x10, 0x1}}, 0x24, 0x3) getxattr(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 4m42.19451005s ago: executing program 0 (id=268): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xd400, 0x0) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_clone(0x20a68000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000000)={"e50d1af80100007ea25fdd00ff00000008007effffff7f00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r8, 0x40b1}], 0x1, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) tkill(r5, 0x13) socket$netlink(0x10, 0x3, 0x8000000004) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x980000, &(0x7f0000000100)="3e0e9af23dc6902067e72db3d5212e1375cebb6843fec44bb71345fdcec13649e2fc5036ecd022230c55b481a235ee1d84e1b53e4813f073b1c84c6264b5e0696654a4d33023f147bd36e20720a73e3f635080c74a8a39f12ef61773710f31bc33b090110b9a", 0x66, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000300)="565b6ee488bdf6f0c3192e21e8cebd3c8b786fde24d04fa08e6352b15c3c672d7681024983afc0038aba281455be8d4236d57ff5fcb81cf34179567f420bc520e0d86742b0c9fb1249d0eb94f9fac9e1b2f6d706344952db5cf87cde57da6501eec1158be619a4ff5745bb40dfabddcc76658f0754ea964528b0ee81840e99cf628c570d001a4432fed8523cd41b3045ce18") openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x7, 0x7, 0x6, 0x0, {{0x18, 0x4, 0x1, 0x9, 0x60, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x3, [{@empty, 0x101}, {@rand_addr=0x64010102, 0xa}, {@multicast2, 0xca9b}, {@empty, 0xffff}]}, @timestamp_prespec={0x44, 0x4, 0x8a, 0x3, 0x1}, @lsrr={0x83, 0x7, 0xc4, [@rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x83, 0xc, "c364a224dacf6be10d1a"}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r9, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18) 4m40.935945299s ago: executing program 0 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vcsu(&(0x7f0000000440), 0x0, 0x30002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x22, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x72f8af82}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x9, 0xa, 0x30, 0xfffffffffffffffc}]}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x3e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x1, 0x5f5, 0x7fffffff}, 0x10, 0x2b58f, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff, r2, 0xffffffffffffffff], 0x0, 0x10, 0x1, @void, @value}, 0x94) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0xc0f85403, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/pid\x00') ioctl$NS_GET_USERNS(r6, 0x8004b709, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x1) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4m34.088444939s ago: executing program 0 (id=294): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 4m32.075223158s ago: executing program 0 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448cc, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sync() syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 4m30.295413644s ago: executing program 0 (id=306): syz_io_uring_setup(0x85d, &(0x7f00000000c0)={0x0, 0x506e, 0x2, 0x2, 0x104}, &(0x7f0000000280), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 4m29.95751847s ago: executing program 33 (id=306): syz_io_uring_setup(0x85d, &(0x7f00000000c0)={0x0, 0x506e, 0x2, 0x2, 0x104}, &(0x7f0000000280), &(0x7f00000002c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 1m56.084497977s ago: executing program 5 (id=790): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1}, 0x4f) 1m54.698715968s ago: executing program 5 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r4, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) write$binfmt_script(0xffffffffffffffff, &(0x7f0000002240)={'#! ', './file0', [{}, {0x20, '/'}, {0x20, 'rcu_utilization\x00'}, {0x20, '/proc/crypto\x00'}, {0x20, '/proc/crypto\x00'}, {0x20, '/proc/crypto\x00'}, {0x20, '^-'}, {0x20, 'cpu.stat\x00'}, {0x20, ',^'}, {0x20, 'batadv_slave_1\x00'}], 0xa, "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"}, 0x1069) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000280)="df", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x800) 1m47.779370379s ago: executing program 5 (id=801): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x4, 0x0, 0xdddd0000, 0x2000, &(0x7f000007a000/0x2000)=nil}) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) 1m45.822135358s ago: executing program 5 (id=806): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m43.302531215s ago: executing program 5 (id=811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$xdp(0x2c, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924032003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 1m35.899204213s ago: executing program 5 (id=828): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xd400, 0x0) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_clone(0x20a68000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000000)={"e50d1af80100007ea25fdd00ff00000008007effffff7f00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r8, 0x40b1}], 0x1, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) tkill(r5, 0x13) socket$netlink(0x10, 0x3, 0x8000000004) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x980000, &(0x7f0000000100)="3e0e9af23dc6902067e72db3d5212e1375cebb6843fec44bb71345fdcec13649e2fc5036ecd022230c55b481a235ee1d84e1b53e4813f073b1c84c6264b5e0696654a4d33023f147bd36e20720a73e3f635080c74a8a39f12ef61773710f31bc33b090110b9a", 0x66, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000300)="565b6ee488bdf6f0c3192e21e8cebd3c8b786fde24d04fa08e6352b15c3c672d7681024983afc0038aba281455be8d4236d57ff5fcb81cf34179567f420bc520e0d86742b0c9fb1249d0eb94f9fac9e1b2f6d706344952db5cf87cde57da6501eec1158be619a4ff5745bb40dfabddcc76658f0754ea964528b0ee81840e99cf628c570d001a4432fed8523cd41b3045ce189db2") openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x7, 0x7, 0x6, 0x0, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x3, [{@empty, 0x101}, {@rand_addr=0x64010102, 0xa}, {@multicast2, 0xca9b}, {@empty, 0xffff}]}, @timestamp_prespec={0x44, 0x4, 0x8a, 0x3, 0x1}, @lsrr={0x83, 0x7, 0xc4, [@rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x83, 0xb, "c364a224dacf6be10d"}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r9, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18) 1m35.098070025s ago: executing program 34 (id=828): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000054) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0xd400, 0x0) ioctl$MON_IOCQ_RING_SIZE(r3, 0x9205) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x20002, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_clone(0x20a68000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80b02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000000)={"e50d1af80100007ea25fdd00ff00000008007effffff7f00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000040)=[{r8, 0x40b1}], 0x1, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) tkill(r5, 0x13) socket$netlink(0x10, 0x3, 0x8000000004) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_clone(0x980000, &(0x7f0000000100)="3e0e9af23dc6902067e72db3d5212e1375cebb6843fec44bb71345fdcec13649e2fc5036ecd022230c55b481a235ee1d84e1b53e4813f073b1c84c6264b5e0696654a4d33023f147bd36e20720a73e3f635080c74a8a39f12ef61773710f31bc33b090110b9a", 0x66, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000300)="565b6ee488bdf6f0c3192e21e8cebd3c8b786fde24d04fa08e6352b15c3c672d7681024983afc0038aba281455be8d4236d57ff5fcb81cf34179567f420bc520e0d86742b0c9fb1249d0eb94f9fac9e1b2f6d706344952db5cf87cde57da6501eec1158be619a4ff5745bb40dfabddcc76658f0754ea964528b0ee81840e99cf628c570d001a4432fed8523cd41b3045ce189db2") openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x7, 0x7, 0x6, 0x0, {{0x17, 0x4, 0x1, 0x9, 0x5c, 0x64, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010101, {[@timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x3, [{@empty, 0x101}, {@rand_addr=0x64010102, 0xa}, {@multicast2, 0xca9b}, {@empty, 0xffff}]}, @timestamp_prespec={0x44, 0x4, 0x8a, 0x3, 0x1}, @lsrr={0x83, 0x7, 0xc4, [@rand_addr=0x64010101]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @generic={0x83, 0xb, "c364a224dacf6be10d"}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', r9, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r10, 0x0, 0xd}, 0x18) 10.174832641s ago: executing program 7 (id=1059): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa2000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x40, 0xf, 0x4, '8|*s'}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.335179178s ago: executing program 2 (id=1063): socket$inet6(0xa, 0x80000, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$I2C(&(0x7f0000004800), 0x0, 0x2) ioctl$I2C_SLAVE(r1, 0x703, 0x3eb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, r2) 8.215371989s ago: executing program 6 (id=1065): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) connect$netrom(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, 0x0, 0x0) 8.20355998s ago: executing program 2 (id=1066): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}}, 0x40080) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 8.133018711s ago: executing program 6 (id=1067): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 7.956794023s ago: executing program 6 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000000)='ufs\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r1, 0x300, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r5, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = openat$cgroup_pressure(r3, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f) close(r4) close(r6) r7 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r7, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r7, &(0x7f0000000440)="bb8f1ad1bf2a", 0x6, 0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000062d19c4978459f8e00070010009770fe840f531d350b1801f501a47cb80e2ad8c3cc4f874b481481b5933865064f198570ada66214d4d5465d08cf0f6df1c61a93e5deca239ed073917f1eb55d3c7c7feeb612788c5f8b7237", @ANYRES32=0x0, @ANYBLOB="00040000008c00002400128009000100626f6e640000000014000280080014000100000005001d"], 0x44}}, 0x0) 7.682263598s ago: executing program 6 (id=1069): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x44) keyctl$invalidate(0x15, r4) 7.367486572s ago: executing program 1 (id=1070): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 7.362431402s ago: executing program 2 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x34, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) 7.360706762s ago: executing program 1 (id=1072): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x42280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0xc, 0x4, 0x8, 0x9, 0x0, 0x5}, 0x0, &(0x7f0000000280)={0xff, 0xffff, 0x753, 0x22, 0x0, 0x1, 0x5, 0x7}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.79469078s ago: executing program 6 (id=1073): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8}, [], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r9 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000280), 0x80040, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000140)={0x6, 0x7, 0x801}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 6.728142682s ago: executing program 3 (id=1074): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x1000000d}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 6.710431592s ago: executing program 7 (id=1075): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="0200000008000c000000000002000200", @ANYRES32=0x0, @ANYBLOB="040000000000007f26ae950010000300000000002000000088"], 0x2c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x4, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3b}}}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="8a994f2a"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="e261681546c5"}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41) socket(0x848000000015, 0x805, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff807000000000000000000000008", 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25GETUID(r6, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r7 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000440)='/dev/cpu/#/msr\x00', r7) 5.955426843s ago: executing program 2 (id=1076): socket$inet6(0xa, 0x80000, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$I2C(&(0x7f0000004800), 0x0, 0x2) ioctl$I2C_SLAVE(r1, 0x703, 0x3eb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, r2) 4.424528845s ago: executing program 3 (id=1077): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044004) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/247, 0xf7}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/219, 0xdb}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000d00)=""/63, 0x3f}, {&(0x7f0000002a80)=""/4096, 0x1000}, {&(0x7f0000001840)=""/161, 0xa1}, {&(0x7f0000001900)=""/187, 0xbb}, {&(0x7f0000003a80)=""/122, 0x7a}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/4096, 0x1000}], 0x7}, 0x5}], 0x8, 0x0, 0x0) 4.381692096s ago: executing program 1 (id=1078): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 4.279450627s ago: executing program 2 (id=1079): io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x80001) io_submit(r0, 0x1, &(0x7f00000005c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="d1f7624a630e53c3", 0x8, 0x2, 0x0, 0x0, r1}]) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4.275513718s ago: executing program 7 (id=1080): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) sendfile(r2, r2, 0x0, 0x40008) 4.165513009s ago: executing program 1 (id=1081): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}}, 0x40080) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 3.479541269s ago: executing program 3 (id=1082): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) 2.660758361s ago: executing program 3 (id=1083): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x44) keyctl$invalidate(0x15, r4) 2.404174925s ago: executing program 1 (id=1084): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x1a43) shutdown(r6, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dstopts={{0x14, 0x29, 0x37, {0x3a}}}], 0x14}, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700"}) setregid(0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) 1.571619647s ago: executing program 3 (id=1085): keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x4f5e, 0x10100, 0x0, 0xfc}, 0x0, &(0x7f0000000280)) io_uring_enter(r1, 0x1dd7, 0x1, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.41081742s ago: executing program 1 (id=1086): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24041, 0x0) io_setup(0x202, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) 1.335372611s ago: executing program 7 (id=1087): syz_open_dev$sndpcmc(0x0, 0x0, 0xa340658bc40d4f52) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x1, 0x0, 0x0, 0x3}, 0x3}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x1000000d}) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 899.393817ms ago: executing program 3 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x9}, {0x0, 0x3, 0x0, 0x5}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0xa, @in=@loopback, 0x3500, 0x3, 0x1, 0x7}}, 0xe8) syz_open_procfs(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5}]}}}]}, 0x3c}}, 0x40080) ioctl$FBIOBLANK(r0, 0x4611, 0x2) 453.375604ms ago: executing program 2 (id=1089): socket$inet6(0xa, 0x80000, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$I2C(&(0x7f0000004800), 0x0, 0x2) ioctl$I2C_SLAVE(r1, 0x703, 0x3eb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) keyctl$revoke(0x3, r2) 146.248548ms ago: executing program 6 (id=1090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x84802, 0x0) 31.31435ms ago: executing program 7 (id=1091): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) ioctl$RTC_WKALM_SET(r0, 0x4028700f, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) 0s ago: executing program 7 (id=1092): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, 0x0}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB], 0x20) r1 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2) syz_open_dev$radio(0x0, 0x0, 0x2) preadv(r1, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/207, 0xcf}], 0x1, 0x6, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000400)={0x1, 0x0, {0x7fff, 0x9ba, 0x3014, 0x6, 0x4, 0x6, 0x0, 0x3}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x14, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) writev(r3, &(0x7f00000006c0), 0x0) kernel console output (not intermixed with test programs): 1.156:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 113.867434][ T26] audit: type=1326 audit(1750509191.156:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 113.899225][ T4884] FAT-fs (loop5): Unrecognized mount option "shorname=mixed" or missing value [ 114.370522][ T4894] loop2: detected capacity change from 0 to 1024 [ 114.384296][ T26] audit: type=1326 audit(1750509191.156:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 114.522162][ T26] audit: type=1326 audit(1750509191.156:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 114.549473][ T4894] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 114.560742][ T26] audit: type=1326 audit(1750509191.156:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 114.586146][ T4894] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 114.618921][ T26] audit: type=1326 audit(1750509191.156:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 114.674343][ T26] audit: type=1326 audit(1750509191.156:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 114.712746][ T26] audit: type=1326 audit(1750509191.156:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 115.804154][ T4211] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 115.815075][ T4211] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 116.025984][ T26] audit: type=1326 audit(1750509191.156:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4883 comm="syz.5.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feee6a53963 code=0x7ffc0000 [ 117.808750][ T4258] Bluetooth: hci4: Frame reassembly failed (-84) [ 117.949145][ T4932] fido_id[4932]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 118.967191][ T4216] Bluetooth: hci5: command 0x1003 tx timeout [ 118.973507][ T4216] Bluetooth: hci4: command 0x1003 tx timeout [ 118.982199][ T4175] Bluetooth: hci4: sending frame failed (-49) [ 119.066998][ T1480] device hsr_slave_0 left promiscuous mode [ 119.113245][ T1480] device hsr_slave_1 left promiscuous mode [ 119.522479][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.600100][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.827824][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.846746][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.918230][ T1480] device bridge_slave_1 left promiscuous mode [ 119.945750][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.034794][ T1480] device bridge_slave_0 left promiscuous mode [ 120.073904][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.046387][ T1480] device veth1_macvtap left promiscuous mode [ 121.047385][ T23] Bluetooth: hci4: command 0x1001 tx timeout [ 121.076762][ T1480] device veth0_macvtap left promiscuous mode [ 121.076757][ T4175] Bluetooth: hci4: sending frame failed (-49) [ 121.082862][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 121.154843][ T1480] device veth1_vlan left promiscuous mode [ 121.195941][ T1480] device veth0_vlan left promiscuous mode [ 121.763438][ T4984] Zero length message leads to an empty skb [ 123.126816][ T4170] Bluetooth: hci5: command 0x1009 tx timeout [ 123.135247][ T4170] Bluetooth: hci4: command 0x1009 tx timeout [ 123.380709][ T1480] team0 (unregistering): Port device team_slave_1 removed [ 123.644873][ T1480] team0 (unregistering): Port device team_slave_0 removed [ 125.313247][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 125.313260][ T26] audit: type=1326 audit(1750509202.726:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 125.479321][ T1480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.876942][ T1480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.893874][ T5008] loop1: detected capacity change from 0 to 256 [ 125.947293][ T5008] FAT-fs (loop1): Unrecognized mount option "shorname=mixed" or missing value [ 125.962921][ T26] audit: type=1326 audit(1750509202.906:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 126.076679][ T26] audit: type=1326 audit(1750509202.906:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 126.302866][ T1480] bond0 (unregistering): Released all slaves [ 126.465220][ T26] audit: type=1326 audit(1750509202.916:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 127.368260][ T26] audit: type=1326 audit(1750509202.916:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 127.392340][ T26] audit: type=1326 audit(1750509203.156:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 127.415549][ T26] audit: type=1326 audit(1750509203.306:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9d7e4963 code=0x7ffc0000 [ 127.453931][ T5022] loop3: detected capacity change from 0 to 1024 [ 128.278288][ T26] audit: type=1326 audit(1750509203.306:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9d7e33df code=0x7ffc0000 [ 129.638463][ T26] audit: type=1326 audit(1750509203.306:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc9d7e49b7 code=0x7ffc0000 [ 129.671055][ T26] audit: type=1326 audit(1750509203.306:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5006 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9d7e3290 code=0x7ffc0000 [ 132.550514][ T26] kauditd_printk_skb: 53 callbacks suppressed [ 132.550527][ T26] audit: type=1326 audit(1750509209.966:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 132.611178][ T5080] loop3: detected capacity change from 0 to 256 [ 132.642552][ T26] audit: type=1326 audit(1750509210.026:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 132.704368][ T26] audit: type=1326 audit(1750509210.026:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 132.768258][ T5080] FAT-fs (loop3): Unrecognized mount option "shorname=mixed" or missing value [ 132.819785][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826122][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.012380][ T26] audit: type=1326 audit(1750509210.026:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 133.193456][ T26] audit: type=1326 audit(1750509210.026:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 133.400992][ T26] audit: type=1326 audit(1750509210.026:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 133.572460][ T26] audit: type=1326 audit(1750509210.026:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12c09d2963 code=0x7ffc0000 [ 135.586833][ T26] audit: type=1326 audit(1750509210.026:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f12c09d13df code=0x7ffc0000 [ 136.403099][ T4340] Bluetooth: hci4: Frame reassembly failed (-84) [ 136.417316][ T26] audit: type=1326 audit(1750509210.026:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f12c09d29b7 code=0x7ffc0000 [ 137.546764][ T26] audit: type=1326 audit(1750509210.026:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12c09d1290 code=0x7ffc0000 [ 137.684036][ T26] audit: type=1326 audit(1750509210.026:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12c09d252b code=0x7ffc0000 [ 137.712897][ T26] audit: type=1326 audit(1750509210.156:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12c09d158a code=0x7ffc0000 [ 137.783806][ T26] audit: type=1326 audit(1750509210.156:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12c09d158a code=0x7ffc0000 [ 137.849817][ T26] audit: type=1326 audit(1750509210.186:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f12c09d1197 code=0x7ffc0000 [ 137.993273][ T5138] loop1: detected capacity change from 0 to 1024 [ 138.006802][ T26] audit: type=1326 audit(1750509210.186:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f12c09d40ca code=0x7ffc0000 [ 138.066231][ T5138] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 138.096396][ T5138] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 138.133790][ T26] audit: type=1326 audit(1750509210.276:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12c09d1290 code=0x7ffc0000 [ 138.410954][ T4170] Bluetooth: hci5: command 0x1003 tx timeout [ 138.470236][ T4170] Bluetooth: hci4: command 0x1003 tx timeout [ 138.476429][ T4180] Bluetooth: hci4: sending frame failed (-49) [ 138.487274][ T26] audit: type=1326 audit(1750509210.276:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12c09d252b code=0x7ffc0000 [ 138.510540][ T26] audit: type=1326 audit(1750509210.276:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12c09d158a code=0x7ffc0000 [ 138.536756][ T26] audit: type=1326 audit(1750509210.276:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 138.559984][ T26] audit: type=1326 audit(1750509210.306:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5077 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 139.349442][ T5153] loop1: detected capacity change from 0 to 256 [ 139.491571][ T5153] FAT-fs (loop1): Unrecognized mount option "shorname=mixed" or missing value [ 140.486952][ T23] Bluetooth: hci4: command 0x1001 tx timeout [ 141.260209][ T4180] Bluetooth: hci4: sending frame failed (-49) [ 141.266374][ T23] Bluetooth: hci5: command 0x1001 tx timeout [ 143.286913][ T4354] Bluetooth: hci4: command 0x1009 tx timeout [ 143.366866][ T4354] Bluetooth: hci5: command 0x1009 tx timeout [ 143.435460][ T5182] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 143.486754][ T5182] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 144.943752][ T5206] loop1: detected capacity change from 0 to 1024 [ 145.084767][ T5206] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 145.116919][ T5206] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 145.253510][ T4354] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 145.271264][ T4354] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.572003][ T5213] fido_id[5213]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.764230][ T26] kauditd_printk_skb: 111 callbacks suppressed [ 147.764243][ T26] audit: type=1326 audit(1750509225.176:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 147.803536][ T5240] loop5: detected capacity change from 0 to 256 [ 147.818663][ T5240] FAT-fs (loop5): Unrecognized mount option "shorname=mixed" or missing value [ 147.916952][ T26] audit: type=1326 audit(1750509225.216:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 148.265780][ T26] audit: type=1326 audit(1750509225.216:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 148.292424][ T26] audit: type=1326 audit(1750509225.216:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 149.263419][ T26] audit: type=1326 audit(1750509225.216:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 149.456777][ T26] audit: type=1326 audit(1750509225.216:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 149.921462][ T26] audit: type=1326 audit(1750509225.216:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feee6a53963 code=0x7ffc0000 [ 150.426709][ T26] audit: type=1326 audit(1750509225.216:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feee6a523df code=0x7ffc0000 [ 150.437517][ T5268] loop5: detected capacity change from 0 to 1024 [ 150.507683][ T5268] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 150.546754][ T26] audit: type=1326 audit(1750509225.216:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feee6a539b7 code=0x7ffc0000 [ 150.557931][ T5268] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 150.672598][ T26] audit: type=1326 audit(1750509225.216:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5239 comm="syz.5.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee6a52290 code=0x7ffc0000 [ 151.033145][ T21] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 151.057846][ T21] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 151.971557][ T5281] fido_id[5281]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 155.606817][ T4170] Bluetooth: hci5: command 0x1003 tx timeout [ 155.615236][ T4170] Bluetooth: hci4: command 0x1003 tx timeout [ 155.928607][ T4175] Bluetooth: hci4: sending frame failed (-49) [ 157.599337][ T5339] loop3: detected capacity change from 0 to 1024 [ 157.688393][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 157.738700][ T5339] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 157.945525][ T5339] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 158.026899][ T4354] Bluetooth: hci4: command 0x1001 tx timeout [ 158.033292][ T4175] Bluetooth: hci4: sending frame failed (-49) [ 158.250518][ T4216] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 158.281641][ T4216] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 158.530622][ T5357] fido_id[5357]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 158.992072][ T5365] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 159.025765][ T5365] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 159.766714][ T4216] Bluetooth: hci5: command 0x1009 tx timeout [ 160.086883][ T4216] Bluetooth: hci4: command 0x1009 tx timeout [ 161.395122][ T5416] loop2: detected capacity change from 0 to 1024 [ 161.463773][ T5416] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 161.546126][ T5418] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 161.556787][ T5416] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 161.608188][ T5418] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 161.965765][ T4354] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 161.989113][ T4354] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 162.220032][ T5431] fido_id[5431]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 162.625578][ T5439] device wg2 entered promiscuous mode [ 164.086752][ T4213] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 165.179342][ T4213] usb 6-1: Using ep0 maxpacket: 16 [ 166.487422][ T4213] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 166.517337][ T4213] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.536289][ T4213] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.556629][ T4213] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.576854][ T5476] loop3: detected capacity change from 0 to 1024 [ 166.699052][ T4213] usb 6-1: config 7 interface 0 has no altsetting 0 [ 166.706143][ T4213] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 166.716717][ T4213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.743715][ T5476] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 166.757024][ T5476] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 167.237061][ T4213] usb 6-1: can't set config #7, error -71 [ 167.329823][ T4213] usb 6-1: USB disconnect, device number 2 [ 169.200538][ T5507] input: syz1 as /devices/virtual/input/input5 [ 169.260366][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.298'. [ 169.281813][ T5513] device bridge0 entered promiscuous mode [ 169.304756][ T5513] device macvtap1 entered promiscuous mode [ 169.377115][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.298'. [ 169.405799][ T5515] device bridge0 left promiscuous mode [ 169.982375][ T5529] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.303'. [ 171.867452][ T5541] loop2: detected capacity change from 0 to 1024 [ 171.882843][ T1480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.013877][ T5541] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 172.049609][ T5541] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 172.250221][ T1480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.334386][ T1480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.426096][ T4211] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 172.441230][ T1480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.482994][ T4211] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 172.497815][ T5545] chnl_net:caif_netlink_parms(): no params data found [ 172.964185][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 172.964199][ T26] audit: type=1326 audit(1750509250.376:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 173.063809][ T5564] loop5: detected capacity change from 0 to 256 [ 173.076814][ T26] audit: type=1326 audit(1750509250.436:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 173.139429][ T5545] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.176920][ T26] audit: type=1326 audit(1750509250.436:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 173.205075][ T5545] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.212862][ T5564] FAT-fs (loop5): Unrecognized mount option "shorname=mixed" or missing value [ 173.248129][ T5545] device bridge_slave_0 entered promiscuous mode [ 173.391177][ T26] audit: type=1326 audit(1750509250.436:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 173.368981][ T5545] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.614121][ T5545] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.697431][ T5545] device bridge_slave_1 entered promiscuous mode [ 173.704488][ T26] audit: type=1326 audit(1750509250.436:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feee6a53963 code=0x7ffc0000 [ 173.756813][ T26] audit: type=1326 audit(1750509250.436:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feee6a523df code=0x7ffc0000 [ 173.866803][ T26] audit: type=1326 audit(1750509250.456:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feee6a539b7 code=0x7ffc0000 [ 173.895967][ T5545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.975102][ T5545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.008232][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 174.009877][ T26] audit: type=1326 audit(1750509250.456:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee6a52290 code=0x7ffc0000 [ 174.856741][ T26] audit: type=1326 audit(1750509250.456:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feee6a5352b code=0x7ffc0000 [ 174.880821][ T26] audit: type=1326 audit(1750509250.526:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5561 comm="syz.5.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feee6a5258a code=0x7ffc0000 [ 175.323335][ T5545] team0: Port device team_slave_0 added [ 175.546721][ T4284] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 175.561711][ T5545] team0: Port device team_slave_1 added [ 175.655870][ T5545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.674684][ T5545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.686878][ T4213] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 175.746815][ T5545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.800362][ T5545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.816253][ T5545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.846870][ T4216] Bluetooth: hci1: command 0x0406 tx timeout [ 175.854274][ T4216] Bluetooth: hci3: command 0x0406 tx timeout [ 175.880163][ T4216] Bluetooth: hci0: command 0x0406 tx timeout [ 175.956984][ T4284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.984523][ T5545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.996892][ T4284] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 176.047887][ T4284] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 176.096822][ T4216] Bluetooth: hci2: command 0x041b tx timeout [ 176.106873][ T4284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.156516][ T4284] usb 3-1: config 0 descriptor?? [ 176.176999][ T4213] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.216952][ T4213] usb 2-1: not running at top speed; connect to a high speed hub [ 176.239991][ T4284] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 176.278687][ T4284] dvb-usb: bulk message failed: -22 (3/0) [ 176.307012][ T4213] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 176.322610][ T4213] usb 2-1: config 1 has no interface number 0 [ 176.335617][ T4284] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 176.350003][ T4213] usb 2-1: config 1 interface 138 has no altsetting 0 [ 176.372642][ T5545] device hsr_slave_0 entered promiscuous mode [ 176.382315][ T4284] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 176.404524][ T4284] usb 3-1: media controller created [ 176.430805][ T4284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.447222][ T5594] dvb-usb: bulk message failed: -22 (2/0) [ 176.516999][ T5545] device hsr_slave_1 entered promiscuous mode [ 176.527238][ T4213] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 176.556143][ T4284] dvb-usb: bulk message failed: -22 (6/0) [ 176.558542][ T5545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.581249][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.589641][ T5545] Cannot create hsr debugfs directory [ 176.593409][ T4284] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 176.611517][ T4213] usb 2-1: Product: syz [ 176.615872][ T4213] usb 2-1: Manufacturer: syz [ 176.625690][ T4213] usb 2-1: SerialNumber: syz [ 176.661034][ T4284] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 176.721010][ T4284] dvb-usb: schedule remote query interval to 150 msecs. [ 176.736762][ T4284] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 176.757739][ T4284] usb 3-1: USB disconnect, device number 2 [ 176.889284][ T4284] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 177.335528][ T4213] usb 2-1: USB disconnect, device number 2 [ 177.483720][ T5545] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 177.981634][ T5545] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.211288][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 178.211301][ T26] audit: type=1326 audit(1750509255.626:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 178.233678][ T4216] Bluetooth: hci2: command 0x040f tx timeout [ 178.267220][ T26] audit: type=1326 audit(1750509255.666:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 178.297790][ T5635] loop1: detected capacity change from 0 to 256 [ 178.299265][ T5545] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.329563][ T5635] FAT-fs (loop1): Unrecognized mount option "shorname=mixed" or missing value [ 179.661441][ T5545] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.089964][ T26] audit: type=1326 audit(1750509255.706:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 180.331123][ T26] audit: type=1326 audit(1750509255.706:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 180.336847][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 180.427365][ T26] audit: type=1326 audit(1750509255.706:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 180.490760][ T1480] device hsr_slave_0 left promiscuous mode [ 181.046181][ T1480] device hsr_slave_1 left promiscuous mode [ 181.053619][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.061157][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.077433][ T1480] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.084902][ T1480] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.106762][ T1480] device bridge_slave_1 left promiscuous mode [ 181.112965][ T1480] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.137518][ T1480] device bridge_slave_0 left promiscuous mode [ 181.143798][ T1480] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.186719][ T26] audit: type=1326 audit(1750509255.706:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 181.221046][ T1480] device veth1_macvtap left promiscuous mode [ 181.239656][ T1480] device veth0_macvtap left promiscuous mode [ 181.245772][ T1480] device veth1_vlan left promiscuous mode [ 181.257821][ T26] audit: type=1326 audit(1750509255.706:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 181.489563][ T26] audit: type=1326 audit(1750509255.706:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9d7e4963 code=0x7ffc0000 [ 181.948430][ T26] audit: type=1326 audit(1750509255.706:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9d7e33df code=0x7ffc0000 [ 181.970825][ T26] audit: type=1326 audit(1750509255.706:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5634 comm="syz.1.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc9d7e49b7 code=0x7ffc0000 [ 182.103536][ T5675] input: syz0 as /devices/virtual/input/input7 [ 182.513112][ T1480] team0 (unregistering): Port device team_slave_1 removed [ 182.587042][ T1480] team0 (unregistering): Port device team_slave_0 removed [ 182.660337][ T1480] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.683036][ T5692] loop5: detected capacity change from 0 to 256 [ 182.716332][ T1480] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.721136][ T5692] FAT-fs (loop5): Unrecognized mount option "shorname=mixed" or missing value [ 183.173794][ T1480] bond0 (unregistering): Released all slaves [ 183.862137][ T5545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.239030][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.247284][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.305190][ T5545] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.383112][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.438243][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.447981][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.455185][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.744232][ T5545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 184.825928][ T5545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.914648][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.957317][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.157381][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.641805][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.649075][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.923129][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.959910][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.012495][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.059792][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.094879][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.135759][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.153336][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.183426][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.219765][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.259276][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.287598][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.324312][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.458686][ T5744] xt_hashlimit: invalid rate [ 186.534187][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.553543][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.600513][ T5545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.411014][ T5776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 188.144254][ T5781] ======================================================= [ 188.144254][ T5781] WARNING: The mand mount option has been deprecated and [ 188.144254][ T5781] and is ignored by this kernel. Remove the mand [ 188.144254][ T5781] option from the mount to silence this warning. [ 188.144254][ T5781] ======================================================= [ 188.157583][ T5545] device veth0_vlan entered promiscuous mode [ 188.876319][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.906083][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.952811][ T5788] netlink: 44 bytes leftover after parsing attributes in process `syz.5.351'. [ 188.963448][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.988489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 189.058805][ T5545] device veth1_vlan entered promiscuous mode [ 189.094737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 189.131608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 189.154195][ T5781] ODEBUG: Out of memory. ODEBUG disabled [ 189.176469][ T5795] kvm [5792]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 189.202495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 189.249423][ T5795] kvm [5792]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 189.274921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 189.300641][ T5545] device veth0_macvtap entered promiscuous mode [ 189.334388][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 189.334403][ T26] audit: type=1326 audit(1750509266.746:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 189.342602][ T5799] loop1: detected capacity change from 0 to 256 [ 189.366101][ T5545] device veth1_macvtap entered promiscuous mode [ 189.448595][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.461757][ T26] audit: type=1326 audit(1750509266.756:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 189.507697][ T5799] FAT-fs (loop1): Unrecognized mount option "shorname=mixed" or missing value [ 189.536244][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.577775][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.591777][ T26] audit: type=1326 audit(1750509266.756:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 189.641930][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.676382][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.697445][ T26] audit: type=1326 audit(1750509266.756:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 189.740122][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.796712][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.826447][ T26] audit: type=1326 audit(1750509266.756:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 189.861621][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.918089][ T5545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.945946][ T26] audit: type=1326 audit(1750509266.756:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 189.969870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.008845][ T26] audit: type=1326 audit(1750509266.756:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9d7e4963 code=0x7ffc0000 [ 190.017058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.238328][ T26] audit: type=1326 audit(1750509266.756:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9d7e33df code=0x7ffc0000 [ 190.309459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.374376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.443794][ T26] audit: type=1326 audit(1750509266.756:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc9d7e49b7 code=0x7ffc0000 [ 190.469531][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.503934][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.544414][ T26] audit: type=1326 audit(1750509266.756:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5798 comm="syz.1.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9d7e3290 code=0x7ffc0000 [ 190.575180][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.616032][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.652084][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.699473][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.753468][ T5545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.800554][ T5545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.843383][ T5545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.879298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.918018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.964739][ T5545] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.988521][ T5545] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.042294][ T5545] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.084739][ T5545] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.404495][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.443081][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.505848][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.545405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 191.584799][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.644782][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.250577][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.257138][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.279083][ T5898] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 [ 196.388138][ T5902] netlink: 136 bytes leftover after parsing attributes in process `syz.6.373'. [ 197.221752][ T5917] loop5: detected capacity change from 0 to 1024 [ 197.290694][ T5917] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 197.344748][ T5917] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 198.679556][ T5944] loop7: detected capacity change from 0 to 16384 [ 199.714428][ T5960] syz.1.386 uses obsolete (PF_INET,SOCK_PACKET) [ 200.634124][ T5975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 201.364009][ T5978] loop2: detected capacity change from 0 to 1024 [ 201.466915][ T5978] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 201.486051][ T5978] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 202.723883][ T4211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 202.992557][ T6023] xt_cgroup: xt_cgroup: no path or classid specified [ 203.149367][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.197730][ T4211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.218350][ T4211] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.238009][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.610403][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 203.629743][ T4284] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 203.684226][ T4211] usb 4-1: config 0 descriptor?? [ 203.949398][ T6038] process 'syz.6.404' launched '/dev/fd/3' with NULL argv: empty string added [ 204.066792][ T4284] usb 2-1: config 0 has an invalid interface number: 189 but max is 0 [ 204.113557][ T4284] usb 2-1: config 0 has no interface number 0 [ 204.147460][ T4284] usb 2-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 204.168573][ T6045] loop6: detected capacity change from 0 to 1024 [ 204.186846][ T6045] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 204.195833][ T6045] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 204.212140][ T4284] usb 2-1: config 0 interface 189 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 204.223905][ T5999] udc-core: couldn't find an available UDC or it's busy [ 204.231409][ T5999] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 204.247524][ T4284] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 204.273970][ T4284] usb 2-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.787576][ T4284] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 204.797139][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.805419][ T4284] usb 2-1: Product: syz [ 204.812387][ T4284] usb 2-1: Manufacturer: syz [ 204.864569][ T4284] usb 2-1: SerialNumber: syz [ 205.098120][ T4284] usb 2-1: config 0 descriptor?? [ 205.129934][ T6022] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 205.178388][ T4284] ums-alauda 2-1:0.189: USB Mass Storage device detected [ 205.303228][ T6060] binder: 6059:6060 ioctl c018620c 2000000000c0 returned -1 [ 205.414245][ T4211] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000D/input/input8 [ 206.014300][ T4211] uclogic 0003:256C:006D.000D: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 206.084213][ T7] usb 2-1: USB disconnect, device number 3 [ 206.095377][ T4211] usb 4-1: USB disconnect, device number 2 [ 206.318139][ T6080] fido_id[6080]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 206.566847][ T1108] Bluetooth: hci7: command 0x0406 tx timeout [ 207.016831][ T4208] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.467066][ T4208] usb 7-1: Using ep0 maxpacket: 16 [ 207.696877][ T4208] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.558440][ T4208] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.576661][ T4208] usb 7-1: config 0 interface 0 has no altsetting 0 [ 208.583403][ T4208] usb 7-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 208.594522][ T4208] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.713974][ T4208] usb 7-1: config 0 descriptor?? [ 208.900004][ T6115] team0: No ports can be present during mode change [ 208.928490][ T6115] netlink: 'syz.2.419': attribute type 10 has an invalid length. [ 209.619321][ T4208] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 209.766815][ T4208] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 210.480385][ T6115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.487049][ T4208] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 210.572046][ T4208] lenovo 0003:17EF:6009.000E: unknown main item tag 0x0 [ 210.582684][ T4208] lenovo 0003:17EF:6009.000E: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.6-1/input0 [ 210.596919][ T6115] team0: Port device bond0 added [ 210.721520][ T4208] usb 7-1: USB disconnect, device number 2 [ 210.747098][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 210.797699][ T6143] fido_id[6143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 210.867783][ T6128] team0 (unregistering): Port device team_slave_0 removed [ 210.908535][ T6128] team0 (unregistering): Port device team_slave_1 removed [ 210.960714][ T6128] team0 (unregistering): Port device bond0 removed [ 215.607472][ T6199] device macsec0 entered promiscuous mode [ 217.015507][ T4354] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 217.725619][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 219.056911][ T4354] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 219.066445][ T4354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.103408][ T4354] usb 7-1: Product: syz [ 219.806682][ T4354] usb 7-1: Manufacturer: syz [ 219.829634][ T4354] usb 7-1: SerialNumber: syz [ 219.864281][ T4354] usb 7-1: config 0 descriptor?? [ 219.916793][ T4354] usb 7-1: can't set config #0, error -71 [ 219.951391][ T4354] usb 7-1: USB disconnect, device number 3 [ 224.907541][ T6330] netlink: 'syz.1.466': attribute type 27 has an invalid length. [ 226.906825][ T4170] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 227.186884][ T4170] usb 2-1: Using ep0 maxpacket: 8 [ 227.317342][ T4170] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.351819][ T4170] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 227.386913][ T4170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 227.506665][ T4170] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 227.527176][ T4170] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 227.536712][ T4170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.628839][ T4170] hub 2-1:1.0: bad descriptor, ignoring hub [ 227.635192][ T4170] hub: probe of 2-1:1.0 failed with error -5 [ 227.648505][ T4170] cdc_wdm 2-1:1.0: skipping garbage [ 227.654570][ T4170] cdc_wdm 2-1:1.0: skipping garbage [ 227.699863][ T4170] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 227.714065][ T4170] cdc_wdm 2-1:1.0: Unknown control protocol [ 228.068309][ T4170] usb 2-1: USB disconnect, device number 4 [ 238.067531][ T6495] loop6: detected capacity change from 0 to 1024 [ 238.238908][ T6495] EXT4-fs (loop6): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 238.249752][ T6495] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 238.381334][ T6506] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 241.586653][ T6544] overlayfs: missing 'workdir' [ 243.500142][ T1110] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 244.394013][ T6593] loop3: detected capacity change from 0 to 1024 [ 244.416716][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 244.436273][ T6593] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 244.463934][ T6593] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 244.546917][ T1110] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 244.560367][ T1110] usb 3-1: config 0 has no interface number 0 [ 244.602058][ T1110] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 244.630900][ T1110] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 244.666340][ T1110] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.710663][ T1110] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 244.731803][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.761811][ T1110] usb 3-1: config 0 descriptor?? [ 244.838606][ T1110] ldusb 3-1:0.55: Interrupt in endpoint not found [ 244.962050][ T4213] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 245.044461][ T1110] usb 3-1: USB disconnect, device number 3 [ 245.138879][ T4211] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 245.177289][ T4211] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 245.216787][ T4213] usb 2-1: Using ep0 maxpacket: 16 [ 245.329311][ T6616] fido_id[6616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 245.357302][ T4213] usb 2-1: config index 0 descriptor too short (expected 59154, got 18) [ 245.365821][ T4213] usb 2-1: config 0 has no interfaces? [ 245.580498][ T4213] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 245.616988][ T4213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.647963][ T4213] usb 2-1: Product: syz [ 245.652520][ T4213] usb 2-1: Manufacturer: syz [ 245.716510][ T4213] usb 2-1: SerialNumber: syz [ 245.892068][ T4213] usb 2-1: config 0 descriptor?? [ 246.209698][ T1108] usb 2-1: USB disconnect, device number 5 [ 247.020185][ T6665] UBIFS error (pid: 6665): cannot open "/dev/sg0", error -22 [ 247.166024][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 247.166060][ T26] audit: type=1326 audit(1750509324.556:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 247.584056][ T6666] loop3: detected capacity change from 0 to 256 [ 247.642748][ T6666] FAT-fs (loop3): Unrecognized mount option "shorname=mixed" or missing value [ 247.664412][ T26] audit: type=1326 audit(1750509324.666:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 247.688559][ T26] audit: type=1326 audit(1750509324.666:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 247.710849][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.824021][ T26] audit: type=1326 audit(1750509324.836:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 247.846227][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.960720][ T26] audit: type=1326 audit(1750509324.836:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 248.031170][ T26] audit: type=1326 audit(1750509324.846:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 248.107309][ T26] audit: type=1326 audit(1750509324.846:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12c09d2963 code=0x7ffc0000 [ 248.199798][ T26] audit: type=1326 audit(1750509324.866:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f12c09d13df code=0x7ffc0000 [ 248.294838][ T26] audit: type=1326 audit(1750509324.926:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f12c09d29b7 code=0x7ffc0000 [ 248.401826][ T26] audit: type=1326 audit(1750509324.946:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.3.535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12c09d1290 code=0x7ffc0000 [ 250.209291][ T6716] loop1: detected capacity change from 0 to 1024 [ 250.247676][ T6716] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 250.282046][ T6716] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 251.752791][ T1108] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 251.802425][ T1108] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz0] on syz0 [ 253.309439][ T6760] fido_id[6760]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.318201][ T6774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.559'. [ 253.832885][ T6796] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 254.056863][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 254.056878][ T26] audit: type=1326 audit(1750509331.466:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 255.202259][ T6810] loop2: detected capacity change from 0 to 1024 [ 255.263699][ T26] audit: type=1326 audit(1750509331.466:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 255.317585][ T26] audit: type=1326 audit(1750509331.466:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 255.356562][ T6810] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 255.411591][ T6810] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 255.426632][ T26] audit: type=1326 audit(1750509331.466:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 255.475493][ T26] audit: type=1326 audit(1750509331.466:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 255.691273][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698311][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.719091][ T6826] netlink: 47 bytes leftover after parsing attributes in process `syz.1.570'. [ 255.758892][ T6832] Cannot find add_set index 0 as target [ 256.418770][ T26] audit: type=1326 audit(1750509331.466:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 256.587943][ T26] audit: type=1326 audit(1750509331.466:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 256.768022][ T26] audit: type=1326 audit(1750509331.466:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 256.793490][ T26] audit: type=1326 audit(1750509331.466:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 256.945034][ T26] audit: type=1326 audit(1750509331.466:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 257.878954][ T4354] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 257.893785][ T4354] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 257.930141][ T144] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x5c [ 258.037691][ T6861] fido_id[6861]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.702303][ T26] kauditd_printk_skb: 49 callbacks suppressed [ 259.702323][ T26] audit: type=1326 audit(1750509337.116:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 259.778704][ T26] audit: type=1326 audit(1750509337.116:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6868 comm="syz.3.580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c09d2929 code=0x7ffc0000 [ 260.295577][ T1110] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 260.996964][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 261.117717][ T1110] usb 2-1: config 0 has an invalid interface number: 197 but max is 0 [ 261.138548][ T1110] usb 2-1: config 0 has no interface number 0 [ 261.476929][ T1110] usb 2-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=f7.98 [ 261.602740][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.617280][ T1110] usb 2-1: Product: syz [ 261.623195][ T1110] usb 2-1: Manufacturer: syz [ 261.628252][ T1110] usb 2-1: SerialNumber: syz [ 261.650909][ T1110] usb 2-1: config 0 descriptor?? [ 261.688751][ T1110] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 261.734483][ T6903] loop2: detected capacity change from 0 to 1024 [ 261.927793][ T1110] usb 2-1: USB disconnect, device number 6 [ 261.980686][ T6903] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 262.012699][ T2421] usb 2-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 262.084349][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.590'. [ 262.229368][ T6903] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 262.877013][ T2421] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 263.548183][ T26] audit: type=1326 audit(1750509340.966:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 263.608805][ T26] audit: type=1326 audit(1750509340.966:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 263.716027][ T6925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.597'. [ 263.753089][ T26] audit: type=1326 audit(1750509340.966:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 263.799000][ T26] audit: type=1326 audit(1750509340.966:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 263.951380][ T26] audit: type=1326 audit(1750509340.966:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 264.623352][ T26] audit: type=1326 audit(1750509340.966:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 264.703711][ T26] audit: type=1326 audit(1750509340.966:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 264.738366][ T4242] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 264.758981][ T4242] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 264.801001][ T26] audit: type=1326 audit(1750509340.966:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 264.838468][ T6911] sctp: failed to load transform for md5: -2 [ 264.965397][ T26] audit: type=1326 audit(1750509340.966:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.027284][ T26] audit: type=1326 audit(1750509340.966:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.083527][ T26] audit: type=1326 audit(1750509340.966:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.088821][ T6941] fido_id[6941]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 265.219082][ T26] audit: type=1326 audit(1750509340.966:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.393938][ T26] audit: type=1326 audit(1750509340.966:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.781567][ T26] audit: type=1326 audit(1750509340.966:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.864102][ T26] audit: type=1326 audit(1750509340.966:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.922254][ T26] audit: type=1326 audit(1750509340.966:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 265.979905][ T26] audit: type=1326 audit(1750509340.966:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6920 comm="syz.6.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 266.938361][ T6974] loop6: detected capacity change from 0 to 256 [ 266.998314][ T6974] FAT-fs (loop6): Unrecognized mount option "shorname=mixed" or missing value [ 267.153061][ T6977] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 267.855115][ T6977] hfsplus: unable to find HFS+ superblock [ 268.447473][ T1108] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 268.827958][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.850012][ T1108] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.874665][ T1108] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 268.920532][ T1108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.941481][ T1108] usb 7-1: config 0 descriptor?? [ 268.965644][ T7009] loop3: detected capacity change from 0 to 1024 [ 269.037128][ T7009] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 269.093248][ T7009] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 269.211084][ T7012] loop2: detected capacity change from 0 to 256 [ 269.286755][ T1108] usbhid 7-1:0.0: can't add hid device: -71 [ 269.303022][ T1108] usbhid: probe of 7-1:0.0 failed with error -71 [ 269.310826][ T7012] FAT-fs (loop2): Unrecognized mount option "shorname=mixed" or missing value [ 269.352848][ T1108] usb 7-1: USB disconnect, device number 4 [ 270.440570][ T1108] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 270.471849][ T1108] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 270.750412][ T7025] fido_id[7025]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 271.706176][ T26] kauditd_printk_skb: 89 callbacks suppressed [ 271.706189][ T26] audit: type=1326 audit(1750509349.116:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 271.744036][ T7050] loop5: detected capacity change from 0 to 256 [ 271.810532][ T26] audit: type=1326 audit(1750509349.136:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 271.960006][ T26] audit: type=1326 audit(1750509349.136:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 271.961677][ T7050] FAT-fs (loop5): Unrecognized mount option "shorname=mixed" or missing value [ 271.982944][ T26] audit: type=1326 audit(1750509349.136:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7feee6a53929 code=0x7ffc0000 [ 272.119306][ T26] audit: type=1326 audit(1750509349.136:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feee6a53963 code=0x7ffc0000 [ 272.144408][ T26] audit: type=1326 audit(1750509349.136:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feee6a523df code=0x7ffc0000 [ 272.236218][ T26] audit: type=1326 audit(1750509349.136:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7feee6a539b7 code=0x7ffc0000 [ 272.438964][ T26] audit: type=1326 audit(1750509349.156:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feee6a52290 code=0x7ffc0000 [ 272.463390][ T26] audit: type=1326 audit(1750509349.156:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feee6a5352b code=0x7ffc0000 [ 272.560100][ T26] audit: type=1326 audit(1750509349.186:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7feee6a5258a code=0x7ffc0000 [ 275.671458][ T7111] loop2: detected capacity change from 0 to 256 [ 275.724400][ T7111] FAT-fs (loop2): Unrecognized mount option "shorname=mixed" or missing value [ 283.216832][ T4213] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 284.251964][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'. [ 284.822820][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.906628][ T4213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.916666][ T4213] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.925836][ T4213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.960413][ T4213] usb 7-1: config 0 descriptor?? [ 285.879670][ T7185] udc-core: couldn't find an available UDC or it's busy [ 286.346651][ T7185] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 287.287061][ T4213] uclogic 0003:256C:006D.0014: v1 buttonpad probing failed: -71 [ 287.366932][ T4213] uclogic 0003:256C:006D.0014: failed probing parameters: -71 [ 287.375199][ T4213] uclogic: probe of 0003:256C:006D.0014 failed with error -71 [ 287.385706][ T4213] usb 7-1: USB disconnect, device number 5 [ 288.390075][ T7252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.690'. [ 288.677129][ T7257] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.245399][ T23] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 290.260927][ T23] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 291.023528][ T7269] fido_id[7269]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 292.409687][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.699'. [ 292.580958][ T7293] rtc_cmos 00:00: Alarms can be up to one day in the future [ 292.610422][ T4210] rtc_cmos 00:00: Alarms can be up to one day in the future [ 293.095649][ T4210] rtc_cmos 00:00: Alarms can be up to one day in the future [ 293.163126][ T4210] rtc_cmos 00:00: Alarms can be up to one day in the future [ 293.193455][ T4210] rtc_cmos 00:00: Alarms can be up to one day in the future [ 293.201010][ T4210] rtc rtc0: __rtc_set_alarm: err=-22 [ 297.050920][ T7328] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.060452][ T7328] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.069300][ T7328] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.078420][ T7328] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.499588][ T7328] team0: Port device vxlan0 added [ 297.534059][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 297.991146][ T4216] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 298.149035][ T7350] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 298.173786][ T4216] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz0 [ 299.167553][ T4216] Bluetooth: hci2: command 0x0406 tx timeout [ 299.748935][ T7353] fido_id[7353]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.801640][ T4210] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 301.041154][ T7383] capability: warning: `syz.3.724' uses deprecated v2 capabilities in a way that may be insecure [ 301.184876][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.202300][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.230446][ T4210] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 301.249570][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.272317][ T4210] usb 3-1: config 0 descriptor?? [ 302.485485][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 302.494895][ T7402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.729'. [ 302.521836][ T7402] [U] [ 302.824330][ T7371] udc-core: couldn't find an available UDC or it's busy [ 303.058365][ T7371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 305.054122][ T21] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 305.077741][ T21] Bluetooth: hci2: Injecting HCI hardware error event [ 305.112460][ T4176] Bluetooth: hci2: hardware error 0x00 [ 305.859401][ T4210] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #100: -71 [ 306.002028][ T4210] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 306.058990][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.737'. [ 306.284496][ T4210] uclogic 0003:256C:006D.0017: failed probing pen v1 parameters: -71 [ 306.402476][ T4210] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 306.436979][ T4210] uclogic: probe of 0003:256C:006D.0017 failed with error -71 [ 306.492247][ T4210] usb 3-1: USB disconnect, device number 4 [ 306.505966][ T7439] netlink: 3 bytes leftover after parsing attributes in process `syz.3.740'. [ 308.700771][ T7472] netlink: 'syz.2.750': attribute type 27 has an invalid length. [ 309.742956][ T7485] ubi31: attaching mtd0 [ 309.761404][ T7485] ubi31: scanning is finished [ 309.766221][ T7485] ubi31: empty MTD device detected [ 310.219464][ T7485] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 310.227831][ T7485] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 310.235472][ T7485] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 310.242797][ T7485] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 310.251018][ T7485] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 310.258513][ T7485] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 310.266808][ T7485] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2505524587 [ 310.292581][ T7485] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 310.422529][ T7487] ubi31: background thread "ubi_bgt31d" started, PID 7487 [ 313.675239][ T7521] device macsec0 entered promiscuous mode [ 313.911055][ T4216] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 314.266698][ T4216] usb 4-1: Using ep0 maxpacket: 32 [ 316.095431][ T4216] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.103804][ T4216] usb 4-1: config 0 has no interface number 0 [ 316.110288][ T4216] usb 4-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 316.121033][ T4216] usb 4-1: config 0 interface 1 has no altsetting 0 [ 316.177035][ T4216] usb 4-1: string descriptor 0 read error: -71 [ 316.246244][ T4216] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 316.410544][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.465440][ T4216] usb 4-1: config 0 descriptor?? [ 316.517255][ T4216] usb 4-1: can't set config #0, error -71 [ 316.537526][ T4216] usb 4-1: USB disconnect, device number 3 [ 317.385183][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.391643][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.540257][ T7443] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 317.557072][ T7443] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 318.536133][ T7567] fido_id[7567]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 318.957355][ T7583] device macsec0 entered promiscuous mode [ 319.628558][ T7590] netlink: 60 bytes leftover after parsing attributes in process `syz.5.780'. [ 319.665358][ T7590] netlink: 60 bytes leftover after parsing attributes in process `syz.5.780'. [ 319.683908][ T7588] netlink: 60 bytes leftover after parsing attributes in process `syz.5.780'. [ 325.538812][ T13] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 325.547817][ T13] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 328.364974][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.794'. [ 328.374073][ T7651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.392282][ T2421] pvrusb2: request_firmware fatal error with code=-110 [ 331.991918][ T7636] fido_id[7636]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 332.339282][ T2421] pvrusb2: Failure uploading firmware1 [ 332.346564][ T2421] pvrusb2: Device initialization was not successful. [ 332.354171][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 332.438286][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 332.787743][ T1110] pvrusb2: Device being rendered inoperable [ 333.008706][ T7651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.409643][ T7684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.417419][ T7684] IPv6: NLM_F_CREATE should be set when creating new route [ 335.634754][ T23] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 335.651588][ T23] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 337.295242][ T7704] fido_id[7704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 337.980698][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.988960][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.536176][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.717408][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.968166][ T7684] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.978294][ T7684] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.019538][ T7684] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.186608][ T7684] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.429333][ T26] kauditd_printk_skb: 71 callbacks suppressed [ 345.429348][ T26] audit: type=1326 audit(1750509422.846:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.435941][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.501446][ T7775] loop3: detected capacity change from 0 to 256 [ 345.504379][ T26] audit: type=1326 audit(1750509422.846:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.597203][ T26] audit: type=1326 audit(1750509422.886:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.620822][ T7775] FAT-fs (loop3): Unrecognized mount option "shorname=mixed" or missing value [ 345.630840][ T26] audit: type=1326 audit(1750509422.886:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.653564][ T26] audit: type=1326 audit(1750509422.906:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.736927][ T4210] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 345.791846][ T26] audit: type=1326 audit(1750509422.906:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.818817][ T26] audit: type=1326 audit(1750509422.906:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 345.857781][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.096871][ T4210] usb 3-1: Using ep0 maxpacket: 32 [ 346.142204][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.155291][ T26] audit: type=1326 audit(1750509422.906:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 346.196903][ T4211] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 346.217140][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.244223][ T4210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.261755][ T26] audit: type=1326 audit(1750509422.906:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56bbfc6290 code=0x7ffc0000 [ 346.306181][ T4210] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 346.361690][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.379964][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.426605][ T26] audit: type=1326 audit(1750509422.906:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7776 comm="syz.6.826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f56bbfc9157 code=0x7ffc0000 [ 346.449674][ T4211] usb 2-1: Using ep0 maxpacket: 32 [ 346.636955][ T4211] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 346.666025][ T4210] usb 3-1: config 0 descriptor?? [ 346.793210][ T4211] usb 2-1: config 0 has no interface number 0 [ 346.840401][ T4211] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 346.882556][ T4211] usb 2-1: config 0 interface 85 has no altsetting 0 [ 347.106844][ T4211] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 347.752083][ T4210] ft260 0003:0403:6030.001B: unknown main item tag 0x0 [ 347.775286][ T4211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.798158][ T4210] ft260 0003:0403:6030.001B: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 347.831985][ T4211] usb 2-1: Product: syz [ 347.882089][ T4211] usb 2-1: Manufacturer: syz [ 347.898772][ T4211] usb 2-1: SerialNumber: syz [ 347.959525][ T4211] usb 2-1: config 0 descriptor?? [ 348.007447][ T4210] ft260 0003:0403:6030.001B: chip code: 6424 8183 [ 348.316711][ T4211] appletouch 2-1:0.85: Failed to read mode from device. [ 348.367210][ T4211] appletouch: probe of 2-1:0.85 failed with error -5 [ 348.510613][ T7805] chnl_net:caif_netlink_parms(): no params data found [ 348.518257][ T4210] ft260 0003:0403:6030.001B: failed to retrieve status: -32 [ 349.477461][ T7805] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.486876][ T13] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 349.512152][ T7805] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.710696][ T7805] device bridge_slave_0 entered promiscuous mode [ 349.926633][ T4211] Bluetooth: hci4: command 0x0409 tx timeout [ 350.427804][ T4211] usb 2-1: USB disconnect, device number 7 [ 350.647663][ T7805] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.292462][ T7805] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.362242][ T7805] device bridge_slave_1 entered promiscuous mode [ 351.421784][ T7852] loop6: detected capacity change from 0 to 256 [ 351.527866][ T7852] FAT-fs (loop6): Unrecognized mount option "shorname=mixed" or missing value [ 351.672785][ T7805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.733607][ T4210] usb 3-1: USB disconnect, device number 5 [ 352.335158][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 352.367869][ T7805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.762427][ T7805] team0: Port device team_slave_0 added [ 352.916734][ T4210] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 353.083662][ T155] IPVS: stopping master sync thread 5898 ... [ 353.394878][ T7805] team0: Port device team_slave_1 added [ 353.872152][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.879629][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.919492][ T7805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.068706][ T7805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.096406][ T7805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.123392][ T4210] usb 3-1: Using ep0 maxpacket: 8 [ 354.145895][ T7805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.653918][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 354.746960][ T4210] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.786931][ T4210] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.828633][ T4210] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 354.843978][ T7805] device hsr_slave_0 entered promiscuous mode [ 354.865495][ T4210] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.900811][ T4210] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.919093][ T4210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.995633][ T7805] device hsr_slave_1 entered promiscuous mode [ 355.012666][ T155] device hsr_slave_0 left promiscuous mode [ 356.213170][ T155] device hsr_slave_1 left promiscuous mode [ 356.236896][ T4210] usb 3-1: usb_control_msg returned -71 [ 356.242744][ T4210] usbtmc 3-1:16.0: can't read capabilities [ 356.246911][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.276807][ T4210] usb 3-1: USB disconnect, device number 6 [ 356.306710][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.335291][ T155] device bridge_slave_1 left promiscuous mode [ 356.344519][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.378166][ T155] device bridge_slave_0 left promiscuous mode [ 356.396843][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.467667][ T13] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 356.489137][ T155] device veth1_macvtap left promiscuous mode [ 356.502527][ T155] device veth0_macvtap left promiscuous mode [ 356.511426][ T155] device veth1_vlan left promiscuous mode [ 356.523832][ T155] device veth0_vlan left promiscuous mode [ 356.739105][ T4210] Bluetooth: hci4: command 0x0419 tx timeout [ 356.875118][ T155] team0 (unregistering): Port device team_slave_1 removed [ 356.888052][ T155] team0 (unregistering): Port device team_slave_0 removed [ 356.921807][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.945900][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.958482][ T7928] Cannot find add_set index 0 as target [ 357.539104][ T13] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.577789][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.655146][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 357.668281][ T13] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 357.683469][ T13] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 357.714258][ T155] bond0 (unregistering): Released all slaves [ 357.857595][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=c412, bcdDevice= 0.40 [ 357.882506][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.919977][ T13] usb 2-1: Product: syz [ 357.974213][ T13] usb 2-1: Manufacturer: syz [ 358.018905][ T13] usb 2-1: SerialNumber: syz [ 358.371527][ T7937] device macsec0 entered promiscuous mode [ 359.341954][ T13] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 359.881902][ T13] cdc_ncm 2-1:1.0: bind() failure [ 359.902532][ T13] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 359.909836][ T13] cdc_ncm 2-1:1.1: bind() failure [ 359.930342][ T13] usb 2-1: USB disconnect, device number 8 [ 360.918000][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.028174][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 361.036047][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 361.332710][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.868'. [ 361.598917][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.270360][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 362.280216][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 362.300233][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.307393][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.968347][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 363.042123][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 363.061024][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.068185][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.342449][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 363.369445][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 363.994248][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 364.248686][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 364.274793][ T8014] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 364.307380][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 364.428636][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 364.448178][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 364.463049][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 364.532734][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 364.570231][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 364.626118][ T7805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 364.671812][ T7998] netlink: set zone limit has 8 unknown bytes [ 364.697148][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 364.705974][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 365.326827][ T8025] syz.2.878 (8025) used greatest stack depth: 19840 bytes left [ 365.369798][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 365.369809][ T26] audit: type=1326 audit(1750509442.786:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 365.413309][ T8039] loop1: detected capacity change from 0 to 256 [ 365.471432][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 365.477991][ T8039] FAT-fs (loop1): Unrecognized mount option "shorname=mixed" or missing value [ 365.710112][ T8048] overlayfs: missing 'workdir' [ 366.172346][ T26] audit: type=1326 audit(1750509442.816:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 366.329301][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.337495][ T26] audit: type=1326 audit(1750509442.816:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 366.367876][ T26] audit: type=1326 audit(1750509442.816:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 366.663258][ T7805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.704395][ T26] audit: type=1326 audit(1750509442.816:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 366.737189][ T26] audit: type=1326 audit(1750509442.816:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 367.204805][ T26] audit: type=1326 audit(1750509442.816:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 367.226643][ T4210] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 367.273086][ T26] audit: type=1326 audit(1750509442.826:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 367.430184][ T26] audit: type=1326 audit(1750509442.826:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9d7e4963 code=0x7ffc0000 [ 367.582319][ T4210] usb 7-1: Using ep0 maxpacket: 8 [ 367.627160][ T26] audit: type=1326 audit(1750509442.826:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8037 comm="syz.1.882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9d7e33df code=0x7ffc0000 [ 367.706822][ T4210] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 367.715048][ T4210] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.793471][ T4210] usb 7-1: config 0 has no interface number 0 [ 367.827209][ T4210] usb 7-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 367.850366][ T4210] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 368.076282][ T8079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 368.725601][ T4210] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 368.741188][ T8081] device bridge1 entered promiscuous mode [ 368.746601][ T4210] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 368.762251][ T4210] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.772994][ T4210] usb 7-1: config 0 descriptor?? [ 368.811114][ T4210] usb 7-1: can't set config #0, error -71 [ 369.134355][ T4210] usb 7-1: USB disconnect, device number 6 [ 370.741720][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.768488][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.904038][ T7805] device veth0_vlan entered promiscuous mode [ 370.936686][ T4212] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 371.055661][ T7805] device veth1_vlan entered promiscuous mode [ 371.091661][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 371.107423][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 371.131024][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 371.139989][ T8112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.897'. [ 371.164264][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 371.226876][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 371.267396][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 371.294881][ T7805] device veth0_macvtap entered promiscuous mode [ 371.306840][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.318124][ T4212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.325955][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.899'. [ 371.327992][ T4212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 371.328035][ T4212] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 371.328057][ T4212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.375246][ T4212] usb 4-1: config 0 descriptor?? [ 371.382111][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 371.400911][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.419105][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.439377][ T7805] device veth1_macvtap entered promiscuous mode [ 371.473403][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.485307][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.495447][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.506286][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.516439][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.527424][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.538985][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.547867][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.562801][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.573614][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.584991][ T4210] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 371.606532][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.617369][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.630418][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.641396][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.651459][ T7805] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.662195][ T7805] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.674855][ T7805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.707943][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.722928][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.849144][ T4212] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 371.875203][ T4291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.875214][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.896622][ T4210] usb 2-1: Using ep0 maxpacket: 32 [ 371.912882][ T4291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.922668][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.941798][ T8130] device bridge3 entered promiscuous mode [ 371.960945][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.980170][ T4212] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 371.986402][ T1480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 372.016871][ T4210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.043325][ T4210] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.055214][ T4210] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 372.065395][ T4210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.103460][ T4210] usb 2-1: config 0 descriptor?? [ 372.504552][ T8150] overlayfs: missing 'workdir' [ 373.159130][ T4210] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 373.209247][ T4210] ft260 0003:0403:6030.001D: hidraw1: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 373.406826][ T4210] ft260 0003:0403:6030.001D: chip code: 6424 8183 [ 374.080940][ T4210] usb 2-1: USB disconnect, device number 9 [ 374.197666][ T13] usb 4-1: USB disconnect, device number 4 [ 374.894385][ T8178] xt_connbytes: Forcing CT accounting to be enabled [ 374.945371][ T8178] Cannot find set identified by id 0 to match [ 374.975484][ T8167] fido_id[8167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 375.993028][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 375.993043][ T26] audit: type=1326 audit(2000000001.879:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 376.531466][ T8194] loop6: detected capacity change from 0 to 256 [ 376.623243][ T8194] FAT-fs (loop6): Unrecognized mount option "shorname=mixed" or missing value [ 376.682153][ T26] audit: type=1326 audit(2000000002.419:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 376.766581][ T26] audit: type=1326 audit(2000000002.419:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 378.365826][ T26] audit: type=1326 audit(2000000002.419:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 378.400342][ T26] audit: type=1326 audit(2000000002.419:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 378.549897][ T26] audit: type=1326 audit(2000000002.419:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f56bbfc7929 code=0x7ffc0000 [ 378.576386][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.582823][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.812390][ T26] audit: type=1326 audit(2000000002.419:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f56bbfc7963 code=0x7ffc0000 [ 379.584628][ T26] audit: type=1326 audit(2000000002.419:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f56bbfc63df code=0x7ffc0000 [ 379.742669][ T26] audit: type=1326 audit(2000000002.419:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f56bbfc79b7 code=0x7ffc0000 [ 379.764863][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.772003][ T26] audit: type=1326 audit(2000000002.419:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8193 comm="syz.6.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f56bbfc6290 code=0x7ffc0000 [ 380.553346][ T8254] overlayfs: missing 'workdir' [ 380.651523][ T8252] Set syz1 is full, maxelem 1038 reached [ 381.127032][ T8269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 381.463611][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 381.463628][ T26] audit: type=1326 audit(2000000007.349:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 382.344738][ T8266] loop1: detected capacity change from 0 to 256 [ 383.376982][ T26] audit: type=1326 audit(2000000007.349:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 383.586830][ T8266] FAT-fs (loop1): Unrecognized mount option "shorname=mixed" or missing value [ 383.610392][ T26] audit: type=1326 audit(2000000007.389:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 384.282664][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.7.941'. [ 385.001096][ T26] audit: type=1326 audit(2000000007.389:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 385.461107][ T26] audit: type=1326 audit(2000000008.229:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 386.058541][ T26] audit: type=1326 audit(2000000008.229:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdc9d7e4929 code=0x7ffc0000 [ 386.908715][ T8328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.948'. [ 387.745275][ T26] audit: type=1326 audit(2000000008.229:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdc9d7e4963 code=0x7ffc0000 [ 388.061324][ T26] audit: type=1326 audit(2000000008.229:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdc9d7e33df code=0x7ffc0000 [ 389.065608][ T26] audit: type=1326 audit(2000000008.229:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdc9d7e49b7 code=0x7ffc0000 [ 389.435067][ T26] audit: type=1326 audit(2000000008.229:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9d7e3290 code=0x7ffc0000 [ 389.739654][ T26] audit: type=1326 audit(2000000008.229:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc9d7e452b code=0x7ffc0000 [ 389.792007][ T8346] loop7: detected capacity change from 0 to 256 [ 389.874808][ T26] audit: type=1326 audit(2000000008.369:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc9d7e358a code=0x7ffc0000 [ 391.182403][ T8326] bad cache= option: none[()bvتr [ 391.182403][ T8326] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 391.182403][ T8326] [ 391.203366][ T8326] CIFS: VFS: bad cache= option: none[()bvتr [ 391.203366][ T8326] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 391.224013][ T26] audit: type=1326 audit(2000000008.369:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fdc9d7e358a code=0x7ffc0000 [ 391.329650][ T8346] FAT-fs (loop7): Unrecognized mount option "shorname=mixed" or missing value [ 391.449233][ T26] audit: type=1326 audit(2000000008.419:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fdc9d7e3197 code=0x7ffc0000 [ 391.523637][ T26] audit: type=1326 audit(2000000008.419:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fdc9d7e60ca code=0x7ffc0000 [ 391.546135][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.672712][ T26] audit: type=1326 audit(2000000009.569:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8264 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdc9d7e3290 code=0x7ffc0000 [ 392.367235][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 393.991299][ T8389] tipc: Started in network mode [ 394.031650][ T8389] tipc: Node identity 7, cluster identity 4711 [ 394.097500][ T8389] tipc: Node number set to 7 [ 394.278449][ T8402] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 399.314289][ T8455] loop3: detected capacity change from 0 to 256 [ 400.627985][ T8455] FAT-fs (loop3): Unrecognized mount option "shorname=mixed" or missing value [ 400.826572][ T4249] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 401.496746][ T4249] usb 3-1: unable to get BOS descriptor or descriptor too short [ 401.602565][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 401.611522][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 402.185329][ T4249] usb 3-1: not running at top speed; connect to a high speed hub [ 402.276692][ T4249] usb 3-1: config 1 has an invalid interface number: 138 but max is 0 [ 402.288475][ T4249] usb 3-1: config 1 has no interface number 0 [ 402.313849][ T4249] usb 3-1: config 1 interface 138 has no altsetting 0 [ 402.536703][ T4249] usb 3-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 402.560191][ T4249] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.602745][ T4249] usb 3-1: Product: syz [ 402.632440][ T4249] usb 3-1: Manufacturer: syz [ 402.653118][ T4249] usb 3-1: SerialNumber: syz [ 403.422285][ T4249] usb 3-1: USB disconnect, device number 7 [ 403.490204][ T4360] udevd[4360]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.138/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 404.453608][ T8525] device macsec0 entered promiscuous mode [ 405.586221][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 405.586235][ T26] audit: type=1326 audit(2000000031.469:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 405.817836][ T8538] loop7: detected capacity change from 0 to 256 [ 405.929397][ T8542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.997'. [ 405.938512][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.6.997'. [ 406.549455][ T8538] FAT-fs (loop7): Unrecognized mount option "shorname=mixed" or missing value [ 406.559650][ T26] audit: type=1326 audit(2000000031.469:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 406.654406][ T26] audit: type=1326 audit(2000000031.539:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 406.676728][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.763612][ T26] audit: type=1326 audit(2000000031.539:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 406.832636][ T26] audit: type=1326 audit(2000000031.539:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 406.855035][ C0] vkms_vblank_simulate: vblank timer overrun [ 407.056841][ T26] audit: type=1326 audit(2000000031.539:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 407.376251][ T26] audit: type=1326 audit(2000000031.539:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 407.664578][ T26] audit: type=1326 audit(2000000031.539:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 407.695882][ T26] audit: type=1326 audit(2000000031.679:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f529b3b5929 code=0x7ffc0000 [ 407.794531][ T26] audit: type=1326 audit(2000000031.679:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8537 comm="syz.7.996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f529b3b5963 code=0x7ffc0000 [ 407.886922][ T4249] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 408.146817][ T4249] usb 2-1: Using ep0 maxpacket: 8 [ 408.337404][ T4249] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 408.348903][ T4249] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 408.367527][ T4249] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 408.414107][ T4249] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.444345][ T4249] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.454252][ T4249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.902401][ T4249] usb 2-1: GET_CAPABILITIES returned 0 [ 408.908013][ T4249] usbtmc 2-1:16.0: can't read capabilities [ 409.239155][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1009'. [ 409.248358][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1009'. [ 413.524303][ T4249] usb 2-1: USB disconnect, device number 10 [ 417.670933][ T8663] overlayfs: missing 'workdir' [ 417.833691][ T8663] device bridge1 entered promiscuous mode [ 418.059819][ T4242] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 418.386592][ T4242] usb 2-1: Using ep0 maxpacket: 16 [ 419.266812][ T4242] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 419.376590][ T4284] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 419.729695][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.738212][ T4242] usb 2-1: Product: syz [ 419.742998][ T4242] usb 2-1: Manufacturer: syz [ 419.748298][ T4242] usb 2-1: SerialNumber: syz [ 419.754989][ T4242] usb 2-1: config 0 descriptor?? [ 420.401646][ T4242] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 420.489310][ T4242] usb 2-1: Detected FT232H [ 421.806941][ T4242] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 421.836809][ T4242] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 422.427090][ T4284] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 422.549673][ T4242] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 422.564748][ T4284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.769269][ T4242] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 422.778520][ T4284] usb 3-1: Product: syz [ 422.900946][ T4284] usb 3-1: config 0 descriptor?? [ 422.954228][ T8723] overlayfs: missing 'workdir' [ 423.066718][ T4242] usb 2-1: USB disconnect, device number 11 [ 423.087847][ T4284] usb 3-1: can't set config #0, error -71 [ 423.278833][ T4242] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 423.289085][ T4284] usb 3-1: USB disconnect, device number 8 [ 423.478864][ T4242] ftdi_sio 2-1:0.0: device disconnected [ 425.885642][ T8766] device macsec0 entered promiscuous mode [ 429.681811][ T8801] overlayfs: missing 'workdir' [ 430.979414][ T4242] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 431.466730][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 431.587207][ T4242] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 431.609134][ T4242] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.712650][ T4242] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.918150][ T8841] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 431.929637][ T8841] hfsplus: unable to find HFS+ superblock [ 431.932195][ T8842] ubi: mtd0 is already attached to ubi31 [ 432.730709][ T4242] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.828308][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.836600][ T4242] usb 4-1: Product: syz [ 432.840817][ T4242] usb 4-1: Manufacturer: syz [ 432.845458][ T4242] usb 4-1: SerialNumber: syz [ 433.014068][ T8853] netlink: zone id is out of range [ 433.047568][ T26] kauditd_printk_skb: 30 callbacks suppressed [ 433.047584][ T26] audit: type=1326 audit(2000000058.929:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8845 comm="syz.1.1062" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc9d7e4929 code=0x0 [ 433.443145][ T8877] overlayfs: missing 'workdir' [ 434.004993][ T4242] usb 4-1: 0:2 : does not exist [ 434.248190][ T4242] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 434.525959][ T4242] usb 4-1: USB disconnect, device number 5 [ 435.793946][ T8910] ubi: mtd0 is already attached to ubi31 [ 436.885595][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.838670][ T8935] overlayfs: missing 'workdir' [ 437.933041][ T8935] device bridge3 entered promiscuous mode [ 439.201559][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 439.211260][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1084'. [ 439.223843][ T8948] [U] [ 439.977988][ T8952] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 440.043451][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.070716][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.385723][ T8961] ubi: mtd0 is already attached to ubi31 [ 441.102681][ T8967] overlayfs: missing 'workdir' [ 441.320080][ T8976] ------------[ cut here ]------------ [ 441.326848][ T8976] WARNING: CPU: 1 PID: 8976 at kernel/trace/bpf_trace.c:1411 bpf_get_stack_raw_tp+0x196/0x1d0 [ 441.337241][ T8976] Modules linked in: [ 441.341165][ T8976] CPU: 1 PID: 8976 Comm: syz.6.1090 Not tainted 5.15.185-syzkaller #0 [ 441.349410][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.360355][ T8976] RIP: 0010:bpf_get_stack_raw_tp+0x196/0x1d0 [ 441.366377][ T8976] Code: c8 45 31 c0 e8 db ce 13 00 65 ff 0d cc f1 81 7e 4c 63 e0 4c 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa 76 f6 ff <0f> 0b 65 ff 0d a9 f1 81 7e 49 c7 c4 f0 ff ff ff eb d7 e8 93 76 f6 [ 441.386068][ T8976] RSP: 0018:ffffc90003d2e4d8 EFLAGS: 00010283 [ 441.392329][ T8976] RAX: ffffffff81814b76 RBX: ffff8880b9100000 RCX: 0000000000080000 [ 441.400347][ T8976] RDX: ffffc90015801000 RSI: 000000000000a2c0 RDI: 000000000000a2c1 [ 441.408356][ T8976] RBP: ffffc90003d2e510 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 441.416317][ T8976] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 0000000000000000 [ 441.424334][ T8976] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 441.432344][ T8976] FS: 00007f56b9e2f6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 441.441306][ T8976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.447920][ T8976] CR2: 0000200000007030 CR3: 0000000065de6000 CR4: 00000000003506e0 [ 441.455883][ T8976] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.463877][ T8976] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.471867][ T8976] Call Trace: [ 441.475133][ T8976] [ 441.478076][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.483613][ T8976] bpf_trace_run4+0x188/0x330 [ 441.488326][ T8976] ? asm_exc_int3+0x35/0x40 [ 441.492819][ T8976] ? bpf_trace_run3+0x320/0x320 [ 441.497687][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 441.504523][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 441.511231][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 441.516491][ T8976] ? mark_lock+0x94/0x320 [ 441.520848][ T8976] ? stack_map_get_build_id_offset+0x21a/0x860 [ 441.527038][ T8976] ? stack_map_get_build_id_offset+0x817/0x860 [ 441.533187][ T8976] stack_map_get_build_id_offset+0x83d/0x860 [ 441.539209][ T8976] ? get_perf_callchain+0x3b1/0x480 [ 441.544498][ T8976] ? put_callchain_entry+0xb0/0xb0 [ 441.549650][ T8976] ? __bpf_get_stackid+0x920/0x920 [ 441.554774][ T8976] ? verify_lock_unused+0x140/0x140 [ 441.560016][ T8976] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 441.566015][ T8976] __bpf_get_stack+0x44a/0x4f0 [ 441.570813][ T8976] ? stack_map_get_build_id_offset+0x860/0x860 [ 441.576990][ T8976] ? read_lock_is_recursive+0x10/0x10 [ 441.582361][ T8976] ? __cant_sleep+0x210/0x210 [ 441.587057][ T8976] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.592760][ T8976] bpf_get_stack_raw_tp+0x175/0x1d0 [ 441.597981][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.603512][ T8976] bpf_trace_run4+0x188/0x330 [ 441.608215][ T8976] ? asm_exc_int3+0x35/0x40 [ 441.612705][ T8976] ? bpf_trace_run3+0x320/0x320 [ 441.617581][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 441.624420][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 441.631577][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 441.636707][ T8976] ? mark_lock+0x94/0x320 [ 441.641043][ T8976] ? stack_map_get_build_id_offset+0x21a/0x860 [ 441.647218][ T8976] ? stack_map_get_build_id_offset+0x817/0x860 [ 441.653363][ T8976] stack_map_get_build_id_offset+0x83d/0x860 [ 441.659373][ T8976] ? get_perf_callchain+0x3b1/0x480 [ 441.664570][ T8976] ? put_callchain_entry+0xb0/0xb0 [ 441.669699][ T8976] ? __bpf_get_stackid+0x920/0x920 [ 441.674795][ T8976] ? verify_lock_unused+0x140/0x140 [ 441.680050][ T8976] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 441.686023][ T8976] __bpf_get_stack+0x44a/0x4f0 [ 441.690815][ T8976] ? stack_map_get_build_id_offset+0x860/0x860 [ 441.697014][ T8976] ? read_lock_is_recursive+0x10/0x10 [ 441.702416][ T8976] ? __cant_sleep+0x210/0x210 [ 441.707308][ T8976] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.713036][ T8976] bpf_get_stack_raw_tp+0x175/0x1d0 [ 441.718267][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.723799][ T8976] bpf_trace_run4+0x188/0x330 [ 441.728501][ T8976] ? asm_exc_int3+0x35/0x40 [ 441.733006][ T8976] ? bpf_trace_run3+0x320/0x320 [ 441.737895][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 441.744739][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 441.751471][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 441.756645][ T8976] ? mark_lock+0x94/0x320 [ 441.760986][ T8976] ? stack_map_get_build_id_offset+0x21a/0x860 [ 441.767168][ T8976] ? stack_map_get_build_id_offset+0x817/0x860 [ 441.773503][ T8976] stack_map_get_build_id_offset+0x83d/0x860 [ 441.779558][ T8976] ? get_perf_callchain+0x3b1/0x480 [ 441.784760][ T8976] ? put_callchain_entry+0xb0/0xb0 [ 441.789896][ T8976] ? __bpf_get_stackid+0x920/0x920 [ 441.794998][ T8976] ? verify_lock_unused+0x140/0x140 [ 441.800219][ T8976] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 441.806209][ T8976] __bpf_get_stack+0x44a/0x4f0 [ 441.811128][ T8976] ? stack_map_get_build_id_offset+0x860/0x860 [ 441.817308][ T8976] ? read_lock_is_recursive+0x10/0x10 [ 441.822676][ T8976] ? __cant_sleep+0x210/0x210 [ 441.827387][ T8976] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.833098][ T8976] bpf_get_stack_raw_tp+0x175/0x1d0 [ 441.838333][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 441.843892][ T8976] bpf_trace_run4+0x188/0x330 [ 441.848596][ T8976] ? asm_exc_int3+0x35/0x40 [ 441.853084][ T8976] ? bpf_trace_run3+0x320/0x320 [ 441.857952][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 441.864790][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 441.871512][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 441.876656][ T8976] ? unix_stream_read_generic+0x21f6/0x2360 [ 441.882568][ T8976] ? do_user_addr_fault+0x2c4/0xc80 [ 441.887790][ T8976] ? do_user_addr_fault+0xb96/0xc80 [ 441.892978][ T8976] do_user_addr_fault+0xbbb/0xc80 [ 441.898022][ T8976] ? lock_chain_count+0x20/0x20 [ 441.902864][ T8976] ? rcu_is_watching+0x11/0xa0 [ 441.907650][ T8976] exc_page_fault+0x60/0x100 [ 441.912225][ T8976] asm_exc_page_fault+0x22/0x30 [ 441.917127][ T8976] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 441.923094][ T8976] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 441.942819][ T8976] RSP: 0018:ffffc90003d2f8f8 EFLAGS: 00050206 [ 441.948909][ T8976] RAX: 0000000040000000 RBX: 0000000040002002 RCX: 0000200000007030 [ 441.956917][ T8976] RDX: ffffc90003d2fd90 RSI: 0000000040002002 RDI: 00000000ffffffff [ 441.964880][ T8976] RBP: ffffc90003d2fa90 R08: dffffc0000000000 R09: ffffed100bf32902 [ 441.972937][ T8976] R10: ffffed100bf32902 R11: 1ffff1100bf32901 R12: dffffc0000000000 [ 441.980935][ T8976] R13: 0000200000007000 R14: 0000000000000000 R15: 0000000000000000 [ 441.988939][ T8976] ____sys_recvmsg+0x35d/0x580 [ 441.993722][ T8976] ? __sys_recvmsg_sock+0x40/0x40 [ 441.998775][ T8976] ? import_iovec+0x6f/0xa0 [ 442.003264][ T8976] ___sys_recvmsg+0x1af/0x4f0 [ 442.007964][ T8976] ? __sys_recvmsg+0x250/0x250 [ 442.012726][ T8976] ? __lock_acquire+0x7c60/0x7c60 [ 442.017779][ T8976] ? __might_fault+0xb3/0x110 [ 442.022455][ T8976] do_recvmmsg+0x344/0x7a0 [ 442.026896][ T8976] ? __sys_recvmmsg+0x280/0x280 [ 442.031834][ T8976] ? __lock_acquire+0x7c60/0x7c60 [ 442.036939][ T8976] __x64_sys_recvmmsg+0x18d/0x240 [ 442.041979][ T8976] ? do_recvmmsg+0x7a0/0x7a0 [ 442.046645][ T8976] ? lockdep_hardirqs_on+0x94/0x140 [ 442.051858][ T8976] do_syscall_64+0x4c/0xa0 [ 442.056262][ T8976] ? clear_bhb_loop+0x30/0x80 [ 442.060965][ T8976] ? clear_bhb_loop+0x30/0x80 [ 442.065629][ T8976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.071563][ T8976] RIP: 0033:0x7f56bbfc7929 [ 442.076076][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.096241][ T8976] RSP: 002b:00007f56b9e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 442.104686][ T8976] RAX: ffffffffffffffda RBX: 00007f56bc1eefa0 RCX: 00007f56bbfc7929 [ 442.112689][ T8976] RDX: 0000000000000700 RSI: 0000200000001440 RDI: 0000000000000006 [ 442.120694][ T8976] RBP: 00007f56bc049b39 R08: 0000000000000000 R09: 0000000000000000 [ 442.128689][ T8976] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000000 [ 442.136709][ T8976] R13: 0000000000000000 R14: 00007f56bc1eefa0 R15: 00007fff9be71778 [ 442.144697][ T8976] [ 442.147755][ T8976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 442.155011][ T8976] CPU: 1 PID: 8976 Comm: syz.6.1090 Not tainted 5.15.185-syzkaller #0 [ 442.163141][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.173180][ T8976] Call Trace: [ 442.176454][ T8976] [ 442.179391][ T8976] dump_stack_lvl+0x168/0x230 [ 442.184155][ T8976] ? show_regs_print_info+0x20/0x20 [ 442.189335][ T8976] ? load_image+0x3b0/0x3b0 [ 442.193832][ T8976] panic+0x2c9/0x7f0 [ 442.197728][ T8976] ? bpf_jit_dump+0xd0/0xd0 [ 442.202231][ T8976] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 442.207673][ T8976] __warn+0x248/0x2b0 [ 442.211638][ T8976] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 442.216991][ T8976] report_bug+0x1b7/0x2e0 [ 442.221307][ T8976] handle_bug+0x3a/0x70 [ 442.225536][ T8976] exc_invalid_op+0x16/0x40 [ 442.230034][ T8976] asm_exc_invalid_op+0x16/0x20 [ 442.234866][ T8976] RIP: 0010:bpf_get_stack_raw_tp+0x196/0x1d0 [ 442.240829][ T8976] Code: c8 45 31 c0 e8 db ce 13 00 65 ff 0d cc f1 81 7e 4c 63 e0 4c 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 aa 76 f6 ff <0f> 0b 65 ff 0d a9 f1 81 7e 49 c7 c4 f0 ff ff ff eb d7 e8 93 76 f6 [ 442.260426][ T8976] RSP: 0018:ffffc90003d2e4d8 EFLAGS: 00010283 [ 442.266668][ T8976] RAX: ffffffff81814b76 RBX: ffff8880b9100000 RCX: 0000000000080000 [ 442.274656][ T8976] RDX: ffffc90015801000 RSI: 000000000000a2c0 RDI: 000000000000a2c1 [ 442.282619][ T8976] RBP: ffffc90003d2e510 R08: dffffc0000000000 R09: fffffbfff1ff3619 [ 442.290583][ T8976] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: 0000000000000000 [ 442.298548][ T8976] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000000 [ 442.306524][ T8976] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 442.311908][ T8976] ? bpf_get_stack_raw_tp+0x196/0x1d0 [ 442.317265][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.322889][ T8976] bpf_trace_run4+0x188/0x330 [ 442.327572][ T8976] ? asm_exc_int3+0x35/0x40 [ 442.332066][ T8976] ? bpf_trace_run3+0x320/0x320 [ 442.336902][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 442.343751][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 442.350433][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 442.355539][ T8976] ? mark_lock+0x94/0x320 [ 442.359880][ T8976] ? stack_map_get_build_id_offset+0x21a/0x860 [ 442.366020][ T8976] ? stack_map_get_build_id_offset+0x817/0x860 [ 442.372161][ T8976] stack_map_get_build_id_offset+0x83d/0x860 [ 442.378130][ T8976] ? get_perf_callchain+0x3b1/0x480 [ 442.383315][ T8976] ? put_callchain_entry+0xb0/0xb0 [ 442.388406][ T8976] ? __bpf_get_stackid+0x920/0x920 [ 442.393500][ T8976] ? verify_lock_unused+0x140/0x140 [ 442.398690][ T8976] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 442.404657][ T8976] __bpf_get_stack+0x44a/0x4f0 [ 442.409548][ T8976] ? stack_map_get_build_id_offset+0x860/0x860 [ 442.415704][ T8976] ? read_lock_is_recursive+0x10/0x10 [ 442.421069][ T8976] ? __cant_sleep+0x210/0x210 [ 442.425737][ T8976] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.431443][ T8976] bpf_get_stack_raw_tp+0x175/0x1d0 [ 442.436642][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.442187][ T8976] bpf_trace_run4+0x188/0x330 [ 442.446854][ T8976] ? asm_exc_int3+0x35/0x40 [ 442.451351][ T8976] ? bpf_trace_run3+0x320/0x320 [ 442.456185][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 442.463018][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 442.469687][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 442.474785][ T8976] ? mark_lock+0x94/0x320 [ 442.479112][ T8976] ? stack_map_get_build_id_offset+0x21a/0x860 [ 442.485251][ T8976] ? stack_map_get_build_id_offset+0x817/0x860 [ 442.491422][ T8976] stack_map_get_build_id_offset+0x83d/0x860 [ 442.497394][ T8976] ? get_perf_callchain+0x3b1/0x480 [ 442.502583][ T8976] ? put_callchain_entry+0xb0/0xb0 [ 442.507804][ T8976] ? __bpf_get_stackid+0x920/0x920 [ 442.512908][ T8976] ? verify_lock_unused+0x140/0x140 [ 442.518095][ T8976] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 442.524071][ T8976] __bpf_get_stack+0x44a/0x4f0 [ 442.528831][ T8976] ? stack_map_get_build_id_offset+0x860/0x860 [ 442.535060][ T8976] ? read_lock_is_recursive+0x10/0x10 [ 442.540419][ T8976] ? __cant_sleep+0x210/0x210 [ 442.545081][ T8976] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.550789][ T8976] bpf_get_stack_raw_tp+0x175/0x1d0 [ 442.555985][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.561514][ T8976] bpf_trace_run4+0x188/0x330 [ 442.566187][ T8976] ? asm_exc_int3+0x35/0x40 [ 442.570672][ T8976] ? bpf_trace_run3+0x320/0x320 [ 442.575509][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 442.582375][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 442.589040][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 442.594135][ T8976] ? mark_lock+0x94/0x320 [ 442.598461][ T8976] ? stack_map_get_build_id_offset+0x21a/0x860 [ 442.604603][ T8976] ? stack_map_get_build_id_offset+0x817/0x860 [ 442.610870][ T8976] stack_map_get_build_id_offset+0x83d/0x860 [ 442.616855][ T8976] ? get_perf_callchain+0x3b1/0x480 [ 442.622055][ T8976] ? put_callchain_entry+0xb0/0xb0 [ 442.627154][ T8976] ? __bpf_get_stackid+0x920/0x920 [ 442.632252][ T8976] ? verify_lock_unused+0x140/0x140 [ 442.637572][ T8976] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 442.643569][ T8976] __bpf_get_stack+0x44a/0x4f0 [ 442.648338][ T8976] ? stack_map_get_build_id_offset+0x860/0x860 [ 442.654489][ T8976] ? read_lock_is_recursive+0x10/0x10 [ 442.659854][ T8976] ? __cant_sleep+0x210/0x210 [ 442.664517][ T8976] ? bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.670232][ T8976] bpf_get_stack_raw_tp+0x175/0x1d0 [ 442.675424][ T8976] bpf_prog_ec3b2eefa702d8d3+0x3a/0xf9c [ 442.680955][ T8976] bpf_trace_run4+0x188/0x330 [ 442.685615][ T8976] ? asm_exc_int3+0x35/0x40 [ 442.690101][ T8976] ? bpf_trace_run3+0x320/0x320 [ 442.695102][ T8976] ? __mmap_lock_do_trace_acquire_returned+0x172/0x290 [ 442.701950][ T8976] __mmap_lock_do_trace_acquire_returned+0x231/0x290 [ 442.708650][ T8976] ? get_mm_memcg_path+0x330/0x330 [ 442.713749][ T8976] ? unix_stream_read_generic+0x21f6/0x2360 [ 442.719643][ T8976] ? do_user_addr_fault+0x2c4/0xc80 [ 442.724828][ T8976] ? do_user_addr_fault+0xb96/0xc80 [ 442.730014][ T8976] do_user_addr_fault+0xbbb/0xc80 [ 442.735021][ T8976] ? lock_chain_count+0x20/0x20 [ 442.739859][ T8976] ? rcu_is_watching+0x11/0xa0 [ 442.744615][ T8976] exc_page_fault+0x60/0x100 [ 442.749188][ T8976] asm_exc_page_fault+0x22/0x30 [ 442.754016][ T8976] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 442.759724][ T8976] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 442.779326][ T8976] RSP: 0018:ffffc90003d2f8f8 EFLAGS: 00050206 [ 442.785383][ T8976] RAX: 0000000040000000 RBX: 0000000040002002 RCX: 0000200000007030 [ 442.793332][ T8976] RDX: ffffc90003d2fd90 RSI: 0000000040002002 RDI: 00000000ffffffff [ 442.801283][ T8976] RBP: ffffc90003d2fa90 R08: dffffc0000000000 R09: ffffed100bf32902 [ 442.809342][ T8976] R10: ffffed100bf32902 R11: 1ffff1100bf32901 R12: dffffc0000000000 [ 442.817292][ T8976] R13: 0000200000007000 R14: 0000000000000000 R15: 0000000000000000 [ 442.825278][ T8976] ____sys_recvmsg+0x35d/0x580 [ 442.830082][ T8976] ? __sys_recvmsg_sock+0x40/0x40 [ 442.835102][ T8976] ? import_iovec+0x6f/0xa0 [ 442.839592][ T8976] ___sys_recvmsg+0x1af/0x4f0 [ 442.844250][ T8976] ? __sys_recvmsg+0x250/0x250 [ 442.849006][ T8976] ? __lock_acquire+0x7c60/0x7c60 [ 442.854105][ T8976] ? __might_fault+0xb3/0x110 [ 442.858772][ T8976] do_recvmmsg+0x344/0x7a0 [ 442.863366][ T8976] ? __sys_recvmmsg+0x280/0x280 [ 442.868236][ T8976] ? __lock_acquire+0x7c60/0x7c60 [ 442.873267][ T8976] __x64_sys_recvmmsg+0x18d/0x240 [ 442.878296][ T8976] ? do_recvmmsg+0x7a0/0x7a0 [ 442.882878][ T8976] ? lockdep_hardirqs_on+0x94/0x140 [ 442.888072][ T8976] do_syscall_64+0x4c/0xa0 [ 442.892482][ T8976] ? clear_bhb_loop+0x30/0x80 [ 442.897163][ T8976] ? clear_bhb_loop+0x30/0x80 [ 442.901825][ T8976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 442.907719][ T8976] RIP: 0033:0x7f56bbfc7929 [ 442.912131][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.931730][ T8976] RSP: 002b:00007f56b9e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 442.940133][ T8976] RAX: ffffffffffffffda RBX: 00007f56bc1eefa0 RCX: 00007f56bbfc7929 [ 442.948086][ T8976] RDX: 0000000000000700 RSI: 0000200000001440 RDI: 0000000000000006 [ 442.956038][ T8976] RBP: 00007f56bc049b39 R08: 0000000000000000 R09: 0000000000000000 [ 442.963989][ T8976] R10: 0000000040002002 R11: 0000000000000246 R12: 0000000000000000 [ 442.971946][ T8976] R13: 0000000000000000 R14: 00007f56bc1eefa0 R15: 00007fff9be71778 [ 442.979914][ T8976] [ 442.983140][ T8976] Kernel Offset: disabled [ 442.992505][ T8976] Rebooting in 86400 seconds..