last executing test programs: 11m50.48678378s ago: executing program 2 (id=947): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) getrandom(0x0, 0x0, 0x2) listen(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 11m49.369978145s ago: executing program 2 (id=948): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r4, 0x541c, &(0x7f0000000000)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f0000002540)=@abs, 0x6e) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r7) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r8, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000100)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, 0x0, 0x0) 11m48.418081048s ago: executing program 2 (id=949): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0x0, 0x0) 11m48.103371902s ago: executing program 2 (id=951): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010102}}) 11m47.987182814s ago: executing program 2 (id=953): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x6e, 0x0, 0x0, 0x0, 0x1d}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) 11m46.80351575s ago: executing program 2 (id=959): read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x4000}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 11m31.591343174s ago: executing program 32 (id=959): read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x4000}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2m33.608312761s ago: executing program 5 (id=2594): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000012c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) execveat(r1, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000ac0)={[&(0x7f0000000240)='GPL\x00', &(0x7f0000000280)='{\x00', &(0x7f0000000340)='GPL\x00', &(0x7f0000000380)='ext4\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='-&^&\x00', &(0x7f0000000480)='#\x00', &(0x7f00000004c0)='\xe9%\x00', &(0x7f0000000540)='sched_switch\x00']}, &(0x7f0000000bc0)={[&(0x7f0000000580)='pids.current\x00', &(0x7f0000000b40)='syzkaller\x00', &(0x7f0000000b80)='P^/!{@]##\\-}}\'$}:).-{[,/\'\x00']}, 0x800) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc00c010}, 0x2400c000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000500)=[{0x0}], 0x1, 0xfffffffd, 0x80000) lseek(r2, 0x7fff, 0x0) write$FUSE_WRITE(r2, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0x96}}, 0x18) fallocate(r0, 0x0, 0x803, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) 2m32.655177304s ago: executing program 5 (id=2598): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x8, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x5}, &(0x7f0000000100)=0x8) 2m31.745839795s ago: executing program 5 (id=2601): socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000600)="c569ed3f1f207e37a41670461cb991bde9a6888571c4cf752fefd3607634e97c95c0ce2253a7d9322c7e510fe3eae9a6737a04e5253e90a4eb00b56b6f5498211454d0547d5708a19372841a3f", 0x4d, 0x0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f0000000780)="72a9aa0490741f008e31e0e66b75411ad5aca5de7218cdd79f408a38ee76c99b0a5819d7d834863dd3b5d062c7e043624f475d1e6e474eb1b26b9d46a7878ba6a7fda03a685d315fed33dd87c8850f506ba8e2e0", &(0x7f0000000600)=""/91}, 0x20) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m30.106470067s ago: executing program 5 (id=2608): getpgrp(0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$unix(0x1, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000340)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x0, 0x6, 0x3, 0x8}}, 0x101000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 2m28.833425144s ago: executing program 5 (id=2611): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r4) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='oom_adj\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000280)='0', 0x1}, {&(0x7f0000000080)="d2", 0x1}], 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000100)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) 2m27.887182027s ago: executing program 5 (id=2612): ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x5, 0x1, 0x0, {0x8000, 0x8, 0x6, 0x2}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m27.536439651s ago: executing program 33 (id=2612): ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x5, 0x1, 0x0, {0x8000, 0x8, 0x6, 0x2}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 21.17049478s ago: executing program 3 (id=3003): openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) 19.896871777s ago: executing program 3 (id=3008): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93ad", 0x0, 0x0, 0x0}, 0x38) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r6}, 0x20) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8482, 0x0}) 18.262144248s ago: executing program 3 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e4a0d0302"], 0x4d) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000000000000070000000718a87f000001ac", @ANYRESOCT], 0x48}, 0x24068814) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x12) creat(0x0, 0x4b) 17.233474132s ago: executing program 3 (id=3018): write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fsopen(&(0x7f0000000240)='ubifs\x00', 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f0000000000)="d30952", &(0x7f00000000c0)=""/27}, 0x20) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, 0x0, 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8482, 0x0}) 16.107096417s ago: executing program 3 (id=3023): r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000208000b400000000050000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000180001800c0001006269747769736500080002"], 0xe0}}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x20, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) write$tun(r5, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) write(r3, &(0x7f0000000000)='\n\x00\x00\x00', 0x4) 14.131435383s ago: executing program 3 (id=3027): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r0, 0xc17a) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) fdatasync(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x40, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) 12.13853538s ago: executing program 6 (id=3031): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 8.007104595s ago: executing program 4 (id=3041): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = getpid() socket$netlink(0x10, 0x3, 0x8) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000225000/0x2000)=nil) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='//', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.939882325s ago: executing program 1 (id=3042): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x80}, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x40000000000006, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@local, 0x20003502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 7.735194168s ago: executing program 1 (id=3043): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, 0x0, 0x0) 7.53927469s ago: executing program 6 (id=3044): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x78}}, 0x0) 6.789123091s ago: executing program 6 (id=3046): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400"], 0x18}}], 0x1, 0x400c) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 6.671305352s ago: executing program 1 (id=3047): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES16=r1], 0x40}}, 0x0) 5.495484688s ago: executing program 0 (id=3049): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) 5.431170339s ago: executing program 4 (id=3050): r0 = fanotify_init(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9fc69000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, &(0x7f00000029c0)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x101, 0x8000031, r6, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x802c2, 0x0) 5.33116137s ago: executing program 0 (id=3051): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000008c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="043e4a0d0302"], 0x4d) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r7], &(0x7f0000000280), &(0x7f0000000300)=[0x0], 0x0}) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000000000000070000000718a87f000001ac", @ANYRESOCT], 0x48}, 0x24068814) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x12) creat(0x0, 0x4b) 5.139784282s ago: executing program 6 (id=3052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 5.129799013s ago: executing program 1 (id=3053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x1, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x8, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r5, 0x5}, &(0x7f0000000100)=0x8) 4.792432537s ago: executing program 6 (id=3054): prlimit64(0x0, 0xe, 0x0, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x8, 0xc, 0x3, 0x5, 0x1, 0xb, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d80, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca5, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x20009, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0xb, 0x1, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x4000, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x8, 0xb2b, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x1, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x0, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x9, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x801, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x8, 0x7a3], [0x9, 0x3a89, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0x5, 0x4, 0xffffffff, 0x1f, 0x2, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x401, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x57f, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r6, 0xc0046d00, &(0x7f00000000c0)=0x101) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r8, 0x5, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x134d}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x1302}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0) 4.424161332s ago: executing program 4 (id=3055): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) 4.341595613s ago: executing program 0 (id=3056): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x3d, 0x7, 0x200, 0x7ff, 0x2260, 0x1, 0x73d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c000) timer_create(0xb, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="1713", 0x2, 0x10008095, 0x0, 0x0) 3.974313268s ago: executing program 1 (id=3057): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x9100, 0x0, 0x0) 2.899301973s ago: executing program 1 (id=3058): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x1, 0x47, "2f9aab89b7989528b5fd0f10a091edb408f22bb50195c31f51ae58424fa36c9cee4b1f587db135a65f6aaaa57ea235a126cbb36dc1b7db4952dc526c35bf2631ec7853c08d174e"}, 0x0}) 2.898599313s ago: executing program 4 (id=3059): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB]) r1 = getpid() socket$netlink(0x10, 0x3, 0x8) r2 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f0000225000/0x2000)=nil) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r3, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)='//', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r6, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.973904894s ago: executing program 4 (id=3060): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCXONC(r3, 0x540a, 0x2) getdents64(r4, &(0x7f00000002c0)=""/222, 0xde) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x10, "4f49e9fb0847c1d18785472a41010e3a"}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x3}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 1.315529204s ago: executing program 4 (id=3061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@can_newroute={0x154, 0x18, 0x1, 0x70bd25, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x7d}, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x6, 0x1, 0x0, 0x0, "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", 0x2, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffff9, 0x1, 0x9}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008084}, 0x48084) 307.328337ms ago: executing program 6 (id=3062): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES16=r1], 0x40}}, 0x0) 151.770099ms ago: executing program 0 (id=3063): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0xc) 94.00179ms ago: executing program 0 (id=3064): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x7600) 0s ago: executing program 0 (id=3065): r0 = socket$inet(0x2, 0x2000000080002, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x7, 0x0, &(0x7f0000000340)) kernel console output (not intermixed with test programs): rt 2(bridge_slave_1) entered disabled state [ 418.595193][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.665943][ T21] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 418.714064][ T21] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 418.795032][ T8626] device bridge_slave_1 left promiscuous mode [ 418.809348][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.821280][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.874912][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 418.963958][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 419.013860][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 419.044980][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 419.185132][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 419.223929][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 419.343818][ T4255] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 419.370657][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 419.413937][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 420.273869][ T21] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 420.753907][ T4255] usb 4-1: Using ep0 maxpacket: 16 [ 420.765351][ T21] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 420.791729][ T21] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 420.869346][ T21] usb 6-1: USB disconnect, device number 2 [ 420.874108][ T4255] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 420.949826][ T8677] sctp: [Deprecated]: syz.0.1273 (pid 8677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.949826][ T8677] Use struct sctp_sack_info instead [ 421.134113][ T4255] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.141433][ T4255] usb 4-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 421.153383][ T4255] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.190704][ T4255] usb 4-1: config 0 descriptor?? [ 421.720971][ T8679] ksmbd: Unknown IPC event: 6, ignore. [ 422.213955][ T4255] usbhid 4-1:0.0: can't add hid device: -71 [ 422.221240][ T4255] usbhid: probe of 4-1:0.0 failed with error -71 [ 422.286409][ T4255] usb 4-1: USB disconnect, device number 15 [ 425.461292][ T8747] sctp: [Deprecated]: syz.5.1286 (pid 8747) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.461292][ T8747] Use struct sctp_sack_info instead [ 426.626175][ T8754] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1288'. [ 428.926158][ T8776] netlink: 4260 bytes leftover after parsing attributes in process `syz.1.1294'. [ 430.822502][ T8801] sctp: [Deprecated]: syz.3.1298 (pid 8801) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.822502][ T8801] Use struct sctp_sack_info instead [ 432.970391][ T8822] netlink: set zone limit has 8 unknown bytes [ 433.039392][ T8826] delete_channel: no stack [ 433.878159][ T4211] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 435.167477][ T8858] sctp: [Deprecated]: syz.3.1312 (pid 8858) Use of struct sctp_assoc_value in delayed_ack socket option. [ 435.167477][ T8858] Use struct sctp_sack_info instead [ 435.931920][ T4211] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.943525][ T4211] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.103924][ T4211] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 436.155818][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 436.253999][ T4211] usb 1-1: can't set config #1, error -71 [ 436.271769][ T4211] usb 1-1: USB disconnect, device number 16 [ 439.421881][ T8931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1332'. [ 440.036568][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.043007][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.469643][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 443.162209][ T8973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1346'. [ 446.947331][ T9023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1360'. [ 448.139015][ T9034] device syz_tun entered promiscuous mode [ 448.155480][ T9034] device macsec1 entered promiscuous mode [ 448.437783][ T9034] device syz_tun left promiscuous mode [ 448.719865][ T9033] delete_channel: no stack [ 450.280802][ T9067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1373'. [ 451.473112][ T26] audit: type=1326 audit(1746143351.783:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9075 comm="syz.0.1379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x0 [ 455.925969][ T9136] overlayfs: failed to clone lowerpath [ 458.181222][ T26] audit: type=1326 audit(1746143358.493:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9156 comm="syz.5.1403" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f8a641969 code=0x0 [ 459.025585][ T9174] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 459.049179][ T9174] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 460.307037][ T9193] capability: warning: `syz.3.1412' uses deprecated v2 capabilities in a way that may be insecure [ 460.313044][ T9192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1413'. [ 462.220111][ T26] audit: type=1326 audit(1746143362.533:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.1.1418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x0 [ 463.571247][ T9241] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1426'. [ 463.763897][ T4255] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 463.788842][ T26] audit: type=1326 audit(1746143364.103:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x7ffc0000 [ 463.822573][ T26] audit: type=1326 audit(1746143364.103:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x7ffc0000 [ 463.940762][ T26] audit: type=1326 audit(1746143364.133:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd3d88ca969 code=0x7ffc0000 [ 464.565050][ T26] audit: type=1326 audit(1746143364.133:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x7ffc0000 [ 464.639108][ T26] audit: type=1326 audit(1746143364.133:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9242 comm="syz.0.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x7ffc0000 [ 464.644101][ T4255] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.750352][ T4255] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 464.787118][ T26] audit: type=1326 audit(1746143365.103:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.0.1433" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x0 [ 464.851886][ T4255] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.925055][ T4255] usb 2-1: config 0 descriptor?? [ 464.966405][ T4255] pwc: Askey VC010 type 2 USB webcam detected. [ 465.973866][ T4255] pwc: recv_control_msg error -32 req 02 val 2b00 [ 466.130929][ T4255] pwc: recv_control_msg error -32 req 02 val 2700 [ 466.190354][ T4255] pwc: recv_control_msg error -32 req 02 val 2c00 [ 466.570272][ T4255] pwc: recv_control_msg error -32 req 04 val 1000 [ 466.613867][ T4255] pwc: recv_control_msg error -32 req 04 val 1300 [ 466.894105][ T4255] pwc: recv_control_msg error -71 req 02 val 2000 [ 466.933841][ T4255] pwc: recv_control_msg error -71 req 02 val 2100 [ 466.963864][ T4255] pwc: recv_control_msg error -71 req 04 val 1500 [ 466.984032][ T4255] pwc: recv_control_msg error -71 req 02 val 2500 [ 467.013981][ T4255] pwc: recv_control_msg error -71 req 02 val 2400 [ 467.033900][ T4255] pwc: recv_control_msg error -71 req 02 val 2600 [ 467.152755][ T4255] pwc: recv_control_msg error -71 req 02 val 2900 [ 467.175993][ T4255] pwc: recv_control_msg error -71 req 02 val 2800 [ 467.520900][ T4255] pwc: recv_control_msg error -71 req 04 val 1100 [ 467.545004][ T4255] pwc: recv_control_msg error -71 req 04 val 1200 [ 467.640567][ T4255] pwc: Registered as video103. [ 467.728106][ T4255] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 467.852330][ T4255] usb 2-1: USB disconnect, device number 16 [ 468.544951][ T26] audit: type=1326 audit(1746143368.863:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9307 comm="syz.3.1448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4826f47969 code=0x0 [ 469.116657][ T9334] netlink: 452 bytes leftover after parsing attributes in process `syz.5.1454'. [ 470.989123][ T26] audit: type=1326 audit(1746143371.303:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9359 comm="syz.4.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x0 [ 471.441681][ T9372] loop6: detected capacity change from 0 to 524287999 [ 471.562910][ T9371] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 471.573379][ T9371] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 471.788860][ T1107] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 471.855425][ T9382] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 471.940014][ T9385] netlink: 'syz.4.1471': attribute type 4 has an invalid length. [ 471.941868][ T9383] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 472.184371][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.229544][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.304281][ T1107] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 472.373455][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.478268][ T1107] usb 4-1: config 0 descriptor?? [ 472.645409][ T9390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1473'. [ 472.784003][ T4255] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 473.255246][ T4255] usb 2-1: config 0 has no interfaces? [ 473.307294][ T2429] blk_update_request: I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 473.383534][ T9399] netlink: 'syz.4.1476': attribute type 16 has an invalid length. [ 473.430821][ T9399] netlink: 456 bytes leftover after parsing attributes in process `syz.4.1476'. [ 473.444192][ T4255] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 473.495742][ T4255] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 473.856655][ T4255] usb 2-1: Product: syz [ 473.907430][ T4255] usb 2-1: Manufacturer: syz [ 473.969573][ T4255] usb 2-1: SerialNumber: syz [ 474.077909][ T4255] usb 2-1: config 0 descriptor?? [ 475.634458][ T1107] usbhid 4-1:0.0: can't add hid device: -71 [ 475.641342][ T1107] usbhid: probe of 4-1:0.0 failed with error -71 [ 475.707231][ T1107] usb 4-1: USB disconnect, device number 16 [ 475.745484][ T4214] usb 2-1: USB disconnect, device number 17 [ 476.633814][ T4214] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 476.758399][ T9409] tipc: Started in network mode [ 476.763445][ T9409] tipc: Node identity 6, cluster identity 4711 [ 476.779919][ T9409] tipc: Node number set to 6 [ 477.254001][ T4214] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 477.272455][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.299581][ T4214] usb 2-1: config 0 descriptor?? [ 479.524071][ T4214] usb 2-1: Cannot set autoneg [ 479.529267][ T4214] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 479.588165][ T4214] usb 2-1: USB disconnect, device number 18 [ 479.936055][ T9452] netlink: 'syz.3.1490': attribute type 16 has an invalid length. [ 479.963866][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 479.998336][ T9452] netlink: 456 bytes leftover after parsing attributes in process `syz.3.1490'. [ 481.164212][ T21] usb 6-1: config 0 has no interfaces? [ 481.323938][ T21] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 481.352841][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.371187][ T21] usb 6-1: Product: syz [ 481.391026][ T21] usb 6-1: Manufacturer: syz [ 481.540866][ T21] usb 6-1: SerialNumber: syz [ 481.637452][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 482.053478][ T21] usb 6-1: config 0 descriptor?? [ 484.545752][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'. [ 485.826065][ T9505] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1504'. [ 486.273945][ T9515] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1506'. [ 487.563852][ T21] usb 6-1: can't set config #0, error -110 [ 488.061694][ T4212] usb 6-1: USB disconnect, device number 3 [ 488.353955][ T9532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1511'. [ 488.872414][ T9539] loop5: detected capacity change from 0 to 512 [ 489.089415][ T9539] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.114089][ T9539] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 489.183812][ T4215] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 490.104063][ T4215] usb 1-1: config 0 has an invalid interface number: 93 but max is 0 [ 490.132594][ T4215] usb 1-1: config 0 has no interface number 0 [ 490.350191][ T4215] usb 1-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 490.381681][ T4215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.408352][ T4215] usb 1-1: Product: syz [ 490.423425][ T4215] usb 1-1: Manufacturer: syz [ 490.453661][ T4215] usb 1-1: SerialNumber: syz [ 490.484785][ T4215] usb 1-1: config 0 descriptor?? [ 491.659907][ T4215] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 491.677528][ T4215] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 491.698716][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1521'. [ 492.673950][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1525'. [ 493.578313][ T4215] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 493.590549][ T4215] usb 1-1: media controller created [ 493.599413][ T4215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 493.662119][ T4255] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 493.941725][ T4215] DVB: Unable to find symbol dib7000p_attach() [ 493.948444][ T4215] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 493.959522][ T4215] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 493.964437][ T4255] usb 6-1: Using ep0 maxpacket: 8 [ 493.984283][ T4215] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 493.993048][ T4215] usb 1-1: media controller created [ 494.000701][ T4215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 494.783941][ T4255] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 494.804111][ T4255] usb 6-1: can't read configurations, error -71 [ 494.812099][ T4215] dib0700: the master dib7090 has to be initialized first [ 494.827228][ T4215] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 495.193846][ T4215] rc_core: IR keymap rc-dib0700-rc5 not found [ 495.202522][ T4215] Registered IR keymap rc-empty [ 495.236321][ T4215] dvb-usb: could not initialize remote control. [ 495.242623][ T4215] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 495.355787][ T4215] usb 1-1: USB disconnect, device number 17 [ 495.630161][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1538'. [ 495.970225][ T4215] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 496.232397][ T9637] loop5: detected capacity change from 0 to 512 [ 496.352721][ T9637] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 496.393900][ T9637] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.216501][ T26] audit: type=1326 audit(1746143397.533:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8a641969 code=0x7ffc0000 [ 497.531921][ T26] audit: type=1326 audit(1746143397.573:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2f8a641969 code=0x7ffc0000 [ 497.687162][ T4255] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 497.714351][ T26] audit: type=1326 audit(1746143397.573:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f8a641969 code=0x7ffc0000 [ 498.636355][ T26] audit: type=1326 audit(1746143397.573:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f8a6402d0 code=0x7ffc0000 [ 498.733887][ T26] audit: type=1326 audit(1746143397.573:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f8a64156b code=0x7ffc0000 [ 498.815675][ T4255] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 498.855247][ T4255] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 498.895783][ T4255] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 498.943760][ T26] audit: type=1326 audit(1746143397.573:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f8a64156b code=0x7ffc0000 [ 499.006802][ T4255] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 499.033885][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.066161][ T26] audit: type=1326 audit(1746143397.573:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f8a64156b code=0x7ffc0000 [ 499.145725][ T26] audit: type=1326 audit(1746143397.573:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f8a64156b code=0x7ffc0000 [ 499.210908][ T26] audit: type=1326 audit(1746143398.053:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f8a64156b code=0x7ffc0000 [ 499.250244][ T9672] netlink: 'syz.1.1550': attribute type 10 has an invalid length. [ 499.292787][ T4255] snd-usb-audio: probe of 6-1:27.0 failed with error -12 [ 499.446921][ T26] audit: type=1326 audit(1746143398.923:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9647 comm="syz.5.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2f8a64156b code=0x7ffc0000 [ 499.877417][ T9581] udevd[9581]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.905756][ T9672] team0: Port device wlan1 removed [ 499.917992][ T9672] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 499.934421][ T4214] usb 6-1: USB disconnect, device number 6 [ 500.022866][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.566372][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.675864][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.418237][ T9712] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1557'. [ 502.563857][ T2285] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 502.973773][ T2285] usb 6-1: Using ep0 maxpacket: 8 [ 503.124739][ T2285] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.148111][ T2285] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.192318][ T2285] usb 6-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 503.223394][ T2285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.322553][ T2285] usb 6-1: config 0 descriptor?? [ 503.807717][ T2285] hid-rmi 0003:06CB:81A7.0004: item fetching failed at offset 10/11 [ 503.826215][ T2285] hid-rmi 0003:06CB:81A7.0004: parse failed [ 503.842555][ T2285] hid-rmi: probe of 0003:06CB:81A7.0004 failed with error -22 [ 503.956041][ T9721] syz.1.1562 (9721): drop_caches: 2 [ 504.038234][ T4211] usb 6-1: USB disconnect, device number 7 [ 505.197286][ T9736] sctp: [Deprecated]: syz.1.1567 (pid 9736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.197286][ T9736] Use struct sctp_sack_info instead [ 505.668870][ T9744] netlink: 'syz.4.1570': attribute type 10 has an invalid length. [ 507.827396][ T9743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.057114][ T9757] netlink: 'syz.5.1575': attribute type 39 has an invalid length. [ 509.096425][ T4255] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 510.345737][ T9773] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1580'. [ 510.424169][ T4255] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 510.477232][ T4255] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 510.487360][ T4255] usb 1-1: config 0 has no interface number 0 [ 510.494280][ T4255] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 510.523853][ T4255] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 510.551436][ T4255] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 510.565612][ T4255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.580543][ T4255] usb 1-1: config 0 descriptor?? [ 510.673802][ T2285] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 510.823914][ T9785] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1583'. [ 511.044150][ T2285] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.059702][ T2285] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 511.073783][ T2285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.098726][ T2285] usb 6-1: config 0 descriptor?? [ 511.149263][ T2285] pwc: Askey VC010 type 2 USB webcam detected. [ 511.276264][ T4214] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 511.286114][ T4255] usb 1-1: USB disconnect, device number 18 [ 511.693917][ T4214] usb 2-1: Using ep0 maxpacket: 16 [ 512.313801][ T2285] pwc: recv_control_msg error -32 req 02 val 2b00 [ 512.353887][ T2285] pwc: recv_control_msg error -32 req 02 val 2700 [ 512.359012][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.381609][ T4214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.393581][ T4214] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 512.393870][ T2285] pwc: recv_control_msg error -32 req 02 val 2c00 [ 512.406990][ T4214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.418369][ T9798] netlink: 'syz.4.1588': attribute type 10 has an invalid length. [ 512.454924][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.458148][ T4214] usb 2-1: config 0 descriptor?? [ 512.513907][ T2285] pwc: recv_control_msg error -32 req 04 val 1000 [ 512.813966][ T2285] pwc: recv_control_msg error -71 req 04 val 1400 [ 512.838650][ T2285] pwc: recv_control_msg error -71 req 02 val 2000 [ 512.944308][ T2285] pwc: recv_control_msg error -71 req 02 val 2100 [ 512.964268][ T2285] pwc: recv_control_msg error -71 req 04 val 1500 [ 512.994129][ T2285] pwc: recv_control_msg error -71 req 02 val 2500 [ 513.026510][ T2285] pwc: recv_control_msg error -71 req 02 val 2400 [ 513.064142][ T2285] pwc: recv_control_msg error -71 req 02 val 2600 [ 513.084165][ T2285] pwc: recv_control_msg error -71 req 02 val 2900 [ 513.114130][ T2285] pwc: recv_control_msg error -71 req 02 val 2800 [ 513.144165][ T2285] pwc: recv_control_msg error -71 req 04 val 1100 [ 513.166606][ T2285] pwc: recv_control_msg error -71 req 04 val 1200 [ 513.374692][ T2285] pwc: Registered as video103. [ 513.408935][ T2285] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 513.419128][ T4214] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0005/input/input13 [ 513.447888][ T2285] usb 6-1: USB disconnect, device number 8 [ 513.602920][ T4214] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 514.171389][ T2285] usb 2-1: USB disconnect, device number 19 [ 514.566504][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 514.566520][ T26] audit: type=1326 audit(1746143414.883:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9819 comm="syz.0.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x0 [ 515.156422][ T9843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1599'. [ 515.953577][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1602'. [ 516.020248][ T9845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.273785][ T2285] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 516.654123][ T2285] usb 2-1: config 0 has no interfaces? [ 516.659649][ T2285] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 516.716024][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.756850][ T2285] usb 2-1: config 0 descriptor?? [ 517.008056][ T9851] udc-core: couldn't find an available UDC or it's busy [ 517.043915][ T9851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 517.095214][ T7] usb 2-1: USB disconnect, device number 20 [ 517.673775][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 519.389423][ T26] audit: type=1326 audit(1746143419.703:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9875 comm="syz.1.1611" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x0 [ 520.357788][ T9896] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1614'. [ 521.395674][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 521.449403][ T9904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.193850][ T26] audit: type=1326 audit(1746143425.473:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9938 comm="syz.4.1629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x0 [ 525.215531][ C1] vkms_vblank_simulate: vblank timer overrun [ 525.794246][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 526.513968][ T7] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 526.563044][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.613924][ T7] usb 4-1: Product: syz [ 526.637616][ T7] usb 4-1: Manufacturer: syz [ 526.673074][ T7] usb 4-1: SerialNumber: syz [ 526.845481][ T7] usb 4-1: config 0 descriptor?? [ 527.736453][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1641'. [ 528.729261][ T26] audit: type=1326 audit(1746143429.043:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9984 comm="syz.4.1645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x0 [ 528.854359][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 528.869296][ T7] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 528.889597][ T7] asix: probe of 4-1:0.0 failed with error -71 [ 528.914467][ T7] usb 4-1: USB disconnect, device number 17 [ 528.933798][ T4214] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 529.183761][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 529.303936][ T4214] usb 1-1: config 0 has no interfaces? [ 529.463984][ T4214] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 529.493257][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.543778][ T4214] usb 1-1: Product: syz [ 529.547999][ T4214] usb 1-1: Manufacturer: syz [ 529.565657][ T4214] usb 1-1: SerialNumber: syz [ 529.577523][ T4214] usb 1-1: config 0 descriptor?? [ 530.699047][ T4214] usb 1-1: USB disconnect, device number 19 [ 531.548272][ T7612] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 532.473755][ T7612] usb 2-1: Using ep0 maxpacket: 32 [ 532.593996][ T7612] usb 2-1: config 0 has no interfaces? [ 532.599499][ T7612] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 532.649188][ T7612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.702468][ T7612] usb 2-1: config 0 descriptor?? [ 532.771658][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 532.983564][ T26] audit: type=1326 audit(1746143433.293:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10031 comm="syz.0.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3d88ca969 code=0x0 [ 533.046623][ T4214] usb 2-1: USB disconnect, device number 22 [ 536.032884][T10081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1674'. [ 536.061698][T10081] fuse: Bad value for 'fd' [ 538.466321][T10098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1681'. [ 538.746398][T10106] hsr0 speed is unknown, defaulting to 1000 [ 539.563860][ T4214] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 539.651294][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'. [ 539.666427][T10114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1686'. [ 539.924907][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1687'. [ 540.144166][ T4214] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 540.165509][ T4214] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 540.328425][ T4214] usb 1-1: config 0 has no interface number 0 [ 540.337581][ T4214] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 540.350900][ T4214] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.364017][ T4214] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 540.665987][ T26] audit: type=1326 audit(1746143440.983:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10122 comm="syz.1.1689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x0 [ 540.708833][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.778412][ T4214] usb 1-1: config 0 descriptor?? [ 541.387940][ T4214] usb 1-1: USB disconnect, device number 20 [ 546.787359][ T4214] Bluetooth: hci5: command 0x0406 tx timeout [ 547.299837][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1699'. [ 547.787726][ T26] audit: type=1326 audit(1746143448.103:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10165 comm="syz.1.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x0 [ 549.683875][ T4215] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 549.943835][ T4215] usb 4-1: Using ep0 maxpacket: 32 [ 550.145042][ T4215] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 550.166394][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.324315][ T4215] usb 4-1: config 0 descriptor?? [ 550.519325][ T4215] gspca_main: sunplus-2.14.0 probing 041e:400b [ 551.993833][ T4215] gspca_sunplus: reg_w_riv err -71 [ 552.000373][ T4215] sunplus: probe of 4-1:0.0 failed with error -71 [ 552.054600][ T4215] usb 4-1: USB disconnect, device number 18 [ 554.215988][ T26] audit: type=1326 audit(1746143454.533:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10239 comm="syz.3.1719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4826f47969 code=0x0 [ 554.962434][T10258] dlm: dev_write: no op 0 0 [ 556.157609][ T26] audit: type=1326 audit(1746143456.473:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x7ffc0000 [ 556.254152][ T26] audit: type=1326 audit(1746143456.493:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x7ffc0000 [ 556.425008][ T26] audit: type=1326 audit(1746143456.493:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2dde87b969 code=0x7ffc0000 [ 556.452654][ T26] audit: type=1326 audit(1746143456.493:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x7ffc0000 [ 556.497625][ T26] audit: type=1326 audit(1746143456.493:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10273 comm="syz.4.1730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde87b969 code=0x7ffc0000 [ 556.530869][T10276] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 556.540030][T10276] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 559.211848][T10308] program syz.0.1740 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.253820][ T7] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 560.513853][ T7] usb 6-1: config 0 has no interfaces? [ 560.674093][ T7] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 560.727679][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 560.827874][ T7] usb 6-1: Product: syz [ 560.852395][ T7] usb 6-1: Manufacturer: syz [ 560.857962][ T7] usb 6-1: SerialNumber: syz [ 560.891118][ T7] usb 6-1: config 0 descriptor?? [ 561.063747][ T4210] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 561.472794][T10329] netlink: 'syz.0.1745': attribute type 16 has an invalid length. [ 561.484037][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.509470][T10329] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1745'. [ 561.521647][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.536363][ T4210] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 561.547319][ T26] audit: type=1326 audit(1746143461.863:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 561.549625][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.591795][ T26] audit: type=1326 audit(1746143461.893:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 561.604552][ T4210] usb 4-1: config 0 descriptor?? [ 561.614259][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.643464][ T26] audit: type=1326 audit(1746143461.893:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10331 comm="syz.1.1747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 561.665959][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.675466][ T7] usb 6-1: USB disconnect, device number 9 [ 562.137390][ T4210] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 562.149472][ T4210] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 562.193535][ T4210] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0006/input/input15 [ 562.243384][ T4210] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 562.523006][ T4210] usb 4-1: USB disconnect, device number 19 [ 563.024001][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.030350][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.247867][T10351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.067306][T10373] batman_adv: batadv0: Adding interface: dummy0 [ 565.075055][T10373] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.112212][T10373] batman_adv: batadv0: Interface activated: dummy0 [ 565.211586][T10377] batadv0: mtu less than device minimum [ 565.240174][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.252854][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.265036][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.276935][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.289524][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.301432][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.313489][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.325365][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 565.337418][T10377] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 566.794720][T10395] kernel read not supported for file /eth0 (pid: 10395 comm: syz.0.1767) [ 566.852239][ T26] audit: type=1800 audit(1746143467.163:105): pid=10395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1767" name="eth0" dev="mqueue" ino=39513 res=0 errno=0 [ 568.578904][ T4210] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 569.466940][T10414] netlink: 'syz.1.1774': attribute type 16 has an invalid length. [ 569.478870][T10414] netlink: 456 bytes leftover after parsing attributes in process `syz.1.1774'. [ 570.184075][ T4210] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 570.209162][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.261791][ T4210] usb 1-1: config 0 descriptor?? [ 570.661288][T10431] netlink: 'syz.4.1779': attribute type 4 has an invalid length. [ 571.072841][T10440] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1781'. [ 572.033976][ T4210] usb 1-1: Cannot set autoneg [ 572.039450][ T4210] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 572.242732][ T4210] usb 1-1: USB disconnect, device number 21 [ 573.284883][T10455] netlink: 'syz.4.1787': attribute type 16 has an invalid length. [ 573.333589][T10455] netlink: 456 bytes leftover after parsing attributes in process `syz.4.1787'. [ 574.293121][T10470] device syzkaller1 entered promiscuous mode [ 574.462950][T10474] netlink: 452 bytes leftover after parsing attributes in process `syz.4.1792'. [ 574.975286][T10481] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1793'. [ 576.893809][ T21] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 577.074267][ T4212] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 577.169161][T10497] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 577.222608][T10497] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 577.274008][ T21] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 577.282530][ T21] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 577.293207][ T21] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.305341][ T21] usb 4-1: config 220 has no interface number 2 [ 577.314801][ T21] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.328399][ T21] usb 4-1: config 220 interface 0 has no altsetting 0 [ 577.352208][ T21] usb 4-1: config 220 interface 76 has no altsetting 0 [ 577.582956][ T21] usb 4-1: config 220 interface 1 has no altsetting 0 [ 577.593777][ T4212] usb 6-1: Using ep0 maxpacket: 8 [ 577.764560][ T4212] usb 6-1: config 0 has no interfaces? [ 577.804051][ T21] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.817080][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.831810][ T21] usb 4-1: Product: syz [ 577.843807][ T21] usb 4-1: Manufacturer: syz [ 577.851782][ T21] usb 4-1: SerialNumber: syz [ 577.896941][ T4212] usb 6-1: config 0 has no interfaces? [ 578.007865][ T4212] usb 6-1: config 0 has no interfaces? [ 578.066550][ T4896] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 578.224009][ T4212] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 578.233560][ T4212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.241749][ T4212] usb 6-1: Product: syz [ 578.245499][ T21] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 578.246257][ T4212] usb 6-1: Manufacturer: syz [ 578.260720][ T4212] usb 6-1: SerialNumber: syz [ 578.267597][ T21] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 578.277232][ T4212] usb 6-1: config 0 descriptor?? [ 578.279421][ T21] usb 4-1: No valid video chain found. [ 578.289440][ T21] usb 4-1: selecting invalid altsetting 0 [ 578.375609][ T21] usb 4-1: selecting invalid altsetting 0 [ 578.382934][ T21] usbtest: probe of 4-1:220.1 failed with error -22 [ 578.392253][ T21] usb 4-1: USB disconnect, device number 20 [ 578.453938][ T4896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.464975][ T4896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.474931][ T4896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 578.488163][ T4896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 578.497609][ T4896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.508276][ T4896] usb 2-1: config 0 descriptor?? [ 578.538598][T10491] udc-core: couldn't find an available UDC or it's busy [ 578.550025][T10491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 578.563107][T10491] udc-core: couldn't find an available UDC or it's busy [ 578.573008][T10491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 578.585935][T10491] udc-core: couldn't find an available UDC or it's busy [ 578.593501][T10491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 578.606453][ T4212] usb 6-1: USB disconnect, device number 10 [ 579.020154][T10522] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1807'. [ 579.214058][ T4210] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 579.264574][ T4212] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 579.494295][ T4210] usb 4-1: Using ep0 maxpacket: 32 [ 579.681475][ T4896] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 579.692542][ T4896] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 579.777917][ T4212] usb 6-1: Using ep0 maxpacket: 8 [ 579.783126][ T4210] usb 4-1: config index 0 descriptor too short (expected 164, got 36) [ 579.792579][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.809070][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.819089][ T4210] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 579.828828][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.021171][ T4210] usb 4-1: config 0 descriptor?? [ 580.063858][ T4212] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 580.071517][ T4212] usb 6-1: can't read configurations, error -71 [ 580.830489][ T4896] usb 2-1: USB disconnect, device number 23 [ 580.945842][ T4210] logitech 0003:046D:C29C.0008: unknown main item tag 0xe [ 581.465814][ T4210] logitech 0003:046D:C29C.0008: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0 [ 581.567035][ T4210] logitech 0003:046D:C29C.0008: no inputs found [ 581.599852][ T4210] usb 4-1: USB disconnect, device number 21 [ 582.981155][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 583.493869][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 584.373808][ T7] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 584.518073][ T7] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 584.528845][ T7] usb 1-1: config 63 has no interface number 0 [ 584.535138][ T7] usb 1-1: config 63 interface 66 has no altsetting 0 [ 584.646528][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1826'. [ 585.063050][T10586] netlink: 'syz.1.1827': attribute type 16 has an invalid length. [ 585.071640][T10586] netlink: 456 bytes leftover after parsing attributes in process `syz.1.1827'. [ 585.093929][ T7] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 585.110683][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.139499][ T7] usb 1-1: Product: syz [ 585.163861][ T7] usb 1-1: Manufacturer: syz [ 585.172701][ T7] usb 1-1: SerialNumber: syz [ 585.846359][ T7] usb 1-1: USB disconnect, device number 22 [ 587.003796][ T7] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 587.603812][ T7] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 588.384390][ T7] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 588.397429][ T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 588.563875][ T7] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 588.581370][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.591574][ T7] usb 2-1: Product: syz [ 588.596354][ T7] usb 2-1: Manufacturer: syz [ 588.601536][ T7] usb 2-1: SerialNumber: syz [ 588.725999][ T7] usb 2-1: config 0 descriptor?? [ 588.764880][ T7] usb-storage 2-1:0.0: USB Mass Storage device detected [ 588.837604][T10629] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1837'. [ 589.653420][ T7] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 589.703754][ T4210] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 590.475814][ T7] usb 2-1: USB disconnect, device number 24 [ 590.573846][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.605262][ T4210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.623757][ T4210] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 590.643198][ T4210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.693113][ T4210] usb 4-1: config 0 descriptor?? [ 591.235844][ T4210] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 591.245587][ T4210] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 591.624296][ T4210] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE [ 592.990235][ T4212] usb 4-1: reset high-speed USB device number 22 using dummy_hcd [ 593.579652][T10672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1851'. [ 594.411854][ T4210] usb 4-1: USB disconnect, device number 22 [ 595.463727][ T4306] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 596.453777][ T4306] usb 2-1: Using ep0 maxpacket: 16 [ 596.623939][ T4306] usb 2-1: device descriptor read/all, error -71 [ 599.073322][ T4210] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 599.615074][ T4210] usb 2-1: Using ep0 maxpacket: 8 [ 599.677392][T10740] netlink: 'syz.0.1868': attribute type 16 has an invalid length. [ 599.733918][ T4210] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 599.744208][T10740] netlink: 456 bytes leftover after parsing attributes in process `syz.0.1868'. [ 599.804334][T10736] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 599.903989][ T4210] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 599.911777][T10736] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 599.913279][ T4255] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 599.937418][ T4210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.950030][ T4210] usb 2-1: Product: syz [ 599.955002][ T4210] usb 2-1: Manufacturer: syz [ 599.959868][ T4210] usb 2-1: SerialNumber: syz [ 599.978552][ T4210] usb 2-1: config 0 descriptor?? [ 600.031984][ T4210] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 600.183823][ T4255] usb 6-1: Using ep0 maxpacket: 8 [ 600.303852][ T4255] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 600.315393][ T4255] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 600.330023][ T4255] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 600.341815][ T4255] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 600.358743][ T4255] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.372847][ T4255] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 600.389444][ T4255] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.204200][ T4255] usb 6-1: usb_control_msg returned -32 [ 601.209847][ T4255] usbtmc 6-1:16.0: can't read capabilities [ 601.215913][ T4210] gspca_zc3xx: reg_w_i err -110 [ 601.833700][ T4210] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 602.187649][ T4210] gspca_zc3xx: probe of 2-1:0.0 failed with error -110 [ 602.226322][T10766] udc-core: couldn't find an available UDC or it's busy [ 602.267148][T10766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 603.182723][ T4210] usb 2-1: USB disconnect, device number 27 [ 603.387513][ T4215] usb 6-1: USB disconnect, device number 13 [ 605.923711][T10233] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 608.153907][T10233] usb 4-1: unable to get BOS descriptor or descriptor too short [ 608.363902][T10233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 608.390317][T10233] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9 [ 608.481458][T10233] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 609.255223][T10233] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 609.333837][T10233] usb 4-1: string descriptor 0 read error: -71 [ 609.356753][T10233] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 609.403290][T10233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.445697][T10233] usb 4-1: config 0 descriptor?? [ 609.463832][T10233] usb 4-1: can't set config #0, error -71 [ 609.491551][T10233] usb 4-1: USB disconnect, device number 23 [ 611.505070][T10865] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1900'. [ 612.883709][T10884] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1906'. [ 616.202318][ T4306] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 616.874907][T10913] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1916'. [ 619.391134][T10922] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 619.410528][T10922] net_ratelimit: 10 callbacks suppressed [ 619.410545][T10922] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 619.730845][T10933] Illegal XDP return value 16128, expect packet loss! [ 620.244185][T10233] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 620.566358][T10233] usb 1-1: Using ep0 maxpacket: 32 [ 620.703940][T10233] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 620.732620][T10233] usb 1-1: config 0 has no interface number 0 [ 620.751296][T10233] usb 1-1: config 0 interface 247 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 620.835284][T10233] usb 1-1: config 0 interface 247 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 621.074950][T10233] usb 1-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=77.d6 [ 621.107740][T10233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.175226][T10233] usb 1-1: Product: syz [ 621.209336][T10233] usb 1-1: Manufacturer: syz [ 621.244923][T10233] usb 1-1: SerialNumber: syz [ 621.320424][T10233] usb 1-1: config 0 descriptor?? [ 621.433129][T10233] xbox_remote_probe: Unexpected endpoint_in [ 621.631014][T10949] IPv6: NLM_F_REPLACE set, but no existing node found! [ 621.674839][T10925] udc-core: couldn't find an available UDC or it's busy [ 621.702213][T10925] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 622.733065][T10968] netlink: 'syz.4.1934': attribute type 16 has an invalid length. [ 622.813842][T10968] netlink: 456 bytes leftover after parsing attributes in process `syz.4.1934'. [ 623.039965][ T4306] usb 1-1: USB disconnect, device number 24 [ 624.104335][T10975] MPTCP: addr_signal error, rm_addr=1 [ 624.357652][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.369752][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.272789][T11017] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 629.351553][ T4255] Bluetooth: hci0: command 0x0c1a tx timeout [ 629.403126][T11017] netlink: 'syz.1.1946': attribute type 13 has an invalid length. [ 629.498006][T11017] netlink: 'syz.1.1946': attribute type 17 has an invalid length. [ 631.017960][T11017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 631.151923][T11017] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 633.792895][T11086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1963'. [ 634.904293][T11093] sctp: [Deprecated]: syz.5.1964 (pid 11093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.904293][T11093] Use struct sctp_sack_info instead [ 638.752090][T11145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1974'. [ 641.441005][T11173] sctp: [Deprecated]: syz.1.1980 (pid 11173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 641.441005][T11173] Use struct sctp_sack_info instead [ 641.968177][T11178] netlink: 'syz.3.1983': attribute type 16 has an invalid length. [ 642.003745][T11178] netlink: 456 bytes leftover after parsing attributes in process `syz.3.1983'. [ 643.655317][T11190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1986'. [ 650.677277][T11225] netlink: 'syz.5.1996': attribute type 16 has an invalid length. [ 650.706798][T11225] netlink: 456 bytes leftover after parsing attributes in process `syz.5.1996'. [ 655.192464][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2005'. [ 655.498652][T11265] sctp: [Deprecated]: syz.0.2007 (pid 11265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.498652][T11265] Use struct sctp_sack_info instead [ 656.502806][T11275] netlink: 'syz.3.2012': attribute type 16 has an invalid length. [ 656.515125][T11275] netlink: 456 bytes leftover after parsing attributes in process `syz.3.2012'. [ 658.975100][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 659.100127][T11314] netlink: 'syz.0.2025': attribute type 10 has an invalid length. [ 659.108338][T11314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2025'. [ 659.184515][T11314] team0: Port device geneve0 added [ 660.093993][T11324] netlink: 'syz.1.2028': attribute type 16 has an invalid length. [ 660.106160][T11324] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2028'. [ 662.434744][T11345] sctp: [Deprecated]: syz.0.2032 (pid 11345) Use of struct sctp_assoc_value in delayed_ack socket option. [ 662.434744][T11345] Use struct sctp_sack_info instead [ 669.149836][T11403] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2049'. [ 671.391057][T11430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2054'. [ 671.845386][T11427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2057'. [ 674.322989][T11442] No such timeout policy "syz1" [ 674.437395][T11445] sctp: [Deprecated]: syz.1.2060 (pid 11445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 674.437395][T11445] Use struct sctp_sack_info instead [ 678.043966][T11475] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2069'. [ 680.659762][T11494] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2074'. [ 680.719042][T11501] bridge0: port 2(veth0_to_bridge) entered blocking state [ 680.744547][T11501] bridge0: port 2(veth0_to_bridge) entered disabled state [ 680.840469][T11501] device veth0_to_bridge entered promiscuous mode [ 680.896201][T11501] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 681.001765][T11501] bridge0: port 2(veth0_to_bridge) entered blocking state [ 681.009557][T11501] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 683.473383][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2084'. [ 683.738465][T11541] sctp: [Deprecated]: syz.0.2088 (pid 11541) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.738465][T11541] Use struct sctp_sack_info instead [ 685.165610][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2091'. [ 685.799171][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.805832][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.418912][T11606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2107'. [ 690.737829][T11621] sctp: [Deprecated]: syz.4.2110 (pid 11621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.737829][T11621] Use struct sctp_sack_info instead [ 691.214457][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 693.443526][T11655] hsr0 speed is unknown, defaulting to 1000 [ 694.101859][T11665] device wg1 entered promiscuous mode [ 699.082208][T11735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2148'. [ 701.555487][ T4210] Bluetooth: hci0: command 0x0401 tx timeout [ 710.655002][ T4896] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 711.930131][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 711.954122][ T4896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.994949][ T4896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 712.021895][ T4896] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 712.041447][ T4896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.071395][ T4896] usb 6-1: config 0 descriptor?? [ 712.575647][ T4896] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 712.615763][ T4896] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 712.783884][ T4896] cp2112 0003:10C4:EA90.000A: Part Number: 0x82 Device Version: 0xFE [ 713.443767][ T4896] cp2112 0003:10C4:EA90.000A: error reading lock byte: -71 [ 713.462774][ T4896] usb 6-1: USB disconnect, device number 14 [ 716.696947][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 717.106618][T11907] batman_adv: batadv0: Adding interface: dummy0 [ 717.137916][T11907] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.228008][T11907] batman_adv: batadv0: Interface activated: dummy0 [ 725.056752][T11339] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 725.079281][T11963] batman_adv: batadv0: Adding interface: dummy0 [ 725.087127][T11963] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.119857][T11963] batman_adv: batadv0: Interface activated: dummy0 [ 726.044554][T11339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.094006][T11339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.288030][T11339] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 726.303767][T11339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.390226][T11339] usb 2-1: config 0 descriptor?? [ 726.774495][T11339] usbhid 2-1:0.0: can't add hid device: -71 [ 726.788720][T11339] usbhid: probe of 2-1:0.0 failed with error -71 [ 726.845188][T11339] usb 2-1: USB disconnect, device number 28 [ 728.980132][T12003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2229'. [ 729.516094][T12017] netlink: 'syz.1.2232': attribute type 16 has an invalid length. [ 729.541178][T12017] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2232'. [ 729.803810][T11042] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 730.283941][T11042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.313855][T11042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.348213][T11042] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 730.373914][T11042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.412412][T11042] usb 4-1: config 0 descriptor?? [ 730.931293][T11042] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 730.955117][T11042] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 731.143839][T11042] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 731.425197][T12040] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 732.017750][ T7612] usb 4-1: USB disconnect, device number 24 [ 733.144076][T12071] netlink: 'syz.4.2248': attribute type 16 has an invalid length. [ 733.152146][T12071] netlink: 456 bytes leftover after parsing attributes in process `syz.4.2248'. [ 733.334778][T12075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2252'. [ 737.024590][T12048] udevd[12048]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 737.173238][T12125] netlink: 'syz.0.2267': attribute type 16 has an invalid length. [ 737.235879][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2268'. [ 737.486737][T12125] netlink: 456 bytes leftover after parsing attributes in process `syz.0.2267'. [ 743.218295][T12173] netlink: 'syz.3.2282': attribute type 16 has an invalid length. [ 743.226861][T12173] netlink: 456 bytes leftover after parsing attributes in process `syz.3.2282'. [ 743.827830][T12170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2281'. [ 747.258116][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.264602][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.455760][T12213] ubi31: attaching mtd0 [ 747.462213][T12213] ubi31: scanning is finished [ 747.466993][T12213] ubi31: empty MTD device detected [ 747.647434][T12213] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 747.655132][T12213] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 747.662523][T12213] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 747.669699][T12213] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 747.677257][T12213] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 747.684391][T12213] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 747.692596][T12213] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1117440181 [ 747.702939][T12213] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 747.729584][T12216] ubi31: background thread "ubi_bgt31d" started, PID 12216 [ 750.172681][T12246] netlink: 452 bytes leftover after parsing attributes in process `syz.0.2303'. [ 754.902292][T12296] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 758.359270][T12340] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 759.609955][T12354] netlink: 'syz.4.2335': attribute type 16 has an invalid length. [ 759.628358][T12354] netlink: 456 bytes leftover after parsing attributes in process `syz.4.2335'. [ 763.888600][T12401] netlink: 'syz.3.2349': attribute type 16 has an invalid length. [ 763.957916][T12401] netlink: 456 bytes leftover after parsing attributes in process `syz.3.2349'. [ 765.136697][T12418] fuse: Bad value for 'fd' [ 767.573414][T12444] netlink: 'syz.4.2361': attribute type 16 has an invalid length. [ 767.593749][T12444] netlink: 456 bytes leftover after parsing attributes in process `syz.4.2361'. [ 767.947042][T12451] fuse: Bad value for 'fd' [ 770.838874][T12492] fuse: Bad value for 'fd' [ 771.493292][T12499] netlink: 'syz.1.2379': attribute type 16 has an invalid length. [ 771.521137][T12499] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2379'. [ 774.808503][T12521] batman_adv: batadv0: Interface deactivated: dummy0 [ 774.873835][T12521] batman_adv: batadv0: Removing interface: dummy0 [ 775.106309][T12529] batman_adv: batadv0: Adding interface: dummy0 [ 775.127958][T12529] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.193185][T12529] batman_adv: batadv0: Interface activated: dummy0 [ 775.241264][T12533] batadv0: mtu less than device minimum [ 775.269503][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.282285][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.295054][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.307693][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.320398][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.333042][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.345665][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.358276][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 775.370865][T12533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 776.323450][T12546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2390'. [ 779.941745][T12572] batman_adv: batadv0: Interface deactivated: dummy0 [ 779.949923][T12572] batman_adv: batadv0: Removing interface: dummy0 [ 780.781015][T12586] netlink: 'syz.5.2406': attribute type 16 has an invalid length. [ 780.790082][T12586] netlink: 456 bytes leftover after parsing attributes in process `syz.5.2406'. [ 780.807186][T12588] batman_adv: batadv0: Interface deactivated: dummy0 [ 780.826617][T12588] batman_adv: batadv0: Removing interface: dummy0 [ 782.806598][T12612] device wlan0 entered promiscuous mode [ 783.697153][T12627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2415'. [ 784.535527][T12640] netlink: 'syz.5.2420': attribute type 16 has an invalid length. [ 784.567279][T12640] netlink: 456 bytes leftover after parsing attributes in process `syz.5.2420'. [ 784.864683][T12642] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 784.899466][T12642] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 788.192720][T12677] batman_adv: batadv0: Adding interface: dummy0 [ 788.222728][T12677] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.319549][T12677] batman_adv: batadv0: Interface activated: dummy0 [ 788.591539][ T26] audit: type=1326 audit(1746143688.893:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 789.254735][ T26] audit: type=1326 audit(1746143688.893:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 789.341906][ T26] audit: type=1326 audit(1746143688.893:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 789.369752][ T26] audit: type=1326 audit(1746143688.893:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 789.393345][ T26] audit: type=1326 audit(1746143688.903:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 789.428058][ T26] audit: type=1326 audit(1746143688.903:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 789.759885][ T26] audit: type=1326 audit(1746143688.903:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 790.679821][ T26] audit: type=1326 audit(1746143688.903:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 790.842675][ T26] audit: type=1326 audit(1746143688.903:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f616900c969 code=0x7ffc0000 [ 791.052815][ T26] audit: type=1326 audit(1746143688.903:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.2436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 791.096342][T12710] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2443'. [ 794.555982][T11339] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 794.707437][T12739] batman_adv: batadv0: Adding interface: dummy0 [ 794.723449][T12739] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.758448][T12739] batman_adv: batadv0: Interface activated: dummy0 [ 796.153893][T11339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.185471][T11339] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.223856][T11339] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 796.423626][T11339] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.442779][T11339] usb 2-1: config 0 descriptor?? [ 797.433815][T11339] usbhid 2-1:0.0: can't add hid device: -71 [ 797.451258][T11339] usbhid: probe of 2-1:0.0 failed with error -71 [ 797.501132][T11339] usb 2-1: USB disconnect, device number 29 [ 798.272452][T12784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2462'. [ 799.168221][T12798] net_ratelimit: 10 callbacks suppressed [ 799.168238][T12798] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 801.323686][T11339] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 801.703893][T11339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.728702][T11339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.757380][T11339] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 801.785944][T11339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.864651][T11339] usb 4-1: config 0 descriptor?? [ 802.572800][T12833] netlink: 452 bytes leftover after parsing attributes in process `syz.5.2476'. [ 802.825328][T11339] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 802.848208][T11339] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 803.034627][T11339] cp2112 0003:10C4:EA90.000C: Part Number: 0x82 Device Version: 0xFE [ 804.153770][T11339] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 805.831189][ T2285] usb 4-1: USB disconnect, device number 25 [ 807.600480][T12888] netlink: 452 bytes leftover after parsing attributes in process `syz.1.2491'. [ 808.754230][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.760853][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.881296][T13057] netlink: 'syz.1.2527': attribute type 16 has an invalid length. [ 818.951171][T13057] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2527'. [ 820.536699][T13076] udevd[13076]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 822.602324][T13094] batman_adv: batadv0: Adding interface: dummy0 [ 822.633871][T13094] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 822.659114][ C1] vkms_vblank_simulate: vblank timer overrun [ 822.713874][T13094] batman_adv: batadv0: Interface activated: dummy0 [ 826.454739][T13130] udevd[13130]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 827.225449][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2543'. [ 828.473317][T13164] sctp: [Deprecated]: syz.4.2558 (pid 13164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 828.473317][T13164] Use struct sctp_sack_info instead [ 830.006015][T13130] udevd[13130]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 832.652508][T13191] tc_dump_action: action bad kind [ 836.449318][T13205] sctp: [Deprecated]: syz.0.2570 (pid 13205) Use of struct sctp_assoc_value in delayed_ack socket option. [ 836.449318][T13205] Use struct sctp_sack_info instead [ 837.040892][T13213] udevd[13213]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 845.752313][T13272] overlayfs: failed to clone upperpath [ 849.132991][T13308] sctp: [Deprecated]: syz.5.2598 (pid 13308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 849.132991][T13308] Use struct sctp_sack_info instead [ 849.659548][T13309] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 849.677729][T13309] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 851.680583][T13340] netlink: 'syz.5.2608': attribute type 10 has an invalid length. [ 851.688752][T13340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2608'. [ 851.948224][T13340] team0: Port device geneve0 added [ 853.669276][T12989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.052224][T12989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.293654][T12989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.825156][T12989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.859834][T13366] hsr0 speed is unknown, defaulting to 1000 [ 854.868563][T13369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2607'. [ 855.629245][T13366] chnl_net:caif_netlink_parms(): no params data found [ 855.747044][T13373] futex_wake_op: syz.4.2617 tries to shift op by 32; fix this program [ 855.906691][T13366] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.950769][T13366] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.996371][T13366] device bridge_slave_0 entered promiscuous mode [ 856.107002][T13366] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.120229][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.131370][T13366] device bridge_slave_1 entered promiscuous mode [ 856.250204][T13366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.309157][T13366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.492371][T13366] team0: Port device team_slave_0 added [ 856.767491][ T4210] Bluetooth: hci4: command 0x0409 tx timeout [ 856.857758][T12989] device hsr_slave_0 left promiscuous mode [ 857.060818][T12989] device hsr_slave_1 left promiscuous mode [ 857.069800][T12989] batman_adv: batadv0: Interface deactivated: dummy0 [ 857.077644][T12989] batman_adv: batadv0: Removing interface: dummy0 [ 857.794453][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 857.801910][T12989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 857.901359][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 857.965144][T12989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.029165][T12989] device bridge_slave_1 left promiscuous mode [ 858.071282][T12989] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.122693][T12989] device bridge_slave_0 left promiscuous mode [ 858.148323][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.237811][T12989] device veth1_macvtap left promiscuous mode [ 858.276430][T12989] device veth0_macvtap left promiscuous mode [ 858.300819][T12989] device veth1_vlan left promiscuous mode [ 858.687067][T12989] device veth0_vlan left promiscuous mode [ 858.843912][ T2285] Bluetooth: hci4: command 0x041b tx timeout [ 859.077943][T12989] team0 (unregistering): Port device geneve0 removed [ 859.129895][T11209] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 859.514538][T11209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 859.588047][T11209] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 859.727408][T11209] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 859.889327][T11209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.923643][T11209] usb 2-1: config 0 descriptor?? [ 860.088283][T12989] team0 (unregistering): Port device team_slave_1 removed [ 860.145866][T12989] team0 (unregistering): Port device team_slave_0 removed [ 860.214183][T12989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.232819][T12989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.443899][T11209] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 860.507545][T11209] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 860.511797][T12989] bond0 (unregistering): Released all slaves [ 860.654778][T11209] cp2112 0003:10C4:EA90.000D: Part Number: 0x82 Device Version: 0xFE [ 860.913839][T11339] Bluetooth: hci4: command 0x040f tx timeout [ 861.042021][T13366] team0: Port device team_slave_1 added [ 861.128412][T13366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.148159][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.175924][T13366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.196239][T13366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.209561][T13366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.244626][T13366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.403214][T11209] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 861.425110][T13366] device hsr_slave_0 entered promiscuous mode [ 861.623676][T11209] usb 2-1: USB disconnect, device number 30 [ 863.258668][T13366] device hsr_slave_1 entered promiscuous mode [ 863.268508][T13366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 863.273438][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 863.281924][T13366] Cannot create hsr debugfs directory [ 864.494928][T13366] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 864.576345][T13366] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 864.628561][T13366] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 864.823851][T13366] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 865.297636][T13470] udevd[13470]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 866.093100][T13366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.158904][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 866.180276][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 866.224200][T13366] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.270267][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 866.294152][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 866.332881][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.340057][T12976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.376020][T13533] batman_adv: batadv0: Adding interface: dummy0 [ 866.397166][T13533] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 866.799257][T13533] batman_adv: batadv0: Interface activated: dummy0 [ 866.832109][T13533] batadv0: mtu less than device minimum [ 866.855016][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.867722][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.880439][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.893069][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.905721][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.918338][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.930952][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.943587][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 866.956223][T13533] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 867.064382][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 867.082192][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 867.118109][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 867.146580][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.153769][T12976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.209694][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 867.222251][T13538] netlink: 'syz.4.2654': attribute type 16 has an invalid length. [ 867.244017][T13538] netlink: 456 bytes leftover after parsing attributes in process `syz.4.2654'. [ 867.273272][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 867.302792][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 867.363983][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 867.389269][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 867.612065][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 869.123197][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.160480][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 869.173054][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 869.215827][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 869.307427][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 869.366477][T13366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 869.721022][T13590] netlink: 'syz.1.2668': attribute type 16 has an invalid length. [ 869.742666][T13590] netlink: 456 bytes leftover after parsing attributes in process `syz.1.2668'. [ 869.947946][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 869.972339][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 870.164547][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.172621][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.756884][T13366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 873.077743][T13619] overlayfs: failed to clone upperpath [ 873.662868][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 873.685272][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 873.771688][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 873.790619][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 873.812753][T13366] device veth0_vlan entered promiscuous mode [ 873.825256][T13652] netlink: 'syz.4.2680': attribute type 16 has an invalid length. [ 873.833207][T13652] netlink: 456 bytes leftover after parsing attributes in process `syz.4.2680'. [ 873.857105][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 873.868354][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 873.892081][T13366] device veth1_vlan entered promiscuous mode [ 873.973999][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 875.466923][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 875.549122][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 875.599240][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 875.642399][T13366] device veth0_macvtap entered promiscuous mode [ 875.661634][T13668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2684'. [ 875.812260][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 876.561583][T13366] device veth1_macvtap entered promiscuous mode [ 876.646124][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.680477][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.719099][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.739712][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.763802][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.789823][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.010719][T13366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 877.083283][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.138112][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.180875][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.191468][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.208260][T13366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 877.220134][T13366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 877.256127][T13366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 877.272736][T13692] net_ratelimit: 10 callbacks suppressed [ 877.272756][T13692] batadv0: mtu less than device minimum [ 877.305206][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.317860][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.330448][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.343092][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.355727][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.368384][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.381022][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.393685][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.406290][T13692] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 877.506117][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 877.533177][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 877.567375][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 877.576502][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 877.589208][T13366] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.642120][T13366] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.663602][T13366] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.692721][T13366] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.737091][T13705] netlink: 'syz.3.2695': attribute type 16 has an invalid length. [ 877.781827][T13705] netlink: 456 bytes leftover after parsing attributes in process `syz.3.2695'. [ 878.236199][T12950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.274145][T12989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 878.428939][T12950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.599030][T12989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 878.795031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 878.998493][T12989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 881.495494][T12989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.590661][T13747] hsr0 speed is unknown, defaulting to 1000 [ 881.659862][T12989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.744516][T13752] batman_adv: batadv0: Interface deactivated: dummy0 [ 881.751465][T13752] batman_adv: batadv0: Removing interface: dummy0 [ 882.006128][T12989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.230500][T12989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.916053][ T7612] Bluetooth: hci1: command 0x0409 tx timeout [ 884.372763][T13747] chnl_net:caif_netlink_parms(): no params data found [ 887.924291][ T2285] Bluetooth: hci1: command 0x041b tx timeout [ 888.126084][T13747] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.133201][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.173341][T13827] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2719'. [ 888.197608][T13747] device bridge_slave_0 entered promiscuous mode [ 888.222140][T12989] tipc: Left network mode [ 888.245678][T13747] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.252785][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.487570][T13747] device bridge_slave_1 entered promiscuous mode [ 889.961882][ T4896] Bluetooth: hci1: command 0x040f tx timeout [ 890.119136][T13850] netlink: 'syz.6.2723': attribute type 4 has an invalid length. [ 890.223995][T13850] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2723'. [ 892.033683][ T2285] Bluetooth: hci1: command 0x0419 tx timeout [ 894.318631][T13747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 894.399022][T13747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.263248][T13747] team0: Port device team_slave_0 added [ 895.331036][T13747] team0: Port device team_slave_1 added [ 895.498143][T13747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.513812][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.583760][T13747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.624259][T13747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.645084][T13747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.777044][T13747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.717044][T13747] device hsr_slave_0 entered promiscuous mode [ 896.783966][T13747] device hsr_slave_1 entered promiscuous mode [ 896.828398][T13747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 896.853138][T13747] Cannot create hsr debugfs directory [ 896.918068][T13909] batman_adv: batadv0: Interface deactivated: dummy0 [ 896.933781][T13909] batman_adv: batadv0: Removing interface: dummy0 [ 897.002239][T12989] bond0: (slave wlan1): Releasing backup interface [ 897.422114][T12989] device hsr_slave_0 left promiscuous mode [ 897.675660][T12989] device hsr_slave_1 left promiscuous mode [ 897.906866][T12989] batman_adv: batadv0: Interface deactivated: dummy0 [ 897.972605][T12989] batman_adv: batadv0: Removing interface: dummy0 [ 898.037351][T12989] device veth1_macvtap left promiscuous mode [ 898.043392][T12989] device veth0_macvtap left promiscuous mode [ 898.079944][T12989] device veth1_vlan left promiscuous mode [ 898.096277][T13922] program syz.6.2738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 898.113437][T13922] trusted_key: encrypted_key: master key parameter is missing [ 898.133630][T12989] device veth0_vlan left promiscuous mode [ 899.427676][T12989] bond1 (unregistering): Released all slaves [ 899.771312][T12989] bond0 (unregistering): Released all slaves [ 902.575228][T13747] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 902.942591][T13747] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 903.086744][T13747] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 903.171961][T13747] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 903.559183][T13747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.307466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 904.342224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 904.400631][T13747] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.555119][T10233] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 904.728838][T13747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 904.766707][T13747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 904.825485][T14010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2760'. [ 904.924470][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 904.965212][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 904.983839][T10233] usb 4-1: Using ep0 maxpacket: 16 [ 905.283791][T12976] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.290937][T12976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.381970][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 905.459760][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 905.527633][T12976] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.534832][T12976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.619550][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 905.677917][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 905.738999][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 905.802493][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 905.879333][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 905.940783][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 906.011954][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 906.091627][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 906.153725][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 906.243874][T10233] usb 4-1: config 0 has an invalid interface number: 222 but max is 0 [ 906.262449][T10233] usb 4-1: config 0 has no interface number 0 [ 906.272619][T10233] usb 4-1: config 0 interface 222 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 906.334370][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 906.352672][T10233] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 906.439291][T10233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.623081][T10233] usb 4-1: config 0 descriptor?? [ 906.753844][T10233] usb 4-1: can't set config #0, error -71 [ 906.966049][T10233] usb 4-1: USB disconnect, device number 26 [ 907.123343][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 907.165689][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 907.354133][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 907.487878][T14051] UBIFS error (pid: 14051): cannot open "(null)", error -22 [ 907.795480][T13747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.884478][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 907.903932][T12972] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 908.003777][ T4211] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 908.093693][ T4306] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 908.227232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 908.246780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 908.318366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 908.346885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 908.380592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 908.406981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 908.423823][ T4211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.437121][T13747] device veth0_vlan entered promiscuous mode [ 908.463305][ T4211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.464022][ T4306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.485216][T13747] device veth1_vlan entered promiscuous mode [ 908.502416][ T4306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.514944][ T4211] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 908.530989][ T4306] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 908.543576][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.558227][ T4306] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 908.587460][T13747] device veth0_macvtap entered promiscuous mode [ 908.616837][ T4211] usb 1-1: config 0 descriptor?? [ 908.666555][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 908.685580][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 908.704002][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 908.723311][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 908.733334][ T4306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.756107][T13747] device veth1_macvtap entered promiscuous mode [ 908.761302][ T4306] usb 2-1: config 0 descriptor?? [ 908.770164][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 908.789441][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 909.305358][ T4306] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 909.608574][ T4306] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 909.645184][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.666371][ T4306] usb 2-1: USB disconnect, device number 31 [ 909.672801][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.693083][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.708165][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.718187][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.729292][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.741674][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 909.763748][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.785322][T13747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.809996][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 909.837905][ T4211] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 909.844250][T12950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 909.862565][ T4211] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 909.886729][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.912883][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.923600][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.934746][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.944923][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.961967][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 909.979935][T13747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 909.990739][T13747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 910.008678][T13747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 910.043207][T13747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.052608][T13747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.063771][ T4211] cp2112 0003:10C4:EA90.000F: Part Number: 0x6A Device Version: 0xAF [ 910.075755][T13747] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.086693][T13747] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.100031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 910.110802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 910.273783][ T4211] cp2112 0003:10C4:EA90.000F: error requesting SMBus config [ 910.287218][ T4211] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 910.325071][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.371725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.497534][T12972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.516280][T14105] delete_channel: no stack [ 910.549403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 910.557256][T12972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.581927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 911.879635][T11339] usb 1-1: USB disconnect, device number 25 [ 913.446048][T14147] netlink: 'syz.0.2783': attribute type 16 has an invalid length. [ 913.485677][T14147] netlink: 456 bytes leftover after parsing attributes in process `syz.0.2783'. [ 916.935799][ T4896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 917.324117][ T4896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.537209][ T4896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.588069][ T4896] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 917.645535][T14188] device batadv_slave_1 entered promiscuous mode [ 917.653297][T14187] device batadv_slave_1 left promiscuous mode [ 917.664785][ T4896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.735835][ T4896] usb 7-1: config 0 descriptor?? [ 917.860090][T14196] netlink: 'syz.4.2797': attribute type 16 has an invalid length. [ 917.884751][T14196] netlink: 456 bytes leftover after parsing attributes in process `syz.4.2797'. [ 919.815064][ T4896] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 919.835625][ T4896] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 920.017806][T14216] sctp: [Deprecated]: syz.1.2800 (pid 14216) Use of struct sctp_assoc_value in delayed_ack socket option. [ 920.017806][T14216] Use struct sctp_sack_info instead [ 920.849399][ T4896] cp2112 0003:10C4:EA90.0010: Part Number: 0x9A Device Version: 0xAB [ 921.061916][ T4896] cp2112 0003:10C4:EA90.0010: error requesting SMBus config [ 921.072326][ T4896] cp2112: probe of 0003:10C4:EA90.0010 failed with error -71 [ 921.103205][ T4896] usb 7-1: USB disconnect, device number 2 [ 921.353671][ T4214] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 921.744825][ T4214] usb 5-1: not running at top speed; connect to a high speed hub [ 921.893742][ T4214] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 921.913986][ T4214] usb 5-1: config 1 interface 0 has no altsetting 0 [ 922.073748][ T4214] usb 5-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 922.086076][ T4214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.100531][ T4214] usb 5-1: Product: syz [ 922.108217][ T4214] usb 5-1: Manufacturer: syz [ 922.136635][ T4214] usb 5-1: SerialNumber: syz [ 922.358040][T14271] sctp: [Deprecated]: syz.1.2812 (pid 14271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 922.358040][T14271] Use struct sctp_sack_info instead [ 923.343939][ T4214] usbhid 5-1:1.0: can't add hid device: -71 [ 923.437949][ T4214] usbhid: probe of 5-1:1.0 failed with error -71 [ 923.478847][ T4214] usb 5-1: USB disconnect, device number 14 [ 925.252046][T14303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2822'. [ 926.090132][T14314] sctp: [Deprecated]: syz.3.2824 (pid 14314) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.090132][T14314] Use struct sctp_sack_info instead [ 928.758593][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2835'. [ 930.042427][T14366] netlink: 'syz.4.2838': attribute type 10 has an invalid length. [ 931.315992][T14366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.326697][T14366] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 931.424043][T14366] syz.4.2838 (14366) used greatest stack depth: 18560 bytes left [ 931.497903][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 931.509053][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2844'. [ 931.567981][T14377] sctp: [Deprecated]: syz.3.2840 (pid 14377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 931.567981][T14377] Use struct sctp_sack_info instead [ 931.836276][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.842977][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.842644][T14442] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2859'. [ 936.813760][T14464] batman_adv: batadv0: Adding interface: dummy0 [ 936.820139][T14464] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 936.854487][T14464] batman_adv: batadv0: Interface activated: dummy0 [ 937.455909][T14489] sctp: [Deprecated]: syz.1.2872 (pid 14489) Use of struct sctp_assoc_value in delayed_ack socket option. [ 937.455909][T14489] Use struct sctp_sack_info instead [ 941.487803][T14555] sctp: [Deprecated]: syz.4.2886 (pid 14555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 941.487803][T14555] Use struct sctp_sack_info instead [ 942.316462][T14560] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2888'. [ 944.235742][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2894'. [ 944.328755][T14597] device bond1 entered promiscuous mode [ 944.368013][T14597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.452883][T14602] device bridge1 entered promiscuous mode [ 944.495634][T14602] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 944.540111][T12976] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 945.531245][T14634] net_ratelimit: 10 callbacks suppressed [ 945.531262][T14634] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 950.079231][T14691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.093833][T14691] netlink: 'syz.3.2915': attribute type 10 has an invalid length. [ 951.132461][T14697] batadv0: mtu less than device minimum [ 951.159397][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.172071][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.184715][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.197341][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.209948][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.222563][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.235199][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.247803][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 951.260402][T14697] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 952.124656][T14713] UBIFS error (pid: 14713): cannot open "(null)", error -22 [ 952.400174][T14720] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2921'. [ 960.667081][T14804] netlink: 452 bytes leftover after parsing attributes in process `syz.4.2944'. [ 965.678937][T14854] net_ratelimit: 10 callbacks suppressed [ 965.678956][T14854] batman_adv: batadv0: Local translation table size (124) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 969.629288][T14894] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 970.812270][T14905] sctp: [Deprecated]: syz.0.2975 (pid 14905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 970.812270][T14905] Use struct sctp_sack_info instead [ 971.864387][T14912] UBIFS error (pid: 14912): cannot open "(null)", error -22 [ 972.499208][T14918] overlayfs: invalid origin (0000) [ 972.593196][T14922] netlink: 'syz.6.2981': attribute type 8 has an invalid length. [ 974.042437][T14945] sctp: [Deprecated]: syz.1.2988 (pid 14945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 974.042437][T14945] Use struct sctp_sack_info instead [ 974.086325][T14947] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: 6a:4b:e4:2a:45:22 [ 976.240160][T14968] batman_adv: batadv0: Adding interface: dummy0 [ 976.260384][T14968] batman_adv: batadv0: The MTU of interface dummy0 is too small (0) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.340843][T14968] batman_adv: batadv0: Interface activated: dummy0 [ 976.347583][T14968] batadv0: mtu less than device minimum [ 976.355319][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.367829][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.380483][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.393105][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.405692][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.418259][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.430855][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 976.443507][T14968] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 978.427107][T14983] program syz.3.2996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 979.363526][T14991] sctp: [Deprecated]: syz.0.3000 (pid 14991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 979.363526][T14991] Use struct sctp_sack_info instead [ 979.955052][T14983] trusted_key: encrypted_key: master key parameter is missing [ 980.274153][ T4306] Bluetooth: hci4: command 0x0406 tx timeout [ 982.052108][T15028] UBIFS error (pid: 15028): cannot open "(null)", error -22 [ 982.068340][T15028] usb usb1: usbfs: process 15028 (syz.3.3008) did not claim interface 0 before use [ 983.549405][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3015'. [ 984.313632][T15041] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3015'. [ 984.663811][T15060] UBIFS error (pid: 15060): cannot open "(null)", error -22 [ 984.681274][T15060] usb usb1: usbfs: process 15060 (syz.3.3018) did not claim interface 0 before use [ 985.769509][T15071] UBIFS error (pid: 15071): cannot open "(null)", error -22 [ 985.795608][T15071] usb usb1: usbfs: process 15071 (syz.0.3022) did not claim interface 0 before use [ 990.600531][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 990.703577][T15115] UBIFS error (pid: 15115): cannot open "(null)", error -22 [ 990.716633][T15115] usb usb1: usbfs: process 15115 (syz.0.3034) did not claim interface 0 before use [ 991.017635][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3035'. [ 991.332315][T12972] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.352144][T15116] netlink: 'syz.4.3035': attribute type 10 has an invalid length. [ 991.411707][T15116] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 991.661772][T12972] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.680372][T15108] hsr0 speed is unknown, defaulting to 1000 [ 991.699609][T15119] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3037'. [ 992.435806][T12972] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.513740][ T4210] Bluetooth: hci2: command 0x0409 tx timeout [ 992.624827][T12972] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.015095][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.021888][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.081148][T15133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3039'. [ 993.736882][T15108] chnl_net:caif_netlink_parms(): no params data found [ 994.248477][T15151] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3044'. [ 994.593892][T10233] Bluetooth: hci2: command 0x041b tx timeout [ 994.928770][T12972] device ip6gretap1 left promiscuous mode [ 994.928825][T12972] bridge1: port 1(ip6gretap1) entered disabled state [ 995.436437][T15108] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.436696][T15108] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.459001][T15108] device bridge_slave_0 entered promiscuous mode [ 995.905033][T15108] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.905076][T15108] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.906199][T15108] device bridge_slave_1 entered promiscuous mode [ 996.021725][T15108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.027144][T15108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.162903][T15108] team0: Port device team_slave_0 added [ 996.390365][T15108] team0: Port device team_slave_1 added [ 997.103448][T11042] Bluetooth: hci2: command 0x040f tx timeout [ 997.237190][T15108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.245162][T15108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.272194][T15108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.298983][T15108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.313599][T15108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.508004][T15108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.675258][T15108] device hsr_slave_0 entered promiscuous mode [ 997.683798][T15108] device hsr_slave_1 entered promiscuous mode [ 997.691059][T15108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 997.699045][T15108] Cannot create hsr debugfs directory [ 999.233806][T11209] Bluetooth: hci2: command 0x0419 tx timeout [ 999.626734][T12972] bond0: (slave wlan1): Releasing backup interface [ 999.643852][T10233] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 999.997687][T12972] bridge1: port 2(veth3) entered disabled state [ 1000.043641][T10233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.263652][T10233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.281056][T12972] device hsr_slave_0 left promiscuous mode [ 1000.314298][T10233] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1000.360878][T10233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.400590][T10233] usb 2-1: config 0 descriptor?? [ 1000.411730][T12972] device hsr_slave_1 left promiscuous mode [ 1000.421203][T12972] batman_adv: batadv0: Interface deactivated: dummy0 [ 1000.432726][T12972] batman_adv: batadv0: Removing interface: dummy0 [ 1000.445103][T12972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1000.493836][T12972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1000.535412][T12972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1000.573674][T12972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.603231][T12972] device bridge_slave_0 left promiscuous mode [ 1000.626436][T12972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.699239][T12972] device bridge0 left promiscuous mode [ 1000.727779][T12972] device veth1_vlan left promiscuous mode [ 1000.750290][T12972] device veth0_vlan left promiscuous mode [ 1001.023637][T10233] usbhid 2-1:0.0: can't add hid device: -32 [ 1001.029740][T10233] usbhid: probe of 2-1:0.0 failed with error -32 [ 1001.077951][T12972] bond1 (unregistering): Released all slaves [ 1001.347659][T12972] team0 (unregistering): Port device team_slave_1 removed [ 1001.380685][T12972] team0 (unregistering): Port device team_slave_0 removed [ 1001.398086][T12972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.415993][T12972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.512366][T12972] bond0 (unregistering): Released all slaves [ 1001.592172][ T4210] hsr0 speed is unknown, defaulting to 1000 [ 1001.610675][ T4210] ================================================================== [ 1001.619317][ T4210] BUG: KASAN: use-after-free in siw_query_port+0x358/0x450 [ 1001.626558][ T4210] Read of size 4 at addr ffff88807e4980d8 by task kworker/0:3/4210 [ 1001.634476][ T4210] [ 1001.636849][ T4210] CPU: 0 PID: 4210 Comm: kworker/0:3 Not tainted 5.15.180-syzkaller #0 [ 1001.645551][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1001.655647][ T4210] Workqueue: infiniband ib_cache_event_task [ 1001.661597][ T4210] Call Trace: [ 1001.664900][ T4210] [ 1001.667861][ T4210] dump_stack_lvl+0x168/0x230 [ 1001.672580][ T4210] ? show_regs_print_info+0x20/0x20 [ 1001.677810][ T4210] ? _printk+0xcc/0x110 [ 1001.682009][ T4210] ? load_image+0x3b0/0x3b0 [ 1001.686548][ T4210] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1001.691965][ T4210] print_address_description+0x60/0x2d0 [ 1001.697678][ T4210] ? siw_query_port+0x358/0x450 [ 1001.702557][ T4210] kasan_report+0xdf/0x130 [ 1001.707010][ T4210] ? siw_query_port+0x358/0x450 [ 1001.711895][ T4210] siw_query_port+0x358/0x450 [ 1001.716714][ T4210] ib_cache_update+0x1bb/0x980 [ 1001.721529][ T4210] ? ib_cache_setup_one+0x5d0/0x5d0 [ 1001.726879][ T4210] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1001.733008][ T4210] ? read_lock_is_recursive+0x10/0x10 [ 1001.738425][ T4210] ib_cache_event_task+0xd4/0x1c0 [ 1001.743504][ T4210] process_one_work+0x863/0x1000 [ 1001.748493][ T4210] ? worker_detach_from_pool+0x240/0x240 [ 1001.754151][ T4210] ? lockdep_hardirqs_off+0x70/0x100 [ 1001.759481][ T4210] ? _raw_spin_lock_irq+0xab/0xe0 [ 1001.764546][ T4210] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1001.769973][ T4210] ? wq_worker_running+0x97/0x170 [ 1001.775035][ T4210] worker_thread+0xaa8/0x12a0 [ 1001.779778][ T4210] kthread+0x436/0x520 [ 1001.783881][ T4210] ? rcu_lock_release+0x20/0x20 [ 1001.788764][ T4210] ? kthread_blkcg+0xd0/0xd0 [ 1001.793388][ T4210] ret_from_fork+0x1f/0x30 [ 1001.797864][ T4210] [ 1001.800901][ T4210] [ 1001.803243][ T4210] Allocated by task 4174: [ 1001.807593][ T4210] __kasan_kmalloc+0xb5/0xf0 [ 1001.812224][ T4210] kvmalloc_node+0x84/0x130 [ 1001.816758][ T4210] alloc_netdev_mqs+0x84/0xc40 [ 1001.821551][ T4210] rtnl_create_link+0x2fb/0xa90 [ 1001.826443][ T4210] rtnl_newlink+0x105e/0x17d0 [ 1001.831157][ T4210] rtnetlink_rcv_msg+0x9b9/0xe60 [ 1001.836126][ T4210] netlink_rcv_skb+0x1e0/0x430 [ 1001.840922][ T4210] netlink_unicast+0x77c/0x920 [ 1001.845710][ T4210] netlink_sendmsg+0x8ab/0xbc0 [ 1001.850505][ T4210] __sys_sendto+0x423/0x580 [ 1001.855038][ T4210] __x64_sys_sendto+0xda/0xf0 [ 1001.859746][ T4210] do_syscall_64+0x4c/0xa0 [ 1001.864186][ T4210] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1001.870114][ T4210] [ 1001.872455][ T4210] Freed by task 12972: [ 1001.876542][ T4210] kasan_set_track+0x4b/0x70 [ 1001.881158][ T4210] kasan_set_free_info+0x1f/0x40 [ 1001.886114][ T4210] ____kasan_slab_free+0xd5/0x110 [ 1001.891175][ T4210] slab_free_freelist_hook+0xea/0x170 [ 1001.896569][ T4210] kfree+0xef/0x2a0 [ 1001.900405][ T4210] device_release+0x92/0x1c0 [ 1001.905020][ T4210] kobject_put+0x21d/0x460 [ 1001.909477][ T4210] netdev_run_todo+0x8d0/0xa40 [ 1001.914268][ T4210] default_device_exit_batch+0x33b/0x390 [ 1001.919927][ T4210] cleanup_net+0x77b/0xb00 [ 1001.924377][ T4210] process_one_work+0x863/0x1000 [ 1001.929337][ T4210] worker_thread+0xaa8/0x12a0 [ 1001.934038][ T4210] kthread+0x436/0x520 [ 1001.938132][ T4210] ret_from_fork+0x1f/0x30 [ 1001.942777][ T4210] [ 1001.945126][ T4210] The buggy address belongs to the object at ffff88807e498000 [ 1001.945126][ T4210] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1001.959469][ T4210] The buggy address is located 216 bytes inside of [ 1001.959469][ T4210] 4096-byte region [ffff88807e498000, ffff88807e499000) [ 1001.972868][ T4210] The buggy address belongs to the page: [ 1001.978616][ T4210] page:ffffea0001f92600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e498 [ 1001.988797][ T4210] head:ffffea0001f92600 order:3 compound_mapcount:0 compound_pincount:0 [ 1001.997141][ T4210] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1002.005180][ T4210] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff88801684c280 [ 1002.013789][ T4210] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1002.022385][ T4210] page dumped because: kasan: bad access detected [ 1002.028820][ T4210] page_owner tracks the page as allocated [ 1002.034543][ T4210] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4174, ts 62764310828, free_ts 62693383501 [ 1002.055663][ T4210] get_page_from_freelist+0x1b77/0x1c60 [ 1002.061249][ T4210] __alloc_pages+0x1e1/0x470 [ 1002.065891][ T4210] new_slab+0xc0/0x4b0 [ 1002.069978][ T4210] ___slab_alloc+0x81e/0xdf0 [ 1002.074581][ T4210] __kmalloc_node+0x200/0x3b0 [ 1002.079276][ T4210] kvmalloc_node+0x84/0x130 [ 1002.083793][ T4210] alloc_netdev_mqs+0x84/0xc40 [ 1002.088573][ T4210] rtnl_create_link+0x2fb/0xa90 [ 1002.093443][ T4210] rtnl_newlink+0x105e/0x17d0 [ 1002.098137][ T4210] rtnetlink_rcv_msg+0x9b9/0xe60 [ 1002.103098][ T4210] netlink_rcv_skb+0x1e0/0x430 [ 1002.107875][ T4210] netlink_unicast+0x77c/0x920 [ 1002.112652][ T4210] netlink_sendmsg+0x8ab/0xbc0 [ 1002.117442][ T4210] __sys_sendto+0x423/0x580 [ 1002.121967][ T4210] __x64_sys_sendto+0xda/0xf0 [ 1002.126680][ T4210] do_syscall_64+0x4c/0xa0 [ 1002.131119][ T4210] page last free stack trace: [ 1002.135807][ T4210] free_unref_page_prepare+0x637/0x6c0 [ 1002.141316][ T4210] free_unref_page+0x94/0x280 [ 1002.146005][ T4210] __unfreeze_partials+0x1a5/0x200 [ 1002.151138][ T4210] put_cpu_partial+0x12d/0x190 [ 1002.155930][ T4210] qlist_free_all+0x35/0x90 [ 1002.160447][ T4210] kasan_quarantine_reduce+0x150/0x160 [ 1002.165909][ T4210] __kasan_slab_alloc+0x2f/0xd0 [ 1002.170778][ T4210] slab_post_alloc_hook+0x4c/0x380 [ 1002.175897][ T4210] kmem_cache_alloc_trace+0x103/0x2a0 [ 1002.181295][ T4210] kobject_uevent_env+0x27a/0x890 [ 1002.186356][ T4210] __kobject_del+0xd2/0x2f0 [ 1002.190884][ T4210] kobject_put+0x235/0x460 [ 1002.195423][ T4210] netdev_queue_update_kobjects+0x382/0x3e0 [ 1002.201348][ T4210] netif_set_real_num_tx_queues+0x15c/0x840 [ 1002.207266][ T4210] veth_init_queues+0x83/0x180 [ 1002.212056][ T4210] veth_newlink+0xab7/0xda0 [ 1002.216586][ T4210] [ 1002.218921][ T4210] Memory state around the buggy address: [ 1002.224558][ T4210] ffff88807e497f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1002.232631][ T4210] ffff88807e498000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1002.240715][ T4210] >ffff88807e498080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1002.248783][ T4210] ^ [ 1002.255725][ T4210] ffff88807e498100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1002.263825][ T4210] ffff88807e498180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1002.271978][ T4210] ================================================================== [ 1002.280047][ T4210] Disabling lock debugging due to kernel taint [ 1002.482568][T15264] sctp: [Deprecated]: syz.0.3066 (pid 15264) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1002.482568][T15264] Use struct sctp_sack_info instead [ 1002.645852][ T4306] usb 2-1: USB disconnect, device number 32 [ 1002.682027][ T4210] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1002.689285][ T4210] CPU: 0 PID: 4210 Comm: kworker/0:3 Tainted: G B 5.15.180-syzkaller #0 [ 1002.698937][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1002.709015][ T4210] Workqueue: infiniband ib_cache_event_task [ 1002.714945][ T4210] Call Trace: [ 1002.718249][ T4210] [ 1002.721197][ T4210] dump_stack_lvl+0x168/0x230 [ 1002.726004][ T4210] ? show_regs_print_info+0x20/0x20 [ 1002.731225][ T4210] ? load_image+0x3b0/0x3b0 [ 1002.735765][ T4210] panic+0x2c9/0x7f0 [ 1002.739682][ T4210] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1002.745867][ T4210] ? bpf_jit_dump+0xd0/0xd0 [ 1002.750397][ T4210] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 1002.756314][ T4210] ? _raw_spin_unlock+0x40/0x40 [ 1002.761190][ T4210] ? siw_query_port+0x358/0x450 [ 1002.766061][ T4210] check_panic_on_warn+0x80/0xa0 [ 1002.771029][ T4210] ? siw_query_port+0x358/0x450 [ 1002.775909][ T4210] end_report+0x6d/0xf0 [ 1002.780092][ T4210] kasan_report+0x102/0x130 [ 1002.784621][ T4210] ? siw_query_port+0x358/0x450 [ 1002.789512][ T4210] siw_query_port+0x358/0x450 [ 1002.794219][ T4210] ib_cache_update+0x1bb/0x980 [ 1002.799011][ T4210] ? ib_cache_setup_one+0x5d0/0x5d0 [ 1002.804231][ T4210] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1002.810240][ T4210] ? read_lock_is_recursive+0x10/0x10 [ 1002.815639][ T4210] ib_cache_event_task+0xd4/0x1c0 [ 1002.820691][ T4210] process_one_work+0x863/0x1000 [ 1002.825661][ T4210] ? worker_detach_from_pool+0x240/0x240 [ 1002.831315][ T4210] ? lockdep_hardirqs_off+0x70/0x100 [ 1002.836625][ T4210] ? _raw_spin_lock_irq+0xab/0xe0 [ 1002.841670][ T4210] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1002.847066][ T4210] ? wq_worker_running+0x97/0x170 [ 1002.852114][ T4210] worker_thread+0xaa8/0x12a0 [ 1002.856826][ T4210] kthread+0x436/0x520 [ 1002.860912][ T4210] ? rcu_lock_release+0x20/0x20 [ 1002.865779][ T4210] ? kthread_blkcg+0xd0/0xd0 [ 1002.870386][ T4210] ret_from_fork+0x1f/0x30 [ 1002.874831][ T4210] [ 1002.878107][ T4210] Kernel Offset: disabled [ 1002.889884][ T4210] Rebooting in 86400 seconds..