last executing test programs: 2m58.27096823s ago: executing program 3 (id=535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 2m58.091719561s ago: executing program 3 (id=536): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 2m57.134535901s ago: executing program 3 (id=538): syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x1f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000014000300776c616e3100000000000000000000001400000011"], 0xa4}}, 0x0) 2m50.771713837s ago: executing program 3 (id=552): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) creat(&(0x7f0000000400)='./bus\x00', 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="f0307024ad83e33e29cada69a04d2d503f12e6cd634e710de7a256edb044825fa794d11a4aa022716faf14336b15c8b0792c321ce225a60f44dd5baf03c4ce747bb5c9f8d52f9dc768881dc57742745c958efd7fd668a95e668b6ac6385b69ac21815c2aed72ea132ca05c61c62cedb1cc28d7a570decc073930cc3b3e7c945dc5c0ae0702d4e19a773fba512b4bf71a36e2920863f8fe5c06549f2647e0f6e9070454a8ee253882d7a5eed5ec9ee2c0ec7a3d338eeb9eb62244beceb56c9870c7d7064b40d293b983509d8f4cca43180064ddaa904cfcaa442c72bba24d25fec602eb9c8bb802bd50be85295d706599e511242e13c2482b35a445ec9c7524a5bed38956a20cdc25c7a5b479da27e9f1e34335fb4206998f2c49d7778aa7e7c63ebefc29c920252dbdf71f2823b2b5d6aca7a21d8e13ef37315e9b6e733382371598dd6592de394d27d91f7eee1e4a47f357ba217cb6a31ad1f00d819f9a6ef7d1aa6720eb484e218708b0be9fe6cf3905cd75af3d6e6d9b0dc1c1e5071c937637b6864ebb665ec730f8fd96b99f07e2e39a5ccbce5c063e802b421242eff9bcbe0a21bf3e762ee42e969248dfcdd8c061ad190cffb69bc09df602029b8484c68fae959fe42fde38d88b947b97896aaec5f9b09d2d05b1f73c8a2d93d2562a915d016092519e7ff424d37cf70f8ee36e0b0984a14cbd2fe5cf7500c10e09467b71abdbcf10b86601f39f20213ca5c1447f7b64a5a0d31256aacbe813c6c3750ae666829712ca442bdc1c1e1dd91af76034f6c4a6b7872f8b487e3bfcca359e8f42ef0221fd0d6f5ef225c918d982bf2d426696e8e9f90822a5c3e65772592a3b77637b67a45ff5", 0x267, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/55}, 0x20) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="000325bd7000fbdbdf2510000000080083e6ff7f000008000800d50100000800090004000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) 2m47.105979471s ago: executing program 3 (id=557): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000980)="180000003e000b05d25a806c8c6f94f90224fc6010000500", 0x18}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_restrict_self(0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x543, 0x6, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0xa, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) 2m44.989791166s ago: executing program 3 (id=558): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010410, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x20000}], 0x1) 2m29.068171882s ago: executing program 32 (id=558): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010410, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x20000}], 0x1) 2m18.461425622s ago: executing program 4 (id=612): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 2m18.140071799s ago: executing program 4 (id=614): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x1c8, 0x1d8, 0x1d8, 0x1c8, 0x1d8, 0x3, 0x0, {[{{@ip={@broadcast, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'veth1_macvtap\x00', {}, {}, 0x11}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@unspec=@mac={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x800}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e050d3e20"], 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m16.459734848s ago: executing program 4 (id=619): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}}], 0x2, 0x0) 2m14.887893933s ago: executing program 4 (id=623): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 2m13.719735766s ago: executing program 4 (id=626): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000f00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}], 0x1}}], 0x1, 0x4000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x5}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 2m11.85995181s ago: executing program 4 (id=628): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x5, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x40000080806, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0xfffc, 0xfffffffc, {}, 0x2000000000001005, 0x3}}}, 0x90) 2m4.47183835s ago: executing program 0 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 2m4.24093567s ago: executing program 0 (id=646): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 2m3.771632062s ago: executing program 0 (id=647): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0]) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r4, r3, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) 2m3.367711194s ago: executing program 0 (id=648): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) add_key(&(0x7f0000000440)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) 2m2.922014222s ago: executing program 0 (id=650): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0x6, 0xf989, "f9d0"}, @fastopen={0x22, 0x3, '+'}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x9, "cf6af75d5cdcf0"}, @md5sig={0x13, 0x12, "23406263e43d5959a166a23bd1116ecf"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf5ffffff}]}}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e070008147f3cc900b6"], 0xa) setsockopt$inet6_buf(r3, 0x29, 0x14, &(0x7f0000000040)="0451a0511bb7bacc0c19f1f84add290d1577bd3f9fd9b2ab6fa51d139058495ca0303ce4a4a21e2e6f828a92e1d602804500f85e9007aa668daea65102d1a4ba", 0x40) 2m1.820033795s ago: executing program 0 (id=653): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x372, 0x5, 0x68, 0x10100, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r0, 0x5425, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x102}}, 0x94}}, 0x0) syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x7861, 0x0, 0x0, 0x3cf}, &(0x7f00000002c0), &(0x7f0000000140)) 1m52.755530522s ago: executing program 33 (id=628): r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x5, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x40000080806, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0xfffc, 0xfffffffc, {}, 0x2000000000001005, 0x3}}}, 0x90) 1m41.518877179s ago: executing program 34 (id=653): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x15, 0x372, 0x5, 0x68, 0x10100, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0x0, @void, @value, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSBRKP(r0, 0x5425, 0x4) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, [@country_functional={0x6}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x40}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}], {0x14, 0x11, 0x102}}, 0x94}}, 0x0) syz_io_uring_setup(0x24fd, &(0x7f0000000080)={0x0, 0x7861, 0x0, 0x0, 0x3cf}, &(0x7f00000002c0), &(0x7f0000000140)) 31.194981178s ago: executing program 6 (id=807): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x14, 0x30, 0xb}, 0x14}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r1}, &(0x7f00000001c0), &(0x7f0000001200)='%pI4 \x00'}, 0x20) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000200), 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0xddffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 29.511785156s ago: executing program 6 (id=810): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 28.940582156s ago: executing program 6 (id=811): io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 19.280777355s ago: executing program 7 (id=834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans']) 19.279937995s ago: executing program 6 (id=835): open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 18.496913228s ago: executing program 6 (id=840): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000009b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='siox_get_data\x00', r2, 0x0, 0x2c9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000340)}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r6, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 18.270778067s ago: executing program 7 (id=843): sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4a7a7caf0f0690713cee8b2dc3f1ce1852407a6a8a426097297d5431c998c929bd7d5d1bd75e37be9cfb9c5873daf8aa67a81f6715e496c22c2269ce035e6647f103686f71f3de947988b7d876e0641cce3d48723b6429a95d60532fc9fcfb33e60444129c10d39754a551ecd534eda25f81c893d25975948dfcc14e7e8ee07838c2656cee26924b914044a705c3058764cebe19b9d7f8f87b17b09f0c"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4044040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e89"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) 17.161626603s ago: executing program 2 (id=845): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) socket(0xa, 0x3, 0x3a) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000680)={{0x0, 0x0, 0x6, 0x5be0, '\x00', 0x6}, 0x0, [0x9, 0x2, 0x4d, 0x1, 0x3, 0x4, 0x0, 0x3, 0x223, 0x80, 0x7, 0x4, 0x3, 0x0, 0x2, 0xd, 0x4, 0x8000000000, 0x4, 0x8c, 0x1, 0x8, 0x9, 0x4000a, 0x7, 0x2b, 0x2, 0x101, 0x9, 0x1000, 0x4, 0x800, 0xff, 0x200, 0xca49, 0x9, 0x66, 0x9, 0x7fffffffffffffff, 0x8, 0x0, 0x9, 0xd31, 0x9, 0xf, 0x800, 0x7fffffff, 0xffffffffffffffb4, 0x5, 0x6, 0x2, 0x6000000, 0x9, 0x8, 0x80000001, 0x80, 0x8, 0x5, 0xa2a, 0x3, 0x81, 0x8001, 0x6, 0x3, 0xb46, 0xf8d, 0x6, 0x500000000000, 0x781, 0x6, 0x5, 0x4, 0x293, 0x8, 0x0, 0x5, 0x1, 0x1, 0x0, 0x2, 0x100000001, 0x1, 0x0, 0x2, 0x3, 0x3b82, 0xff, 0x5, 0x100, 0xa, 0x8, 0x80, 0x3, 0xfffffffffffffeff, 0x0, 0x8, 0x6, 0x1, 0x1, 0x4, 0xf2, 0x1ff, 0x7, 0x44, 0x1, 0x100010000, 0xffff, 0x4, 0x80000001, 0x1, 0x4, 0x4, 0x100, 0x6f7, 0xacdc, 0x1, 0x2efaaacc, 0x7, 0x10, 0x5, 0x2, 0x6a8, 0x3, 0x4, 0xa1d3, 0x7, 0xef, 0x6]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x4a, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r5 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000480)='resize\x04,\x06^X\xde\x8e\f\xde\xea&X{\xd7\xd2\x9d\xf5-\xd3W\xaa\x06v\xf7e\xe1\xd2\xb2\xa0d4\xe8\x18b\xc7p\xf0\xef\xe7b?AR\xff\xc7\xb8{\xd4\xd9c\xc2\xff\xa5q\x99\x92\x97\x05\x123J\xedt\x87\xd6@\xf1\xf9,\xfa\xabeM\xa0\xc3\x9e\xbb\x8b\'\x06U\xdeP\x94Vy<\x7f\x1d\xe5\xd9\xea\xef?\xa8\x06\a{\xfd\xb5\xecn\xd9p\xca\x04\xf9t\xc1V\xbc\xe50\xf2\x14\xf3_\xed\x93\xc0\x98\x12\x96\x9dn\x13\xf1\xbc\xf3\xf9\r\xb4z\xac\xeaF)\xc2', 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x1080, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) listen(r0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x64}}) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) pipe2$9p(&(0x7f0000000140), 0x0) 15.303731501s ago: executing program 2 (id=848): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) 13.57995107s ago: executing program 7 (id=850): open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$sg(0x0, 0x276, 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 13.301492592s ago: executing program 6 (id=851): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x7, 0x9, 0x8000, 0xfffffff8, 0x8, 0x8}, 0x1c) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20800, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}], 0x1, 0x2008, 0x5, 0x11) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, &(0x7f0000000180)={0x2, 0x4}) 11.525257173s ago: executing program 2 (id=853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r1}, 0x18) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r5, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='trans']) 11.461480845s ago: executing program 1 (id=854): setresuid(0xee01, 0xee01, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) 11.319432964s ago: executing program 7 (id=855): ioperm(0x376, 0x5, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x7}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x111000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0xa, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, @void, @value, @void, @value}, 0x50) write(r1, &(0x7f00000002c0)="23000000010007", 0x7) 11.219789295s ago: executing program 1 (id=856): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = creat(0x0, 0x2) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs\x00', 0x1ff) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 9.485678814s ago: executing program 2 (id=858): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e20, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x10}}}}], 0x20}, 0x0) r1 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184d, 0x0, 0x42, 0x0, 0x0) 8.660920998s ago: executing program 1 (id=859): r0 = openat$kvm(0x0, 0x0, 0x2382, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000bc0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x800, @local, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 8.619111284s ago: executing program 7 (id=860): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @exp_fastopen={0xfe, 0x6, 0xf989, "f9d0"}, @fastopen={0x22, 0x3, '+'}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x9, "cf6af75d5cdcf0"}, @md5sig={0x13, 0x12, "23406263e43d5959a166a23bd1116ecf"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x80, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf5ffffff}]}}}}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e070008147f3cc900b6"], 0xa) setsockopt$inet6_buf(r4, 0x29, 0x14, &(0x7f0000000040)="0451a0511bb7bacc0c19f1f84add290d1577bd3f9fd9b2ab6fa51d139058495ca0303ce4a4a21e2e6f828a92e1d602804500f85e9007aa668daea65102d1a4ba", 0x40) 6.787824625s ago: executing program 1 (id=861): setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000800000008000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000009b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='siox_get_data\x00', r1, 0x0, 0x2c9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x20000000}, {{0x0, 0x0, &(0x7f0000000340)}}], 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000007c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r5, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 6.741589834s ago: executing program 2 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04070620"], 0x7) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) 6.52040109s ago: executing program 5 (id=863): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x20040000}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x6, 0x118, 0xfa00, {{0x2, 0x2, "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", 0x9, 0x4, 0x2, 0x7, 0x0, 0x1, 0x1, 0x1}}}, 0x120) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r3) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0xa0000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 5.318879062s ago: executing program 5 (id=864): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0xfffffffffffffffe, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x5, 0x0) 3.280562354s ago: executing program 5 (id=865): open(&(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) syz_open_dev$sg(0x0, 0x276, 0x200) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 3.167857771s ago: executing program 1 (id=866): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r0 = dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r2 = getpid() utimensat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) open(0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) kexec_load(0xff0f, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0)=ANY=[]) 3.135822538s ago: executing program 2 (id=867): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0200f80d20"], 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 2.841898045s ago: executing program 7 (id=868): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 2.64784638s ago: executing program 5 (id=869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r4) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = creat(0x0, 0x2) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs\x00', 0x1ff) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) 1.528558969s ago: executing program 5 (id=870): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x80002, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r3, 0x9) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80000) 200.779099ms ago: executing program 5 (id=871): r0 = openat$kvm(0x0, 0x0, 0x2382, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$read_default(0x2, 0x0, 0x17) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000bc0)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e24, 0x800, @local, 0x5}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 0s ago: executing program 1 (id=872): getrandom(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="040e08810c08"], 0xb) kernel console output (not intermixed with test programs): atadv0: Interface activated: batadv_slave_0 [ 84.805233][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.820313][ T5841] veth1_macvtap: entered promiscuous mode [ 84.843041][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.852979][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.863193][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.873035][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.890516][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.934631][ T5840] veth0_vlan: entered promiscuous mode [ 84.945145][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.003747][ T5839] veth0_vlan: entered promiscuous mode [ 85.022237][ T5839] veth1_vlan: entered promiscuous mode [ 85.032280][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.080522][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.093289][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.105251][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.114524][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.131843][ T5840] veth1_vlan: entered promiscuous mode [ 85.230500][ T5839] veth0_macvtap: entered promiscuous mode [ 85.262356][ T5839] veth1_macvtap: entered promiscuous mode [ 85.279236][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.282807][ T5840] veth0_macvtap: entered promiscuous mode [ 85.293336][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.343710][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.359651][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.380005][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.396592][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.408677][ T5840] veth1_macvtap: entered promiscuous mode [ 85.442641][ T5837] veth0_vlan: entered promiscuous mode [ 85.454398][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.487650][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.493652][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.502941][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.529708][ T5837] veth1_vlan: entered promiscuous mode [ 85.541414][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.549558][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.569005][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578508][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.588547][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603554][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.650537][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.663149][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.673957][ T5853] Bluetooth: hci0: command tx timeout [ 85.679632][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.689641][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.698764][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.745978][ T5853] Bluetooth: hci3: command tx timeout [ 85.797848][ T5837] veth0_macvtap: entered promiscuous mode [ 85.818094][ T5927] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 85.826652][ T5853] Bluetooth: hci2: command tx timeout [ 85.832072][ T5853] Bluetooth: hci4: command tx timeout [ 85.837533][ T5843] Bluetooth: hci1: command tx timeout [ 85.873372][ T5837] veth1_macvtap: entered promiscuous mode [ 85.987445][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.002532][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.023588][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.057225][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.108563][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.130081][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.141732][ T5935] process 'syz.1.8' launched '/dev/fd/3' with NULL argv: empty string added [ 86.142432][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.159575][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186977][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.195003][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.295290][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.375333][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.805426][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.868621][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.876515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.168358][ T5947] Cannot find add_set index 0 as target [ 87.745773][ T5853] Bluetooth: hci0: command tx timeout [ 87.824049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.827884][ T5853] Bluetooth: hci3: command tx timeout [ 87.928749][ T5843] Bluetooth: hci1: command tx timeout [ 87.930763][ T51] Bluetooth: hci2: command tx timeout [ 87.934214][ T5853] Bluetooth: hci4: command tx timeout [ 87.990929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.157040][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.177990][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.482995][ T5981] 9pnet: Could not find request transport: tcp [ 89.744724][ T5986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 92.418764][ T10] cfg80211: failed to load regulatory.db [ 92.705899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.894031][ T6022] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 92.945895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.945935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.945978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.946018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.946057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.946098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.946148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 92.946295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 93.454043][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.463629][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.472908][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.482196][ T6038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.38'. [ 94.064762][ T6032] 9pnet: Could not find request transport: tcp [ 94.376403][ T6042] netlink: 'syz.1.40': attribute type 10 has an invalid length. [ 94.411738][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.434001][ T6042] bridge_slave_1: left allmulticast mode [ 94.440081][ T6042] bridge_slave_1: left promiscuous mode [ 94.455945][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.909391][ T6042] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 96.239544][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.46'. [ 97.525262][ T51] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 97.535099][ T6080] mkiss: ax0: crc mode is auto. [ 99.505428][ T6092] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.800634][ T6101] ucma_write: process 50 (syz.2.58) changed security contexts after opening file descriptor, this is not allowed. [ 102.540646][ T6117] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.63'. [ 103.434516][ T51] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 105.049701][ T6155] fuse: Bad value for 'group_id' [ 105.068196][ T6155] fuse: Bad value for 'group_id' [ 107.079936][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.095638][ T51] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 107.827610][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 107.911443][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.118283][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 108.487551][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 108.505571][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.526031][ T10] usb 3-1: Product: syz [ 108.530275][ T10] usb 3-1: Manufacturer: syz [ 108.539760][ T10] usb 3-1: SerialNumber: syz [ 108.556349][ T10] usb 3-1: config 0 descriptor?? [ 108.803499][ T10] usb-storage 3-1:0.0: USB Mass Storage device detected [ 108.838608][ T10] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 109.951211][ T10] usb 3-1: USB disconnect, device number 2 [ 111.082227][ T51] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 111.201727][ T6225] Cannot find add_set index 0 as target [ 112.075915][ T5856] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.365550][ T5856] usb 1-1: Using ep0 maxpacket: 16 [ 112.443689][ T5856] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 112.452982][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 112.463865][ T5856] usb 1-1: Product: syz [ 112.546573][ T6246] loop6: detected capacity change from 0 to 524287999 [ 112.561850][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.570245][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.578612][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.586901][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.595616][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.604005][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.612420][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.621148][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.629678][ T6246] ldm_validate_partition_table(): Disk read failed. [ 112.636781][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.645104][ T6246] Buffer I/O error on dev loop6, logical block 0, async page read [ 112.654157][ T6246] Dev loop6: unable to read RDB block 0 [ 112.661955][ T6246] loop6: unable to read partition table [ 112.668583][ T6246] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 113.035573][ T5856] usb 1-1: Manufacturer: syz [ 113.040213][ T5856] usb 1-1: SerialNumber: syz [ 113.101350][ T5856] usb 1-1: config 0 descriptor?? [ 113.252128][ T6256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.377135][ T5856] usb 1-1: USB disconnect, device number 2 [ 113.985709][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 114.505685][ T24] usb 5-1: device descriptor read/64, error -71 [ 114.755730][ T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 114.899832][ T24] usb 5-1: device descriptor read/64, error -71 [ 115.126083][ T24] usb usb5-port1: attempt power cycle [ 115.529542][ T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 116.143578][ T24] usb 5-1: device descriptor read/8, error -71 [ 116.235392][ T30] audit: type=1326 audit(1747982423.573:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 116.336029][ T30] audit: type=1326 audit(1747982423.573:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 116.358753][ T30] audit: type=1326 audit(1747982423.603:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 116.382180][ T30] audit: type=1326 audit(1747982423.673:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 116.505819][ T24] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 116.610414][ T30] audit: type=1326 audit(1747982423.673:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 116.674778][ T24] usb 5-1: device descriptor read/8, error -71 [ 116.872475][ T24] usb usb5-port1: unable to enumerate USB device [ 117.072327][ T30] audit: type=1326 audit(1747982423.673:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 117.111076][ T30] audit: type=1326 audit(1747982423.673:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 117.135277][ T30] audit: type=1326 audit(1747982423.703:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 117.157296][ T30] audit: type=1326 audit(1747982423.703:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 117.181744][ T30] audit: type=1326 audit(1747982423.703:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6281 comm="syz.1.117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 118.022257][ T6302] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.705753][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 120.900523][ T24] usb 5-1: device descriptor read/64, error -71 [ 121.206137][ T24] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 121.525757][ T24] usb 5-1: device descriptor read/64, error -71 [ 121.637641][ T24] usb usb5-port1: attempt power cycle [ 122.205312][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 122.250958][ T24] usb 5-1: device descriptor read/8, error -71 [ 122.267475][ T6349] netlink: 'syz.1.136': attribute type 10 has an invalid length. [ 122.526300][ T24] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 122.622144][ T24] usb 5-1: device descriptor read/8, error -71 [ 122.798946][ T6352] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 122.806731][ T6352] netlink: 'syz.3.137': attribute type 2 has an invalid length. [ 122.814517][ T6352] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.137'. [ 122.823830][ T24] usb usb5-port1: unable to enumerate USB device [ 122.905009][ T6358] Zero length message leads to an empty skb [ 125.141234][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 125.141257][ T30] audit: type=1326 audit(1747982432.473:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 125.225033][ T30] audit: type=1326 audit(1747982432.473:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 125.258773][ T30] audit: type=1326 audit(1747982432.473:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 125.355963][ T30] audit: type=1326 audit(1747982432.533:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 125.455636][ T30] audit: type=1326 audit(1747982432.533:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 125.598927][ T30] audit: type=1326 audit(1747982432.533:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 125.660011][ T30] audit: type=1326 audit(1747982432.533:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 126.054149][ T6391] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.180225][ T30] audit: type=1326 audit(1747982432.533:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 126.278142][ T30] audit: type=1326 audit(1747982432.533:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 126.325859][ T30] audit: type=1326 audit(1747982432.533:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6380 comm="syz.2.148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 126.699953][ T5889] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 126.895625][ T5889] usb 5-1: device descriptor read/64, error -71 [ 126.918535][ T6405] xt_cgroup: invalid path, errno=-2 [ 127.710260][ T6408] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.157'. [ 127.986085][ T5889] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 128.241567][ T5889] usb 5-1: device descriptor read/64, error -71 [ 128.476768][ T5889] usb usb5-port1: attempt power cycle [ 129.128927][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 129.357006][ T5889] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 129.389411][ T5889] usb 5-1: device descriptor read/8, error -71 [ 130.147007][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 130.163543][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 130.171161][ T51] Bluetooth: hci2: hardware error 0x00 [ 130.200564][ T49] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 130.623915][ T5856] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 130.779679][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.799716][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.800670][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 130.820982][ T5856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 130.834902][ T5856] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 130.851193][ T49] usb 3-1: config 0 has no interfaces? [ 130.870235][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.897604][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 130.913034][ T49] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 130.924217][ T5856] usb 2-1: SerialNumber: syz [ 130.945609][ T49] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 130.960924][ T6433] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.969739][ T6433] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.991908][ T49] usb 3-1: Product: syz [ 131.018508][ T49] usb 3-1: Manufacturer: syz [ 131.023169][ T49] usb 3-1: SerialNumber: syz [ 131.039866][ T5856] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 131.066576][ T49] usb 3-1: config 0 descriptor?? [ 131.092481][ T6446] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.169'. [ 131.351620][ T5916] usb 3-1: USB disconnect, device number 3 [ 131.484695][ T6453] qnx4: no qnx4 filesystem (no root dir). [ 132.256769][ T6453] ubi31: attaching mtd0 [ 132.264008][ T6453] ubi31: scanning is finished [ 132.268801][ T6453] ubi31: empty MTD device detected [ 132.761049][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801723][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 132.807933][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.897834][ T6453] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 132.905441][ T6453] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 132.912812][ T6453] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 132.919950][ T6453] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 132.927469][ T6453] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 132.934350][ T6453] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 132.942476][ T6453] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 57176036 [ 132.952477][ T6453] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 132.963298][ T6464] ubi31: background thread "ubi_bgt31d" started, PID 6464 [ 133.057066][ T5856] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 133.146026][ T5856] usb 2-1: USB disconnect, device number 2 [ 133.229657][ T6470] netfs: Couldn't get user pages (rc=-14) [ 134.335570][ T5856] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 134.489482][ T5856] usb 2-1: device descriptor read/64, error -71 [ 135.341340][ T5856] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 135.495632][ T5856] usb 2-1: device descriptor read/64, error -71 [ 135.616306][ T5856] usb usb2-port1: attempt power cycle [ 135.775617][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 136.016284][ T5856] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 136.088334][ T6533] qnx4: no qnx4 filesystem (no root dir). [ 136.126846][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.348757][ T10] usb 3-1: config 0 has no interfaces? [ 136.443685][ T5856] usb 2-1: device descriptor read/8, error -71 [ 136.464752][ T10] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 136.494737][ T10] usb 3-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 136.538981][ T10] usb 3-1: Product: syz [ 136.826868][ T10] usb 3-1: Manufacturer: syz [ 136.894519][ T10] usb 3-1: SerialNumber: syz [ 136.927005][ T10] usb 3-1: config 0 descriptor?? [ 136.970144][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 136.970159][ T30] audit: type=1326 audit(1747982444.293:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.296521][ T30] audit: type=1326 audit(1747982444.293:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.321512][ T30] audit: type=1326 audit(1747982444.303:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.480726][ T9] usb 3-1: USB disconnect, device number 4 [ 137.508683][ T30] audit: type=1326 audit(1747982444.303:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.591146][ T30] audit: type=1326 audit(1747982444.303:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.619068][ T30] audit: type=1326 audit(1747982444.303:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.708340][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.717861][ T30] audit: type=1326 audit(1747982444.303:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.771477][ T30] audit: type=1326 audit(1747982444.303:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.798608][ T30] audit: type=1326 audit(1747982444.303:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.825465][ T30] audit: type=1326 audit(1747982444.303:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.1.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 137.895679][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 138.096425][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 138.112079][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 138.126529][ T10] usb 4-1: config 0 has no interface number 0 [ 138.153418][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 138.194140][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 138.224468][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.242838][ T6562] xt_cgroup: invalid path, errno=-2 [ 138.251795][ T10] usb 4-1: Product: syz [ 138.275009][ T10] usb 4-1: Manufacturer: syz [ 138.285664][ T10] usb 4-1: SerialNumber: syz [ 138.298900][ T6565] kAFS: No cell specified [ 138.299871][ T10] usb 4-1: config 0 descriptor?? [ 138.314858][ T10] f81534 4-1:0.12: required endpoints missing [ 140.279749][ T5856] usb 2-1: device descriptor read/8, error -71 [ 141.993326][ T5856] usb usb2-port1: unable to enumerate USB device [ 144.428267][ T5856] usb 4-1: USB disconnect, device number 2 [ 145.375601][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.389139][ T6576] syz.0.206: attempt to access beyond end of device [ 145.389139][ T6576] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 145.406820][ T6576] syz.0.206: attempt to access beyond end of device [ 145.406820][ T6576] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 145.463676][ T6576] Mount JFS Failure: -5 [ 146.012568][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 146.055860][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.096964][ T10] usb 3-1: config 0 descriptor?? [ 146.125902][ T10] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 146.433280][ T10] usb 3-1: USB disconnect, device number 5 [ 147.430770][ T6603] xt_cgroup: invalid path, errno=-2 [ 148.094467][ T6613] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 148.395403][ T6621] Cannot find add_set index 0 as target [ 148.740172][ T6622] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 149.104891][ T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 149.459168][ T10] usb 5-1: no configurations [ 149.463806][ T10] usb 5-1: can't read configurations, error -22 [ 149.946838][ T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 150.677857][ T10] usb 5-1: no configurations [ 150.690399][ T10] usb 5-1: can't read configurations, error -22 [ 150.706418][ T10] usb usb5-port1: attempt power cycle [ 150.904829][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 150.904845][ T30] audit: type=1326 audit(1747982458.243:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6644 comm="syz.2.229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x0 [ 150.955941][ T6647] xt_cgroup: invalid path, errno=-2 [ 151.793041][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 151.966027][ T10] usb 5-1: device descriptor read/8, error -71 [ 153.282694][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 153.319110][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.337252][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 153.639819][ T6670] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 153.675003][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 153.698783][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 153.765383][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.788799][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.819051][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 153.819116][ T10] usb 5-1: SerialNumber: syz [ 153.829666][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 153.829692][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.829705][ T51] Workqueue: hci0 hci_rx_work [ 153.829748][ T51] Call Trace: [ 153.829756][ T51] [ 153.829766][ T51] dump_stack_lvl+0x189/0x250 [ 153.829788][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 153.829815][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.829833][ T51] ? __pfx__printk+0x10/0x10 [ 153.829856][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 153.829879][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 153.829903][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 153.829925][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 153.829952][ T51] sysfs_create_dir_ns+0x259/0x280 [ 153.829978][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 153.830004][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 153.830031][ T51] kobject_add_internal+0x59f/0xb40 [ 153.830061][ T51] kobject_add+0x155/0x220 [ 153.830088][ T51] ? __pfx_kobject_add+0x10/0x10 [ 153.830109][ T51] ? _raw_spin_unlock+0x28/0x50 [ 153.830140][ T51] ? get_device_parent+0x366/0x3a0 [ 153.830171][ T51] device_add+0x408/0xb50 [ 153.830202][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 153.830234][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 153.830271][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 153.830296][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 153.830314][ T51] ? __asan_memcpy+0x40/0x70 [ 153.830343][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 153.830363][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.830380][ T51] ? skb_pull_data+0xfb/0x200 [ 153.830404][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 153.830435][ T51] hci_event_packet+0x78c/0x1200 [ 153.830457][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 153.830481][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 153.830501][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 153.830526][ T51] ? lockdep_hardirqs_on+0x40/0x150 [ 153.830555][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 153.830583][ T51] hci_rx_work+0x46a/0xe80 [ 153.830610][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 153.830641][ T51] process_scheduled_works+0xade/0x17b0 [ 153.830701][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.830755][ T51] worker_thread+0x8a0/0xda0 [ 153.830800][ T51] kthread+0x711/0x8a0 [ 153.830826][ T51] ? __pfx_worker_thread+0x10/0x10 [ 153.830843][ T51] ? __pfx_kthread+0x10/0x10 [ 153.830867][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 153.830894][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.830909][ T51] ? __pfx_kthread+0x10/0x10 [ 153.830933][ T51] ret_from_fork+0x3fc/0x770 [ 153.830963][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 153.830995][ T51] ? __switch_to_asm+0x39/0x70 [ 153.831013][ T51] ? __switch_to_asm+0x33/0x70 [ 153.831031][ T51] ? __pfx_kthread+0x10/0x10 [ 153.831053][ T51] ret_from_fork_asm+0x1a/0x30 [ 153.831090][ T51] [ 153.831333][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 153.898236][ T6659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 153.911064][ T51] Bluetooth: hci0: failed to register connection device [ 154.150555][ T6659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 154.159618][ T10] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 155.638871][ T10] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 155.814956][ T10] usb 5-1: USB disconnect, device number 17 [ 157.443058][ T6712] Cannot find add_set index 0 as target [ 157.449055][ T5853] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 157.458902][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: kworker/u9:8 Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 157.458927][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.458939][ T5853] Workqueue: hci1 hci_rx_work [ 157.458961][ T5853] Call Trace: [ 157.458968][ T5853] [ 157.458976][ T5853] dump_stack_lvl+0x189/0x250 [ 157.458996][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 157.459021][ T5853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.459037][ T5853] ? __pfx__printk+0x10/0x10 [ 157.459060][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 157.459081][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 157.459106][ T5853] ? kernfs_path_from_node+0x22c/0x260 [ 157.459127][ T5853] ? kernfs_path_from_node+0x2c/0x260 [ 157.459153][ T5853] sysfs_create_dir_ns+0x259/0x280 [ 157.459178][ T5853] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 157.459202][ T5853] ? do_raw_spin_unlock+0x122/0x240 [ 157.459228][ T5853] kobject_add_internal+0x59f/0xb40 [ 157.459257][ T5853] kobject_add+0x155/0x220 [ 157.459282][ T5853] ? __pfx_kobject_add+0x10/0x10 [ 157.459302][ T5853] ? _raw_spin_unlock+0x28/0x50 [ 157.459331][ T5853] ? get_device_parent+0x366/0x3a0 [ 157.459361][ T5853] device_add+0x408/0xb50 [ 157.459389][ T5853] hci_conn_add_sysfs+0xd5/0x1e0 [ 157.459419][ T5853] le_conn_complete_evt+0xc3a/0x1220 [ 157.459456][ T5853] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 157.459479][ T5853] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 157.459495][ T5853] ? __asan_memcpy+0x40/0x70 [ 157.459522][ T5853] ? __pfx___mutex_lock+0x10/0x10 [ 157.459540][ T5853] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.459556][ T5853] ? skb_pull_data+0xfb/0x200 [ 157.459578][ T5853] hci_le_conn_complete_evt+0x187/0x450 [ 157.459607][ T5853] hci_event_packet+0x78c/0x1200 [ 157.459629][ T5853] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 157.459653][ T5853] ? __pfx_hci_event_packet+0x10/0x10 [ 157.459672][ T5853] ? kcov_remote_start+0x4d3/0x7f0 [ 157.459705][ T5853] ? lockdep_hardirqs_on+0x40/0x150 [ 157.459725][ T5853] ? hci_send_to_monitor+0xe2/0x570 [ 157.459752][ T5853] hci_rx_work+0x46a/0xe80 [ 157.459778][ T5853] ? process_scheduled_works+0x9ef/0x17b0 [ 157.459807][ T5853] process_scheduled_works+0xade/0x17b0 [ 157.459862][ T5853] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.459908][ T5853] worker_thread+0x8a0/0xda0 [ 157.459951][ T5853] kthread+0x711/0x8a0 [ 157.459976][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 157.459992][ T5853] ? __pfx_kthread+0x10/0x10 [ 157.460014][ T5853] ? _raw_spin_unlock_irq+0x23/0x50 [ 157.460040][ T5853] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.460054][ T5853] ? __pfx_kthread+0x10/0x10 [ 157.460076][ T5853] ret_from_fork+0x3fc/0x770 [ 157.460105][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 157.460136][ T5853] ? __switch_to_asm+0x39/0x70 [ 157.460154][ T5853] ? __switch_to_asm+0x33/0x70 [ 157.460171][ T5853] ? __pfx_kthread+0x10/0x10 [ 157.460193][ T5853] ret_from_fork_asm+0x1a/0x30 [ 157.460228][ T5853] [ 157.460253][ T5853] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 157.769372][ T5853] Bluetooth: hci1: failed to register connection device [ 158.609641][ T6724] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 158.802839][ T5856] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 159.010239][ T5856] usb 5-1: no configurations [ 159.020907][ T5856] usb 5-1: can't read configurations, error -22 [ 159.475832][ T5856] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 159.715370][ T5856] usb 5-1: no configurations [ 159.745788][ T5856] usb 5-1: can't read configurations, error -22 [ 159.765759][ T5856] usb usb5-port1: attempt power cycle [ 160.227780][ T5856] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 160.828811][ T5856] usb 5-1: device descriptor read/8, error -71 [ 163.188591][ T6782] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 164.135413][ T6801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 165.075607][ T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 166.568304][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.916578][ T9] usb 2-1: config 0 has no interfaces? [ 167.834936][ T9] usb 2-1: string descriptor 0 read error: -71 [ 167.856831][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 167.875598][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.893822][ T9] usb 2-1: config 0 descriptor?? [ 167.899508][ T9] usb 2-1: can't set config #0, error -71 [ 167.910836][ T9] usb 2-1: USB disconnect, device number 7 [ 169.360300][ T5853] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 169.369825][ T5853] Bluetooth: hci1: Injecting HCI hardware error event [ 169.378373][ T5853] Bluetooth: hci1: hardware error 0x00 [ 170.446294][ T30] audit: type=1326 audit(1747982477.753:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6ef8e969 code=0x7ffc0000 [ 170.489037][ T30] audit: type=1326 audit(1747982477.753:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6ef8e969 code=0x7ffc0000 [ 171.004123][ T30] audit: type=1326 audit(1747982477.883:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.4.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fab6ef8e969 code=0x7ffc0000 [ 171.026423][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.382953][ T6850] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 171.826009][ T5853] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 175.450094][ T5853] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 175.459190][ T5853] Bluetooth: hci3: Injecting HCI hardware error event [ 175.467688][ T5853] Bluetooth: hci3: hardware error 0x00 [ 178.382470][ T6894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 178.447106][ T5853] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 181.009533][ T6954] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 181.191990][ T6959] syz.0.321 uses obsolete (PF_INET,SOCK_PACKET) [ 182.198427][ T6980] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 182.213233][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.221649][ T6980] bridge_slave_1: left allmulticast mode [ 182.228168][ T6980] bridge_slave_1: left promiscuous mode [ 182.234459][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.441698][ T6980] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 184.393293][ T7001] binfmt_misc: register: failed to install interpreter file ./file0 [ 185.310024][ T7001] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 185.885693][ T7001] syz.0.333 (7001) used greatest stack depth: 19648 bytes left [ 186.198566][ T7010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.693367][ T7015] ubi: mtd0 is already attached to ubi31 [ 186.933066][ T7024] Cannot find add_set index 0 as target [ 190.225769][ T5853] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 190.235161][ T5853] Bluetooth: hci0: Injecting HCI hardware error event [ 190.243911][ T5853] Bluetooth: hci0: hardware error 0x00 [ 190.512457][ T7057] mkiss: ax0: crc mode is auto. [ 190.938862][ T30] audit: type=1326 audit(1747982498.273:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7056 comm="syz.0.352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f685f38e969 code=0x0 [ 191.373501][ T7072] Cannot find add_set index 0 as target [ 191.657667][ T7073] netlink: 'syz.4.356': attribute type 10 has an invalid length. [ 191.668796][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.677566][ T7073] bridge_slave_1: left allmulticast mode [ 191.683326][ T7073] bridge_slave_1: left promiscuous mode [ 191.689273][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.779302][ T7073] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 191.822501][ T30] audit: type=1326 audit(1747982499.143:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 192.465837][ T5853] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 192.942289][ T30] audit: type=1326 audit(1747982499.143:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 193.341947][ T30] audit: type=1326 audit(1747982499.143:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 193.395192][ T30] audit: type=1326 audit(1747982499.143:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 193.956322][ T30] audit: type=1326 audit(1747982499.143:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 193.998623][ T30] audit: type=1326 audit(1747982499.143:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 194.072728][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.079300][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.131705][ T30] audit: type=1326 audit(1747982499.143:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 194.204953][ T30] audit: type=1326 audit(1747982499.143:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 194.248688][ T30] audit: type=1326 audit(1747982499.143:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 195.009036][ T7109] warning: `syz.4.366' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 196.647123][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 196.647140][ T30] audit: type=1326 audit(1747982503.023:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 197.148381][ T30] audit: type=1326 audit(1747982503.023:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 197.170805][ T30] audit: type=1326 audit(1747982503.023:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 197.193216][ T30] audit: type=1326 audit(1747982503.023:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 197.217593][ T5889] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 197.506074][ T30] audit: type=1326 audit(1747982503.023:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 197.769999][ T30] audit: type=1326 audit(1747982503.023:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 197.820435][ T5889] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 197.850280][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.404929][ T30] audit: type=1326 audit(1747982503.083:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 198.427355][ T5889] usb 5-1: config 0 has no interface number 0 [ 198.436573][ T30] audit: type=1326 audit(1747982503.083:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 198.476794][ T30] audit: type=1326 audit(1747982503.083:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 198.507711][ T5889] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 198.525028][ T5889] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 198.545537][ T5889] usb 5-1: Product: syz [ 198.549730][ T5889] usb 5-1: Manufacturer: syz [ 198.555623][ T30] audit: type=1326 audit(1747982503.083:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7117 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f685f38e969 code=0x7ffc0000 [ 198.593132][ T5889] usb 5-1: SerialNumber: syz [ 198.613402][ T5889] usb 5-1: config 0 descriptor?? [ 198.636202][ T5889] usb 5-1: can't set config #0, error -71 [ 198.656784][ T5889] usb 5-1: USB disconnect, device number 22 [ 198.717087][ T7148] mmap: syz.0.378 (7148) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.934884][ T7151] xt_ecn: cannot match TCP bits for non-tcp packets [ 199.708285][ T7165] netlink: 180 bytes leftover after parsing attributes in process `syz.3.384'. [ 199.863753][ T7171] tipc: Started in network mode [ 199.870259][ T7171] tipc: Node identity 6, cluster identity 4711 [ 199.887138][ T7171] tipc: Node number set to 6 [ 206.779761][ T49] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 207.652049][ T7193] 9pnet: p9_errstr2errno: server reported unknown error @΂(oN Q00000000000000000007 [ 207.841572][ T49] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 207.851936][ T49] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.863289][ T49] usb 4-1: config 0 has no interface number 0 [ 207.872615][ T49] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 207.948420][ T7204] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.111058][ T49] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 208.119335][ T49] usb 4-1: Product: syz [ 208.123588][ T49] usb 4-1: Manufacturer: syz [ 208.128443][ T49] usb 4-1: SerialNumber: syz [ 208.149020][ T49] usb 4-1: config 0 descriptor?? [ 208.159285][ T49] usb 4-1: Found UVC 0.00 device syz (046c:14e8) [ 208.175801][ T49] usb 4-1: No valid video chain found. [ 208.239368][ T7206] netlink: 180 bytes leftover after parsing attributes in process `syz.0.397'. [ 208.371230][ T5856] usb 4-1: USB disconnect, device number 3 [ 211.892026][ T7238] xt_ecn: cannot match TCP bits for non-tcp packets [ 211.942652][ T7242] 9pnet_fd: Insufficient options for proto=fd [ 212.116347][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 212.138243][ T7244] netlink: 120 bytes leftover after parsing attributes in process `syz.1.409'. [ 212.162937][ T7245] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.356169][ T7244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 213.077128][ T5889] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 213.628258][ T5889] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 213.651047][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.710335][ T5889] usb 5-1: config 0 has no interface number 0 [ 213.748446][ T5889] usb 5-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 213.784735][ T5889] usb 5-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 213.827865][ T5889] usb 5-1: Product: syz [ 213.834177][ T5889] usb 5-1: Manufacturer: syz [ 213.841223][ T5889] usb 5-1: SerialNumber: syz [ 213.852662][ T5889] usb 5-1: config 0 descriptor?? [ 213.864537][ T5889] usb 5-1: Found UVC 0.00 device syz (046c:14e8) [ 213.872787][ T5889] usb 5-1: No valid video chain found. [ 214.158456][ T10] usb 5-1: USB disconnect, device number 23 [ 214.296243][ T7275] netlink: 'syz.3.419': attribute type 1 has an invalid length. [ 214.323546][ T7275] netlink: 'syz.3.419': attribute type 2 has an invalid length. [ 214.345836][ T7275] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.419'. [ 217.239372][ T7291] loop6: detected capacity change from 0 to 524287999 [ 217.250890][ T7291] buffer_io_error: 6 callbacks suppressed [ 217.250905][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.265150][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.277079][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.285248][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.293650][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.302611][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.311106][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.320134][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.329490][ T7291] ldm_validate_partition_table(): Disk read failed. [ 217.337316][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.347244][ T7291] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.356446][ T7291] Dev loop6: unable to read RDB block 0 [ 217.363803][ T7291] loop6: unable to read partition table [ 217.370533][ T7291] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 217.631172][ T7293] xt_cgroup: invalid path, errno=-2 [ 218.034233][ T7302] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 220.454925][ T7331] xt_ecn: cannot match TCP bits for non-tcp packets [ 222.587881][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 222.587897][ T30] audit: type=1326 audit(1747982529.933:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 222.622684][ T30] audit: type=1326 audit(1747982529.963:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 222.644958][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.176766][ T30] audit: type=1326 audit(1747982529.963:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 223.502382][ T5889] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 223.555622][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 223.619693][ T30] audit: type=1326 audit(1747982529.963:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 223.673223][ T5889] usb 4-1: device descriptor read/64, error -71 [ 224.044077][ T30] audit: type=1326 audit(1747982529.963:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 224.067260][ T30] audit: type=1326 audit(1747982529.963:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 224.094205][ T30] audit: type=1326 audit(1747982529.963:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 224.155906][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 224.228813][ T30] audit: type=1326 audit(1747982529.963:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 224.235826][ T5889] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 224.253912][ T30] audit: type=1326 audit(1747982529.963:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 224.281763][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 224.361510][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00 [ 224.381819][ T30] audit: type=1326 audit(1747982529.963:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7360 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7d9f8e969 code=0x7ffc0000 [ 224.404581][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.417031][ T10] usb 5-1: config 0 descriptor?? [ 224.535790][ T5889] usb 4-1: device descriptor read/64, error -71 [ 224.791090][ T5889] usb usb4-port1: attempt power cycle [ 224.926599][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.936230][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.298982][ T5889] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.807795][ T5889] usb 4-1: device not accepting address 6, error -71 [ 226.293696][ T10] usb 5-1: string descriptor 0 read error: -71 [ 226.361521][ T10] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 226.375080][ T7390] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 226.432979][ T5192] bcm5974 5-1:0.0: could not read from device [ 226.472666][ T5192] bcm5974 5-1:0.0: could not read from device [ 226.533983][ T10] usb 5-1: USB disconnect, device number 24 [ 227.595698][ T5889] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 227.789339][ T5889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.854532][ T5889] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 227.891628][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.920341][ T5889] usb 3-1: Product: syz [ 227.929492][ T5889] usb 3-1: Manufacturer: syz [ 227.947719][ T5889] usb 3-1: SerialNumber: syz [ 228.027509][ T7409] netlink: 'syz.3.455': attribute type 10 has an invalid length. [ 228.041908][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.054803][ T7409] bridge_slave_1: left allmulticast mode [ 228.060764][ T7409] bridge_slave_1: left promiscuous mode [ 228.061833][ T5889] usb 3-1: config 0 descriptor?? [ 228.071812][ T7409] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.422243][ T7409] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 228.879325][ T9] usb 3-1: USB disconnect, device number 6 [ 229.700136][ T7428] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 230.658330][ T7446] netlink: 'syz.4.472': attribute type 1 has an invalid length. [ 230.671446][ T7446] netlink: 208 bytes leftover after parsing attributes in process `syz.4.472'. [ 231.562645][ T7465] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 234.993384][ T7502] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 236.679652][ T7527] blktrace: Concurrent blktraces are not allowed on loop3 [ 236.812797][ T5916] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 237.107820][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 237.125633][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 237.156548][ T5916] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 237.214482][ T5916] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 237.421298][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 237.453672][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 237.473283][ T5916] usb 5-1: SerialNumber: syz [ 237.509156][ T7522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.516626][ T7522] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 237.530915][ T5916] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 237.694850][ T7548] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 239.116296][ T5916] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 239.169651][ T5916] usb 5-1: USB disconnect, device number 25 [ 239.692479][ T7567] overlayfs: failed to resolve './file1': -2 [ 240.335934][ T7581] netlink: 16 bytes leftover after parsing attributes in process `syz.3.512'. [ 240.850997][ T7589] qnx4: no qnx4 filesystem (no root dir). [ 240.866408][ T7589] ubi: mtd0 is already attached to ubi31 [ 244.557092][ T7637] overlayfs: failed to resolve './file1': -2 [ 244.791923][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 244.791938][ T30] audit: type=1326 audit(1747982552.133:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 245.325989][ T30] audit: type=1326 audit(1747982552.163:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 245.468216][ T30] audit: type=1326 audit(1747982552.173:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 245.592078][ T30] audit: type=1326 audit(1747982552.183:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 245.624049][ T7658] 9pnet_fd: Insufficient options for proto=fd [ 245.711594][ T30] audit: type=1326 audit(1747982552.183:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 246.094230][ T30] audit: type=1326 audit(1747982552.183:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 246.158685][ T30] audit: type=1326 audit(1747982552.183:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 246.232955][ T30] audit: type=1326 audit(1747982552.183:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 246.285715][ T30] audit: type=1326 audit(1747982552.183:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 246.325631][ T5943] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 246.394008][ T30] audit: type=1326 audit(1747982552.183:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7644 comm="syz.2.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 246.502587][ T7668] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 246.530573][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.563091][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.605216][ T5943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.783071][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.115951][ T5943] usb 2-1: Product: syz [ 247.125378][ T5943] usb 2-1: Manufacturer: syz [ 247.147076][ T5943] usb 2-1: SerialNumber: syz [ 247.634587][ T5943] usb 2-1: cannot find UAC_HEADER [ 247.859648][ T5943] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 247.911758][ T5943] usb 2-1: USB disconnect, device number 8 [ 247.987407][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 249.747407][ T7700] 9pnet_fd: Insufficient options for proto=fd [ 249.923715][ T7704] xt_cgroup: invalid path, errno=-2 [ 250.020080][ T7706] capability: warning: `syz.4.547' uses deprecated v2 capabilities in a way that may be insecure [ 251.106363][ T7709] mkiss: ax0: crc mode is auto. [ 251.246945][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 251.247147][ T30] audit: type=1326 audit(1747982558.593:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.1.546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cb138e969 code=0x0 [ 253.893630][ T30] audit: type=1326 audit(1747982561.233:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.004640][ T30] audit: type=1326 audit(1747982561.263:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.149075][ T30] audit: type=1326 audit(1747982561.273:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.206412][ T30] audit: type=1326 audit(1747982561.273:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.305668][ T5889] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 254.385689][ T30] audit: type=1326 audit(1747982561.273:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.771846][ T30] audit: type=1326 audit(1747982561.273:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.831650][ T30] audit: type=1326 audit(1747982561.273:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.878280][ T5889] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 254.896099][ T30] audit: type=1326 audit(1747982561.273:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.932555][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.951503][ T30] audit: type=1326 audit(1747982561.283:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.1.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 254.968477][ T5889] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 255.169962][ T5889] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 255.178286][ T5889] usb 4-1: Manufacturer: syz [ 255.200893][ T5889] usb 4-1: config 0 descriptor?? [ 255.241396][ T5889] igorplugusb 4-1:0.0: incorrect number of endpoints [ 255.658310][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091164][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 256.103922][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.513890][ T5889] usb 4-1: USB disconnect, device number 8 [ 261.830220][ T7745] netlink: 'syz.2.559': attribute type 10 has an invalid length. [ 261.842897][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.852170][ T7745] bridge_slave_1: left allmulticast mode [ 261.858145][ T7745] bridge_slave_1: left promiscuous mode [ 261.864478][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.668851][ T7745] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 266.679553][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 266.679569][ T30] audit: type=1326 audit(1747982574.023:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 266.765757][ T30] audit: type=1326 audit(1747982574.023:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 266.951510][ T30] audit: type=1326 audit(1747982574.073:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 266.974961][ T30] audit: type=1326 audit(1747982574.083:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 267.180468][ T30] audit: type=1326 audit(1747982574.083:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 267.204042][ T30] audit: type=1326 audit(1747982574.083:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 267.233959][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.2.567'. [ 267.248639][ T30] audit: type=1326 audit(1747982574.083:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 267.602434][ T30] audit: type=1326 audit(1747982574.083:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 267.646507][ T30] audit: type=1326 audit(1747982574.093:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7759 comm="syz.2.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 267.876920][ T7769] 9pnet: Could not find request transport: tcp [ 269.405699][ T5847] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 269.499671][ T7758] loop1: detected capacity change from 0 to 65536 [ 269.620111][ T7796] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7796 comm: syz.2.573) [ 269.662156][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 269.743722][ T30] audit: type=1800 audit(1747982576.973:220): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.573" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=14366 res=0 errno=0 [ 269.756110][ T7758] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 269.776377][ T5847] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 269.888768][ T5847] usb 5-1: config 0 has no interface number 0 [ 269.929390][ T5847] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.975822][ T5847] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.985641][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.118089][ T5847] usb 5-1: config 0 descriptor?? [ 270.257941][ T7758] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR [ 270.464514][ T7758] XFS (loop1): log mount failed [ 270.471411][ T5847] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 270.564396][ T5847] usb 5-1: USB disconnect, device number 26 [ 272.005358][ T7818] 9pnet_fd: Insufficient options for proto=fd [ 273.651801][ T7839] mkiss: ax0: crc mode is auto. [ 274.462016][ T7840] block nbd4: shutting down sockets [ 274.935704][ T5856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 275.131368][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 275.198191][ T5856] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.220424][ T5856] usb 1-1: config 0 has no interface number 0 [ 275.266222][ T5856] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.325706][ T5856] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 275.375623][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.425274][ T5856] usb 1-1: config 0 descriptor?? [ 275.468605][ T5856] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 275.553169][ T7834] loop1: detected capacity change from 0 to 65536 [ 275.736129][ T5916] usb 1-1: USB disconnect, device number 3 [ 275.736190][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 275.973670][ T7834] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 276.311233][ T7834] workqueue: Failed to create a rescuer kthread for wq "xfs-cil/loop1": -EINTR [ 276.312457][ T7834] XFS (loop1): log mount failed [ 276.987046][ T7861] 9pnet_fd: Insufficient options for proto=fd [ 277.086791][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.099081][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.109512][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.120669][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.130960][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.541455][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 277.649673][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.657275][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.664495][ T7868] bridge_slave_0: entered allmulticast mode [ 277.672831][ T7868] bridge_slave_0: entered promiscuous mode [ 277.681233][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.692700][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.700468][ T7868] bridge_slave_1: entered allmulticast mode [ 277.708796][ T7868] bridge_slave_1: entered promiscuous mode [ 277.753052][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.776649][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.954354][ T7868] team0: Port device team_slave_0 added [ 277.997041][ T7868] team0: Port device team_slave_1 added [ 279.227601][ T7887] Falling back ldisc for ttyS3. [ 279.267901][ T51] Bluetooth: hci5: command tx timeout [ 279.384877][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.695011][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.992933][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.411012][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.425567][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.495256][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.866996][ T7868] hsr_slave_0: entered promiscuous mode [ 280.894378][ T7868] hsr_slave_1: entered promiscuous mode [ 280.907465][ T7868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.915040][ T7868] Cannot create hsr debugfs directory [ 281.316722][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 281.346412][ T51] Bluetooth: hci5: command tx timeout [ 281.487154][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 281.501475][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.503718][ T7896] loop4: detected capacity change from 0 to 65536 [ 281.522253][ T10] usb 2-1: config 0 has no interface number 0 [ 281.535631][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 281.552629][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.569325][ T7896] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 281.578961][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.591214][ T7868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.601748][ T10] usb 2-1: config 0 descriptor?? [ 281.628866][ T7868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.637785][ T10] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 281.682571][ T7896] XFS (loop4): Ending clean mount [ 281.697391][ T7868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.711521][ T7896] XFS (loop4): Quotacheck needed: Please wait. [ 281.798179][ T7896] XFS (loop4): Quotacheck: Done. [ 281.814957][ T7868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.854009][ T6438] syzkaller0: tun_net_xmit 76 [ 281.874714][ T6438] syzkaller0: tun_net_xmit 48 [ 281.879833][ T5889] syzkaller0: tun_net_xmit 76 [ 281.896115][ T7896] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8004 [ 281.922195][ T7896] XFS (loop4): Unmount and run xfs_repair [ 281.929760][ T7896] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 281.944373][ T7896] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 281.954944][ T7896] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00 ................ [ 281.969074][ T7896] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 281.978492][ T7896] 00000030: 00 00 00 01 21 53 59 0a 00 00 00 05 00 00 00 03 ....!SY......... [ 281.990059][ T7896] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 03 00 00 00 ......;\........ [ 282.002949][ T7896] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 282.012098][ T7896] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 282.027427][ T7896] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 282.040791][ T7896] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8004 len 2 error 74 [ 282.137631][ T5837] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 282.167590][ T5837] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 283.425887][ T51] Bluetooth: hci5: command tx timeout [ 284.909642][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.950444][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.986915][ T3506] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.994121][ T3506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.029589][ T3576] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.036830][ T3576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.110898][ T7948] netlink: 'syz.0.610': attribute type 10 has an invalid length. [ 285.510239][ T51] Bluetooth: hci5: command tx timeout [ 286.962577][ T5916] usb 2-1: USB disconnect, device number 9 [ 287.086498][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.254493][ T7979] qnx4: no qnx4 filesystem (no root dir). [ 288.264457][ T7979] ubi: mtd0 is already attached to ubi31 [ 291.790768][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.625'. [ 292.070982][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 292.070999][ T30] audit: type=1326 audit(1747982599.413:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.099807][ T30] audit: type=1326 audit(1747982599.413:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.122416][ T30] audit: type=1326 audit(1747982599.413:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.145886][ T30] audit: type=1326 audit(1747982599.413:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.168523][ T30] audit: type=1326 audit(1747982599.413:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.190911][ T30] audit: type=1326 audit(1747982599.413:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.217090][ T30] audit: type=1326 audit(1747982599.413:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.524744][ T30] audit: type=1326 audit(1747982599.413:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.577071][ T5847] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 292.668500][ T30] audit: type=1326 audit(1747982599.413:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 292.693954][ T7868] veth0_vlan: entered promiscuous mode [ 292.801418][ T7868] veth1_vlan: entered promiscuous mode [ 292.864256][ T30] audit: type=1326 audit(1747982599.413:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 293.007553][ T7868] veth0_macvtap: entered promiscuous mode [ 293.177034][ T7868] veth1_macvtap: entered promiscuous mode [ 293.438859][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.766065][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.879043][ T7868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.940841][ T7868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.028850][ T7868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.038692][ T7868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.914616][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.953084][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.103692][ T6438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.171430][ T6438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.237606][ T5916] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 296.430833][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 296.475035][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 296.545131][ T5916] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 296.608533][ T8054] input: syz1 as /devices/virtual/input/input6 [ 296.636263][ T5916] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 296.697175][ T5916] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.727027][ T5916] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 296.757137][ T5916] usb 1-1: SerialNumber: syz [ 296.801702][ T8048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.809087][ T8048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.839939][ T5916] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 297.790371][ T30] kauditd_printk_skb: 4147 callbacks suppressed [ 297.790405][ T30] audit: type=1326 audit(1747982605.133:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 298.855141][ T30] audit: type=1326 audit(1747982605.163:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 298.879013][ T30] audit: type=1326 audit(1747982605.173:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 299.230932][ T30] audit: type=1326 audit(1747982605.173:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 299.260132][ T30] audit: type=1326 audit(1747982605.173:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 299.294249][ T30] audit: type=1326 audit(1747982605.183:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 299.826974][ T5916] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 299.841648][ T5916] usb 1-1: USB disconnect, device number 4 [ 299.849935][ T30] audit: type=1326 audit(1747982605.183:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 299.900975][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 299.942782][ T30] audit: type=1326 audit(1747982605.183:4395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 300.012578][ T30] audit: type=1326 audit(1747982605.183:4396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 300.082154][ T30] audit: type=1326 audit(1747982605.183:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz.2.641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 300.124028][ T24] usb 3-1: device descriptor read/64, error -71 [ 302.894776][ T8097] mkiss: ax0: crc mode is auto. [ 314.265604][ T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 314.522116][ T8118] netlink: 20 bytes leftover after parsing attributes in process `syz.1.656'. [ 320.599277][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.534681][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 323.534697][ T30] audit: type=1326 audit(1747982630.873:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.639473][ T30] audit: type=1326 audit(1747982630.883:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.665770][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 323.681632][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 323.706181][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 323.734350][ T30] audit: type=1326 audit(1747982631.003:4420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.759297][ T30] audit: type=1326 audit(1747982631.003:4421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.785233][ T30] audit: type=1326 audit(1747982631.033:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.785372][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 323.815845][ T30] audit: type=1326 audit(1747982631.033:4423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.839250][ T30] audit: type=1326 audit(1747982631.033:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.865222][ T30] audit: type=1326 audit(1747982631.033:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8123 comm="syz.2.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 323.889485][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.008885][ T8128] netlink: 188 bytes leftover after parsing attributes in process `syz.1.662'. [ 324.335225][ T5853] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 324.345379][ T5853] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 324.355965][ T5853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 324.367418][ T5853] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 324.382701][ T5853] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 326.101060][ T51] Bluetooth: hci6: command tx timeout [ 326.476890][ T51] Bluetooth: hci7: command tx timeout [ 326.735824][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 326.918922][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 326.948673][ T3466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.993370][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 327.051365][ T9] usb 3-1: config 220 has no interface number 2 [ 327.076498][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 327.118606][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 327.184205][ T8154] qnx4: no qnx4 filesystem (no root dir). [ 327.199173][ T8154] ubi: mtd0 is already attached to ubi31 [ 327.461246][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 328.453244][ T51] Bluetooth: hci6: command tx timeout [ 328.506677][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 328.513540][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 328.558715][ T51] Bluetooth: hci7: command tx timeout [ 328.644430][ T9] usb 3-1: string descriptor 0 read error: -71 [ 328.651009][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 328.660955][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.688609][ T3466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.712668][ T9] usb 3-1: can't set config #220, error -71 [ 328.730816][ T9] usb 3-1: USB disconnect, device number 10 [ 328.740149][ T8157] 9pnet_fd: Insufficient options for proto=fd [ 328.929023][ T30] audit: type=1326 audit(1747982636.273:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 328.993755][ T30] audit: type=1326 audit(1747982636.293:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 329.119183][ T30] audit: type=1326 audit(1747982636.293:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 329.199604][ T3466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.230196][ T30] audit: type=1326 audit(1747982636.303:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 329.276492][ T8166] netlink: 188 bytes leftover after parsing attributes in process `syz.1.672'. [ 329.287615][ T30] audit: type=1326 audit(1747982636.303:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 329.413972][ T30] audit: type=1326 audit(1747982636.303:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 329.472029][ T30] audit: type=1326 audit(1747982636.303:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 329.566343][ T3466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.627842][ T30] audit: type=1326 audit(1747982636.303:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 330.639735][ T51] Bluetooth: hci6: command tx timeout [ 330.645134][ T51] Bluetooth: hci7: command tx timeout [ 330.685235][ T30] audit: type=1326 audit(1747982636.303:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 330.718212][ T30] audit: type=1326 audit(1747982636.303:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8159 comm="syz.5.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x7ffc0000 [ 331.090580][ T8182] 9pnet_fd: Insufficient options for proto=fd [ 331.502877][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.626064][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.683201][ T8125] bridge_slave_0: entered allmulticast mode [ 331.714791][ T8125] bridge_slave_0: entered promiscuous mode [ 331.759256][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.782264][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.813751][ T8125] bridge_slave_1: entered allmulticast mode [ 331.868486][ T8125] bridge_slave_1: entered promiscuous mode [ 332.387739][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.461992][ T3466] bridge_slave_0: left allmulticast mode [ 332.497293][ T3466] bridge_slave_0: left promiscuous mode [ 332.503673][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.705951][ T51] Bluetooth: hci6: command tx timeout [ 332.711449][ T5853] Bluetooth: hci7: command tx timeout [ 334.679829][ T8212] netlink: 188 bytes leftover after parsing attributes in process `syz.5.684'. [ 335.648910][ T8227] 9pnet_fd: Insufficient options for proto=fd [ 335.901108][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 335.901125][ T30] audit: type=1326 audit(1747982643.243:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 335.967375][ T30] audit: type=1326 audit(1747982643.273:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 336.155753][ T30] audit: type=1326 audit(1747982643.343:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 336.267929][ T30] audit: type=1326 audit(1747982643.343:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 336.370038][ T30] audit: type=1326 audit(1747982643.343:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 336.609040][ T30] audit: type=1326 audit(1747982643.443:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 336.696026][ T30] audit: type=1326 audit(1747982643.443:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 336.746157][ T30] audit: type=1326 audit(1747982643.443:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cb1385927 code=0x7ffc0000 [ 336.769664][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.809301][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.821207][ T30] audit: type=1326 audit(1747982643.443:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6cb132ab39 code=0x7ffc0000 [ 336.851392][ T3466] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 336.872132][ T30] audit: type=1326 audit(1747982643.443:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8231 comm="syz.1.690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6cb1385927 code=0x7ffc0000 [ 336.872452][ T3466] bond0 (unregistering): Released all slaves [ 336.999932][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.904244][ T8133] chnl_net:caif_netlink_parms(): no params data found [ 338.035150][ T8125] team0: Port device team_slave_0 added [ 338.060487][ T3466] tipc: Left network mode [ 338.108081][ T8125] team0: Port device team_slave_1 added [ 338.432085][ T8256] netlink: 172 bytes leftover after parsing attributes in process `syz.2.694'. [ 338.542763][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.559507][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.600058][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.707503][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.745642][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.841748][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.226308][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.258637][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.284638][ T8133] bridge_slave_0: entered allmulticast mode [ 339.304689][ T8133] bridge_slave_0: entered promiscuous mode [ 339.455974][ T3466] hsr_slave_0: left promiscuous mode [ 339.484723][ T3466] hsr_slave_1: left promiscuous mode [ 339.494624][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.539302][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.571542][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.593628][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.555719][ T3466] veth1_macvtap: left promiscuous mode [ 340.665898][ T3466] veth0_macvtap: left promiscuous mode [ 340.694055][ T3466] veth1_vlan: left promiscuous mode [ 340.699829][ T3466] veth0_vlan: left promiscuous mode [ 341.645062][ T8290] input: syz1 as /devices/virtual/input/input7 [ 341.657108][ T8286] Falling back ldisc for ttyS3. [ 341.698155][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 341.698168][ T30] audit: type=1326 audit(1747982649.043:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8287 comm="syz.1.701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x0 [ 342.034214][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 342.083102][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 342.089303][ T8304] netlink: 172 bytes leftover after parsing attributes in process `syz.5.703'. [ 342.492434][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.500384][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.514043][ T8133] bridge_slave_1: entered allmulticast mode [ 342.528992][ T8133] bridge_slave_1: entered promiscuous mode [ 342.542699][ T8125] hsr_slave_0: entered promiscuous mode [ 342.555156][ T8125] hsr_slave_1: entered promiscuous mode [ 342.562415][ T8125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.571450][ T8125] Cannot create hsr debugfs directory [ 343.804013][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.571246][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.386387][ T30] audit: type=1326 audit(1747982655.303:4560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 348.959563][ T30] audit: type=1326 audit(1747982655.303:4561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 349.015240][ T30] audit: type=1326 audit(1747982655.313:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 349.091747][ T30] audit: type=1326 audit(1747982655.333:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 349.197881][ T30] audit: type=1326 audit(1747982655.343:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 349.269225][ T8133] team0: Port device team_slave_0 added [ 349.323562][ T8133] team0: Port device team_slave_1 added [ 349.330069][ T30] audit: type=1326 audit(1747982655.373:4565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 349.436012][ T30] audit: type=1326 audit(1747982655.373:4566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 350.001653][ T30] audit: type=1326 audit(1747982655.373:4567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 350.084228][ T30] audit: type=1326 audit(1747982655.373:4568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 350.094708][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.140805][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.192843][ T30] audit: type=1326 audit(1747982655.383:4569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8325 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cb138e969 code=0x7ffc0000 [ 350.252064][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.347780][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.354742][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.434088][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.464598][ T8345] netlink: 172 bytes leftover after parsing attributes in process `syz.5.714'. [ 350.748948][ T8133] hsr_slave_0: entered promiscuous mode [ 350.755292][ T8133] hsr_slave_1: entered promiscuous mode [ 350.966377][ T8133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.974954][ T8133] Cannot create hsr debugfs directory [ 351.750845][ T3466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.371682][ T8373] vivid-000: disconnect [ 353.146873][ T8370] vivid-000: reconnect [ 353.193389][ T8125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.512923][ T3466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.526330][ T30] kauditd_printk_skb: 90 callbacks suppressed [ 353.526345][ T30] audit: type=1326 audit(1747982660.873:4660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 353.556689][ T30] audit: type=1326 audit(1747982660.873:4661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.148013][ T30] audit: type=1326 audit(1747982660.873:4662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.157845][ T3466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.170428][ T30] audit: type=1326 audit(1747982660.903:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.203874][ T30] audit: type=1326 audit(1747982660.903:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.227861][ T30] audit: type=1326 audit(1747982660.903:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.250907][ T30] audit: type=1326 audit(1747982660.903:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.273501][ T30] audit: type=1326 audit(1747982660.903:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.311630][ T30] audit: type=1326 audit(1747982660.903:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.725894][ T30] audit: type=1326 audit(1747982660.903:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8377 comm="syz.2.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7ffc0000 [ 354.822387][ T8125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 354.902021][ T8125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 355.082005][ T8125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 356.522527][ T3466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.713910][ T8389] mac80211_hwsim hwsim13 : renamed from wlan1 (while UP) [ 358.033686][ T8421] vivid-004: disconnect [ 358.303006][ T8133] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 358.410153][ T3466] bridge_slave_0: left allmulticast mode [ 358.493737][ T3466] bridge_slave_0: left promiscuous mode [ 358.500319][ T3466] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.700303][ T8416] vivid-004: reconnect [ 358.705926][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 358.705939][ T30] audit: type=1326 audit(1747982666.043:4692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 358.756316][ T30] audit: type=1326 audit(1747982666.043:4693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 358.809871][ T30] audit: type=1326 audit(1747982666.043:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 358.915648][ T30] audit: type=1326 audit(1747982666.043:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 358.958269][ T30] audit: type=1326 audit(1747982666.043:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 359.061013][ T30] audit: type=1326 audit(1747982666.043:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 359.125188][ T30] audit: type=1326 audit(1747982666.043:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 359.127560][ T5853] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 359.255968][ T30] audit: type=1326 audit(1747982666.043:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 359.278890][ T30] audit: type=1326 audit(1747982666.043:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 359.305943][ T30] audit: type=1326 audit(1747982666.043:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8416 comm="syz.2.730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d6b18e969 code=0x7fc00000 [ 359.799399][ T3466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.817824][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.840022][ T3466] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 359.857392][ T3466] bond0 (unregistering): Released all slaves [ 359.883801][ T8133] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 359.944740][ T8133] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 360.062556][ T8133] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 360.291688][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.377162][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.435271][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.442508][ T6435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.524823][ T8449] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.737'. [ 360.639160][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.646456][ T6435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.885013][ T8125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.014715][ T3466] hsr_slave_0: left promiscuous mode [ 361.042732][ T3466] hsr_slave_1: left promiscuous mode [ 361.057717][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.082317][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.128849][ T3466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.169747][ T3466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.245107][ T3466] veth1_macvtap: left promiscuous mode [ 361.256105][ T3466] veth0_macvtap: left promiscuous mode [ 361.262054][ T3466] veth1_vlan: left promiscuous mode [ 361.272691][ T3466] veth0_vlan: left promiscuous mode [ 363.329393][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 363.369024][ T3466] team0 (unregistering): Port device team_slave_0 removed [ 364.589822][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.687203][ T8133] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.714764][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.721967][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.768075][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.775228][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.094993][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.900929][ T5853] Bluetooth: hci5: unexpected cc 0x203e length: 2 > 1 [ 366.380704][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.395093][ T8500] syz.1.747 (8500): drop_caches: 2 [ 367.170388][ T8125] veth0_vlan: entered promiscuous mode [ 367.208784][ T8125] veth1_vlan: entered promiscuous mode [ 367.312007][ T8125] veth0_macvtap: entered promiscuous mode [ 367.370634][ T8125] veth1_macvtap: entered promiscuous mode [ 367.439665][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.549237][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.562188][ T8125] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.572265][ T8125] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.589687][ T8125] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.599276][ T8125] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.414901][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.474706][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.629749][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.661657][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.745144][ T8133] veth0_vlan: entered promiscuous mode [ 368.792116][ T8133] veth1_vlan: entered promiscuous mode [ 368.898160][ T8133] veth0_macvtap: entered promiscuous mode [ 368.950315][ T8133] veth1_macvtap: entered promiscuous mode [ 369.007330][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.522597][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.627965][ T8133] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.646752][ T8133] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.664997][ T8133] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.683512][ T8133] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.978579][ T8571] vlan3: entered promiscuous mode [ 369.996105][ T8571] vlan2: entered promiscuous mode [ 370.029307][ T8571] gretap0: entered promiscuous mode [ 370.463900][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.502957][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.708252][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.824108][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.721992][ T5853] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 376.447449][ T8658] input: syz1 as /devices/virtual/input/input8 [ 376.537389][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 376.537407][ T30] audit: type=1326 audit(1747982683.883:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8657 comm="syz.5.772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36b6f8e969 code=0x0 [ 378.398168][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.231272][ T8726] xt_cgroup: invalid path, errno=-2 [ 386.775266][ T8781] xt_cgroup: invalid path, errno=-2 [ 397.734295][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 397.925579][ T5847] usb 2-1: Using ep0 maxpacket: 8 [ 398.211991][ T5847] usb 2-1: unable to get BOS descriptor or descriptor too short [ 398.493262][ T5847] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 398.512945][ T5847] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 398.555788][ T5847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 398.616370][ T5847] usb 2-1: language id specifier not provided by device, defaulting to English [ 398.695848][ T5847] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.760838][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.788140][ T5847] usb 2-1: Product: ࠒ [ 398.792336][ T5847] usb 2-1: Manufacturer: 狎엒龳ڣハ婽뮭ৢ闭폅ꚏ架焹㖭ڥ鶜鉎鈧ᰎ䱛﹉ [ 398.824307][ T5847] usb 2-1: SerialNumber: ₋九䶻꺆鬎藔喵 [ 400.648216][ T5847] usb 2-1: 0:2 : does not exist [ 400.721153][ T5847] usb 2-1: USB disconnect, device number 10 [ 400.798348][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.956114][ T8895] Bluetooth: hci5: command 0x0406 tx timeout [ 401.256421][ T8895] Bluetooth: hci4: command 0x0406 tx timeout [ 405.382807][ T8949] sg_write: data in/out 476/14 bytes for SCSI command 0x0-- guessing data in; [ 405.382807][ T8949] program syz.5.833 not setting count and/or reply_len properly [ 405.758993][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.7.834'. [ 407.337938][ T8983] Bluetooth: MGMT ver 1.23 [ 407.525541][ T5889] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 407.752081][ T5889] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.856941][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 407.947168][ T5889] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 407.997303][ T24] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 408.066547][ T5889] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 408.175106][ T5889] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 408.184899][ T5889] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 408.268574][ T5889] usb 8-1: Manufacturer: syz [ 408.662525][ T5889] usb 8-1: config 0 descriptor?? [ 409.109519][ T24] usb 2-1: no configurations [ 409.114275][ T24] usb 2-1: can't read configurations, error -22 [ 409.399300][ T24] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 409.501795][ T5889] rc_core: IR keymap rc-hauppauge not found [ 409.636683][ T5889] Registered IR keymap rc-empty [ 409.647483][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 409.691114][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 409.699813][ T9001] xt_hashlimit: size too large, truncated to 1048576 [ 409.746204][ T24] usb 2-1: no configurations [ 409.750966][ T24] usb 2-1: can't read configurations, error -22 [ 409.816080][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 409.828706][ T24] usb usb2-port1: attempt power cycle [ 410.057488][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input9 [ 410.244359][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 410.867744][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 410.905844][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 410.926433][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 410.935599][ T24] usb 2-1: device descriptor read/8, error -71 [ 411.006609][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 411.045704][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 411.073176][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 411.119631][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 411.178634][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 411.332779][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 412.347645][ T5889] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 412.369212][ T9015] No such timeout policy "syz1" [ 412.907609][ T5889] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 412.917152][ T5889] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 412.943329][ T5889] usb 8-1: USB disconnect, device number 2 [ 413.187630][ T9027] netlink: 'syz.6.851': attribute type 10 has an invalid length. [ 413.221145][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.853'. [ 413.327445][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.360331][ T9027] bridge_slave_1: left allmulticast mode [ 413.381264][ T9027] bridge_slave_1: left promiscuous mode [ 413.395233][ T9027] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.864596][ T9027] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 418.353978][ T9069] loop6: detected capacity change from 0 to 524287999 [ 418.363121][ T9069] buffer_io_error: 6 callbacks suppressed [ 418.363138][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.377505][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.386991][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.395034][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.404420][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.413107][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.421775][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.430231][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.438587][ T9069] ldm_validate_partition_table(): Disk read failed. [ 418.445583][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.453829][ T9069] Buffer I/O error on dev loop6, logical block 0, async page read [ 418.462457][ T9069] Dev loop6: unable to read RDB block 0 [ 418.470131][ T9069] loop6: unable to read partition table [ 418.476406][ T9069] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 419.608844][ T9074] xt_hashlimit: size too large, truncated to 1048576 [ 425.122704][ T31] INFO: task syz.3.558:7751 blocked for more than 144 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 426.296469][ T31] Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 [ 426.303634][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 426.377855][ T31] task:syz.3.558 state:D stack:25504 pid:7751 tgid:7748 ppid:5840 task_flags:0x400140 flags:0x00004004 [ 426.555868][ T31] Call Trace: [ 426.559209][ T31] [ 426.562179][ T31] __schedule+0x16f5/0x4d00 [ 426.631185][ T31] ? schedule+0x165/0x360 [ 426.645572][ T31] ? __pfx___schedule+0x10/0x10 [ 426.650500][ T31] ? schedule+0x91/0x360 [ 426.654780][ T31] schedule+0x165/0x360 [ 426.735739][ T31] netfs_wait_for_request+0x1f0/0x600 [ 426.741687][ T31] ? __pfx_netfs_write_collection+0x10/0x10 [ 426.783555][ T31] ? __pfx_netfs_wait_for_request+0x10/0x10 [ 426.827562][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 426.833700][ T31] netfs_unbuffered_write_iter_locked+0x52a/0x910 [ 426.840895][ T31] netfs_unbuffered_write_iter+0x4c4/0x660 [ 426.848204][ T31] do_iter_readv_writev+0x56b/0x7f0 [ 426.886377][ T31] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 426.892221][ T31] ? rcu_read_lock_any_held+0xb3/0x120 [ 426.898545][ T31] vfs_writev+0x306/0x9a0 [ 426.903008][ T31] ? __lock_acquire+0xab9/0xd20 [ 426.945850][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 426.957466][ T31] ? __fget_files+0x2a/0x420 [ 426.962116][ T31] ? __fget_files+0x3a0/0x420 [ 426.993463][ T31] ? __fget_files+0x2a/0x420 [ 426.998678][ T31] do_writev+0x14d/0x2d0 [ 427.005043][ T31] ? __pfx_do_writev+0x10/0x10 [ 427.014839][ T31] ? rcu_is_watching+0x15/0xb0 [ 427.020022][ T31] ? do_syscall_64+0xbe/0x3b0 [ 427.034952][ T31] do_syscall_64+0xfa/0x3b0 [ 427.042441][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.059914][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.070196][ T31] ? clear_bhb_loop+0x60/0xb0 [ 427.074917][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.083797][ T31] RIP: 0033:0x7fb7d9f8e969 [ 427.096574][ T31] RSP: 002b:00007fb7dad49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 427.105037][ T31] RAX: ffffffffffffffda RBX: 00007fb7da1b5fa0 RCX: 00007fb7d9f8e969 [ 427.117632][ T31] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000006 [ 427.131295][ T31] RBP: 00007fb7da010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 427.145235][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.155132][ T31] R13: 0000000000000000 R14: 00007fb7da1b5fa0 R15: 00007fff1cd60008 [ 427.175626][ T31] [ 427.192548][ T31] [ 427.192548][ T31] Showing all locks held in the system: [ 427.250904][ T31] 1 lock held by khungtaskd/31: [ 427.335333][ T31] #0: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 427.375484][ T31] 3 locks held by kworker/0:2/981: [ 427.380628][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 427.399493][ T31] #1: ffffc90003affbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 427.410714][ T31] #2: ffffffff8e144c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 427.453179][ T31] 2 locks held by getty/5597: [ 427.466109][ T31] #0: ffff8880308040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 427.515531][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 427.545724][ T31] 3 locks held by syz.3.558/7751: [ 427.550807][ T31] #0: ffff888075f7d978 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 427.598073][ T31] #1: ffff888079a20428 (sb_writers#15){.+.+}-{0:0}, at: vfs_writev+0x274/0x9a0 [ 427.658927][ T31] #2: ffff8880589c8e28 (&sb->s_type->i_mutex_key#20){++++}-{4:4}, at: netfs_start_io_direct+0x1ef/0x230 [ 427.725731][ T31] 1 lock held by syz-executor/8133: [ 427.730956][ T31] 1 lock held by syz.1.701/8296: [ 427.773535][ T31] 1 lock held by sed/9122: [ 427.793439][ T31] [ 427.803709][ T31] ============================================= [ 427.803709][ T31] [ 427.855113][ T31] NMI backtrace for cpu 0 [ 427.855136][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 427.855157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 427.855168][ T31] Call Trace: [ 427.855175][ T31] [ 427.855182][ T31] dump_stack_lvl+0x189/0x250 [ 427.855201][ T31] ? __wake_up_klogd+0xd9/0x110 [ 427.855224][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 427.855241][ T31] ? __pfx__printk+0x10/0x10 [ 427.855271][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 427.855298][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 427.855319][ T31] ? _printk+0xcf/0x120 [ 427.855346][ T31] ? __pfx__printk+0x10/0x10 [ 427.855366][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 427.855392][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 427.855418][ T31] watchdog+0xfee/0x1030 [ 427.855445][ T31] ? watchdog+0x1de/0x1030 [ 427.855475][ T31] kthread+0x711/0x8a0 [ 427.855497][ T31] ? __pfx_watchdog+0x10/0x10 [ 427.855519][ T31] ? __pfx_kthread+0x10/0x10 [ 427.855541][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.855566][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 427.855581][ T31] ? __pfx_kthread+0x10/0x10 [ 427.855601][ T31] ret_from_fork+0x3fc/0x770 [ 427.855628][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 427.855658][ T31] ? __switch_to_asm+0x39/0x70 [ 427.855674][ T31] ? __switch_to_asm+0x33/0x70 [ 427.855691][ T31] ? __pfx_kthread+0x10/0x10 [ 427.855712][ T31] ret_from_fork_asm+0x1a/0x30 [ 427.855744][ T31] [ 428.007922][ T31] Sending NMI from CPU 0 to CPUs 1: [ 428.015323][ C1] NMI backtrace for cpu 1 [ 428.015336][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/u8:3 Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 428.015360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.015371][ C1] Workqueue: bat_events batadv_nc_worker [ 428.015399][ C1] RIP: 0010:lockdep_hardirqs_on+0x67/0x150 [ 428.015418][ C1] Code: 8b 05 3d 96 38 07 85 c0 75 7b 65 8b 05 ea 92 38 07 85 c0 75 70 83 3d 07 a9 43 0e 00 75 32 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 6e 83 3d e9 a8 43 0e 00 75 14 48 8b 83 c8 [ 428.015433][ C1] RSP: 0018:ffffc90000b978b8 EFLAGS: 00000046 [ 428.015447][ C1] RAX: 0000000000000000 RBX: ffff888021af1e00 RCX: 976135d8f689f000 [ 428.015460][ C1] RDX: 0000000000000006 RSI: ffffffff8db6a54c RDI: ffffffff818590fd [ 428.015471][ C1] RBP: ffffc90000b97978 R08: ffffffff8fa124f7 R09: 1ffffffff1f4249e [ 428.015484][ C1] R10: dffffc0000000000 R11: fffffbfff1f4249f R12: ffffffff8b324438 [ 428.015497][ C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000172f1c [ 428.015510][ C1] FS: 0000000000000000(0000) GS:ffff888125d59000(0000) knlGS:0000000000000000 [ 428.015524][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.015536][ C1] CR2: 00007ffc310770c8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 428.015552][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.015562][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 428.015573][ C1] Call Trace: [ 428.015579][ C1] [ 428.015588][ C1] __local_bh_enable_ip+0x12d/0x1c0 [ 428.015615][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 428.015643][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 428.015663][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 428.015688][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 428.015715][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 428.015748][ C1] batadv_nc_worker+0x328/0x610 [ 428.015778][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 428.015805][ C1] process_scheduled_works+0xade/0x17b0 [ 428.015845][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 428.015879][ C1] worker_thread+0x8a0/0xda0 [ 428.015907][ C1] kthread+0x711/0x8a0 [ 428.015928][ C1] ? __pfx_worker_thread+0x10/0x10 [ 428.015943][ C1] ? __pfx_kthread+0x10/0x10 [ 428.015963][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.015987][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.016001][ C1] ? __pfx_kthread+0x10/0x10 [ 428.016020][ C1] ret_from_fork+0x3fc/0x770 [ 428.016044][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 428.016071][ C1] ? __switch_to_asm+0x39/0x70 [ 428.016088][ C1] ? __switch_to_asm+0x33/0x70 [ 428.016102][ C1] ? __pfx_kthread+0x10/0x10 [ 428.016118][ C1] ret_from_fork_asm+0x1a/0x30 [ 428.016140][ C1] [ 428.315823][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 428.322706][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-next-20250522-syzkaller #0 PREEMPT(full) [ 428.333999][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.344055][ T31] Call Trace: [ 428.347330][ T31] [ 428.350250][ T31] dump_stack_lvl+0x99/0x250 [ 428.354846][ T31] ? __asan_memcpy+0x40/0x70 [ 428.359429][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.364614][ T31] ? __pfx__printk+0x10/0x10 [ 428.369200][ T31] panic+0x2db/0x790 [ 428.373091][ T31] ? __pfx_panic+0x10/0x10 [ 428.377505][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 428.382888][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 428.388260][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 428.394425][ T31] watchdog+0x102d/0x1030 [ 428.398757][ T31] ? watchdog+0x1de/0x1030 [ 428.403171][ T31] kthread+0x711/0x8a0 [ 428.407249][ T31] ? __pfx_watchdog+0x10/0x10 [ 428.411915][ T31] ? __pfx_kthread+0x10/0x10 [ 428.416498][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 428.421693][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 428.426884][ T31] ? __pfx_kthread+0x10/0x10 [ 428.431468][ T31] ret_from_fork+0x3fc/0x770 [ 428.436058][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 428.441166][ T31] ? __switch_to_asm+0x39/0x70 [ 428.445918][ T31] ? __switch_to_asm+0x33/0x70 [ 428.450666][ T31] ? __pfx_kthread+0x10/0x10 [ 428.455246][ T31] ret_from_fork_asm+0x1a/0x30 [ 428.460006][ T31] [ 428.463343][ T31] Kernel Offset: disabled [ 428.467697][ T31] Rebooting in 86400 seconds..