last executing test programs: 13m11.499949974s ago: executing program 32 (id=149): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfffb}, {0xfff1, 0xffd1}}}, 0x24}}, 0x0) 13m2.746353282s ago: executing program 33 (id=114): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x338e3321}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 10m54.340687083s ago: executing program 34 (id=925): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 10m44.130243539s ago: executing program 35 (id=968): r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, r4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, r6) 10m42.97001287s ago: executing program 36 (id=888): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 10m8.252143289s ago: executing program 7 (id=1178): prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000880)={0x1, 0xffffffff, 0x0, 0xb, 0xfffffffffffff000, 0x4, 0xfffffffffffffd2b, 0x0, 0xfffffffffffffff9, 0x4, 0xfffffffe, 0x1}) 10m7.243735655s ago: executing program 7 (id=1185): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r2, @ANYBLOB="010023bd7000000020003b00000008000300", @ANYRES32=r1, @ANYBLOB="2b00330030b0f800ffffffffffff080211000000505050505050050010008f0110000d0001000103c8ecb60092003300802009000802110000010802110000005050505050509f00030000000000000064000010030105"], 0xe0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x80ff, 0x0) openat$mixer(0xffffff9c, 0x0, 0x40a400, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 10m7.146117867s ago: executing program 7 (id=1186): ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="8000050000000500b1a748"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) close_range(r1, r1, 0x0) 10m5.358017864s ago: executing program 7 (id=1206): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(r0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000200)='stat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/230, 0xe6}], 0x1, 0x401, 0x2ab) 10m5.219936518s ago: executing program 7 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85, @void, @value}, 0x94) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f00000000c0)={[{@dyn}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 10m4.283380372s ago: executing program 7 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) request_key(0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 9m49.151810554s ago: executing program 37 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) request_key(0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000640)=[0x0, 0x0], 0x42af}) 9m10.4702594s ago: executing program 8 (id=1528): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @dev={0xac, 0x14, 0x14, 0x34}}, 0xc) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x10) 9m6.820478893s ago: executing program 8 (id=1547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="89e7ee2c78daddb4b473fec988cafbe863cac50580088b770f3df321872b79eb391776a45d82cc", 0x27}, {&(0x7f0000000300)="9c74df", 0x3}], 0x2) 8m58.725401088s ago: executing program 8 (id=1572): socket$inet(0x2, 0x2000000080002, 0x0) socket$rds(0x15, 0x5, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS(r3, 0xc048aeca, &(0x7f0000000200)) 8m57.86640501s ago: executing program 8 (id=1578): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 8m57.646498897s ago: executing program 8 (id=1581): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r2, &(0x7f0000000b80)=""/215, 0xd7) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32f, @tick=0xfffffffc, 0x0, {0x4}, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0x80045300, 0x0) tkill(r1, 0x7) 8m56.758874171s ago: executing program 8 (id=1586): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 8m56.227376843s ago: executing program 38 (id=1586): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x9, 0xbc0000, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0xff00000000000000, 0x460c6}, 0x8000, 0x40, 0x6}}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 7m36.052939718s ago: executing program 1 (id=1977): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private=0xa010102, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 7m35.822711219s ago: executing program 1 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5609}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x4000, 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b) 7m34.563683561s ago: executing program 1 (id=1983): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="f4", 0x1}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x6}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="fd961074", 0x4, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 7m34.359128635s ago: executing program 1 (id=1986): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 7m34.106804207s ago: executing program 1 (id=1989): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) close(r0) 7m32.451311494s ago: executing program 1 (id=2001): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 7m31.997522452s ago: executing program 39 (id=2001): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_nofollow}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x10, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 7m15.386204181s ago: executing program 9 (id=2072): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 7m15.119608691s ago: executing program 9 (id=2073): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) syz_80211_inject_frame(0x0, &(0x7f0000000740)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @random="5bb29cb396f4", @device_a, {0x6, 0x5}, "", @void, @value=@ver_80211n={0x0, 0x6, 0x1, 0x3}}, @random="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"}, 0x149) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0x0, 0xfd, 0x4, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 7m14.404615597s ago: executing program 9 (id=2077): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x23c, &(0x7f0000000100)={0x0, 0x1ffffe, 0x10100, 0x4000, 0x0, 0x0, r1}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) read(r5, &(0x7f0000000400)=""/60, 0x3c) 7m13.160416825s ago: executing program 9 (id=2084): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 7m12.182767951s ago: executing program 9 (id=2085): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="f2e0b7531e2063b7a6345c67a555f26bf2ef0fbc7006a89c01a5517e64a10b791358670701b411733c3a0934877d466f0cd8cb7f6a170fc7a990fb07b3e8d4c588345e6b8fdf025851f3aadc6c3abde6ba8a4b5ece8598be1d57bd1e85c8e8660cbc3a", 0x63}], 0x1}}], 0x1, 0x48100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000002c0)="5624ab4c489ed15e1a8e78edad5e237d9e499a5644a96dd2191d777a5daf346bd32828d391255bc4e6fc2cf7ba8265ed96ff76d55da5676a64491b6c8e893245fb0586ab9c27b9bdf30952868bf08c6168bc283c46ea24863367bec13e074bdc32aacced61a7fafae919927a56d3218b4d4082dedd222e074d88969bf17b581f95b47192f78a15038bcda4e3c55da775de1eb59e102c6c3188029898c56e8a3428d30dbafd5c0b6bbce5af249f33c4f718", 0xb1, 0xfffffffffffffff9) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m11.818594079s ago: executing program 9 (id=2089): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 7m10.554566206s ago: executing program 40 (id=2089): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r6, 0x0, 0x88000cc, 0x0) 5m32.878532529s ago: executing program 0 (id=2550): r0 = syz_io_uring_setup(0x834, &(0x7f0000000180)={0x0, 0x679a, 0x400, 0x6, 0x3cc}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m32.574828934s ago: executing program 0 (id=2552): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r1) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x83f, 0x19ef, 0x3, 0x5, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x1}}) 5m31.579168785s ago: executing program 0 (id=2556): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 5m30.218909329s ago: executing program 0 (id=2561): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a00)={0x2, 0x0, [{0x0, 0xd3, &(0x7f0000000a80)=""/211}, {0xeeeeb000, 0x51, &(0x7f0000000880)=""/81}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x800, 0x10000000000, 0x1}) 5m30.03869521s ago: executing program 0 (id=2565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r3, 0x1ad72f7) accept4$netrom(r3, 0x0, 0x0, 0x80800) 5m28.540005055s ago: executing program 0 (id=2570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 5m13.489056224s ago: executing program 41 (id=2570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 15.76670775s ago: executing program 3 (id=3503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) dup(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r2, 0x407, 0x7000000) socket(0x1, 0x803, 0x0) 12.662772687s ago: executing program 3 (id=3506): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 11.037554277s ago: executing program 6 (id=3512): unshare(0x24060400) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xc}, @hci_ev_le_remote_feat_complete={{}, {0x3, 0xc9, "3f0ff8625acb6740"}}}}, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 10.85271476s ago: executing program 6 (id=3516): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="83", 0x1}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.608770282s ago: executing program 6 (id=3518): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x18c, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x160, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x14c, 0x1, [@m_xt={0x148, 0xa, 0x0, 0x0, {{0x7}, {0xb8, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x5a, 0x6, {0x0, 'mangle\x00', 0xc, 0x3, "3154a51d9cb4d30000000090c5cdc85fc650f5250cf065f49a9039a2fbc00ce686e5fa956d23bd94f51e414301af8079"}}]}, {0x69, 0x6, "b02aff89fcb734ba3a7e4bbe7dbf80c9a578cea6f50e70b62c55c42e0420d8c5c688a7cd0b82ff660cc3f662c705e961800970f1285c53934973ac141cc9f45366c1b500c5ef5cf4034b294d4651a863b0842a90625ee18c1d91b04ca14f29de60a80dd028"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) unlink(&(0x7f0000000000)='./file1\x00') 9.694252649s ago: executing program 2 (id=3520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'veth0_vlan\x00', {}, 0x81}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x301, 0x0, 0xfffffffd, {0x25, 0x4, 0x0, 0x0, {0x4e22, 0x4e23, [0x0, 0x8005, 0x0, 0x4000000], [0x1], 0x0, [0x7]}, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040849}, 0x8010) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) 9.583419263s ago: executing program 3 (id=3522): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000080), 0xfffffe13) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="cb56b6cc04f01f56bb6e28", 0xb) r4 = accept4(r3, 0x0, 0x0, 0x80800) splice(r1, 0x0, r4, 0x0, 0x1e8640, 0x0) 9.294694007s ago: executing program 6 (id=3524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) splice(r4, 0x0, r6, 0x0, 0x10500, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[], 0xffdd) 8.530459581s ago: executing program 3 (id=3527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x587a83, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000140)) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 7.201723893s ago: executing program 3 (id=3529): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) listen(r0, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r6) 7.095345172s ago: executing program 3 (id=3530): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x7ffffffffffffd9, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, 0x0, 0x0, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, 0x1000f) 7.063150104s ago: executing program 5 (id=3531): r0 = io_uring_setup(0x412f, &(0x7f0000000180)) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r4, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000200)='./file0\x00', 0x3) close_range(r0, 0xffffffffffffffff, 0x0) 6.658545434s ago: executing program 4 (id=3533): syz_open_dev$video4linux(0x0, 0x7ff, 0x100) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r2, 0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = accept(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) 6.54821495s ago: executing program 5 (id=3534): syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r4, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.40724807s ago: executing program 2 (id=3535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0xa006}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0xf}, @IFLA_GTP_LOCAL={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GTP_LOCAL6={0x14, 0x8, @remote}]}}}]}, 0x54}}, 0x20000804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x10, 0x2b, 0x0, @private2, @local, {[@srh={0x0, 0x0, 0x2}], {0x0, 0x0, 0x8}}}}}}, 0x0) recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 5.243253036s ago: executing program 5 (id=3536): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)={0x14, 0x38, 0x701, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nvram(0xffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000300), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, r3, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfffffc01}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x800) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a00000", @ANYRES16=r7, @ANYBLOB="100025bd7000fddbdf25030000001f00070073797374656d5f753a6f626a6563745f723a62696e5f909292b0cd247772c2dbfb1a626d743a73300000080004007f0000012c00070073797374656d5f753a6f626a6563745f723a636865636b706f6c6963795f657865635f743a7330002600070073797374656d5f753a6f626a6563745f723a6c6f67696e5f657865635f743a73300000000500"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) 5.106777672s ago: executing program 4 (id=3537): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, '\x00X('}) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 4.807998605s ago: executing program 2 (id=3538): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000026000100000000000000000008000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32], 0x24}], 0x1}, 0x0) 4.103131338s ago: executing program 4 (id=3539): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioperm(0x0, 0x2, 0x7e) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x3f, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 4.026758759s ago: executing program 5 (id=3540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) sendto$packet(r4, &(0x7f0000000740)='?\x00', 0x2, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) 3.969061393s ago: executing program 4 (id=3541): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000001900)={'syztnl0\x00', 0x0, 0x40, 0xf848, 0x9, 0x7, {{0x24, 0x4, 0x1, 0x3e, 0x90, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0x1c, 0xd5, 0x0, 0xf, [0xe5fc, 0x3, 0x80000001, 0xfffffffa, 0x3, 0x0]}, @ssrr={0x89, 0x17, 0x4b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @multicast1, @multicast1]}, @ssrr={0x89, 0x17, 0x71, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @remote, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x1, [{@local, 0xc3}, {@multicast2, 0x8}, {@loopback, 0x76200000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x5, 0x4}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002a80)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000019c0)={0x8a4, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x84c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_VALUE={0x7f4, 0x4, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x48, 0x4, "216fb00f65a6b8bc081f75e085db958875a92017b7515eef6d98e0bd195c6a6b7b629c940d8e6a3a849fa81b5f82873391eb1e3193ce1f8479eda3bfd14aca92cc132f06"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x8a4}}, 0x1) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="abc89c2dca06"}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x20044000}, 0x40000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0xa8, r4, 0x205, 0x0, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x89, 0xe, {{{}, {}, @device_b, @broadcast, @random="8070a8c5166b"}, 0x0, @random=0xffff, 0x5d77, @void, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @val={0x5, 0x59, {0xe, 0x4e, 0x7, "024b567b35cdfc462ba27d98418322da5ba1c21441375c5a6a8ead8b3bb57db88cb9dd2cfbce251eb89a30cb74994ff8b48da5631ce3eb082542815a8b4f0b324cc6e223e6755bafbc898715582aac85111b47d609a1"}}, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @void, @void}}], @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xa8}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="20002bbd7000fcdbdf257700000008000300", @ANYRES32, @ANYBLOB="00000400000000000000000800ef000c0000000500ee00040000000800ef000000000091983e010000000000000033efc2712942f389a3426f18e80db4993b63a4f8a16f6e5114a2902a69f9b89a02bfe73f3b19fb268100"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="240003"], 0x10e0}}, 0x0) 2.980198736s ago: executing program 2 (id=3542): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x4, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.887545447s ago: executing program 5 (id=3543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x4004804) 2.559548836s ago: executing program 2 (id=3544): getpid() syz_open_dev$video(&(0x7f00000007c0), 0x7, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x2000) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000180)={&(0x7f0000000300)=[{0x1, 0x6000, 0x2000, 0x0}, {0x222, 0x1c00, 0x0, &(0x7f0000000240)}], 0x2}) 2.558636914s ago: executing program 4 (id=3545): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x6a, 0xe8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x3, 0x9) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 1.11669299s ago: executing program 5 (id=3546): syz_open_dev$vim2m(&(0x7f0000000000), 0x52cd, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.115127987s ago: executing program 6 (id=3547): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000006000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde}, &(0x7f0000000080)=0x40) 249.859455ms ago: executing program 4 (id=3548): r0 = socket$igmp6(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @private2}, {0xa, 0x0, 0x0, @dev, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) 17.256729ms ago: executing program 2 (id=3549): socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000100)) timer_settime(0x0, 0x0, 0x0, 0x0) tee(r3, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 6 (id=3550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000600)={0x1, 0x2, 0x3, "d59050000200fa0401d8a1bfab1ef7ff1c0000000000000000f1ffffff00", 0x31303453}) kernel console output (not intermixed with test programs): /syz1 [ 430.412067][T12077] kvm: pic: level sensitive irq not supported [ 430.412135][T12077] picdev_read: 4 callbacks suppressed [ 430.412147][T12077] kvm: pic: non byte read [ 430.845324][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 430.907371][T12077] kvm: pic: level sensitive irq not supported [ 430.907461][T12077] kvm: pic: non byte read [ 430.925867][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 430.955256][T12077] kvm: pic: level sensitive irq not supported [ 430.955333][T12077] kvm: pic: non byte read [ 431.086762][ T5902] usb 2-1: device descriptor read/64, error -32 [ 431.570986][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 431.735150][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 431.786164][ T5902] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.846391][ T5902] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.996660][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 432.086416][ T5902] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 432.331794][ T5902] usb 2-1: Product: syz [ 432.336563][ T5902] usb 2-1: Manufacturer: syz [ 432.350996][ T5902] hub 2-1:4.0: USB hub found [ 432.626079][ T5902] hub 2-1:4.0: 2 ports detected [ 433.405537][ T55] Bluetooth: hci0: command tx timeout [ 433.458580][T12127] fuse: Bad value for 'fd' [ 433.954757][ T5901] hub 2-1:4.0: activate --> -90 [ 434.605899][ T5987] usb 2-1: USB disconnect, device number 8 [ 434.635920][ T5874] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 435.157931][ T5874] usb 10-1: Using ep0 maxpacket: 16 [ 435.175152][T12156] syz_tun: entered allmulticast mode [ 435.212571][T12156] dvmrp1: entered allmulticast mode [ 435.259517][ T5874] usb 10-1: unable to get BOS descriptor or descriptor too short [ 435.282310][ T5874] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 435.288190][T12155] syz_tun: left allmulticast mode [ 435.313477][ T5874] usb 10-1: can't read configurations, error -71 [ 435.447194][T12167] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 435.805084][ T5874] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 435.945004][ T5874] usb 10-1: device descriptor read/64, error -71 [ 436.095236][ T5874] usb usb10-port1: attempt power cycle [ 436.634928][ T5874] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 436.685922][ T5874] usb 10-1: device descriptor read/8, error -71 [ 436.980646][ T5874] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 437.014517][T12191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'. [ 437.693013][ T5874] usb 10-1: device descriptor read/8, error -71 [ 437.705601][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1934'. [ 437.855509][ T5874] usb usb10-port1: unable to enumerate USB device [ 437.915883][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1936'. [ 437.945675][T12198] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1935'. [ 437.961092][T12198] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1935'. [ 440.065503][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.072076][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.160388][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1945'. [ 440.545013][ T5874] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 440.785039][ T5874] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.799224][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0 [ 440.918070][ T5874] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 440.936272][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.043859][ T5874] usb 10-1: Product: syz [ 441.150436][ T5874] usb 10-1: Manufacturer: syz [ 441.159601][ T5874] usb 10-1: SerialNumber: syz [ 441.169500][ T5874] usb 10-1: config 0 descriptor?? [ 441.416878][T12235] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 441.423461][T12235] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 441.476710][T12235] vhci_hcd vhci_hcd.0: Device attached [ 441.518832][T12245] vhci_hcd: connection closed [ 441.521282][ T72] vhci_hcd: stop threads [ 441.527605][ T5874] hub 10-1:0.0: bad descriptor, ignoring hub [ 441.568382][ T72] vhci_hcd: release socket [ 441.568382][ T5874] hub 10-1:0.0: probe with driver hub failed with error -5 [ 441.619063][ T5874] usb 10-1: USB disconnect, device number 22 [ 441.635011][ T72] vhci_hcd: disconnect device [ 441.655311][ T5841] vhci_hcd: vhci_device speed not set [ 441.908914][T12250] program syz.4.1948 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.433604][T12281] overlayfs: failed to clone upperpath [ 445.906300][ T9] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 446.287072][ T9] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 446.378666][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.414013][ T9] usb 6-1: config 0 descriptor?? [ 447.476300][T12304] kvm: user requested TSC rate below hardware speed [ 447.797689][T12314] cgroup: fork rejected by pids controller in /syz4 [ 448.115276][ T9] pegasus 6-1:0.0: can't reset MAC [ 448.120839][ T9] pegasus 6-1:0.0: probe with driver pegasus failed with error -5 [ 448.390065][ T9] usb 6-1: USB disconnect, device number 22 [ 449.906873][ T7477] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.064643][T12339] syz.1.1979 (12339): drop_caches: 2 [ 450.090474][ T7477] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.253655][ T7477] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.358338][ T7477] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.494960][ T5902] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 450.655119][ T5902] usb 10-1: Using ep0 maxpacket: 8 [ 450.662553][ T5902] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 450.683172][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 450.698356][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 450.701408][ T7477] bridge_slave_1: left allmulticast mode [ 450.707861][ T5902] usb 10-1: config 179 has no interface number 0 [ 450.721845][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 450.723150][ T7477] bridge_slave_1: left promiscuous mode [ 450.729144][ T5902] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 450.746147][ T5902] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 450.758471][ T5902] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 450.760440][ T7477] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.769945][ T5902] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 450.788989][ T5902] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 450.802443][ T5902] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 450.812900][ T5902] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.822503][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 450.835412][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 450.838941][T12346] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 450.876283][ T7477] bridge_slave_0: left allmulticast mode [ 450.904372][ T7477] bridge_slave_0: left promiscuous mode [ 450.935395][ T7477] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.206841][ T5902] input: Generic X-Box pad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input13 [ 451.375296][T12346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.406299][T12346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.590026][T12367] overlayfs: failed to clone upperpath [ 451.650183][ T10] usb 10-1: USB disconnect, device number 23 [ 451.650214][ C1] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 451.665533][ C1] dummy_hcd dummy_hcd.9: timer fired with no URBs pending? [ 451.934373][T12373] overlayfs: failed to clone upperpath [ 452.014753][ T7477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.027979][ T7477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.041698][ T7477] bond0 (unregistering): Released all slaves [ 452.221471][ T7477] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 452.531747][T12385] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.679895][T12385] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.729093][ T7477] hsr_slave_0: left promiscuous mode [ 452.740075][ T7477] hsr_slave_1: left promiscuous mode [ 452.749386][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.763063][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.790214][ T7477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.799082][ T7477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.913362][ T7477] veth1_macvtap: left promiscuous mode [ 452.925896][ T55] Bluetooth: hci0: command tx timeout [ 452.965119][ T7477] veth0_macvtap: left promiscuous mode [ 452.971455][ T7477] veth1_vlan: left promiscuous mode [ 452.988707][ T7477] veth0_vlan: left promiscuous mode [ 453.496845][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.508917][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.518718][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.547743][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.559999][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.714095][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2009'. [ 454.129630][ T7477] team0 (unregistering): Port device team_slave_1 removed [ 454.195691][T12412] netlink: 'syz.2.2012': attribute type 11 has an invalid length. [ 454.263739][ T7477] team0 (unregistering): Port device team_slave_0 removed [ 455.015197][ T55] Bluetooth: hci0: command tx timeout [ 455.070623][T12385] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.171196][T12385] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.382351][T12385] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.494390][T12359] chnl_net:caif_netlink_parms(): no params data found [ 455.523614][T12385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.604333][T12385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.654057][ T55] Bluetooth: hci2: command tx timeout [ 455.766397][T12385] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.952816][T12401] chnl_net:caif_netlink_parms(): no params data found [ 456.047140][ T1110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.221464][ T1110] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.274089][T12359] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.288065][T12359] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.296446][T12359] bridge_slave_0: entered allmulticast mode [ 456.304520][T12359] bridge_slave_0: entered promiscuous mode [ 456.320012][T12359] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.327566][T12359] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.335506][T12359] bridge_slave_1: entered allmulticast mode [ 456.361505][T12359] bridge_slave_1: entered promiscuous mode [ 456.611231][ T1110] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.827354][T12359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.850854][T12359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.114988][ T55] Bluetooth: hci0: command tx timeout [ 457.131771][ T1110] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.151003][T12401] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.164310][T12401] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.084940][ T55] Bluetooth: hci2: command tx timeout [ 458.096704][T12401] bridge_slave_0: entered allmulticast mode [ 458.145262][T12401] bridge_slave_0: entered promiscuous mode [ 458.250499][T12401] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.263652][T12401] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.277947][T12401] bridge_slave_1: entered allmulticast mode [ 458.290057][T12401] bridge_slave_1: entered promiscuous mode [ 458.447045][ T30] audit: type=1326 audit(1745808051.655:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12475 comm="syz.2.2031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d2ad8e969 code=0x0 [ 458.450920][T12401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.482723][T12359] team0: Port device team_slave_0 added [ 458.498124][T12401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.514030][T12359] team0: Port device team_slave_1 added [ 458.823173][T12401] team0: Port device team_slave_0 added [ 458.840971][T12359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.849071][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.875601][T12359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.993858][T12401] team0: Port device team_slave_1 added [ 459.049988][T12359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.083029][T12359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.112156][T12359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.175271][ T55] Bluetooth: hci0: command tx timeout [ 459.502755][T12401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.513137][T12401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.683436][T12401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.134949][ T55] Bluetooth: hci2: command tx timeout [ 460.714386][T12359] hsr_slave_0: entered promiscuous mode [ 460.816747][T12359] hsr_slave_1: entered promiscuous mode [ 460.823163][T12359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.854994][T12359] Cannot create hsr debugfs directory [ 460.864607][ T1110] bridge_slave_1: left allmulticast mode [ 460.878627][ T1110] bridge_slave_1: left promiscuous mode [ 460.901014][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.928170][T12492] syz.9.2035 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 460.956207][ T1110] bridge_slave_0: left allmulticast mode [ 460.971709][ T1110] bridge_slave_0: left promiscuous mode [ 460.983572][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.961484][T12503] overlayfs: failed to clone upperpath [ 462.169603][T12506] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 462.238255][ T55] Bluetooth: hci2: command tx timeout [ 463.044159][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.087518][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.113266][ T1110] bond0 (unregistering): Released all slaves [ 463.152042][T12401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.169294][T12401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.230116][T12401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.883578][T12401] hsr_slave_0: entered promiscuous mode [ 463.908001][T12401] hsr_slave_1: entered promiscuous mode [ 463.925783][T12401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.045204][T12401] Cannot create hsr debugfs directory [ 464.749549][ T1110] hsr_slave_0: left promiscuous mode [ 464.756057][ T1110] hsr_slave_1: left promiscuous mode [ 464.764202][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.773538][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.788631][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.797966][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.836205][ T1110] veth1_macvtap: left promiscuous mode [ 464.841939][ T1110] veth0_macvtap: left promiscuous mode [ 464.849385][ T1110] veth1_vlan: left promiscuous mode [ 464.855479][ T1110] veth0_vlan: left promiscuous mode [ 467.932341][T12572] kvm: pic: single mode not supported [ 467.933021][T12572] kvm: pic: level sensitive irq not supported [ 467.940316][T12572] kvm: pic: single mode not supported [ 467.946529][T12572] kvm: pic: level sensitive irq not supported [ 467.960254][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 468.139870][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 469.109668][T12575] netlink: 14016 bytes leftover after parsing attributes in process `syz.2.2060'. [ 469.732932][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.136750][T12401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.166120][T12401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.183573][T12401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.198110][T12401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.446140][T12359] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.503248][T12359] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.578826][T12359] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.656208][T12359] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.016208][T12401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.143316][T12401] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.221804][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.228982][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.273763][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.280927][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.604349][T12359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.295936][T12359] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.486805][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.494047][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.526649][ T7477] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.533807][ T7477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.837934][T12401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.987480][T12401] veth0_vlan: entered promiscuous mode [ 473.031794][T12401] veth1_vlan: entered promiscuous mode [ 473.120877][T12401] veth0_macvtap: entered promiscuous mode [ 473.161357][T12401] veth1_macvtap: entered promiscuous mode [ 473.183354][T12359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.239355][T12401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.273598][T12401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.304321][T12401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.328205][T12401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.353384][T12401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.397713][T12401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.430906][T12401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.587659][T12401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.632055][T12401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.656191][T12401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.719587][T12401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.007359][T12401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.059236][T12401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.074924][T12401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.105082][T12401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.113852][T12401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.411664][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.434294][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.567880][ T7477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.605384][ T7477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.770968][T12359] veth0_vlan: entered promiscuous mode [ 474.811188][T12359] veth1_vlan: entered promiscuous mode [ 474.935942][T12359] veth0_macvtap: entered promiscuous mode [ 474.950513][T12359] veth1_macvtap: entered promiscuous mode [ 474.980914][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.000193][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.017896][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.034512][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.044521][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.068125][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.080184][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.092136][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.103149][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.109956][T12359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.127229][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 475.130410][T12680] tipc: Enabled bearer , priority 10 [ 475.146206][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 475.218551][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.231507][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.245661][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.256684][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.268765][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.283308][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.293895][T12359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.304889][T12359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.316780][T12359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.445914][T12687] tipc: Enabled bearer , priority 0 [ 475.481523][T12359] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.528573][T12359] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.543570][T12359] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.552566][T12359] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.739790][T12704] 9pnet_fd: Insufficient options for proto=fd [ 477.194018][T12715] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 477.245341][ T55] Bluetooth: hci4: command tx timeout [ 477.559452][T12718] kvm: pic: level sensitive irq not supported [ 477.559515][T12718] kvm: pic: non byte read [ 477.570309][T12718] kvm: pic: non byte read [ 477.575047][T12718] kvm: pic: non byte read [ 477.579643][T12718] kvm: pic: level sensitive irq not supported [ 477.579694][T12718] kvm: pic: non byte read [ 477.591049][T12718] kvm: pic: non byte read [ 477.595860][T12718] kvm: pic: level sensitive irq not supported [ 477.595908][T12718] kvm: pic: non byte read [ 477.607492][T12718] kvm: pic: level sensitive irq not supported [ 477.607650][T12718] kvm: pic: non byte read [ 477.633635][T12718] kvm: pic: level sensitive irq not supported [ 477.633694][T12718] kvm: pic: non byte read [ 477.645575][T12718] kvm: pic: level sensitive irq not supported [ 477.645644][T12718] kvm: pic: non byte read [ 479.325062][ T55] Bluetooth: hci4: command tx timeout [ 480.592653][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.612272][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.681321][T12740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2107'. [ 480.780243][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.789068][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2108'. [ 480.789091][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.858241][T12684] chnl_net:caif_netlink_parms(): no params data found [ 481.051082][T12752] syz_tun: entered allmulticast mode [ 481.121910][T12750] syz_tun: left allmulticast mode [ 481.310730][T12684] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.350911][T12684] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.368324][T12684] bridge_slave_0: entered allmulticast mode [ 481.397916][T12684] bridge_slave_0: entered promiscuous mode [ 481.408229][ T55] Bluetooth: hci4: command tx timeout [ 481.410204][T12684] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.435417][T12684] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.442677][T12684] bridge_slave_1: entered allmulticast mode [ 481.451354][T12684] bridge_slave_1: entered promiscuous mode [ 481.621858][T12684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.678102][T12684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.882837][T12684] team0: Port device team_slave_0 added [ 481.893693][T12684] team0: Port device team_slave_1 added [ 482.183728][T12684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.291920][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.023838][T12684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.034602][T12794] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 483.048559][T12684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.211664][T12684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.325682][T12684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.485147][ T5830] Bluetooth: hci4: command tx timeout [ 483.496171][T12684] hsr_slave_0: entered promiscuous mode [ 483.521627][T12684] hsr_slave_1: entered promiscuous mode [ 483.546022][T12684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.553651][T12684] Cannot create hsr debugfs directory [ 484.406457][T12684] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 484.418032][T12684] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 484.428686][T12684] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 484.440669][T12684] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.530122][T12684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.550908][T12684] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.564838][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.572112][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.590759][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.597978][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.858042][T12684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.304885][ T55] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 487.177039][T12684] veth0_vlan: entered promiscuous mode [ 487.423441][T12684] veth1_vlan: entered promiscuous mode [ 487.879624][T12684] veth0_macvtap: entered promiscuous mode [ 487.922259][T12684] veth1_macvtap: entered promiscuous mode [ 487.995964][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.053986][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.597425][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.644927][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.655176][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.675018][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.685396][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.695904][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.708808][T12684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.751747][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.803260][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.817541][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.831898][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.843734][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.882246][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.932004][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.035273][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.075009][T12684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.097679][T12684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.117739][T12684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.137380][T12684] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.163753][T12684] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.209901][T12684] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.264072][T12684] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.602127][ T7477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.616617][ T7477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.672608][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.692228][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.398015][T12873] tipc: Enabled bearer , priority 0 [ 490.476023][ T30] audit: type=1800 audit(1745808083.675:357): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2143" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 490.568033][T12873] syzkaller0: entered promiscuous mode [ 490.616897][T12873] syzkaller0: entered allmulticast mode [ 490.663050][T12873] tipc: Resetting bearer [ 492.215103][ T53] tipc: Resetting bearer [ 492.369214][T12872] tipc: Resetting bearer [ 494.863822][T12912] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 496.577925][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 496.618064][T12924] kvm: pic: non byte read [ 496.666636][T12924] kvm: pic: level sensitive irq not supported [ 496.666717][T12924] kvm: pic: non byte read [ 496.671725][T12930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2157'. [ 497.415289][ T5902] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 497.718439][ T5902] usb 7-1: Using ep0 maxpacket: 8 [ 497.727151][ T5902] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 497.754846][ T5902] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.796338][ T5902] usb 7-1: config 0 descriptor?? [ 498.113588][ T5902] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 499.530388][T12956] overlayfs: failed to clone upperpath [ 499.675310][ T5841] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 499.716045][T12958] overlayfs: failed to clone upperpath [ 499.884882][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 499.892239][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.086349][ T5841] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 500.096550][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.104680][ T5841] usb 5-1: Product: syz [ 500.109394][ T5841] usb 5-1: Manufacturer: syz [ 500.114065][ T5841] usb 5-1: SerialNumber: syz [ 500.136111][ T5841] usb 5-1: config 0 descriptor?? [ 500.346036][ T5902] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 500.361463][ T5902] asix 7-1:0.0: probe with driver asix failed with error -71 [ 500.547293][ T5902] usb 7-1: USB disconnect, device number 11 [ 500.917237][ T5841] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 500.920327][ T3555] usb 5-1: Failed to submit usb control message: -71 [ 500.955279][ T3555] usb 5-1: unable to send the bmi data to the device: -71 [ 500.961144][ T5841] usb 5-1: USB disconnect, device number 6 [ 500.968746][ T3555] usb 5-1: unable to get target info from device [ 500.975432][ T3555] usb 5-1: could not get target info (-71) [ 500.983875][ T3555] usb 5-1: could not probe fw (-71) [ 501.502594][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.511720][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.948897][T12872] tipc: Disabling bearer [ 504.505095][ T10] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 504.730838][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.842341][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 504.911080][ T10] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 504.968882][ T10] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 505.384904][ T10] usb 6-1: Manufacturer: syz [ 505.415879][ T10] usb 6-1: config 0 descriptor?? [ 505.689177][ T10] usb 6-1: USB disconnect, device number 23 [ 508.429417][ T5902] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 508.655545][ T5902] usb 1-1: Using ep0 maxpacket: 16 [ 508.713226][ T5902] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 508.789633][ T5902] usb 1-1: config 0 has no interface number 0 [ 508.849074][ T5902] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 508.954911][ T5902] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 508.972762][T13051] dvmrp1: entered allmulticast mode [ 508.991398][ T5902] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 509.002242][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.017354][ T5902] usb 1-1: Product: syz [ 509.021604][ T5902] usb 1-1: Manufacturer: syz [ 509.028894][ T5902] usb 1-1: SerialNumber: syz [ 509.100112][ T5902] usb 1-1: config 0 descriptor?? [ 509.118001][T13054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.137885][T13054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.335040][ T5987] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 509.407306][T13054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.415166][T13054] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 509.507244][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.530035][ T5987] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.551252][ T5987] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 509.597733][ T5987] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 509.621728][ T5987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.637844][ T5987] usb 7-1: config 0 descriptor?? [ 510.081239][ T5987] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 510.129846][ T5987] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 510.754888][ T842] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 510.900097][ T5987] usb 7-1: USB disconnect, device number 12 [ 510.926642][ T842] usb 6-1: Using ep0 maxpacket: 8 [ 510.951077][ T842] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 510.999171][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.189644][ T842] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.212810][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.224428][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.249730][ T842] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 511.260329][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.274353][ T842] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.295700][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.316295][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.328210][ T5902] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71 [ 511.371852][ T842] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 511.390697][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 511.427242][ T5902] asix 1-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus [ 511.469397][ T842] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 511.487245][ T5902] asix 1-1:0.251: probe with driver asix failed with error -5 [ 511.517338][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 511.530709][ T5902] usb 1-1: USB disconnect, device number 10 [ 511.544618][ T842] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 511.563095][ T842] usb 6-1: string descriptor 0 read error: -22 [ 511.575091][ T842] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 511.584325][ T842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.610840][ T842] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 511.831585][ T5987] usb 6-1: USB disconnect, device number 24 [ 516.094980][T13119] ip6gretap0: entered promiscuous mode [ 516.100802][T13119] vlan2: entered promiscuous mode [ 516.677203][T13090] syz.4.2216 (13090): drop_caches: 2 [ 517.363803][ T30] audit: type=1800 audit(1745808110.565:358): pid=13141 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2236" name="/" dev="9p" ino=2 res=0 errno=0 [ 517.713984][T13147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2238'. [ 519.356737][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2248'. [ 519.860318][T13178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2249'. [ 520.190791][T13190] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2252'. [ 522.097026][T13205] netlink: 'syz.6.2257': attribute type 16 has an invalid length. [ 522.125018][T13205] netlink: 'syz.6.2257': attribute type 17 has an invalid length. [ 522.199145][T13209] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 522.300994][T13205] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.311019][T13205] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.661164][T13205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.709486][T13205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.574918][ T5987] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 523.610589][T13205] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.620706][T13205] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.651661][T13205] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.671062][T13205] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.746258][ T5987] usb 1-1: Using ep0 maxpacket: 16 [ 523.767075][ T5987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.795943][ T5987] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 523.820172][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.839304][T13209] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 523.856335][ T5987] usb 1-1: config 0 descriptor?? [ 523.891367][T13239] team0: No ports can be present during mode change [ 523.946559][T13235] bridge_slave_0: left allmulticast mode [ 523.970281][T13235] bridge_slave_0: left promiscuous mode [ 523.983597][T13235] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.108234][T13235] bridge_slave_1: left allmulticast mode [ 524.146111][T13235] bridge_slave_1: left promiscuous mode [ 524.252727][T13235] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.797183][T13235] vlan3: left promiscuous mode [ 524.810298][ T5987] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 525.061079][T13235] bond0: (slave bond_slave_0): Releasing backup interface [ 525.096291][ T5987] usb 1-1: USB disconnect, device number 11 [ 525.164520][T13235] bond0: (slave bond_slave_1): Releasing backup interface [ 525.257248][T13260] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.985790][T13235] team0: Port device team_slave_0 removed [ 526.511176][T13235] team0: Port device team_slave_1 removed [ 526.524673][T13269] uprobe: syz.0.2281:13269 failed to unregister, leaking uprobe [ 526.539378][T13235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.332616][T13235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.403844][T13235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.601136][T13235] bridge0: port 3(vlan3) entered disabled state [ 527.846759][T13272] netlink: 'syz.4.2282': attribute type 1 has an invalid length. [ 528.468994][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2286'. [ 528.758884][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 529.623085][T13284] hsr_slave_1 (unregistering): left promiscuous mode [ 529.640431][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 529.690218][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 529.703951][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.721167][ T10] usb 1-1: Product: syz [ 529.726943][ T10] usb 1-1: Manufacturer: syz [ 529.731610][ T10] usb 1-1: SerialNumber: syz [ 529.765947][ T10] usb 1-1: config 0 descriptor?? [ 530.066199][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 530.078568][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 532.155915][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 532.337663][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 532.361186][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.395626][ T9] usb 6-1: config 0 descriptor?? [ 532.423871][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 532.446956][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 532.839115][ T10] usb 1-1: USB disconnect, device number 12 [ 533.306054][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2310'. [ 533.414723][T13349] netlink: 'syz.2.2310': attribute type 39 has an invalid length. [ 534.737732][T13361] netlink: 'syz.2.2314': attribute type 11 has an invalid length. [ 534.888409][ T5830] Bluetooth: hci0: Dropping invalid advertising data [ 534.942777][T13372] netlink: 'syz.0.2320': attribute type 1 has an invalid length. [ 534.944366][ T9] gspca_stv06xx: I2C: Read error writing address: -71 [ 534.981542][ T9] usb 6-1: USB disconnect, device number 25 [ 535.095927][T13372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2320'. [ 535.124727][T13380] overlayfs: failed to clone upperpath [ 535.137992][T13376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.147539][T13376] bond1: (slave bond2): making interface the new active one [ 535.156038][T13376] bond1: (slave bond2): Enslaving as an active interface with an up link [ 535.176443][T13372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.243065][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2323'. [ 535.431242][T13392] overlayfs: failed to clone upperpath [ 535.528324][T13396] overlayfs: failed to clone upperpath [ 535.715714][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 535.908236][ T5874] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.920652][ T5874] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 535.939511][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 535.949270][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.957911][ T5874] usb 1-1: Product: syz [ 535.962441][ T5874] usb 1-1: Manufacturer: syz [ 535.968199][ T5874] usb 1-1: SerialNumber: syz [ 536.198551][T13394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 536.838852][T13394] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 536.847747][T13431] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2339'. [ 537.065738][T13439] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2343'. [ 537.082178][ T5874] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 537.100396][ T5874] cdc_ncm 1-1:1.0: dwNtbInMaxSize=14 is too small. Using 2048 [ 537.118700][ T5874] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 537.702296][ T5874] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 537.732309][ T5874] usb 1-1: USB disconnect, device number 13 [ 537.840663][ T5874] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 538.244480][T13450] xt_hashlimit: size too large, truncated to 1048576 [ 538.356065][T13453] xt_hashlimit: size too large, truncated to 1048576 [ 540.007761][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2353'. [ 540.137598][T13475] netlink: 'syz.4.2355': attribute type 1 has an invalid length. [ 540.243703][T13475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.439447][T13478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 540.465421][T13478] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 540.497022][T13478] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 540.590814][T13481] ip6erspan0: entered promiscuous mode [ 540.600439][T13481] bond1: (slave ip6erspan0): making interface the new active one [ 540.609754][T13481] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 540.904978][ T842] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 541.098272][ T842] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 541.109392][ T842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.127715][ T842] usb 1-1: Product: syz [ 541.132025][ T842] usb 1-1: Manufacturer: syz [ 541.184873][ T842] usb 1-1: SerialNumber: syz [ 541.206900][ T842] usb 1-1: config 0 descriptor?? [ 541.212974][T13508] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 541.438118][ T842] hso 1-1:0.0: Failed to find BULK IN ep [ 541.452143][ T842] usb-storage 1-1:0.0: USB Mass Storage device detected [ 541.635844][T13490] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2360'. [ 541.655212][T13490] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 542.262268][ T842] usb 1-1: USB disconnect, device number 14 [ 542.987888][T13543] openvswitch: netlink: IP tunnel dst address not specified [ 545.502075][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'. [ 545.573769][T13588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2397'. [ 547.997287][T13633] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 548.060491][T13633] kvm: pic: non byte read [ 548.159721][ T5874] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 548.340691][T13642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2416'. [ 548.354110][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 548.454856][ T5874] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 548.485936][T13646] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 548.538281][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 548.871204][ T5874] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 548.894924][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.915519][ T5874] usb 6-1: Product: syz [ 548.922275][ T5874] usb 6-1: Manufacturer: syz [ 548.937666][ T5874] usb 6-1: SerialNumber: syz [ 549.040166][T13652] overlayfs: failed to clone upperpath [ 549.180500][ T5874] usb 6-1: 0:2 : does not exist [ 549.275307][ T5987] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 549.454989][ T5987] usb 5-1: device descriptor read/64, error -71 [ 549.636528][ T5874] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 549.786002][ T5987] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 549.814598][ T5874] usb 6-1: USB disconnect, device number 26 [ 549.836121][T13662] tipc: Failed to remove unknown binding: 66,1,1/0:983114933/983114935 [ 549.874224][T13662] tipc: Failed to remove unknown binding: 66,1,1/0:983114933/983114935 [ 549.913496][ T8162] udevd[8162]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 549.931037][ T5987] usb 5-1: device descriptor read/64, error -71 [ 550.176863][ T5987] usb usb5-port1: attempt power cycle [ 550.181736][T13666] xt_CT: You must specify a L4 protocol and not use inversions on it [ 550.246829][T13667] input: syz0 as /devices/virtual/input/input15 [ 550.628023][T13666] syz.5.2425: attempt to access beyond end of device [ 550.628023][T13666] loop11: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 550.673778][T13666] EXT4-fs (loop11): unable to read superblock [ 552.255985][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2432'. [ 554.633970][T13717] bridge_slave_0: left allmulticast mode [ 554.645514][T13717] bridge_slave_0: left promiscuous mode [ 554.671453][T13717] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.709122][T13717] bridge_slave_1: left allmulticast mode [ 554.742525][T13717] bridge_slave_1: left promiscuous mode [ 554.755349][T13717] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.848111][T13717] bond0: (slave bond_slave_0): Releasing backup interface [ 555.054664][T13717] bond0: (slave bond_slave_1): Releasing backup interface [ 555.261029][T13717] team0: Port device team_slave_0 removed [ 555.397892][T13717] team0: Port device team_slave_1 removed [ 555.469248][T13717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.558003][T13717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.627317][T13717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.711725][T13717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.932389][ T1084] tipc: Resetting bearer [ 556.077834][ T842] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 556.305227][ T842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 556.828101][ T30] audit: type=1804 audit(1745808150.035:359): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.2452" name="file0" dev="tmpfs" ino=425 res=1 errno=0 [ 556.842992][ T842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.912774][ T842] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 556.960978][ T842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 556.994501][ T842] usb 1-1: SerialNumber: syz [ 557.235306][ T842] usb 1-1: 0:2 : does not exist [ 557.274344][ T842] usb 1-1: USB disconnect, device number 15 [ 557.315467][ T8162] udevd[8162]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.696661][T13774] ptrace attach of "./syz-executor exec"[12684] was attempted by "./syz-executor exec"[13774] [ 559.770611][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 560.036319][T13815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2477'. [ 562.383537][T13854] overlayfs: failed to clone upperpath [ 562.401850][T13853] serio: Serial port pts0 [ 562.725002][T11436] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 562.899022][T11436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.915872][T11436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.930845][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.948805][T11436] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 562.958920][T11436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.971409][T11436] usb 5-1: config 0 descriptor?? [ 563.394463][T11436] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 563.464968][T11436] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 563.501269][T11436] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 563.986266][ T10] usb 5-1: USB disconnect, device number 10 [ 564.022001][ T10] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 565.065312][ T5877] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 565.225045][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 565.236988][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.266995][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2514'. [ 565.278426][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.302957][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 565.321206][ T5877] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.00 [ 565.332030][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.422744][ T5877] usb 1-1: config 0 descriptor?? [ 565.870243][ T5877] apple 0003:05AC:0245.000F: unknown main item tag 0x1 [ 565.914654][ T5877] apple 0003:05AC:0245.000F: unknown global tag 0xe [ 565.936794][ T5877] apple 0003:05AC:0245.000F: item 0 0 1 14 parsing failed [ 565.959177][ T5877] apple 0003:05AC:0245.000F: parse failed [ 565.974852][ T5877] apple 0003:05AC:0245.000F: probe with driver apple failed with error -22 [ 566.059122][ T5877] usb 1-1: USB disconnect, device number 16 [ 566.785037][ T5841] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 566.815797][ T5830] Bluetooth: hci3: connection err: -111 [ 566.975392][ T5841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.004629][ T5841] usb 5-1: config 0 has no interfaces? [ 567.011257][ T5841] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 567.046914][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.160677][T13954] lo speed is unknown, defaulting to 1000 [ 567.162112][ T5841] usb 5-1: config 0 descriptor?? [ 567.180079][T13954] lo speed is unknown, defaulting to 1000 [ 567.235587][T13954] lo speed is unknown, defaulting to 1000 [ 567.356285][T13954] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 567.708923][T13954] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 567.833972][T13954] lo speed is unknown, defaulting to 1000 [ 567.844367][ T5841] usb 5-1: USB disconnect, device number 11 [ 567.852259][T13954] lo speed is unknown, defaulting to 1000 [ 568.076285][T13954] lo speed is unknown, defaulting to 1000 [ 568.083267][T13954] lo speed is unknown, defaulting to 1000 [ 568.098802][T13954] lo speed is unknown, defaulting to 1000 [ 568.112216][T13954] lo speed is unknown, defaulting to 1000 [ 570.042525][T13981] overlayfs: failed to clone upperpath [ 570.094922][ T30] audit: type=1326 audit(1745808163.285:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.226738][ T30] audit: type=1326 audit(1745808163.285:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.260100][ T30] audit: type=1326 audit(1745808163.285:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.333589][ T30] audit: type=1326 audit(1745808163.285:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.405746][ T30] audit: type=1326 audit(1745808163.285:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.473114][ T30] audit: type=1326 audit(1745808163.285:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.532297][ T30] audit: type=1326 audit(1745808163.285:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.559538][ T30] audit: type=1326 audit(1745808163.285:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.587542][ T30] audit: type=1326 audit(1745808163.285:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.616294][ T30] audit: type=1326 audit(1745808163.285:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13980 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 570.973287][T14002] netlink: 'syz.2.2544': attribute type 12 has an invalid length. [ 571.137433][T14004] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2543'. [ 572.101644][T14018] netlink: 'syz.6.2551': attribute type 10 has an invalid length. [ 572.134928][ T5902] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 572.150043][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.161676][T14018] bond0: (slave team0): Enslaving as an active interface with an up link [ 572.300818][T14022] bridge_slave_0: left allmulticast mode [ 572.331177][ T5902] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 572.531159][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.554962][T14022] bridge_slave_0: left promiscuous mode [ 572.560834][T14022] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.576441][ T5902] usb 6-1: config 0 descriptor?? [ 572.605447][ T5902] pwc: Samsung MPC-C10 USB webcam detected. [ 572.969842][ T5902] pwc: send_video_command error -71 [ 573.001207][T14022] bridge_slave_1: left allmulticast mode [ 573.007348][ T5902] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 573.017264][T14022] bridge_slave_1: left promiscuous mode [ 573.023320][T14022] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.045472][ T5902] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 573.122077][T14022] bond0: (slave bond_slave_0): Releasing backup interface [ 573.133028][ T5902] usb 6-1: USB disconnect, device number 27 [ 573.185519][T14022] bond0: (slave bond_slave_1): Releasing backup interface [ 573.257499][T14022] team0: Port device team_slave_0 removed [ 573.636200][T14022] team0: Port device team_slave_1 removed [ 573.680963][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.733618][T14022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.743562][T14022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.759288][T14022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.775055][ T5902] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 574.051831][ T5902] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 574.248868][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.360054][T14022] bond1: (slave ip6erspan0): Releasing active interface [ 574.389296][ T5902] usb 6-1: config 0 descriptor?? [ 574.418053][ T5902] pwc: Samsung MPC-C10 USB webcam detected. [ 574.711954][T14058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2564'. [ 574.731915][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2564'. [ 574.854444][ T5902] pwc: recv_control_msg error -32 req 02 val 2b00 [ 574.862210][ T5902] pwc: recv_control_msg error -32 req 02 val 2700 [ 574.869597][ T5902] pwc: recv_control_msg error -32 req 04 val 1700 [ 574.877945][ T5902] pwc: recv_control_msg error -32 req 02 val 2c00 [ 574.994353][ T5902] pwc: recv_control_msg error -32 req 04 val 1000 [ 575.007582][ T5902] pwc: recv_control_msg error -32 req 04 val 1300 [ 575.018389][ T5902] pwc: recv_control_msg error -32 req 04 val 1400 [ 575.041214][ T5902] pwc: recv_control_msg error -71 req 02 val 2000 [ 575.055424][ T5902] pwc: recv_control_msg error -71 req 02 val 2100 [ 575.062848][ T5902] pwc: recv_control_msg error -71 req 02 val 2200 [ 575.070655][ T5902] pwc: recv_control_msg error -71 req 06 val 0600 [ 575.078245][ T5902] pwc: recv_control_msg error -71 req 04 val 1500 [ 575.087373][ T5902] pwc: recv_control_msg error -71 req 02 val 2500 [ 575.095004][ T5902] pwc: recv_control_msg error -71 req 02 val 2400 [ 575.102433][ T5902] pwc: recv_control_msg error -71 req 02 val 2600 [ 575.110094][ T5902] pwc: recv_control_msg error -71 req 02 val 2900 [ 575.120406][ T5902] pwc: recv_control_msg error -71 req 02 val 2800 [ 575.129033][ T5902] pwc: recv_control_msg error -71 req 04 val 1100 [ 575.166091][ T5902] pwc: recv_control_msg error -71 req 04 val 1200 [ 575.249253][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 575.300845][ T5902] pwc: Registered as video103. [ 575.339727][ T5902] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 576.022691][ T5902] usb 6-1: USB disconnect, device number 28 [ 577.511878][T14092] siw: device registration error -23 [ 580.829572][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 582.761371][T14129] No such timeout policy "syz0" [ 583.615860][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2587'. [ 583.624938][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2587'. [ 583.634973][T14131] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2587'. [ 588.002385][T14182] overlayfs: failed to clone upperpath [ 588.321029][T14187] overlayfs: failed to clone upperpath [ 588.390493][T14187] Invalid ELF header len 8 [ 591.533158][T14092] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2575'. [ 591.552553][T14092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 591.789667][T14221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2613'. [ 591.799192][T14221] IPVS: Unknown mcast interface: vcan0 [ 592.036388][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 592.051182][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 592.063238][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 592.072117][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 592.082548][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 592.142309][T14227] lo speed is unknown, defaulting to 1000 [ 592.694129][ T3555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.702986][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 592.703006][ T30] audit: type=1326 audit(1745808185.905:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14245 comm="syz.6.2621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffba758e969 code=0x0 [ 592.863926][ T3555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.897533][T14227] chnl_net:caif_netlink_parms(): no params data found [ 593.002873][ T3555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.191047][ T3555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.271706][T14227] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.294237][T14227] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.303822][T14227] bridge_slave_0: entered allmulticast mode [ 593.320899][T14227] bridge_slave_0: entered promiscuous mode [ 593.361837][T14227] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.375040][T14227] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.382487][T14227] bridge_slave_1: entered allmulticast mode [ 593.395671][T14227] bridge_slave_1: entered promiscuous mode [ 593.538991][T14227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.587603][T14227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.676785][T14274] overlayfs: failed to clone upperpath [ 593.700848][T14275] overlayfs: failed to clone upperpath [ 593.705984][T14227] team0: Port device team_slave_0 added [ 593.745560][T14227] team0: Port device team_slave_1 added [ 593.763224][ T3555] bridge_slave_1: left allmulticast mode [ 593.777508][ T3555] bridge_slave_1: left promiscuous mode [ 593.786829][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.828860][ T3555] bridge_slave_0: left allmulticast mode [ 593.834986][ T3555] bridge_slave_0: left promiscuous mode [ 593.844309][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.854618][T14277] overlayfs: failed to clone upperpath [ 594.014504][T14281] siw: device registration error -23 [ 594.129604][ T5830] Bluetooth: hci5: command tx timeout [ 594.589383][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.609403][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.636756][ T3555] bond0 (unregistering): Released all slaves [ 594.985830][ T3555] bond1 (unregistering): (slave bond2): Releasing backup interface [ 595.016934][ T3555] bond1 (unregistering): Released all slaves [ 596.210953][ T5830] Bluetooth: hci5: command tx timeout [ 596.421122][ T3555] bond2 (unregistering): Released all slaves [ 596.509637][T14304] netlink: 'syz.5.2643': attribute type 10 has an invalid length. [ 596.543821][T14297] macsec1: entered promiscuous mode [ 596.555222][T14297] syz_tun: entered promiscuous mode [ 596.591046][T14297] syz_tun: left promiscuous mode [ 596.625542][ T3555] IPVS: stopping backup sync thread 13646 ... [ 596.722979][T14304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.759817][T14304] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 596.806389][T14227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.821897][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.881301][T14227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.999386][T14227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.015242][T14227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.049661][T14227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.231067][T14227] hsr_slave_0: entered promiscuous mode [ 597.253457][T14227] hsr_slave_1: entered promiscuous mode [ 597.321158][T14227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.333943][T14227] Cannot create hsr debugfs directory [ 597.348980][T14322] netlink: 'syz.4.2648': attribute type 4 has an invalid length. [ 597.824833][ T3555] hsr_slave_0: left promiscuous mode [ 598.182450][ T3555] hsr_slave_1: left promiscuous mode [ 598.192277][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.300188][ T5830] Bluetooth: hci5: command tx timeout [ 598.309716][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.331731][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.339553][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.418169][ T3555] veth1_macvtap: left promiscuous mode [ 598.496259][ T3555] veth0_macvtap: left promiscuous mode [ 598.547579][ T3555] veth1_vlan: left promiscuous mode [ 598.591636][ T3555] veth0_vlan: left promiscuous mode [ 600.365793][ T5830] Bluetooth: hci5: command tx timeout [ 602.455363][ T5830] Bluetooth: hci5: command tx timeout [ 602.562063][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 602.651537][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 603.545842][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2668'. [ 603.664033][T14383] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2668'. [ 603.770482][T14381] bond2: entered promiscuous mode [ 603.775703][T14381] bond2: entered allmulticast mode [ 603.808606][T14382] ip6gretap1: entered allmulticast mode [ 603.819671][T14382] ip6gretap1: entered promiscuous mode [ 603.835495][T14382] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 603.996558][T14383] bond2: left promiscuous mode [ 604.001406][T14383] ip6gretap1: left promiscuous mode [ 604.085788][T14383] bond2: left allmulticast mode [ 604.094515][T14383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 604.111669][T14333] lo speed is unknown, defaulting to 1000 [ 606.620021][T14408] netlink: 'syz.2.2676': attribute type 1 has an invalid length. [ 606.749603][T14413] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2676'. [ 606.780842][T14408] bond3: entered promiscuous mode [ 606.787540][T14408] bond3: entered allmulticast mode [ 606.802568][T14410] vlan2: entered allmulticast mode [ 606.827924][T14410] bond0: entered allmulticast mode [ 606.833248][T14410] batadv0: entered allmulticast mode [ 606.847623][T14410] bridge0: port 1(vlan2) entered blocking state [ 606.854362][T14410] bridge0: port 1(vlan2) entered disabled state [ 606.871027][T14410] vlan2: entered promiscuous mode [ 606.877321][T14410] bond0: entered promiscuous mode [ 606.882429][T14410] batadv0: entered promiscuous mode [ 606.892384][T14410] bridge0: port 1(vlan2) entered blocking state [ 606.898816][T14410] bridge0: port 1(vlan2) entered forwarding state [ 606.916201][T14411] ip6gretap2: entered allmulticast mode [ 606.934666][T14411] bond3: (slave ip6gretap2): making interface the new active one [ 606.949466][T14411] ip6gretap2: entered promiscuous mode [ 606.956912][T14411] bond3: (slave ip6gretap2): Enslaving as an active interface with an up link [ 606.974257][T14413] bond3: left promiscuous mode [ 606.982930][T14413] ip6gretap2: left promiscuous mode [ 606.989307][T14413] bond3: left allmulticast mode [ 607.019977][T14413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 607.085370][ T5987] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 607.245294][ T5987] usb 5-1: Using ep0 maxpacket: 32 [ 607.417401][T14227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 607.452384][ T5987] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 607.461797][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.486361][ T5987] usb 5-1: config 0 descriptor?? [ 607.521500][ T5987] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 607.540660][T14227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.339150][T14227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.388419][T14227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 609.299287][T14227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.378915][T14227] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.421895][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.429188][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.502701][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.509983][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.669379][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.287767][ T5987] gspca_vc032x: reg_w err -71 [ 610.292529][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.360263][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.401268][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.417177][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.436527][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.452198][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.462417][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.474809][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.485265][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.505968][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.525423][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.530782][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.562625][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.580776][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.595728][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.605709][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.611055][ T5987] gspca_vc032x: I2c Bus Busy Wait 00 [ 610.636827][ T5987] gspca_vc032x: Unknown sensor... [ 610.642004][ T5987] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 610.695043][ T5987] usb 5-1: USB disconnect, device number 12 [ 610.776918][T14227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.886237][T14227] veth0_vlan: entered promiscuous mode [ 610.946068][T14227] veth1_vlan: entered promiscuous mode [ 610.999871][T14227] veth0_macvtap: entered promiscuous mode [ 611.050038][T14227] veth1_macvtap: entered promiscuous mode [ 611.234601][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.954670][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.988979][T14227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.181020][T14472] lo: entered allmulticast mode [ 612.202500][T14227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.236429][T14227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.260634][T14227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.297140][T14470] syz_tun: entered allmulticast mode [ 612.326681][T14465] syz_tun: left allmulticast mode [ 612.373985][T14227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.404121][T14227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.455190][T14227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.477652][T14227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.939407][T14487] sctp: [Deprecated]: syz.4.2698 (pid 14487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 612.939407][T14487] Use struct sctp_sack_info instead [ 613.777411][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.815183][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.925718][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.933604][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.986004][T14490] tipc: Resetting bearer [ 614.022952][T14490] bond0: (slave batadv0): Releasing backup interface [ 614.196938][T14490] batadv0: left promiscuous mode [ 614.205084][T14490] batadv0: left allmulticast mode [ 614.610578][T14490] vlan2: left promiscuous mode [ 614.638937][T14490] bond0: left promiscuous mode [ 614.649233][T14490] bridge0: port 1(vlan2) entered disabled state [ 614.684280][ T5841] lo speed is unknown, defaulting to 1000 [ 614.997041][ T5877] kernel read not supported for file bpf-prog (pid: 5877 comm: kworker/0:5) [ 616.114022][T14512] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2705'. [ 617.947424][T14535] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.2712'. [ 621.670373][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 621.679791][T14576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 624.458714][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.093632][T14613] Malformed UNC in devname [ 625.093632][T14613] [ 625.102239][T14613] CIFS: VFS: Malformed UNC in devname [ 631.376159][T14675] overlayfs: failed to clone upperpath [ 631.455128][T11436] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 631.565073][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 631.619451][T11436] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.631805][T11436] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 631.679868][T11436] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 631.845768][T11436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 631.853969][T11436] usb 5-1: SerialNumber: syz [ 632.597324][T11436] usb 5-1: 0:2 : does not exist [ 632.631922][T11436] usb 5-1: USB disconnect, device number 13 [ 632.806672][T14664] udevd[14664]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 633.143591][T14696] netlink: zone id is out of range [ 633.183999][T14696] netlink: zone id is out of range [ 633.189287][T14696] netlink: zone id is out of range [ 633.199210][T14696] netlink: zone id is out of range [ 633.219011][T14696] netlink: zone id is out of range [ 633.242963][T14696] netlink: set zone limit has 8 unknown bytes [ 633.317058][T14698] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 635.114961][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2768'. [ 635.988149][T14728] PKCS7: Unknown OID: [4] 0.38.35.0.121826293(bad) [ 635.995391][T14728] PKCS7: Only support pkcs7_signedData type [ 637.015135][T14750] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2775'. [ 637.025116][T14750] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2775'. [ 637.315993][T11436] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 637.704869][T11436] usb 6-1: Using ep0 maxpacket: 8 [ 638.452698][T11436] usb 6-1: unable to get BOS descriptor or descriptor too short [ 638.474975][T11436] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 638.494797][T11436] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 638.512054][T11436] usb 6-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.556439][T11436] usb 6-1: config 1 interface 0 has no altsetting 0 [ 638.568385][T11436] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 638.590703][T11436] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.599774][T11436] usb 6-1: Product: syz [ 638.604173][T11436] usb 6-1: Manufacturer: syz [ 638.614345][T11436] usb 6-1: SerialNumber: syz [ 639.387572][T14749] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 639.412609][T14749] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 639.611956][T14769] bridge: RTM_NEWNEIGH with invalid ether address [ 639.711535][T11436] usb 6-1: bad CDC descriptors [ 639.775112][T11436] usb 6-1: USB disconnect, device number 29 [ 641.033067][T14773] lo speed is unknown, defaulting to 1000 [ 641.468955][T14787] sch_tbf: burst 8791 is lower than device lo mtu (65550) ! [ 641.567682][T14788] sch_tbf: burst 8787 is lower than device lo mtu (65550) ! [ 643.144942][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 643.385006][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 643.435372][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.522854][ T5877] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 643.589082][ T5877] usb 5-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 643.622517][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.664239][ T5877] usb 5-1: Product: syz [ 643.688429][ T5877] usb 5-1: Manufacturer: syz [ 643.714570][ T5877] usb 5-1: SerialNumber: syz [ 643.967439][ T5877] usb 5-1: config 0 descriptor?? [ 644.012591][ T5877] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 644.238439][ T5877] usb 5-1: USB disconnect, device number 14 [ 644.248970][ T2343] usb 5-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 644.297574][ T2343] usb 5-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 644.380391][T14825] siw: device registration error -23 [ 644.398779][ T5830] Bluetooth: hci3: Unable to find connection for big 0x14 [ 651.169562][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'. [ 651.206664][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 651.269528][T14912] lo speed is unknown, defaulting to 1000 [ 651.344047][T14915] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2827'. [ 651.395313][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 651.428707][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.491854][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 4: 65, using maximum allowed: 30 [ 651.522614][ T10] usb 4-1: config 0 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 651.561712][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 651.650494][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 651.691632][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.713275][ T10] usb 4-1: config 0 descriptor?? [ 651.752020][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 652.000497][T14920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.510117][T14926] syz_tun: entered allmulticast mode [ 652.512139][T14924] Cannot find add_set index 0 as target [ 652.539848][ T5874] usb 4-1: USB disconnect, device number 7 [ 652.599240][T14920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.797604][T14920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.957150][T14920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.310859][T14920] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.353371][T14920] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.383707][ T30] audit: type=1804 audit(1745808246.585:378): pid=14944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2835" name="/newroot/20/file1" dev="fuse" ino=1 res=1 errno=0 [ 653.391303][T14920] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.413961][ T30] audit: type=1800 audit(1745808246.585:379): pid=14944 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2835" name="/" dev="fuse" ino=1 res=0 errno=0 [ 653.463375][T14920] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.072031][T14957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.657597][T14983] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2847'. [ 656.666838][T14983] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2847'. [ 656.859824][ T30] audit: type=1804 audit(1745808250.055:380): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2848" name="/newroot/139/bus/file1" dev="overlay" ino=784 res=1 errno=0 [ 656.913242][T14985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2849'. [ 656.922472][T14985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2849'. [ 656.942059][T14985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2849'. [ 656.975151][T14985] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2849'. [ 657.368997][T14989] lo speed is unknown, defaulting to 1000 [ 658.468313][T14978] tipc: Failed to remove unknown binding: 66,3,3/0:3721182612/3721182613 [ 661.254912][ T30] audit: type=1800 audit(1745808254.445:381): pid=15028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2865" name="file1" dev="tmpfs" ino=1009 res=0 errno=0 [ 664.898456][T15085] syz_tun: entered allmulticast mode [ 664.930696][T15070] syz_tun: left allmulticast mode [ 667.218714][T15135] netlink: 'syz.6.2887': attribute type 21 has an invalid length. [ 667.275910][T15136] netlink: 'syz.6.2887': attribute type 21 has an invalid length. [ 667.283870][T15136] netlink: 'syz.6.2887': attribute type 6 has an invalid length. [ 667.368185][T15136] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2887'. [ 667.449320][T15140] : entered promiscuous mode [ 667.464310][T15135] netlink: 'syz.6.2887': attribute type 6 has an invalid length. [ 667.478658][T15135] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2887'. [ 668.869545][T15157] netlink: 'syz.5.2895': attribute type 30 has an invalid length. [ 671.479741][T15186] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 671.954838][ T5987] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 672.063874][T15198] netfs: Couldn't get user pages (rc=-14) [ 672.147468][ T5987] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=28.97 [ 672.170153][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.213852][ T5987] usb 6-1: Product: syz [ 672.227689][ T5987] usb 6-1: Manufacturer: syz [ 672.245811][ T5987] usb 6-1: SerialNumber: syz [ 672.282507][ T5987] usb 6-1: config 0 descriptor?? [ 672.505856][ T5987] upd78f0730 6-1:0.0: upd78f0730 converter detected [ 672.527502][ T5987] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 673.101610][ T5841] usb 6-1: USB disconnect, device number 30 [ 673.342690][ T5841] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 673.352512][ T5841] upd78f0730 6-1:0.0: device disconnected [ 675.543410][T15245] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2926'. [ 675.591123][T15245] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2926'. [ 675.632680][T15245] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2926'. [ 675.641851][T15245] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2926'. [ 681.639660][T15310] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.110839][T15310] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.050361][T15310] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.117943][T15332] bridge0: port 3(netdevsim0) entered blocking state [ 683.157216][T15332] bridge0: port 3(netdevsim0) entered disabled state [ 683.173451][T15332] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 683.186867][T15332] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 683.220029][T15332] bridge0: port 3(netdevsim0) entered blocking state [ 683.227472][T15332] bridge0: port 3(netdevsim0) entered forwarding state [ 684.915510][T15310] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.063015][T15348] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 685.100368][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2953'. [ 685.515859][T15310] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.849022][T15310] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.038441][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.064309][T15310] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.084249][T15310] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.957143][T15377] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 686.965377][T15377] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 686.974248][T15377] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 686.982274][T15377] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 687.533666][T15372] hub 8-0:1.0: USB hub found [ 688.565534][T15372] hub 8-0:1.0: 1 port detected [ 690.293089][T15405] sctp: [Deprecated]: syz.3.2968 (pid 15405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.293089][T15405] Use struct sctp_sack_info instead [ 693.238921][T15412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.789417][T15412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.861465][T15412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.957422][T15412] bridge0: port 3(netdevsim0) entered disabled state [ 697.231180][T15412] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 697.241720][T15412] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 697.256024][T15412] bridge0: port 3(netdevsim0) entered disabled state [ 697.377799][T15471] 9pnet_fd: Insufficient options for proto=fd [ 697.622710][T15412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.677934][ T5830] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 698.182186][T15412] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.265032][T15412] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.295196][T15412] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.321814][T15412] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.830094][T15493] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2993'. [ 700.195191][T15504] xt_SECMARK: invalid mode: 2 [ 703.244029][ T30] audit: type=1326 audit(1745808296.445:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 703.323287][ T30] audit: type=1326 audit(1745808296.475:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 703.365788][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 703.380887][T15527] Unknown options in mask 5 [ 703.459481][ T30] audit: type=1326 audit(1745808296.475:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 703.563666][ T30] audit: type=1326 audit(1745808296.475:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 703.693409][ T30] audit: type=1326 audit(1745808296.475:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 704.663264][ T30] audit: type=1326 audit(1745808296.475:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 705.034852][ T30] audit: type=1326 audit(1745808296.475:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 705.761967][ T30] audit: type=1326 audit(1745808296.475:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 705.904789][ T30] audit: type=1326 audit(1745808296.475:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 705.949646][ T30] audit: type=1326 audit(1745808296.475:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15522 comm="syz.2.3001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 706.355552][ T2343] pvrusb2: request_firmware fatal error with code=-110 [ 706.362500][ T2343] pvrusb2: Failure uploading firmware1 [ 706.404975][ T2343] pvrusb2: Device initialization was not successful. [ 706.455414][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 706.505369][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 706.829146][ T5877] pvrusb2: Device being rendered inoperable [ 711.655006][ T5902] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 711.865224][ T5902] usb 4-1: Using ep0 maxpacket: 16 [ 712.136445][ T5902] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 712.178735][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.210431][ T5902] usb 4-1: Product: syz [ 712.254877][ T5902] usb 4-1: Manufacturer: syz [ 712.289946][ T5902] usb 4-1: SerialNumber: syz [ 712.401069][ T5902] r8152-cfgselector 4-1: Unknown version 0x0000 [ 712.453180][ T5902] r8152-cfgselector 4-1: config 0 descriptor?? [ 712.572072][T15611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3028'. [ 714.464422][ T5987] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 714.996678][T15621] Cannot find add_set index 0 as target [ 716.607023][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 719.034935][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 719.589628][T15677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3043'. [ 723.026372][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3053'. [ 726.678261][T15743] xt_cgroup: invalid path, errno=-2 [ 729.434002][T15779] bridge2: entered allmulticast mode [ 729.474945][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 729.789568][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 730.696225][ T5877] usb 5-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 730.714738][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.722787][ T5877] usb 5-1: Product: syz [ 730.733798][ T5877] usb 5-1: Manufacturer: syz [ 730.772244][ T5877] usb 5-1: SerialNumber: syz [ 730.809936][ T5877] usb 5-1: config 0 descriptor?? [ 730.967115][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 730.967134][ T30] audit: type=1326 audit(1745808324.175:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15793 comm="syz.5.3079" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bb2d8e969 code=0x0 [ 731.047932][ T5877] snd-usb-hiface 5-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 731.114781][ T5987] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 731.264486][ T5877] usb 5-1: USB disconnect, device number 15 [ 731.327391][ T5987] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 731.346514][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.358300][ T5987] usb 4-1: config 0 has no interface number 0 [ 731.993778][ T5987] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 732.014634][ T5987] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 732.057897][ T5987] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 732.102258][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.187999][ T5987] usb 4-1: config 0 descriptor?? [ 732.241090][ T5987] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 732.670986][ T842] usb 4-1: USB disconnect, device number 9 [ 733.325392][ T53] usb 4-1: Failed to submit usb control message: -71 [ 733.332543][ T53] usb 4-1: unable to send the bmi data to the device: -71 [ 734.386276][ T53] usb 4-1: unable to get target info from device [ 734.392708][ T53] usb 4-1: could not get target info (-71) [ 734.399460][ T53] usb 4-1: could not probe fw (-71) [ 738.962848][ T30] audit: type=1326 audit(1745808332.155:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15839 comm="syz.2.3091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f9d2ad85927 code=0x0 [ 740.555657][T15872] sctp: [Deprecated]: syz.3.3097 (pid 15872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.555657][T15872] Use struct sctp_sack_info instead [ 743.134648][T15904] batman_adv: batadv0: Adding interface: dummy0 [ 743.175135][T15904] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.282960][T15904] batman_adv: batadv0: Interface activated: dummy0 [ 743.528794][T15905] batadv0: mtu less than device minimum [ 743.557597][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.570331][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.582326][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.594374][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.605744][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.617807][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.629213][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.640643][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 743.652068][T15905] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 744.617145][T15915] overlayfs: failed to clone upperpath [ 745.047464][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3116'. [ 745.551516][T15923] vlan4: entered promiscuous mode [ 745.561509][T15923] vlan4: entered allmulticast mode [ 745.569787][T15929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3117'. [ 745.589556][T15923] hsr_slave_1: entered allmulticast mode [ 745.780833][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3119'. [ 745.803402][T15936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3119'. [ 745.820606][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3119'. [ 745.860289][T15936] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3119'. [ 747.721859][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.752267][T15929] bond0: (slave team0): Releasing backup interface [ 747.820889][T15929] team0 (unregistering): Port device team_slave_0 removed [ 747.835496][T15929] team0 (unregistering): Port device team_slave_1 removed [ 747.877389][T15939] netem: change failed [ 747.901508][T15954] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 747.954914][T15957] vlan2: entered allmulticast mode [ 747.985184][T15957] bridge_slave_0: entered allmulticast mode [ 748.332844][T15967] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3126'. [ 749.242502][T15969] lo speed is unknown, defaulting to 1000 [ 756.234086][T16051] syzkaller0: create flow: hash 1243249042 index 1 [ 757.855464][T16063] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 758.867713][T16054] syzkaller0: delete flow: hash 1243249042 index 1 [ 760.345660][T16081] Invalid ELF header magic: != ELF [ 760.655032][T16090] Cannot find add_set index 0 as target [ 763.843103][T16107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 773.854170][T16171] trusted_key: encrypted_key: insufficient parameters specified [ 774.197454][T16172] netlink: 'syz.2.3181': attribute type 4 has an invalid length. [ 774.855820][ T30] audit: type=1326 audit(1745808367.975:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16177 comm="syz.6.3185" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffba758e969 code=0x0 [ 775.138104][ T1339] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.296033][ T1339] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.335517][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 775.375133][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3189'. [ 775.554019][ T1339] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.811731][ T1339] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.590846][ T1339] bridge_slave_0: left allmulticast mode [ 778.600724][ T1339] bridge_slave_0: left promiscuous mode [ 778.615725][ T1339] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.845095][ T30] audit: type=1326 audit(1745808373.045:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16241 comm="syz.5.3206" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bb2d8e969 code=0x0 [ 785.980614][ T1339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.375214][ T1339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.838070][ T1339] bond0 (unregistering): Released all slaves [ 787.283906][T16244] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.292856][T16244] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.301320][T16244] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.310904][T16244] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 787.331325][T16244] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 790.330549][T16305] bridge0: port 1(syz_tun) entered blocking state [ 790.446907][T16305] bridge0: port 1(syz_tun) entered disabled state [ 790.453606][T16305] syz_tun: entered allmulticast mode [ 790.496456][T16305] syz_tun: entered promiscuous mode [ 790.505821][T16305] bridge0: port 1(syz_tun) entered blocking state [ 790.512398][T16305] bridge0: port 1(syz_tun) entered forwarding state [ 790.929586][ T30] audit: type=1326 audit(1745808384.135:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16323 comm="syz.4.3232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x0 [ 792.238699][ T1339] hsr_slave_0: left promiscuous mode [ 792.532743][ T1339] hsr_slave_1: left promiscuous mode [ 792.595737][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.641499][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.661157][ T1339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.678410][ T1339] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.348688][ T1339] veth1_macvtap: left promiscuous mode [ 794.354358][ T1339] veth0_macvtap: left promiscuous mode [ 794.371974][ T1339] veth1_vlan: left promiscuous mode [ 794.433681][ T1339] veth0_vlan: left promiscuous mode [ 794.858588][ T55] Bluetooth: hci3: unexpected event for opcode 0x2016 [ 797.196770][T16384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3246'. [ 797.441790][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f5c5400: rx timeout, send abort [ 797.945565][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f5c7000: rx timeout, send abort [ 797.955026][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f5c5400: abort rx timeout. Force session deactivation [ 798.453851][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f5c7000: abort rx timeout. Force session deactivation [ 800.040163][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3252'. [ 800.220463][ T1339] team0 (unregistering): Port device team_slave_1 removed [ 800.317550][ T1339] team0 (unregistering): Port device team_slave_0 removed [ 803.888376][T16438] overlayfs: failed to clone upperpath [ 804.006319][T16447] sctp: [Deprecated]: syz.6.3263 (pid 16447) Use of struct sctp_assoc_value in delayed_ack socket option. [ 804.006319][T16447] Use struct sctp_sack_info instead [ 805.325779][T16464] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3264'. [ 808.917067][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.954170][ T5901] kworker/1:6 (5901) used greatest stack depth: 16392 bytes left [ 810.164778][ T30] audit: type=1800 audit(1745808403.305:408): pid=16508 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.3278" name="file1" dev="tmpfs" ino=1507 res=0 errno=0 [ 811.098471][ T55] Bluetooth: hci4: unexpected event for opcode 0x203d [ 811.406191][T16511] netlink: 'syz.4.3280': attribute type 11 has an invalid length. [ 811.644097][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3288'. [ 811.713355][T16534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3288'. [ 813.986856][T16557] netlink: 'syz.2.3294': attribute type 13 has an invalid length. [ 814.064247][ T30] audit: type=1326 audit(1745808407.265:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.112982][ T30] audit: type=1326 audit(1745808407.265:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.135143][T16562] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3296'. [ 814.149610][ T30] audit: type=1326 audit(1745808407.295:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.176967][ T30] audit: type=1326 audit(1745808407.295:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.181878][T16563] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3295'. [ 814.200101][ T30] audit: type=1326 audit(1745808407.295:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.217146][T16557] batman_adv: batadv0: Interface deactivated: dummy0 [ 814.239913][ T30] audit: type=1326 audit(1745808407.295:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.262437][ T30] audit: type=1326 audit(1745808407.295:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.288053][ T30] audit: type=1326 audit(1745808407.295:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.326206][ T30] audit: type=1326 audit(1745808407.295:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16556 comm="syz.2.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9d2ad8e969 code=0x7ffc0000 [ 814.481199][T16557] macsec0: left promiscuous mode [ 814.487914][T16557] veth1_macvtap: left allmulticast mode [ 814.506029][T16557] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.514989][T16557] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.523479][T16557] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.532654][T16557] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.976388][T16557] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.985448][T16557] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.993924][T16557] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.002379][T16557] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 815.026498][T16559] geneve2: entered promiscuous mode [ 815.176914][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 815.187868][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 815.200555][ T55] Bluetooth: hci4: hardware error 0x00 [ 816.578854][T16583] trusted_key: syz.3.3301 sent an empty control message without MSG_MORE. [ 816.685273][T16591] xt_limit: Overflow, try lower: 687865856/40 [ 817.432173][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 819.302084][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3311'. [ 819.418693][T16617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.505092][T16617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.523363][T16617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.579087][T16609] lo speed is unknown, defaulting to 1000 [ 819.878123][T16613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 820.122753][T16628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3316'. [ 824.601379][T16663] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 824.688461][T16667] xt_hashlimit: size too large, truncated to 1048576 [ 824.701298][T16668] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3327'. [ 824.706691][ T30] audit: type=1326 audit(1745808417.905:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16664 comm="syz.4.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 824.791865][ T30] audit: type=1326 audit(1745808417.905:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16664 comm="syz.4.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 825.024790][ T30] audit: type=1326 audit(1745808417.905:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16664 comm="syz.4.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 825.101667][ T30] audit: type=1326 audit(1745808417.905:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16664 comm="syz.4.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 825.199202][ T30] audit: type=1326 audit(1745808417.905:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16664 comm="syz.4.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 826.195400][ T30] audit: type=1326 audit(1745808417.905:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16664 comm="syz.4.3328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f91c658e969 code=0x7ffc0000 [ 830.662748][T16721] lo speed is unknown, defaulting to 1000 [ 832.874437][T16745] random: crng reseeded on system resumption [ 834.447342][T16760] xt_connbytes: Forcing CT accounting to be enabled [ 834.454809][T16760] Cannot find add_set index 0 as target [ 835.907114][T16779] Bluetooth: MGMT ver 1.23 [ 836.941529][T16801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 839.112600][T16801] syz_tun: left allmulticast mode [ 839.145083][T16801] syz_tun: left promiscuous mode [ 839.160149][T16801] bridge0: port 1(syz_tun) entered disabled state [ 839.515136][ T5987] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 839.694068][ T5987] usb 6-1: config 0 has an invalid interface number: 32 but max is 0 [ 840.123573][ T5987] usb 6-1: config 0 has no interface number 0 [ 840.153259][ T5987] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.167804][ T5987] usb 6-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.183121][ T5987] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 840.201683][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.234571][T16803] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.236964][ T5987] usb 6-1: config 0 descriptor?? [ 840.356041][T16803] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.581630][T16803] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.768127][T16830] xt_ecn: cannot match TCP bits for non-tcp packets [ 840.839131][ T5987] hid (null): unknown global tag 0xe [ 841.287194][ T5987] logitech-djreceiver 0003:046D:C71B.0010: unknown global tag 0xe [ 841.299796][ T5987] logitech-djreceiver 0003:046D:C71B.0010: item 0 2 1 14 parsing failed [ 841.309571][ T5987] logitech-djreceiver 0003:046D:C71B.0010: logi_dj_probe: parse failed [ 841.397338][T16803] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.436361][ T5987] logitech-djreceiver 0003:046D:C71B.0010: probe with driver logitech-djreceiver failed with error -22 [ 841.495664][ T5987] usb 6-1: USB disconnect, device number 31 [ 841.800838][T16837] lo speed is unknown, defaulting to 1000 [ 842.709493][T16803] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.691924][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3383'. [ 843.710744][T16803] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.013279][T16803] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.073616][T16803] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.876031][T16894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3395'. [ 849.944475][T16895] xt_TPROXY: Can be used only with -p tcp or -p udp [ 851.154793][T16898] tipc: Enabling of bearer rejected, failed to enable media [ 851.168286][T16912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3399'. [ 852.822087][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3400'. [ 852.945839][ T30] audit: type=1326 audit(1745808446.155:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 852.973916][T16932] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3404'. [ 852.997787][T16932] gretap0: entered promiscuous mode [ 853.035497][ T30] audit: type=1326 audit(1745808446.155:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.103583][ T30] audit: type=1326 audit(1745808446.155:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.136865][ T30] audit: type=1326 audit(1745808446.155:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.167410][ T30] audit: type=1326 audit(1745808446.155:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.218456][ T30] audit: type=1326 audit(1745808446.155:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.258445][ T30] audit: type=1326 audit(1745808446.155:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.346451][ T30] audit: type=1326 audit(1745808446.155:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 853.798862][T16942] xt_TCPMSS: Only works on TCP SYN packets [ 854.245688][ T30] audit: type=1326 audit(1745808446.155:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 854.267515][ T30] audit: type=1326 audit(1745808446.155:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16925 comm="syz.6.3404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffba758e969 code=0x7ffc0000 [ 855.696128][T16963] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3416'. [ 856.701968][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 856.734009][T16972] vlan2: entered promiscuous mode [ 856.774778][T16972] bond0: entered promiscuous mode [ 856.782144][T16972] bond_slave_0: entered promiscuous mode [ 856.800165][T16972] bond_slave_1: entered promiscuous mode [ 857.065057][ T5874] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 858.262101][ T5874] usb 6-1: Using ep0 maxpacket: 16 [ 858.325574][ T5874] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 858.333715][ T5874] usb 6-1: config 0 has no interface number 0 [ 858.394302][ T5874] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 858.424734][ T5874] usb 6-1: config 0 interface 49 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 858.440764][ T5874] usb 6-1: config 0 interface 49 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 858.503968][ T5874] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 858.513914][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.523390][ T5874] usb 6-1: Product: syz [ 858.573240][ T5874] usb 6-1: Manufacturer: syz [ 858.584501][ T5874] usb 6-1: SerialNumber: syz [ 858.609963][ T5874] usb 6-1: config 0 descriptor?? [ 858.702560][T16977] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 858.823036][T16994] lo speed is unknown, defaulting to 1000 [ 858.928119][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3425'. [ 858.964318][ T5874] usb 6-1: USB disconnect, device number 32 [ 862.188201][T17048] ipip0: entered promiscuous mode [ 870.316951][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.764219][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3461'. [ 871.109083][T17131] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 872.619165][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3464'. [ 875.840457][T17164] infiniband syz!: set down [ 875.845286][T17164] infiniband syz!: added team_slave_0 [ 875.851860][T17164] syz!: rxe_create_cq: returned err = -12 [ 875.858186][T17164] infiniband syz!: Couldn't create ib_mad CQ [ 875.864318][T17164] infiniband syz!: Couldn't open port 1 [ 875.920314][T17164] RDS/IB: syz!: added [ 875.925343][T17164] smc: adding ib device syz! with port count 1 [ 875.931921][T17164] smc: ib device syz! port 1 has pnetid [ 879.258329][T17192] overlayfs: failed to clone upperpath [ 883.468067][T17223] lo speed is unknown, defaulting to 1000 [ 889.183621][T17282] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3502'. [ 893.579038][T17305] overlayfs: failed to clone upperpath [ 894.798677][T17324] syz.3.3506: attempt to access beyond end of device [ 894.798677][T17324] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 894.812386][T17324] FAT-fs (loop7): unable to read boot sector [ 895.445119][T17341] xt_cgroup: invalid path, errno=-2 [ 899.480301][T17380] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3535'. [ 899.563070][T17379] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3535'. [ 904.798520][T17427] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 904.810484][T17427] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 904.818931][T17427] CPU: 0 UID: 0 PID: 17427 Comm: syz.5.3546 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 904.829288][T17427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 904.839415][T17427] RIP: 0010:find_match+0xa3/0xc90 [ 904.844486][T17427] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 4f 02 18 f8 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2e 02 18 f8 48 8b 1b e8 36 13 47 [ 904.864128][T17427] RSP: 0018:ffffc9000cbf7010 EFLAGS: 00010206 [ 904.870228][T17427] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000000002 [ 904.878224][T17427] RDX: ffff88802c3a0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 904.886216][T17427] RBP: 1ffff1100fcbe8e4 R08: ffffc9000cbf73a0 R09: ffffc9000cbf73b0 [ 904.894211][T17427] R10: ffffc9000cbf7200 R11: ffffffff8a078900 R12: dffffc0000000000 [ 904.902213][T17427] R13: 0000000000000002 R14: 1ffff1100fcbe8e6 R15: ffff88807e5f4737 [ 904.910304][T17427] FS: 00007f1bb3b1b6c0(0000) GS:ffff888126102000(0000) knlGS:0000000000000000 [ 904.919263][T17427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 904.925877][T17427] CR2: 0000001b30d18ff8 CR3: 0000000052806000 CR4: 00000000003526f0 [ 904.933876][T17427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 904.941873][T17427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 904.949871][T17427] Call Trace: [ 904.953169][T17427] [ 904.956124][T17427] rt6_nh_find_match+0xd9/0x150 [ 904.961010][T17427] nexthop_for_each_fib6_nh+0x1c6/0x400 [ 904.966671][T17427] ? __pfx_rt6_nh_find_match+0x10/0x10 [ 904.972180][T17427] __find_rr_leaf+0x461/0x6d0 [ 904.976899][T17427] ? __pfx___find_rr_leaf+0x10/0x10 [ 904.982130][T17427] fib6_table_lookup+0x39f/0xa80 [ 904.987114][T17427] ? __pfx_fib6_table_lookup+0x10/0x10 [ 904.992607][T17427] ? ip6_pol_route+0x162/0x1180 [ 904.997490][T17427] ip6_pol_route+0x222/0x1180 [ 905.002203][T17427] ? __pfx_ip6_pol_route+0x10/0x10 [ 905.007325][T17427] ? rcu_is_watching+0x15/0xb0 [ 905.012191][T17427] ? preempt_schedule_irq+0xde/0x150 [ 905.017492][T17427] fib6_rule_lookup+0x348/0x6f0 [ 905.022356][T17427] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 905.028083][T17427] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 905.033468][T17427] ? ip6_route_output_flags+0x2e/0x5d0 [ 905.038936][T17427] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 905.043960][T17427] ? ip6_route_output_flags+0x22/0x5d0 [ 905.049436][T17427] ip6_route_output_flags+0x364/0x5d0 [ 905.054832][T17427] ? ip6_route_output_flags+0x2e/0x5d0 [ 905.060307][T17427] ip6_dst_lookup_tail+0x1ae/0x1500 [ 905.065531][T17427] ? __lock_acquire+0xaac/0xd20 [ 905.070412][T17427] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 905.076072][T17427] ? __lock_acquire+0xaac/0xd20 [ 905.080946][T17427] ip6_dst_lookup_flow+0x47/0xe0 [ 905.085903][T17427] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 905.090954][T17427] sctp_v6_get_dst+0x7cc/0x1bc0 [ 905.095849][T17427] ? crng_make_state+0x13a/0x700 [ 905.100803][T17427] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 905.106108][T17427] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.111332][T17427] ? dst_release+0x72/0x1b0 [ 905.115851][T17427] sctp_transport_route+0x115/0x2f0 [ 905.121058][T17427] sctp_assoc_add_peer+0x657/0x13b0 [ 905.126363][T17427] sctp_connect_new_asoc+0x30a/0x690 [ 905.131666][T17427] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 905.137576][T17427] ? __ipv6_addr_type+0x118/0x2f0 [ 905.142643][T17427] ? sctp_inet6_send_verify+0x6e/0x300 [ 905.148114][T17427] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 905.153934][T17427] __sctp_connect+0x5ba/0xd50 [ 905.158629][T17427] ? __pfx___sctp_connect+0x10/0x10 [ 905.163875][T17427] sctp_inet_connect+0x12e/0x1e0 [ 905.168844][T17427] __sys_connect+0x313/0x440 [ 905.173546][T17427] ? __pfx___sys_connect+0x10/0x10 [ 905.178681][T17427] __x64_sys_connect+0x7a/0x90 [ 905.183474][T17427] do_syscall_64+0xf6/0x210 [ 905.187984][T17427] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 905.193629][T17427] ? clear_bhb_loop+0x45/0xa0 [ 905.198317][T17427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.204218][T17427] RIP: 0033:0x7f1bb2d8e969 [ 905.208654][T17427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.228278][T17427] RSP: 002b:00007f1bb3b1b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 905.236708][T17427] RAX: ffffffffffffffda RBX: 00007f1bb2fb6160 RCX: 00007f1bb2d8e969 [ 905.244688][T17427] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 905.252677][T17427] RBP: 00007f1bb2e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 905.260660][T17427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.268685][T17427] R13: 0000000000000000 R14: 00007f1bb2fb6160 R15: 00007ffc0629e068 [ 905.276675][T17427] [ 905.279711][T17427] Modules linked in: [ 905.284679][T17427] ---[ end trace 0000000000000000 ]--- [ 905.290263][T17427] RIP: 0010:find_match+0xa3/0xc90 [ 905.296493][T17427] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 4f 02 18 f8 48 89 d8 bb c0 00 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 2e 02 18 f8 48 8b 1b e8 36 13 47 [ 905.316228][T17427] RSP: 0018:ffffc9000cbf7010 EFLAGS: 00010206 [ 905.322341][T17427] RAX: 0000000000000018 RBX: 00000000000000c0 RCX: 0000000000000002 [ 905.330456][T17427] RDX: ffff88802c3a0000 RSI: 0000000000000000 RDI: 0000000000000000 [ 905.338501][T17427] RBP: 1ffff1100fcbe8e4 R08: ffffc9000cbf73a0 R09: ffffc9000cbf73b0 [ 905.346508][T17427] R10: ffffc9000cbf7200 R11: ffffffff8a078900 R12: dffffc0000000000 [ 905.354489][T17427] R13: 0000000000000002 R14: 1ffff1100fcbe8e6 R15: ffff88807e5f4737 [ 905.362533][T17427] FS: 00007f1bb3b1b6c0(0000) GS:ffff888126102000(0000) knlGS:0000000000000000 [ 905.371868][T17427] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.378497][T17427] CR2: 0000001b30d18ff8 CR3: 0000000052806000 CR4: 00000000003526f0 [ 905.386522][T17427] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 905.394501][T17427] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 905.402526][T17427] Kernel panic - not syncing: Fatal exception [ 905.408881][T17427] Kernel Offset: disabled [ 905.413213][T17427] Rebooting in 86400 seconds..