last executing test programs: 24m57.103907068s ago: executing program 1 (id=1503): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 24m56.723792402s ago: executing program 1 (id=1506): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) move_pages(0x0, 0x6, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x4) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x932a, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r6, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c011) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) accept4$nfc_llcp(r2, &(0x7f0000000440), &(0x7f00000004c0)=0x60, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) 24m47.139533707s ago: executing program 1 (id=1528): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24m46.809804245s ago: executing program 1 (id=1530): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000000), 0xf, 0x101800) syz_usb_connect(0x6, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$video(&(0x7f0000000000), 0xf, 0x40000) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205647, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 24m41.611839198s ago: executing program 1 (id=1542): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) 24m35.371722785s ago: executing program 1 (id=1559): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGETD(r0, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, &(0x7f0000010040)) 24m19.976232562s ago: executing program 32 (id=1559): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGETD(r0, 0x5424, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$sock_int(r2, 0x1, 0x25, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, &(0x7f0000010040)) 21m7.747163226s ago: executing program 5 (id=1980): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fef000/0x10000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f00000000c0)="8fb2c230f2fa77846e9ff16f2b6967b0bf0422b3e7b0edaf8c8b8d05f5ecedf40a41e70b57f0ea09f827", 0x2a}, 0x68) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = getpid() socket$packet(0x11, 0x1, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000240), &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d7a36ce462db6495d16c821c4411a9e15dd606b2812942db68742157e", 0x38, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000480)=""/165, 0xa5}], 0x2, &(0x7f0000008640), 0x0, 0x0) mlockall(0x5) 21m5.368076212s ago: executing program 5 (id=1987): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 21m2.732489124s ago: executing program 5 (id=1992): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140)) 21m1.823808235s ago: executing program 5 (id=1994): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xfffe, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x8000000009, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0xc, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0x8, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) 21m0.81653931s ago: executing program 5 (id=2002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 20m59.362023923s ago: executing program 5 (id=2005): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 20m43.795028418s ago: executing program 33 (id=2005): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 16m13.647848161s ago: executing program 3 (id=2601): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x58) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x7ff, 0x229, 0xf5d, 0x401, 0xffffffffffffffff}) 16m11.949540049s ago: executing program 3 (id=2608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00') r7 = fanotify_init(0x0, 0x80000) r8 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r7, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r7, 0x1, 0x40001019, r8, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) getdents(r6, &(0x7f0000001200)=""/198, 0xc6) 16m9.053060388s ago: executing program 3 (id=2611): r0 = socket$pptp(0x18, 0x1, 0x2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) pwrite64(r2, 0x0, 0x0, 0xe7c) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$I2C(0x0, 0x0, 0x402) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0xcb, 0x6, &(0x7f0000000040)={0x19, "a8fd4950f88fdde3d44c1a0e35d7eda408000000639c19fe8c52041832352ed770"}}) stat(0x0, &(0x7f0000001c40)) setregid(0xffffffffffffffff, 0x0) epoll_create(0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e) syz_clone3(&(0x7f0000000500)={0x4000000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)=0x0, {0x2c}, &(0x7f0000000200)=""/69, 0x45, &(0x7f0000000340)=""/247, 0x0, 0x0, {r1}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x4, r4, 0x1, &(0x7f0000000480)) connect$pptp(r0, &(0x7f0000000280)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000001c0)=@get={0x1, 0x0, 0x8}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001400b5952cbd7000ffdbdf250a180000", @ANYRES32=r6, @ANYBLOB="14000200000000000000000000000000000000011400060001000000010000000100000000ffffff14"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_init_net_socket$netrom(0x6, 0x2, 0x0) 16m6.83128156s ago: executing program 3 (id=2618): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x58) futex(&(0x7f000000cffc), 0xd, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x5, 0x7ff, 0x229, 0xf5d, 0x401, 0xffffffffffffffff}) 16m5.396905341s ago: executing program 3 (id=2624): socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, r2, 0x2000, 0x10000000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 16m3.419788137s ago: executing program 3 (id=2629): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_usbip_server_init(0x0) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c00000000000000000000000700000044"], 0x38}, 0x0) unshare(0x2c020400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) close(0xffffffffffffffff) write$uinput_user_dev(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15m48.025915091s ago: executing program 34 (id=2629): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_usbip_server_init(0x0) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000001c00000000000000000000000700000044"], 0x38}, 0x0) unshare(0x2c020400) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) close(0xffffffffffffffff) write$uinput_user_dev(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 9m7.837968525s ago: executing program 0 (id=3582): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804fc"], 0x18}, 0xfc00) 9m7.62357523s ago: executing program 0 (id=3583): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40018) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r6, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) 9m5.260574473s ago: executing program 0 (id=3587): syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xba, &(0x7f0000000200)=@string={0xba, 0x3, "02672c25628639896ff89b2957125cc4084ded35c843d0da967e46a3d5e982ea4d43a877fc15e3546c0769d7c978c9fd99be0f4fdc2d383e113efcbeff86be0d744a8e24f4178d9d7a4b24aff72ed0703461e4a1184e28a77673797657d404b1cdf04655f2008ef7bf1088c1378f32fd3939c4b785c7741d2b31e2350fffaf0f6e702036ba7b6e982eeaa39549dd45e0c4228ce8db13f0156b92bac05175967c9fd8188cfc89f17c48be1db3854c843f22a6e4bd1117ee31"}}, {0x0, 0x0}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x429}}]}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, &(0x7f0000000100)) r0 = gettid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) write$rfkill(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x15) r3 = syz_open_dev$radio(0x0, 0x2, 0x2) clock_gettime(0x0, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x35c, &(0x7f0000000800)={[{0xa9, 0x4e00, "6dff62efa76115ba6b0871944f44f89468c9982a261b1907d4f726b1037fdc4abc7ca149c94e4e4c49ee54d5a9fa5346b855da30fe59a863d54f2de1ee03a600bd79c91f14ea753ef08ccec0e1cb066f6cf18f1322c2d43894c648142722a3cc1194455c969f9bec6d15e404e5679ec314e317421be7549d7dd73935ba5700e7375d05b9e9de563a3579306c3c783e497524a076d010ad256a2c25119090e1d01bb6eaf36c32fdc240"}, {0x15, 0x4e00, "0074569da11013cfdbdf1633afa91fda43ef418676"}, {0x6, 0x4e00, "0f1661169634"}, {}, {0xc6, 0x4e00, "80a193262ef34c8747f6838123d93ac2aec45416af37f177919173db8e23756a333b647dd0b3e34ce7096880cbea95aa1bf3b4d797b50459ad9d7b290f0c1a549ad06f27e8f45dff2846a6d701129c1559585ba0fe9284c3b78db940e1401fabdf143f34f0b464f6282c8727faf757c081c7be352adc342cb737ee3e6af2ac60d598c5a379c119601bcaf81a10dc8062be9c4128ec6e50e5a3a0ea0680068d0d185ae87421c52df728f16081036c5623093b845dd71769da29d318a70eb8423ce33707a78032"}, {0x99, 0x4e00, "08a10d42fde45f481771fc1bfd12dc1d1d93d697e3839827cf05096880c3223956b4cc1ca73ba890728eab9237b7f2b03313ac6581e5c7228b8b0d12f6a5214c337b27bcc940d11e9287100018be066e491b2e18486cee62e5519165abf59387162c7de0f072275bd2d2fe7860e8f6fe333ca7e65704204f011bdbeb349d6eee3703d7b0a23f7856ccd81ae44c886b2d10d56b100427232ca5"}, {0x86, 0x4e00, "f1f5b550f959f64194017db55048bf8f440d5cdc3147d53b4602073d5e3b39f295434d6b6801fa4030fb214736050adc6464f08e89dedc6f37decaccd0f18cf17cfce70b4ceebdb7875db67584cda8a05e3508533f1af2a72f9f8b99321695a66847238afd1eca550521181495e56eb8ade0628e3a9fab7bd9007f429fae89be6cf82c90d81f"}, {0x81, 0x4e00, "ccc7bdbb8ec34798b222b508247acf41e6128d1904fcaf784d0f36b3bd078292a781c50cdd9cec4dad9f0a709a87c3124b8644bb8ab20ec0803e0c088bff6bbc17219156b33f1afef907e9e665b3d7ea62bfacb4db3a12c16147c46e5fcc8c8c055c5798b7ee6de674d8034048c2df06f9f860ff48d79810b32494578eea3ee9d2"}]}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x541b, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f00000005c0)="041121f24aa51a8506974c6065405b12fdc72c37182289126cfc0604e79f4a6948732c8a1df5448829e3c50ce4a4eb94bffed0e654dae5b3f1fda14967f2d5a2a029c72ae890b7461c2e3b221cf0b00fc9609e1c9f213ce86f87217dfac3d3a6e6b360d74229306f3f865d5242e8e6a76efcf87edc404ff712da90f3f4e76f91402edc02a9e493c7e40f040884b86fbd4b5a53efb8acf4a284f455d21a9b5f0d8b0166753d27df7f7e60ac7671d0fe09913e2cd34df521a9ff85e5d0ee22459bf8d771f1a426e56724d80e2ac11365b4f3e2fbb368d7829c6dd83a", 0xdb) 9m3.802479474s ago: executing program 0 (id=3593): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x5, 0x80) ioctl$EVIOCGREP(r0, 0x80084524, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="606af8ffff97d17c3a", 0x9}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x240883, 0x0) poll(&(0x7f0000000240)=[{r0, 0x340}, {r3, 0x2020}, {r1, 0xd1b9}, {r4, 0x5180}, {r1, 0x14}, {r1, 0x1222}, {r4}], 0x7, 0xffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r2, &(0x7f00000000c0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x2f00}}], 0x1, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x2, 0x220002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1}, 0x6e) io_uring_enter(r1, 0x2d72, 0x710b, 0x0, &(0x7f0000000100)={[0xff]}, 0x8) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@abs={0x1, 0x0, 0xffffffff}, 0x6e) socket$rxrpc(0x21, 0x2, 0x2) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c41, 0x0) write$snapshot(r9, 0x0, 0x1f) 9m1.603489426s ago: executing program 0 (id=3597): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 9m0.692608245s ago: executing program 0 (id=3600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) move_pages(0x0, 0x6, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x60040050) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x932a, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c011) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) accept4$nfc_llcp(r3, 0x0, &(0x7f00000004c0), 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) 8m45.479120948s ago: executing program 35 (id=3600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) move_pages(0x0, 0x6, &(0x7f0000000280)=[&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil], 0x0, 0x0, 0x4) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@bridge_dellink={0x24, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x60040050) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x932a, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2400c011) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffa8a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe2$9p(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x220, 0x100, 0x0) accept4$nfc_llcp(r3, 0x0, &(0x7f00000004c0), 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) 23.36273781s ago: executing program 6 (id=5114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) 22.288955739s ago: executing program 6 (id=5119): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 21.93940018s ago: executing program 6 (id=5124): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005fc0)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0001000000008000280002000aae6d125207fdda5e09", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES32=r0], 0x50}}, 0x4008040) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) 9.335650377s ago: executing program 8 (id=5165): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00'}, 0x10) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = userfaultfd(0x801) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) 9.288869393s ago: executing program 2 (id=5167): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@bcast, @bcast, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 8.092970337s ago: executing program 2 (id=5170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) 7.953810992s ago: executing program 6 (id=5171): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x5, &(0x7f0000000180)={0x0, 0x40011, 0x5, @tid=r1}, &(0x7f0000000000)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r2}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 6.087638743s ago: executing program 2 (id=5174): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 5.851869174s ago: executing program 2 (id=5175): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0x1, 0x5, 0x0, 0x3, 0x3, 0xb, 0xd, 0xf8, 0x15, 0x7, 0x3, 0x0, 0x9d, 0x4, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.809434631s ago: executing program 4 (id=5176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x11, 0xa, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000080), 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) 5.79584783s ago: executing program 6 (id=5177): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) 5.716398622s ago: executing program 8 (id=5178): socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 5.259712538s ago: executing program 4 (id=5179): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) 4.278973731s ago: executing program 4 (id=5180): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(0xffffffffffffffff, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) 4.24053621s ago: executing program 2 (id=5181): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(0x0, 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r3, 0x1000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) 4.198611598s ago: executing program 7 (id=5182): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="3a796231ed8abda10c7191a1f66986128df41b9293e9765dbdbfa2df806bb44363fff46e92025f44fc8f885a8fd99c286fe8707259622da36498ba2610b826f839d5168245521c56691bdc5e89329dfe1e96b41375c9aa38cea776b840646f9fbac7354ce51e69d7f90015dfdb822358b04c3ed1a230fed3e1894a2c5de147b8e4c1392e5689294210b88b5c938e4bd19f5b4cb8ea7063243e2de968ba9a12a93f5db36731093ee53f7dbf6483fddef26540256a0f782de68de2c1144325e866417ef8f8aa59922723c07e051081b324d8702bcb9451c60bd2bf2b03b4f1be5a12314b37b01fa7c77f422a5fdb785bd923ff61c469533097ba2724ffb4b986ed") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 3.903787658s ago: executing program 7 (id=5183): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_io_uring_setup(0x2be, &(0x7f0000000240)={0x0, 0x4331, 0x1, 0x2, 0x113}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) 3.169268733s ago: executing program 2 (id=5184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r2}, 0x8) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r7 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000000800)={'bridge0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x4, 0x101, 0xc3a5, 0x9, 0x1ff, 0x4, 0x2, 0xfffffff6, 0x7fb, 0x1, 0xc99d, 0x2, 0x9, 0x8d, 0x7ff, 0x2, 0xa98, 0x8, 0x6, 0x10000040, 0x3, 0xfd}}) 3.149308319s ago: executing program 8 (id=5185): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.139374604s ago: executing program 4 (id=5186): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES64=r1, @ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x28100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000100)=0xfffffffd, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) 2.867901706s ago: executing program 7 (id=5187): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) gettid() read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.738934499s ago: executing program 8 (id=5188): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005fc0)={0x2020}, 0x2020) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0001000000008000280002000aae6d125207fdda5e09", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES32=r0], 0x50}}, 0x4008040) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) 1.966209888s ago: executing program 4 (id=5189): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r3 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c) 1.869960872s ago: executing program 7 (id=5190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket(0x2b, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0x2, r4, &(0x7f00000003c0)=""/4096, 0x1000) 1.869648208s ago: executing program 6 (id=5191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000001200000418110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socketpair(0x25, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast1, 0xf}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='dvmrp1\x00', 0x10) read$FUSE(r3, &(0x7f0000002100)={0x2020}, 0x2020) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x109842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xa0c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@index_off}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) 1.869074342s ago: executing program 8 (id=5192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0x1, 0x5, 0x0, 0x3, 0x3, 0xb, 0xd, 0xf8, 0x15, 0x7, 0x3, 0x0, 0x9d, 0x4, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 208.047481ms ago: executing program 7 (id=5193): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="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") ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 207.680007ms ago: executing program 8 (id=5194): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(0x0, 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$setlease(r2, 0x400, 0x0) mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r3, 0x1000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x40) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x33, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5d}}, 0x44) r5 = syz_open_dev$vim2m(&(0x7f0000000240), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) 171.645363ms ago: executing program 7 (id=5195): socket$nl_route(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10500, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) 0s ago: executing program 4 (id=5196): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @null}, 0x1c) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) kernel console output (not intermixed with test programs): ig 220 interface 1 has no altsetting 0 [ 1558.670179][T13257] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1558.679554][T13257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.687664][T13257] usb 3-1: Product: syz [ 1558.692033][T13257] usb 3-1: Manufacturer: syz [ 1558.696660][T13257] usb 3-1: SerialNumber: syz [ 1559.681777][T13257] usb 3-1: can't set config #220, error -71 [ 1559.689843][T13257] usb 3-1: USB disconnect, device number 48 [ 1560.037215][T19739] netlink: 'syz.2.3546': attribute type 39 has an invalid length. [ 1560.973258][T19758] siw: device registration error -23 [ 1562.667889][T19775] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3557'. [ 1562.691519][T19775] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3557'. [ 1563.068171][ T5903] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1563.280586][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 1563.309396][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1564.358791][ T5903] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1564.437058][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.522894][ T5903] usb 5-1: Product: syz [ 1564.547674][ T5903] usb 5-1: Manufacturer: syz [ 1564.576196][ T5903] usb 5-1: SerialNumber: syz [ 1564.764460][ T5903] usb 5-1: config 0 descriptor?? [ 1564.772208][ T5903] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1564.801757][ T5903] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1564.997675][T19796] siw: device registration error -23 [ 1565.968921][ T5903] em28xx 5-1:0.0: chip ID is em2882/3 [ 1566.568279][ T5903] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1566.596726][ T5903] em28xx 5-1:0.0: board has no eeprom [ 1567.763458][T19811] 9pnet_fd: Insufficient options for proto=fd [ 1567.775259][T19811] siw: device registration error -23 [ 1568.099623][ T5903] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1568.116330][ T5903] em28xx 5-1:0.0: dvb set to bulk mode. [ 1568.132561][T13257] em28xx 5-1:0.0: Binding DVB extension [ 1568.160030][ T5903] usb 5-1: USB disconnect, device number 39 [ 1568.196553][ T5903] em28xx 5-1:0.0: Disconnecting em28xx [ 1568.809121][T13257] em28xx 5-1:0.0: Registering input extension [ 1568.998210][T13257] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 1569.004808][T13257] Registered IR keymap rc-empty [ 1569.031696][T13257] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1569.079835][T13257] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52 [ 1569.994460][T13257] em28xx 5-1:0.0: Input extension successfully initialized [ 1570.001933][ T5903] em28xx 5-1:0.0: Closing input extension [ 1571.124103][ T5903] em28xx 5-1:0.0: Freeing device [ 1571.468173][ T977] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1571.551279][T19862] siw: device registration error -23 [ 1571.562214][ T5903] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 1571.688173][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 1571.703087][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1571.730470][ T5903] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1571.751995][ T977] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1571.761625][ T5903] usb 5-1: config 0 has no interface number 0 [ 1571.773024][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.787027][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1571.798366][ T977] usb 3-1: Product: syz [ 1571.802746][ T977] usb 3-1: Manufacturer: syz [ 1571.807576][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1571.820751][ T977] usb 3-1: SerialNumber: syz [ 1571.829737][ T977] usb 3-1: config 0 descriptor?? [ 1571.836117][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1571.920241][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1571.935197][ T977] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1571.944833][ T977] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1571.951059][ T5903] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1571.962232][ T5903] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1571.975559][ T5903] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1572.353930][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.390606][ T5903] usb 5-1: config 0 descriptor?? [ 1572.407186][T19845] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1572.415557][T19845] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1572.443980][ T5903] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1572.731159][ T3084] usb 5-1: USB disconnect, device number 40 [ 1573.117905][ T977] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1573.711536][ T977] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1574.176536][ T3084] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1574.519644][ T977] em28xx 3-1:0.0: board has no eeprom [ 1574.618248][ T977] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1574.631045][ T977] em28xx 3-1:0.0: dvb set to bulk mode. [ 1574.653038][ T5903] em28xx 3-1:0.0: Binding DVB extension [ 1574.675547][ T977] usb 3-1: USB disconnect, device number 49 [ 1574.705369][ T977] em28xx 3-1:0.0: Disconnecting em28xx [ 1574.751568][ T5903] em28xx 3-1:0.0: Registering input extension [ 1574.808490][ T977] em28xx 3-1:0.0: Closing input extension [ 1574.865472][ T977] em28xx 3-1:0.0: Freeing device [ 1575.002264][T19882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1575.042709][T19882] openvswitch: netlink: Flow actions attr not present in new flow. [ 1577.128416][T19904] binder: 19889:19904 ioctl c0306201 2000000003c0 returned -14 [ 1577.777261][T19906] random: crng reseeded on system resumption [ 1577.928384][ T5970] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1578.618169][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 1578.729291][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1578.773182][ T5970] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1578.803358][T19916] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1578.890138][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.995015][ T5970] usb 5-1: Product: syz [ 1579.053087][ T5970] usb 5-1: Manufacturer: syz [ 1579.115885][ T5970] usb 5-1: SerialNumber: syz [ 1579.250970][ T5970] usb 5-1: config 0 descriptor?? [ 1579.403492][ T5970] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1579.468470][ T5970] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1581.349202][ T5970] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1583.612572][ T5970] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1583.668290][ T5970] em28xx 5-1:0.0: board has no eeprom [ 1583.778877][ T5970] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1583.844471][ T5970] em28xx 5-1:0.0: dvb set to bulk mode. [ 1583.892758][T13812] em28xx 5-1:0.0: Binding DVB extension [ 1584.132104][ T5970] usb 5-1: USB disconnect, device number 41 [ 1584.183279][ T5970] em28xx 5-1:0.0: Disconnecting em28xx [ 1584.444961][T13812] em28xx 5-1:0.0: Registering input extension [ 1584.611937][ T5970] em28xx 5-1:0.0: Closing input extension [ 1585.482662][ T5970] em28xx 5-1:0.0: Freeing device [ 1585.592774][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 1589.828306][ T5903] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1590.671366][T19989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3613'. [ 1590.682427][T19989] netlink: 'syz.7.3613': attribute type 5 has an invalid length. [ 1590.810530][T19989] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3613'. [ 1591.207775][T19989] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1591.970088][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 1593.884385][ T5903] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1594.159175][ T5903] usb 7-1: can't read configurations, error -71 [ 1594.201969][T19989] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1594.210996][T19989] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1594.232891][T19989] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1594.244074][T19989] geneve2: entered promiscuous mode [ 1594.250115][T19989] geneve2: entered allmulticast mode [ 1595.275500][T20018] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3624'. [ 1595.348328][T20018] openvswitch: netlink: Flow actions attr not present in new flow. [ 1596.855210][T20033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1596.866054][T20033] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1596.875274][T20033] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1596.887618][T20033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1596.896740][T20033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1596.916424][T16117] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1597.004067][T16117] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1597.012064][T16117] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1597.022499][T16117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1597.152497][T16117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1597.435422][T13842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.880239][T13842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.951157][T20029] lo speed is unknown, defaulting to 1000 [ 1597.968208][T13812] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 1597.969159][T20029] dummy0 speed is unknown, defaulting to 1000 [ 1598.256100][T13812] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.256168][T13842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.066627][T13812] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1599.086309][T13812] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1599.117690][T13812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1599.174166][T13812] usb 8-1: SerialNumber: syz [ 1599.179063][T16117] Bluetooth: hci4: command tx timeout [ 1599.230488][T13812] usb 8-1: bad CDC descriptors [ 1599.312575][T13812] usb-storage 8-1:1.0: USB Mass Storage device detected [ 1599.380040][T13812] usb-storage 8-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1599.421011][T13842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.709751][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3638'. [ 1600.719081][T20076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3638'. [ 1601.260289][T16117] Bluetooth: hci4: command tx timeout [ 1602.093037][ T45] usb 8-1: USB disconnect, device number 24 [ 1602.392120][T20089] syzkaller1: entered promiscuous mode [ 1602.440802][T20089] syzkaller1: entered allmulticast mode [ 1602.576225][T13842] bridge_slave_1: left allmulticast mode [ 1602.603194][T13842] bridge_slave_1: left promiscuous mode [ 1603.338204][T16117] Bluetooth: hci4: command tx timeout [ 1603.418805][T13842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.509477][T13842] bridge_slave_0: left allmulticast mode [ 1603.515215][T13842] bridge_slave_0: left promiscuous mode [ 1603.548630][T13842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.204598][T20124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3652'. [ 1605.428333][T16117] Bluetooth: hci4: command tx timeout [ 1605.891188][T13842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.922096][T13842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.938257][T13842] bond0 (unregistering): Released all slaves [ 1606.055113][T20029] chnl_net:caif_netlink_parms(): no params data found [ 1607.672009][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.680617][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.373479][T20029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.381290][T20029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.401509][T20029] bridge_slave_0: entered allmulticast mode [ 1609.415477][T20029] bridge_slave_0: entered promiscuous mode [ 1609.474553][T20160] openvswitch: netlink: Flow actions attr not present in new flow. [ 1609.520627][T13842] hsr_slave_0: left promiscuous mode [ 1609.538324][T13842] hsr_slave_1: left promiscuous mode [ 1609.552616][T13842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1609.595623][T13842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.629188][T13842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1609.651789][T13842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1609.667466][T13842] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1609.683472][T13842] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1609.947331][T13842] veth1_macvtap: left promiscuous mode [ 1609.955784][T13842] veth0_macvtap: left promiscuous mode [ 1609.962844][T13842] veth1_vlan: left promiscuous mode [ 1610.744470][T20171] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1610.934796][T13842] veth0_vlan: left promiscuous mode [ 1611.104861][ T30] audit: type=1326 audit(1750643970.915:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20166 comm="syz.6.3668" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3d58e929 code=0x7fc00000 [ 1611.223254][ T5970] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1611.523263][ T5970] usb 8-1: Using ep0 maxpacket: 32 [ 1611.633878][ T5970] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1611.972106][ T5970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1612.002369][ T5970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1612.062864][ T5970] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1612.171492][ T5970] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1612.207484][ T5970] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.224148][ T5970] usb 8-1: Product: syz [ 1612.237000][ T5970] usb 8-1: Manufacturer: syz [ 1612.256998][ T5970] usb 8-1: SerialNumber: syz [ 1612.306708][ T5970] usb 8-1: config 0 descriptor?? [ 1612.362854][T20196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1613.323011][T20206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1613.329786][T20206] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1614.238458][ T5970] usb 8-1: USB disconnect, device number 25 [ 1614.333548][T13842] team0 (unregistering): Port device team_slave_1 removed [ 1615.373251][T13842] team0 (unregistering): Port device team_slave_0 removed [ 1616.498695][ T977] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1617.035600][T20238] netlink: 'syz.6.3689': attribute type 1 has an invalid length. [ 1617.149916][ T977] usb 3-1: device descriptor read/64, error -71 [ 1617.538409][ T977] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1617.768288][ T977] usb 3-1: device descriptor read/64, error -71 [ 1617.908756][ T977] usb usb3-port1: attempt power cycle [ 1618.330954][ T977] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1618.979806][ T977] usb 3-1: device descriptor read/8, error -71 [ 1620.021538][T13257] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 1620.052901][T13257] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1620.227955][T20029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.250663][T20029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.281896][T20029] bridge_slave_1: entered allmulticast mode [ 1620.310866][T20029] bridge_slave_1: entered promiscuous mode [ 1620.508417][T20252] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3693'. [ 1620.517952][T20253] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3693'. [ 1620.707614][T20029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1620.727557][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1620.729187][T20029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1621.576601][T20029] team0: Port device team_slave_0 added [ 1621.627839][T20029] team0: Port device team_slave_1 added [ 1621.810830][T20029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1621.817943][T20029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1621.848422][T13812] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1622.048200][T13812] usb 5-1: Using ep0 maxpacket: 32 [ 1622.486022][T20029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1622.508424][T20029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1622.518714][T20029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1622.579393][T13812] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1622.591597][T13812] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1622.598280][T20029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1622.613981][T13812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.636898][T13812] usb 5-1: Product: syz [ 1622.642804][T13812] usb 5-1: Manufacturer: syz [ 1622.779710][T13812] usb 5-1: SerialNumber: syz [ 1622.788613][T13812] usb 5-1: config 0 descriptor?? [ 1623.029913][T20029] hsr_slave_0: entered promiscuous mode [ 1623.037315][T20029] hsr_slave_1: entered promiscuous mode [ 1623.225659][T13812] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1624.009162][T13812] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1624.126342][T20286] lo speed is unknown, defaulting to 1000 [ 1624.133359][T20286] dummy0 speed is unknown, defaulting to 1000 [ 1624.180599][T13812] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 1625.065728][T13257] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1625.202249][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3704'. [ 1625.214536][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3704'. [ 1625.845280][T20029] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1625.861780][T13257] usb 3-1: device descriptor read/64, error -71 [ 1625.876041][T20029] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1625.879519][ T977] usb 5-1: USB disconnect, device number 42 [ 1625.933119][T20029] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1625.957762][T20029] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1626.208290][T13812] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1626.245498][T13257] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1626.630005][T13812] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1626.654744][T13812] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1626.702407][T13812] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1626.725605][T13812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.753454][T20302] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1626.761298][T13257] usb 3-1: device descriptor read/64, error -71 [ 1626.777129][T13812] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1626.810216][T20029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.869089][T13257] usb usb3-port1: attempt power cycle [ 1626.895791][T20029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1626.941893][T14363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.949123][T14363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1627.133623][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.140893][ T6403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1627.969532][T13257] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1628.089346][T20324] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 1628.129181][ T977] usb 8-1: USB disconnect, device number 26 [ 1628.218567][T13257] usb 3-1: device not accepting address 56, error -71 [ 1628.344212][T20332] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1628.344212][T20332] program syz.6.3714 not setting count and/or reply_len properly [ 1629.504787][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1629.516321][T20340] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1630.336552][T20029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1630.608949][ T977] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1630.768762][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 1630.829019][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1630.849323][ T977] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1630.884619][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.926962][ T977] usb 3-1: Product: syz [ 1630.936620][ T977] usb 3-1: Manufacturer: syz [ 1630.954447][ T977] usb 3-1: SerialNumber: syz [ 1630.971755][ T977] usb 3-1: config 0 descriptor?? [ 1631.405666][ T977] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1632.438842][ T977] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1632.642816][ T977] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1632.736653][T20029] veth0_vlan: entered promiscuous mode [ 1632.904892][T20029] veth1_vlan: entered promiscuous mode [ 1633.005106][T20029] veth0_macvtap: entered promiscuous mode [ 1633.017340][T20029] veth1_macvtap: entered promiscuous mode [ 1633.053426][T20029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.094758][T20029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1633.121710][T20029] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.151973][T20029] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.289723][T20029] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1633.305220][T20029] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.066255][T20393] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3728'. [ 1634.076822][T20394] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3728'. [ 1634.124604][ T977] usb 3-1: USB disconnect, device number 58 [ 1635.455586][T20408] netlink: 'syz.2.3731': attribute type 4 has an invalid length. [ 1635.711177][T20412] netlink: 'syz.2.3731': attribute type 4 has an invalid length. [ 1636.186735][T18514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.196760][T18514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1636.297956][T20399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1636.400388][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1636.420174][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1639.172495][T20447] loop6: detected capacity change from 0 to 524287999 [ 1639.359539][T20449] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1640.271020][T20447] Dev loop6: unable to read RDB block 8 [ 1640.276877][T20447] loop6: unable to read partition table [ 1640.282856][T20447] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1640.466539][T20460] 9pnet_fd: Insufficient options for proto=fd [ 1646.796230][T20507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3757'. [ 1646.821234][T20509] netlink: 'syz.7.3758': attribute type 39 has an invalid length. [ 1646.968975][ T45] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1647.148112][ T45] usb 9-1: Using ep0 maxpacket: 16 [ 1647.171395][ T45] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1647.199014][ T45] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1647.250967][ T45] usb 9-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1647.260721][ T24] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1647.335430][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.520044][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1647.654762][ T45] usb 9-1: config 0 descriptor?? [ 1647.691545][ T24] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1647.855768][ T24] usb 8-1: config 0 has no interface number 0 [ 1647.892706][ T24] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1647.945232][ T24] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1647.995561][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.028775][ T24] usb 8-1: Product: syz [ 1648.048088][ T24] usb 8-1: Manufacturer: syz [ 1648.052779][ T24] usb 8-1: SerialNumber: syz [ 1648.093381][ T24] usb 8-1: config 0 descriptor?? [ 1648.113695][ T24] smsc75xx v1.0.0 [ 1649.198227][ T45] usbhid 9-1:0.0: can't add hid device: -71 [ 1649.204366][ T45] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1649.282381][ T45] usb 9-1: USB disconnect, device number 2 [ 1649.846272][ T3084] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1650.079387][ T24] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1650.822249][ T24] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1650.881943][ T24] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1650.882502][ T3084] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1650.903185][ T24] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1650.919888][ T24] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1650.929621][ T3084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.937655][ T3084] usb 3-1: Product: syz [ 1650.950293][ T24] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1650.967859][ T3084] usb 3-1: Manufacturer: syz [ 1650.975871][ T3084] usb 3-1: SerialNumber: syz [ 1650.983263][ T24] usb 8-1: USB disconnect, device number 27 [ 1651.007541][ T3084] usb 3-1: config 0 descriptor?? [ 1651.910019][ T3084] usb 3-1: Firmware: major: 48, minor: 120, hardware type: UNKNOWN (48) [ 1652.058155][ T30] audit: type=1804 audit(1750644011.985:2902): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.3770" name="/newroot/5/file1" dev="fuse" ino=1 res=1 errno=0 [ 1652.125622][ T30] audit: type=1800 audit(1750644011.985:2903): pid=20556 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1652.133527][ T3084] usb 3-1: failed to fetch extended address, random address set [ 1652.179416][ T30] audit: type=1800 audit(1750644011.995:2904): pid=20555 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.3770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1652.224618][ T3084] usb 3-1: atusb_probe: initialization failed, error = -524 [ 1652.258408][ T3084] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 1652.296873][ T3084] usb 3-1: USB disconnect, device number 59 [ 1652.363343][T13812] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1652.396874][T13812] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1654.040806][T20573] fuse: Bad value for 'fd' [ 1656.478594][ T3084] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1657.028123][ T3084] usb 7-1: Using ep0 maxpacket: 32 [ 1657.733582][ T3084] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1657.747668][ T3084] usb 7-1: config 0 has no interface number 0 [ 1657.790514][ T3084] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1657.961420][ T3084] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1657.990983][ T3084] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1658.055804][T20594] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1658.139812][ T3084] usb 7-1: Product: syz [ 1658.679501][ T3084] usb 7-1: Manufacturer: syz [ 1658.684163][ T3084] usb 7-1: SerialNumber: syz [ 1658.729317][ T3084] usb 7-1: config 0 descriptor?? [ 1658.751890][ T3084] smsc75xx v1.0.0 [ 1658.907959][ T3084] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1658.935295][ T3084] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1658.979645][ T3084] usb 7-1: USB disconnect, device number 41 [ 1659.079586][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1659.712230][T20611] xt_TCPMSS: Only works on TCP SYN packets [ 1659.965543][ T3084] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 1660.048704][ T3084] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1664.053611][T20655] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1666.084067][T20664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3801'. [ 1669.064377][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.071856][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.691032][T20689] lo speed is unknown, defaulting to 1000 [ 1669.698993][T20689] dummy0 speed is unknown, defaulting to 1000 [ 1670.804460][T20702] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3809'. [ 1671.340497][T20706] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1671.508237][ T45] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1671.940033][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 1671.954981][ T45] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1672.039462][ T45] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1672.161582][ T45] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1672.251749][ T45] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1672.800636][ T45] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1672.815107][ T45] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1672.825264][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.089688][ T45] usb 9-1: GET_CAPABILITIES returned 0 [ 1673.113273][ T45] usbtmc 9-1:16.0: can't read capabilities [ 1673.482029][ T45] usb 9-1: USB disconnect, device number 3 [ 1675.827935][T20756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1677.408144][ T977] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1678.259704][ T977] usb 7-1: config 0 has no interfaces? [ 1678.271098][ T977] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1678.292846][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.315842][ T977] usb 7-1: Product: syz [ 1678.400387][ T977] usb 7-1: Manufacturer: syz [ 1678.442731][ T977] usb 7-1: SerialNumber: syz [ 1678.509451][ T977] usb 7-1: config 0 descriptor?? [ 1678.812902][T20766] pimreg: entered allmulticast mode [ 1678.823701][T20766] pimreg: left allmulticast mode [ 1679.741621][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3829'. [ 1681.618384][ T977] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1681.725693][T12626] usb 7-1: USB disconnect, device number 42 [ 1681.770488][ T977] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1681.795937][ T977] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1681.833530][ T977] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1681.853238][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.868646][T20800] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3837'. [ 1681.908646][T20784] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1681.925949][ T977] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1682.475780][T20810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3841'. [ 1683.485387][T20819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3843'. [ 1684.165704][T20823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3845'. [ 1684.511229][ T3084] usb 8-1: USB disconnect, device number 28 [ 1684.924752][T20838] 9pnet_fd: Insufficient options for proto=fd [ 1684.937435][T20838] siw: device registration error -23 [ 1686.203572][T20847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3852'. [ 1686.408163][ T5983] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1687.098708][ T5983] usb 9-1: config 0 has no interfaces? [ 1687.141834][ T5983] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1687.154024][ T5983] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.378319][ T5983] usb 9-1: Product: syz [ 1687.388560][ T5983] usb 9-1: Manufacturer: syz [ 1687.416297][ T5983] usb 9-1: SerialNumber: syz [ 1687.462099][T20859] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3855'. [ 1688.166192][ T5983] usb 9-1: config 0 descriptor?? [ 1689.608708][T20865] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3857'. [ 1690.633550][T20878] 9pnet_fd: Insufficient options for proto=fd [ 1690.643550][T20878] siw: device registration error -23 [ 1692.651624][T20897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3869'. [ 1693.371805][ T5983] usb 9-1: can't set config #0, error -110 [ 1693.527825][T12626] usb 9-1: USB disconnect, device number 4 [ 1694.385930][T20911] netlink: 'syz.8.3872': attribute type 4 has an invalid length. [ 1694.395743][ T5983] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1694.485428][T20912] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 1694.491996][T20912] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1694.568232][T20912] vhci_hcd vhci_hcd.0: Device attached [ 1694.625755][ T5983] usb 5-1: Using ep0 maxpacket: 16 [ 1694.641526][ T5983] usb 5-1: config 0 has no interfaces? [ 1694.650965][ T5983] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1694.686953][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.716675][ T5983] usb 5-1: Product: syz [ 1694.743483][ T5983] usb 5-1: Manufacturer: syz [ 1694.748530][ T5983] usb 5-1: SerialNumber: syz [ 1694.798545][ T5983] usb 5-1: config 0 descriptor?? [ 1694.838171][ T977] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1694.845863][T12626] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1695.058208][ T977] usb 8-1: Using ep0 maxpacket: 16 [ 1695.074640][ T977] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1695.170205][T20924] 9pnet_fd: Insufficient options for proto=fd [ 1695.471050][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.876199][ T977] usb 8-1: Product: syz [ 1695.895709][ T977] usb 8-1: Manufacturer: syz [ 1695.911811][ T977] usb 8-1: SerialNumber: syz [ 1695.938227][ T977] usb 8-1: config 0 descriptor?? [ 1695.966294][ T977] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 1696.184789][ T977] usb 8-1: Detected FT232H [ 1696.206332][T20913] vhci_hcd: connection closed [ 1696.211969][ T977] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1696.338160][T12626] usb 47-1: device descriptor read/64, error -71 [ 1696.358119][T13842] vhci_hcd: stop threads [ 1696.368424][T13842] vhci_hcd: release socket [ 1696.374287][ T977] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1696.568579][T13842] vhci_hcd: disconnect device [ 1697.081538][ T977] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 1697.090086][ T977] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1697.103692][ T977] usb 8-1: USB disconnect, device number 29 [ 1697.115858][ T977] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1697.149617][T12626] vhci_hcd: vhci_device speed not set [ 1697.182923][ T977] ftdi_sio 8-1:0.0: device disconnected [ 1697.234253][ T5983] usb 5-1: USB disconnect, device number 43 [ 1698.583128][T20951] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3880'. [ 1700.078148][T13812] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1700.260594][T13812] usb 8-1: config 0 has no interfaces? [ 1700.274333][T13812] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1700.296322][T13812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.363704][T13812] usb 8-1: Product: syz [ 1700.387614][T13812] usb 8-1: Manufacturer: syz [ 1700.398437][ T5983] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1700.409665][T13812] usb 8-1: SerialNumber: syz [ 1700.455377][T13812] usb 8-1: config 0 descriptor?? [ 1700.551990][ T5983] usb 3-1: Using ep0 maxpacket: 16 [ 1700.584510][ T5983] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.624685][ T5983] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 1700.753757][ T5983] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1700.799075][T20967] pimreg: entered allmulticast mode [ 1700.822164][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.831395][T20967] pimreg: left allmulticast mode [ 1702.521629][T21000] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3893'. [ 1703.228666][T12626] usb 3-1: USB disconnect, device number 60 [ 1704.350180][ T3084] usb 8-1: USB disconnect, device number 30 [ 1705.277968][T21036] netlink: 'syz.6.3905': attribute type 4 has an invalid length. [ 1705.357686][ T5983] lo speed is unknown, defaulting to 1000 [ 1705.542844][ T5983] syz0: Port: 1 Link DOWN [ 1705.559512][T21036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1707.627889][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3904'. [ 1707.838996][T21059] 9pnet_fd: Insufficient options for proto=fd [ 1707.988240][T13812] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1709.432285][T13812] usb 3-1: config 0 has no interfaces? [ 1709.677317][T21076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3918'. [ 1709.688599][T21076] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3918'. [ 1710.603010][ T30] audit: type=1326 audit(1750644070.525:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 1710.703412][ T30] audit: type=1326 audit(1750644070.535:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 1710.819665][ T30] audit: type=1326 audit(1750644070.535:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 1710.898174][ T30] audit: type=1326 audit(1750644070.535:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 1711.092857][ T30] audit: type=1326 audit(1750644070.535:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 1711.115666][ T30] audit: type=1326 audit(1750644070.535:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 1711.181658][ T30] audit: type=1326 audit(1750644070.535:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fe392ab19 code=0x7ffc0000 [ 1711.808355][ T30] audit: type=1326 audit(1750644070.535:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fe392ab19 code=0x7ffc0000 [ 1711.850908][ T30] audit: type=1326 audit(1750644070.535:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fe392ab19 code=0x7ffc0000 [ 1711.969250][ T30] audit: type=1326 audit(1750644070.535:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21079 comm="syz.8.3920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5fe392ab19 code=0x7ffc0000 [ 1712.002319][T13812] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1712.048062][T13812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.178066][T13812] usb 3-1: Product: syz [ 1712.182308][T13812] usb 3-1: Manufacturer: syz [ 1712.486198][T13812] usb 3-1: config 0 descriptor?? [ 1712.662932][T13812] usb 3-1: can't set config #0, error -71 [ 1713.064328][T13812] usb 3-1: USB disconnect, device number 61 [ 1713.570522][T21100] 9pnet_fd: Insufficient options for proto=fd [ 1714.030272][T21114] tipc: Started in network mode [ 1714.035305][T21114] tipc: Node identity 4, cluster identity 4711 [ 1714.041705][T21114] tipc: Node number set to 4 [ 1714.818528][T13812] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1715.013736][T21126] xt_TCPMSS: Only works on TCP SYN packets [ 1715.259153][T13812] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.507027][T13812] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1715.674620][T13812] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1715.778075][T13812] usb 8-1: Product: syz [ 1715.788144][T13812] usb 8-1: Manufacturer: syz [ 1715.796074][T13812] usb 8-1: SerialNumber: syz [ 1715.814183][T13812] usb 8-1: config 0 descriptor?? [ 1715.844085][T13812] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1716.189569][T21106] netlink: 'syz.7.3927': attribute type 1 has an invalid length. [ 1716.204635][T12626] usb 8-1: USB disconnect, device number 31 [ 1716.253575][T21127] tmpfs: Unknown parameter 'quot”–l [ 1716.253575][T21127] Ra³ÆÈ9“´g­»tpHû}b¹.ç:4úÎY¦¶™ [ 1716.253575][T21127] o–{Íeú¢«é¨£9}Ùܼâ&þ­ôl:•' [ 1717.154954][T21137] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1718.034720][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3940'. [ 1718.046388][T21152] 9pnet_fd: Insufficient options for proto=fd [ 1719.681595][T21176] netlink: 'syz.2.3947': attribute type 39 has an invalid length. [ 1720.730508][T21185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1720.742064][T21185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3949'. [ 1721.679345][T21198] 9pnet_fd: Insufficient options for proto=fd [ 1723.218237][T11535] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1723.556738][T21213] xt_hashlimit: size too large, truncated to 1048576 [ 1723.662619][T11535] usb 5-1: device descriptor read/64, error -71 [ 1723.855053][T21211] netlink: 'syz.2.3958': attribute type 33 has an invalid length. [ 1723.863087][T21211] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3958'. [ 1723.895486][T21218] netlink: 'syz.6.3959': attribute type 39 has an invalid length. [ 1723.971834][T11535] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1724.178145][T11535] usb 5-1: device descriptor read/64, error -71 [ 1724.346659][T11535] usb usb5-port1: attempt power cycle [ 1725.952501][T21250] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3965'. [ 1726.246905][T21255] 9pnet_fd: Insufficient options for proto=fd [ 1726.257115][T21255] siw: device registration error -23 [ 1727.986117][T21274] xt_hashlimit: size too large, truncated to 1048576 [ 1728.258056][T11535] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1728.736155][T21271] netlink: 'syz.4.3973': attribute type 33 has an invalid length. [ 1728.744131][T21271] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3973'. [ 1728.838214][T11535] usb 7-1: device descriptor read/64, error -71 [ 1729.037713][T21281] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 1729.091521][T21281] netlink: 'syz.2.3977': attribute type 4 has an invalid length. [ 1729.155848][T21281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1729.388354][T11535] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1729.744774][T11535] usb 7-1: device descriptor read/64, error -71 [ 1730.493184][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.499955][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.506610][T11535] usb usb7-port1: attempt power cycle [ 1730.935301][T21294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3980'. [ 1732.346516][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 1734.140469][ T5983] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1734.211021][T21322] xt_hashlimit: size too large, truncated to 1048576 [ 1734.588152][ T5983] usb 9-1: device descriptor read/64, error -71 [ 1734.828944][ T5983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1735.003792][ T5983] usb 9-1: device descriptor read/64, error -71 [ 1735.248977][ T5983] usb usb9-port1: attempt power cycle [ 1735.381112][T21347] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3997'. [ 1735.598097][ T5983] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1735.628930][ T5983] usb 9-1: device descriptor read/8, error -71 [ 1735.878237][ T5983] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1736.105098][ T5983] usb 9-1: device descriptor read/8, error -71 [ 1736.175136][T21359] 9pnet_fd: Insufficient options for proto=fd [ 1736.234017][ T5983] usb usb9-port1: unable to enumerate USB device [ 1737.770099][T21374] xt_hashlimit: size too large, truncated to 1048576 [ 1737.879438][T21373] netlink: 'syz.4.4007': attribute type 33 has an invalid length. [ 1737.887558][T21373] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4007'. [ 1739.536608][T21396] 9pnet_fd: Insufficient options for proto=fd [ 1739.688577][T21398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4013'. [ 1741.060219][T12626] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1742.695265][T12626] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.824615][T12626] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1742.851732][T12626] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1743.158121][T21427] xt_hashlimit: size too large, truncated to 1048576 [ 1743.223310][T21426] netlink: 'syz.4.4022': attribute type 33 has an invalid length. [ 1743.237416][T21426] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4022'. [ 1743.266283][T12626] usb 7-1: Product: syz [ 1743.307201][T12626] usb 7-1: Manufacturer: syz [ 1743.322365][T12626] usb 7-1: SerialNumber: syz [ 1743.378504][T12626] usb 7-1: config 0 descriptor?? [ 1743.492553][T12626] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1743.579789][T12626] usb 7-1: USB disconnect, device number 46 [ 1744.968146][T12626] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1745.148200][T12626] usb 8-1: Using ep0 maxpacket: 16 [ 1745.190537][T12626] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1745.227144][T12626] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1745.326197][T12626] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.366467][T12626] usb 8-1: Product: syz [ 1745.424624][T12626] usb 8-1: Manufacturer: syz [ 1745.448535][T12626] usb 8-1: SerialNumber: syz [ 1745.689703][T12626] usb 8-1: config 0 descriptor?? [ 1746.940040][ T3084] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1747.013342][T21476] xt_hashlimit: size too large, truncated to 1048576 [ 1747.316191][T21478] netlink: 'syz.2.4038': attribute type 33 has an invalid length. [ 1747.328787][T21478] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4038'. [ 1747.337050][ T3084] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1747.383490][ T3084] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1747.400982][ T3084] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1747.426354][ T3084] usb 7-1: Product: syz [ 1747.437105][ T3084] usb 7-1: Manufacturer: syz [ 1747.456869][ T3084] usb 7-1: SerialNumber: syz [ 1747.481243][ T3084] usb 7-1: config 0 descriptor?? [ 1747.591050][ T3084] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1747.703668][ T3084] usb 8-1: USB disconnect, device number 32 [ 1747.717830][T21471] netlink: 'syz.6.4037': attribute type 1 has an invalid length. [ 1747.729134][ T5983] usb 7-1: USB disconnect, device number 47 [ 1751.151457][T21512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4051'. [ 1752.162540][T12626] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1752.300350][T21520] xt_hashlimit: size too large, truncated to 1048576 [ 1752.568114][T12626] usb 3-1: Using ep0 maxpacket: 16 [ 1752.604790][T12626] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1752.695365][T12626] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1752.728191][T12626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.766766][T21517] netlink: 'syz.6.4053': attribute type 33 has an invalid length. [ 1752.774794][T21517] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4053'. [ 1752.828944][T12626] usb 3-1: Product: syz [ 1752.834843][T12626] usb 3-1: Manufacturer: syz [ 1752.858440][T12626] usb 3-1: SerialNumber: syz [ 1752.876255][T12626] usb 3-1: config 0 descriptor?? [ 1754.532062][T12626] usb 3-1: USB disconnect, device number 62 [ 1754.738192][ T977] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1755.632499][ T977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.898830][ T977] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1756.021493][ T977] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1756.289344][ T977] usb 7-1: Product: syz [ 1756.294547][ T977] usb 7-1: Manufacturer: syz [ 1756.299435][ T977] usb 7-1: SerialNumber: syz [ 1756.308824][ T977] usb 7-1: config 0 descriptor?? [ 1756.344254][ T977] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1756.840012][T21532] netlink: 'syz.6.4056': attribute type 1 has an invalid length. [ 1756.853051][T11535] usb 7-1: USB disconnect, device number 48 [ 1757.408428][T21556] xt_hashlimit: size too large, truncated to 1048576 [ 1757.632746][T21557] netlink: 'syz.8.4064': attribute type 33 has an invalid length. [ 1757.745666][T21557] netlink: 152 bytes leftover after parsing attributes in process `syz.8.4064'. [ 1759.416565][T21593] 9pnet_fd: Insufficient options for proto=fd [ 1759.428191][T21593] siw: device registration error -23 [ 1760.888493][T11535] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1760.908593][ T977] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1761.328456][T11535] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.406427][T11535] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1761.449263][T11535] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1761.476138][T11535] usb 9-1: Product: syz [ 1761.512050][T11535] usb 9-1: Manufacturer: syz [ 1761.516765][T11535] usb 9-1: SerialNumber: syz [ 1761.556528][T11535] usb 9-1: config 0 descriptor?? [ 1761.656464][T11535] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1761.729775][T21618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4080'. [ 1762.903268][T21628] netlink: 'syz.8.4077': attribute type 1 has an invalid length. [ 1763.328177][T21631] xt_hashlimit: size too large, truncated to 1048576 [ 1763.648485][T21626] netlink: 'syz.2.4082': attribute type 33 has an invalid length. [ 1763.656686][T21626] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4082'. [ 1765.940539][T21653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1766.058592][T11535] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1766.348427][T11535] usb 8-1: device descriptor read/64, error -71 [ 1766.468310][T21659] team_slave_1: entered promiscuous mode [ 1766.628125][T11535] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1766.706868][ T977] usb 9-1: USB disconnect, device number 9 [ 1766.758272][T11535] usb 8-1: device descriptor read/64, error -71 [ 1766.765360][ T30] kauditd_printk_skb: 360 callbacks suppressed [ 1766.765380][ T30] audit: type=1326 audit(1750644126.695:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0058e929 code=0x7ffc0000 [ 1766.876133][ T30] audit: type=1326 audit(1750644126.705:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcd0058e929 code=0x7ffc0000 [ 1766.938388][T11535] usb usb8-port1: attempt power cycle [ 1766.964555][ T30] audit: type=1326 audit(1750644126.705:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd0058e929 code=0x7ffc0000 [ 1767.068094][ T30] audit: type=1326 audit(1750644126.705:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fcd0058e929 code=0x7ffc0000 [ 1767.166891][ T30] audit: type=1326 audit(1750644126.705:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0052ab19 code=0x7ffc0000 [ 1767.288060][ T30] audit: type=1326 audit(1750644126.705:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0052ab19 code=0x7ffc0000 [ 1767.312087][T11535] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1767.379350][T11535] usb 8-1: device descriptor read/8, error -71 [ 1767.460040][ T30] audit: type=1326 audit(1750644126.705:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0052ab19 code=0x7ffc0000 [ 1767.543734][ T30] audit: type=1326 audit(1750644126.705:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0052ab19 code=0x7ffc0000 [ 1767.646401][ T30] audit: type=1326 audit(1750644126.705:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0052ab19 code=0x7ffc0000 [ 1767.669465][T11535] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1767.749125][T11535] usb 8-1: device descriptor read/8, error -71 [ 1767.822037][ T30] audit: type=1326 audit(1750644126.705:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21663 comm="syz.4.4093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcd0052ab19 code=0x7ffc0000 [ 1767.887920][T11535] usb usb8-port1: unable to enumerate USB device [ 1768.418114][T13812] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1768.578199][T13812] usb 3-1: Using ep0 maxpacket: 16 [ 1768.598689][T13812] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1768.621055][T13812] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1768.638065][T13812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.656545][T13812] usb 3-1: Product: syz [ 1768.660850][T13812] usb 3-1: Manufacturer: syz [ 1768.665593][T13812] usb 3-1: SerialNumber: syz [ 1768.683652][T13812] usb 3-1: config 0 descriptor?? [ 1768.698286][T11535] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1768.706107][T12626] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1768.898278][T12626] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1768.910602][T12626] usb 9-1: config 0 has no interfaces? [ 1768.919751][T12626] usb 9-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1768.938669][T11535] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1768.946639][T12626] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.978082][T11535] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1768.999340][T11535] usb 8-1: can't read configurations, error -71 [ 1769.015980][T12626] usb 9-1: Product: syz [ 1769.020572][T12626] usb 9-1: Manufacturer: syz [ 1769.025227][T12626] usb 9-1: SerialNumber: syz [ 1769.035452][T12626] usb 9-1: config 0 descriptor?? [ 1769.126012][T21690] overlayfs: missing 'lowerdir' [ 1769.712334][ T24] usb 9-1: USB disconnect, device number 10 [ 1770.074851][T21702] syz.6.4106: attempt to access beyond end of device [ 1770.074851][T21702] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1770.088625][T21702] hpfs: hpfs_map_sector(): read error [ 1771.726636][T11535] usb 3-1: USB disconnect, device number 63 [ 1771.838277][T12626] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1771.968063][T12626] usb 7-1: device descriptor read/64, error -71 [ 1773.189650][T12626] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1773.378438][ T24] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1773.481230][T12626] usb 7-1: device descriptor read/64, error -71 [ 1773.560585][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1773.578249][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1773.598083][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1773.598439][T12626] usb usb7-port1: attempt power cycle [ 1773.629356][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.649752][T21724] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1773.672545][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1773.748209][ T5983] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1773.927711][T21737] tmpfs: Unknown parameter 'quot”–l [ 1773.927711][T21737] Ra³ÆÈ9“´g­»tpHû}b¹.ç:4úÎY¦¶™ [ 1773.927711][T21737] o–{Íeú¢«é¨£9}Ùܼâ&þ­ôl:•' [ 1773.953407][ T5983] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1773.988373][ T24] usb 8-1: USB disconnect, device number 39 [ 1773.998153][T12626] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1774.006106][ T5983] usb 5-1: config 0 has no interfaces? [ 1774.031344][ T5983] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1774.041144][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1774.061986][T12626] usb 7-1: device descriptor read/8, error -71 [ 1774.074835][ T5983] usb 5-1: Product: syz [ 1774.112003][ T5983] usb 5-1: Manufacturer: syz [ 1774.125894][ T5983] usb 5-1: SerialNumber: syz [ 1774.322253][ T5983] usb 5-1: config 0 descriptor?? [ 1774.438076][T12626] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1774.678099][T12626] usb 7-1: device descriptor read/8, error -71 [ 1774.795343][T12626] usb usb7-port1: unable to enumerate USB device [ 1774.839143][ T5983] usb 5-1: USB disconnect, device number 48 [ 1775.188429][T11535] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1775.388211][T11535] usb 8-1: Using ep0 maxpacket: 16 [ 1775.657082][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4120'. [ 1775.698295][T11535] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1775.743637][T11535] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1775.776038][T11535] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1775.800478][T11535] usb 8-1: Product: syz [ 1775.804710][T11535] usb 8-1: Manufacturer: syz [ 1775.853617][T11535] usb 8-1: SerialNumber: syz [ 1776.034626][T11535] usb 8-1: config 0 descriptor?? [ 1776.045071][T21757] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4124'. [ 1776.681476][T21764] lo speed is unknown, defaulting to 1000 [ 1776.701338][T21764] dummy0 speed is unknown, defaulting to 1000 [ 1777.315709][ T30] kauditd_printk_skb: 469 callbacks suppressed [ 1777.315728][ T30] audit: type=1326 audit(1750644136.405:3754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21758 comm="syz.4.4125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd0058e929 code=0x0 [ 1778.263813][T21775] bond1: entered allmulticast mode [ 1778.368305][ T5983] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1779.103666][T21789] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 1779.121042][T11535] usb 8-1: USB disconnect, device number 40 [ 1779.158350][ T5983] usb 3-1: device descriptor read/64, error -71 [ 1780.210493][ T5983] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1780.267851][T21805] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4138'. [ 1780.376700][ T5983] usb 3-1: device descriptor read/64, error -71 [ 1780.999122][ T5983] usb usb3-port1: attempt power cycle [ 1782.348510][T21822] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1782.348510][T21822] program syz.4.4142 not setting count and/or reply_len properly [ 1784.981790][T21841] siw: device registration error -23 [ 1785.121758][T21845] misc userio: Invalid payload size [ 1785.154473][T21845] misc userio: No port type given on /dev/userio [ 1789.530718][T21888] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4162'. [ 1790.526154][T21893] siw: device registration error -23 [ 1791.737627][T21907] netlink: 'syz.4.4168': attribute type 5 has an invalid length. [ 1791.906746][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.913194][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.729488][ T6403] Bluetooth: hci0: Frame reassembly failed (-84) [ 1793.077699][T21922] Bluetooth: hci0: Frame reassembly failed (-84) [ 1794.114433][T21929] lo speed is unknown, defaulting to 1000 [ 1794.122524][T21929] dummy0 speed is unknown, defaulting to 1000 [ 1794.778820][T16117] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1795.986084][T21956] binder: 21953:21956 ioctl c0306201 200000000540 returned -22 [ 1796.048100][T12626] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1796.073770][T21960] binder: 21953:21960 ioctl c0306201 200000000640 returned -22 [ 1796.164024][T21959] bridge_slave_0: left allmulticast mode [ 1796.189922][T21959] bridge_slave_0: left promiscuous mode [ 1796.206280][T21959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.224489][T12626] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1796.254469][T12626] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1796.257668][T21959] bridge_slave_1: left allmulticast mode [ 1796.267988][T12626] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1796.280533][T21959] bridge_slave_1: left promiscuous mode [ 1796.286409][T21959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.308777][T12626] usb 8-1: Product: syz [ 1796.313193][T12626] usb 8-1: Manufacturer: syz [ 1796.317835][T12626] usb 8-1: SerialNumber: syz [ 1796.349119][T12626] usb 8-1: config 0 descriptor?? [ 1796.381952][T21959] bond0: (slave bond_slave_0): Releasing backup interface [ 1796.432997][T12626] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1796.480420][T21959] bond0: (slave bond_slave_1): Releasing backup interface [ 1796.536937][T21959] team0: Port device team_slave_0 removed [ 1796.561009][T21959] team0: Port device team_slave_1 removed [ 1796.659419][T21959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.683406][T21959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.732499][T21959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.753912][T21959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.858866][T21963] team0: Mode changed to "activebackup" [ 1796.878547][T21961] tipc: Enabling of bearer rejected, failed to enable media [ 1796.949603][T21972] netlink: 'syz.7.4183': attribute type 1 has an invalid length. [ 1797.789726][T21974] lo speed is unknown, defaulting to 1000 [ 1797.797500][T21974] dummy0 speed is unknown, defaulting to 1000 [ 1798.059000][T11535] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1798.706334][T11535] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1798.760660][T11535] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1798.793590][T11535] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1798.857213][T11535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.898830][T21981] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1798.911272][T11535] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1799.218243][ T5983] usb 7-1: USB disconnect, device number 53 [ 1799.372530][T13812] libceph: connect (1)[c::]:6789 error -101 [ 1799.390665][T13812] libceph: mon0 (1)[c::]:6789 connect error [ 1799.502259][ T5983] usb 8-1: USB disconnect, device number 41 [ 1799.509047][T22000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4195'. [ 1799.537872][T22000] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.547041][T22000] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.556443][T22000] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.565501][T22000] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.681974][T13812] libceph: connect (1)[c::]:6789 error -101 [ 1799.697838][T13812] libceph: mon0 (1)[c::]:6789 connect error [ 1799.716041][T22000] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.725444][T22000] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.734650][T22000] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.744152][T22000] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1800.113681][T21995] ceph: No mds server is up or the cluster is laggy [ 1800.175095][T22007] netlink: 'syz.6.4200': attribute type 10 has an invalid length. [ 1800.286675][T22007] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1801.089073][T22025] misc userio: Invalid payload size [ 1802.161614][T22034] random: crng reseeded on system resumption [ 1802.288138][ T5983] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1803.107773][ T5983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1803.168421][ T5983] usb 3-1: config 0 has no interfaces? [ 1803.177187][ T5983] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1803.187808][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.196861][ T5983] usb 3-1: Product: syz [ 1803.202802][ T5983] usb 3-1: Manufacturer: syz [ 1803.208293][ T5983] usb 3-1: SerialNumber: syz [ 1803.229802][ T5983] usb 3-1: config 0 descriptor?? [ 1803.427929][T22042] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4212'. [ 1804.501248][T22044] 8021q: VLANs not supported on ipvlan1 [ 1804.540991][T12626] usb 3-1: USB disconnect, device number 67 [ 1804.720943][T22049] netlink: 'syz.4.4215': attribute type 10 has an invalid length. [ 1804.807849][T22049] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1805.541395][T22059] misc userio: Invalid payload size [ 1806.964598][T22074] overlayfs: overlapping lowerdir path [ 1808.342040][T22106] misc userio: Invalid payload size [ 1808.471769][T22108] overlayfs: failed to resolve './file1/file0': -2 [ 1809.248130][ T30] audit: type=1800 audit(1750644169.165:3755): pid=22134 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.4247" name="file1" dev="tmpfs" ino=1233 res=0 errno=0 [ 1809.430559][T22137] overlayfs: failed to resolve './file1/file0': -2 [ 1813.117793][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1813.268562][T22185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4264'. [ 1813.849043][T22182] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4263'. [ 1815.601173][T11535] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1815.889509][T11535] usb 8-1: device descriptor read/64, error -71 [ 1815.902923][T22220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1815.912930][T22220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1816.280992][T11535] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1816.440810][T11535] usb 8-1: device descriptor read/64, error -71 [ 1816.498078][T13812] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1816.700968][T11535] usb usb8-port1: attempt power cycle [ 1816.768982][T13812] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1817.559184][T13812] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1817.571934][T13812] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1817.581953][T13812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.610729][T22222] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1817.624743][T13812] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1817.799721][T11535] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1817.865780][T11535] usb 8-1: device descriptor read/8, error -71 [ 1818.190605][ T5983] usb 9-1: USB disconnect, device number 11 [ 1818.229315][T11535] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1818.508127][T11535] usb 8-1: device not accepting address 45, error -71 [ 1818.552734][T11535] usb usb8-port1: unable to enumerate USB device [ 1821.144164][T22258] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1821.155596][T22258] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4289'. [ 1821.190433][T22250] netlink: 'syz.7.4288': attribute type 4 has an invalid length. [ 1821.203155][T22250] netlink: 'syz.7.4288': attribute type 4 has an invalid length. [ 1821.214942][T22250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1824.018617][T22282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1824.232880][T22289] lo speed is unknown, defaulting to 1000 [ 1824.264174][T22289] dummy0 speed is unknown, defaulting to 1000 [ 1824.685949][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4302'. [ 1825.494098][T22293] block device autoloading is deprecated and will be removed. [ 1827.589323][T22333] siw: device registration error -23 [ 1828.308245][T13257] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1828.620265][T13257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1828.646924][T13257] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1828.669258][T13257] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1828.704781][T13257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1828.721472][T13257] usb 5-1: SerialNumber: syz [ 1828.737666][T13257] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1828.752777][T13257] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1828.766248][T13257] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1828.801912][T13257] scsi host1: usb-storage 5-1:1.0 [ 1828.880996][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4319'. [ 1830.533388][T22371] siw: device registration error -23 [ 1832.252768][T10812] usb 5-1: USB disconnect, device number 49 [ 1833.384411][ T3084] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1833.799040][ T5983] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 1834.078219][ T3084] usb 7-1: device descriptor read/64, error -71 [ 1834.180680][ T5983] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1834.192464][ T5983] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1834.203497][ T5983] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1834.212631][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1834.220861][ T5983] usb 3-1: SerialNumber: syz [ 1834.231428][ T5983] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1834.260481][ T5983] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1834.289926][ T5983] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1834.298178][ T45] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1834.316284][ T5983] scsi host1: usb-storage 3-1:1.0 [ 1834.328762][ T3084] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1834.460627][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.481660][ T45] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1834.498105][ T3084] usb 7-1: device descriptor read/64, error -71 [ 1834.504630][ T45] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1834.524019][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.551076][ T45] usb 5-1: config 0 descriptor?? [ 1834.803046][ T3084] usb usb7-port1: attempt power cycle [ 1835.724967][T22417] netlink: 'syz.7.4339': attribute type 4 has an invalid length. [ 1835.733328][ T3084] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1835.780138][T22417] netlink: 'syz.7.4339': attribute type 4 has an invalid length. [ 1836.488691][ T3084] usb 7-1: device descriptor read/8, error -71 [ 1837.077444][T13812] usb 3-1: USB disconnect, device number 68 [ 1837.548014][ T5983] usb 5-1: USB disconnect, device number 50 [ 1838.027832][T22443] input: syz1 as /devices/virtual/input/input58 [ 1839.597435][T22464] netlink: 'syz.4.4351': attribute type 4 has an invalid length. [ 1839.741128][T22464] netlink: 'syz.4.4351': attribute type 4 has an invalid length. [ 1839.837975][T11535] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1840.138891][T11535] usb 9-1: device descriptor read/64, error -71 [ 1840.443186][T11535] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1840.511515][T13257] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1840.648003][T11535] usb 9-1: device descriptor read/64, error -71 [ 1840.700405][T13257] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1840.731542][T13257] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1840.772922][T13257] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1840.788458][T11535] usb usb9-port1: attempt power cycle [ 1840.805755][T13257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1840.832010][T13257] usb 3-1: SerialNumber: syz [ 1840.862480][T13257] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1840.898577][T13257] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1840.947849][T13257] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1841.004732][T13257] scsi host1: usb-storage 3-1:1.0 [ 1841.158444][T11535] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1841.181008][T11535] usb 9-1: device descriptor read/8, error -71 [ 1841.528187][T11535] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1841.568890][T11535] usb 9-1: device descriptor read/8, error -71 [ 1841.841884][T11535] usb usb9-port1: unable to enumerate USB device [ 1844.089738][T22503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.099305][T22503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.308489][T11535] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1844.518519][T11535] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1844.541865][T11535] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.559888][T11535] usb 9-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1844.569735][T11535] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.586495][T11535] usb 9-1: config 0 descriptor?? [ 1844.594272][T22503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.613962][T22512] netlink: 'syz.4.4365': attribute type 4 has an invalid length. [ 1844.634435][T22503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1844.816249][T22503] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.826274][T22503] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.843638][T22503] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.854254][T22503] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1845.030958][T11535] hid-generic 0003:04F3:0754.000D: failed to start in urb: -90 [ 1845.045275][T22515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 1845.076783][T11535] hid-generic 0003:04F3:0754.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0754] on usb-dummy_hcd.8-1/input0 [ 1845.233248][T13812] usb 9-1: USB disconnect, device number 16 [ 1845.443747][ T3084] usb 3-1: USB disconnect, device number 69 [ 1845.663012][T22532] netlink: 'syz.7.4371': attribute type 4 has an invalid length. [ 1847.474202][T22543] binder: 22542:22543 ioctl c0306201 200000000540 returned -22 [ 1847.535212][T22544] binder: 22542:22544 ioctl c0306201 200000000640 returned -22 [ 1848.313946][T22551] input: syz1 as /devices/virtual/input/input59 [ 1848.402237][T22555] netlink: 'syz.7.4379': attribute type 4 has an invalid length. [ 1849.594879][T22560] syzkaller0: entered promiscuous mode [ 1849.651536][T22560] syzkaller0: entered allmulticast mode [ 1849.702042][T22572] tipc: Started in network mode [ 1849.706974][T22572] tipc: Node identity 4, cluster identity 4711 [ 1849.734001][T22572] tipc: Node number set to 4 [ 1850.191037][T22582] lo speed is unknown, defaulting to 1000 [ 1850.248170][T22582] dummy0 speed is unknown, defaulting to 1000 [ 1852.510946][T22593] binder: 22592:22593 ioctl c0306201 200000000540 returned -22 [ 1852.643323][T22599] binder: 22592:22599 ioctl c0306201 200000000640 returned -22 [ 1852.865531][T22602] 9pnet_fd: Insufficient options for proto=fd [ 1852.877232][T22602] siw: device registration error -23 [ 1853.490001][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.496810][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.794039][T22608] input: syz1 as /devices/virtual/input/input60 [ 1853.869191][ T24] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1853.998572][ T24] usb 7-1: device descriptor read/64, error -71 [ 1854.238949][ T24] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1855.341470][ T24] usb 7-1: device descriptor read/64, error -71 [ 1855.459468][ T24] usb usb7-port1: attempt power cycle [ 1855.823801][ T24] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1855.866033][ T24] usb 7-1: device descriptor read/8, error -71 [ 1856.136246][ T24] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1856.210649][ T24] usb 7-1: device descriptor read/8, error -71 [ 1856.334217][ T24] usb usb7-port1: unable to enumerate USB device [ 1857.938007][ T24] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1858.159653][ T24] usb 8-1: config 0 has no interfaces? [ 1858.453006][ T24] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1858.535281][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.543633][ T24] usb 8-1: Product: syz [ 1858.549847][ T24] usb 8-1: Manufacturer: syz [ 1858.554788][ T24] usb 8-1: SerialNumber: syz [ 1858.562292][ T24] usb 8-1: config 0 descriptor?? [ 1861.696052][T13812] usb 8-1: USB disconnect, device number 46 [ 1862.535413][T22670] syzkaller1: entered promiscuous mode [ 1862.541175][T22670] syzkaller1: entered allmulticast mode [ 1862.562626][T22670] program syz.7.4414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1864.635297][T22700] input: syz1 as /devices/virtual/input/input61 [ 1865.140579][ T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1865.873678][ T24] usb 9-1: config 0 has no interfaces? [ 1866.154075][ T24] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1866.204617][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.240781][ T24] usb 9-1: Product: syz [ 1866.245099][ T24] usb 9-1: Manufacturer: syz [ 1866.267267][ T24] usb 9-1: SerialNumber: syz [ 1866.278973][ T24] usb 9-1: config 0 descriptor?? [ 1866.697165][T22708] pimreg: entered allmulticast mode [ 1866.714952][T22708] pimreg: left allmulticast mode [ 1867.413321][T22728] lo speed is unknown, defaulting to 1000 [ 1867.432848][T22728] dummy0 speed is unknown, defaulting to 1000 [ 1868.918590][T22740] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1868.989088][T13257] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1869.643043][T13812] usb 9-1: USB disconnect, device number 17 [ 1869.690514][T13257] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1869.721741][T13257] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1869.763482][T13257] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1869.791601][T13257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1869.810266][T13257] usb 3-1: SerialNumber: syz [ 1869.832317][T13257] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1869.852960][T13257] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1869.888385][T13257] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1869.919700][T13257] scsi host1: usb-storage 3-1:1.0 [ 1871.763853][ T30] audit: type=1326 audit(1750644231.235:3756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22758 comm="syz.6.4434" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c3d58e929 code=0x0 [ 1871.959760][T22762] netlink: 'syz.8.4440': attribute type 4 has an invalid length. [ 1872.028741][T22767] netlink: 'syz.8.4440': attribute type 4 has an invalid length. [ 1872.313905][T22769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1872.881931][ T5983] usb 3-1: USB disconnect, device number 70 [ 1873.467954][T22786] lo speed is unknown, defaulting to 1000 [ 1873.485842][T22786] dummy0 speed is unknown, defaulting to 1000 [ 1874.634658][ T30] audit: type=1326 audit(1750644234.565:3757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22771 comm="syz.6.4443" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c3d58e929 code=0x0 [ 1874.748325][ T24] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1874.990676][ T24] usb 8-1: config 0 has no interfaces? [ 1874.999903][ T24] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1875.017131][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1875.025816][ T24] usb 8-1: Product: syz [ 1875.030366][ T24] usb 8-1: Manufacturer: syz [ 1875.037976][ T24] usb 8-1: SerialNumber: syz [ 1875.108345][T10812] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1875.137153][ T24] usb 8-1: config 0 descriptor?? [ 1875.290000][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1875.356128][T10812] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1875.372702][T22805] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1876.009473][T10812] usb 9-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1876.031922][T10812] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1876.050873][T10812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.152374][T22785] pimreg: entered allmulticast mode [ 1876.162112][T22792] pimreg: left allmulticast mode [ 1877.232649][ T30] audit: type=1326 audit(1750644236.525:3758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22808 comm="syz.6.4453" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c3d58e929 code=0x0 [ 1877.253843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1877.536279][ T5983] usb 9-1: USB disconnect, device number 18 [ 1877.893215][T22817] binder: 22816:22817 ioctl c0306201 200000000440 returned -14 [ 1882.230284][ T5983] usb 8-1: USB disconnect, device number 47 [ 1882.803572][T22840] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4462'. [ 1883.051232][T22837] lo speed is unknown, defaulting to 1000 [ 1883.059097][T22837] dummy0 speed is unknown, defaulting to 1000 [ 1886.230058][T22860] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1886.645141][T22865] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1888.528167][ T3084] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1889.661079][ T3084] usb 5-1: config 0 has no interfaces? [ 1889.874869][ T3084] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1889.968840][ T3084] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.999315][ T3084] usb 5-1: Product: syz [ 1890.003531][ T3084] usb 5-1: Manufacturer: syz [ 1890.021345][T22899] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4474'. [ 1891.108187][ T3084] usb 5-1: SerialNumber: syz [ 1891.115108][ T3084] usb 5-1: config 0 descriptor?? [ 1893.510231][T22922] lo speed is unknown, defaulting to 1000 [ 1893.531653][T22922] dummy0 speed is unknown, defaulting to 1000 [ 1894.255580][ T3084] usb 5-1: can't set config #0, error -71 [ 1894.369272][ T3084] usb 5-1: USB disconnect, device number 51 [ 1896.618000][T22955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1900.067953][T22978] lo speed is unknown, defaulting to 1000 [ 1900.085279][T22978] dummy0 speed is unknown, defaulting to 1000 [ 1902.272823][T22997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4499'. [ 1907.871264][T23018] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1908.115149][T23021] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1908.728403][T23015] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4503'. [ 1911.141038][T23056] lo speed is unknown, defaulting to 1000 [ 1911.159557][T23056] dummy0 speed is unknown, defaulting to 1000 [ 1911.885961][T23065] netlink: 'syz.4.4516': attribute type 4 has an invalid length. [ 1914.786510][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.309417][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.978074][T23086] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1919.650482][T23106] netlink: 'syz.7.4528': attribute type 4 has an invalid length. [ 1921.873944][T23123] lo speed is unknown, defaulting to 1000 [ 1921.893549][T23123] dummy0 speed is unknown, defaulting to 1000 [ 1923.214824][T23141] lo speed is unknown, defaulting to 1000 [ 1923.229117][T23141] dummy0 speed is unknown, defaulting to 1000 [ 1925.890929][T23147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4541'. [ 1931.626730][T23176] lo speed is unknown, defaulting to 1000 [ 1931.646428][T23176] dummy0 speed is unknown, defaulting to 1000 [ 1932.354524][T23166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1932.368840][T23166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4546'. [ 1934.185189][T23195] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4553'. [ 1937.579338][T23215] lo speed is unknown, defaulting to 1000 [ 1937.597344][T23215] dummy0 speed is unknown, defaulting to 1000 [ 1938.688056][T10812] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1938.697364][ C1] raw-gadget.0 gadget.7: ignoring, device is not running [ 1938.834005][T10812] usb 8-1: device descriptor read/64, error -32 [ 1939.098161][T10812] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1939.708007][T10812] usb 8-1: Using ep0 maxpacket: 16 [ 1939.719429][T10812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.730843][T10812] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.747567][T10812] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1939.925494][T10812] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1939.935554][T10812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.979489][T10812] usb 8-1: config 0 descriptor?? [ 1940.069746][T23238] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4566'. [ 1940.724846][T10812] usbhid 8-1:0.0: can't add hid device: -71 [ 1940.731206][T10812] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1940.741642][T10812] usb 8-1: USB disconnect, device number 49 [ 1940.928154][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4569'. [ 1940.979472][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4569'. [ 1941.030601][T23242] macvtap1: entered promiscuous mode [ 1941.036101][T23242] bond0: entered promiscuous mode [ 1941.063254][T23242] bond_slave_0: entered promiscuous mode [ 1941.275195][T23242] bond_slave_1: entered promiscuous mode [ 1941.284607][T23242] macvtap1: entered allmulticast mode [ 1941.291351][T23242] bond0: entered allmulticast mode [ 1941.296526][T23242] bond_slave_0: entered allmulticast mode [ 1941.303871][T23242] bond_slave_1: entered allmulticast mode [ 1941.315775][T23242] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1941.328975][T23249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1941.338399][T23250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1941.930764][T23258] lo speed is unknown, defaulting to 1000 [ 1941.937820][T23258] dummy0 speed is unknown, defaulting to 1000 [ 1944.419675][T23278] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1945.653586][T23288] delete_channel: no stack [ 1945.882858][T23295] overlayfs: missing 'lowerdir' [ 1946.083674][T23300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1946.093544][T23300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1946.148207][ T3084] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1946.361120][T23306] lo speed is unknown, defaulting to 1000 [ 1946.379904][T23306] dummy0 speed is unknown, defaulting to 1000 [ 1947.086916][ T3084] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1947.140695][ T3084] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1947.150384][ T3084] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1947.161150][ T3084] usb 8-1: Product: syz [ 1947.166602][ T3084] usb 8-1: Manufacturer: syz [ 1947.172397][ T3084] usb 8-1: SerialNumber: syz [ 1947.207353][ T3084] usb 8-1: config 0 descriptor?? [ 1947.323134][ T3084] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 1947.366680][ T3084] kernel write not supported for file /dsp1 (pid: 3084 comm: kworker/1:2) [ 1947.779164][T23316] netlink: 'syz.7.4585': attribute type 1 has an invalid length. [ 1948.900593][T23317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4591'. [ 1949.387957][T23321] netlink: 'syz.4.4594': attribute type 4 has an invalid length. [ 1949.703477][T23328] netlink: 'syz.4.4597': attribute type 4 has an invalid length. [ 1949.818850][T23328] netlink: 'syz.4.4597': attribute type 4 has an invalid length. [ 1949.902708][T23328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1950.275438][ T5983] usb 8-1: USB disconnect, device number 50 [ 1952.014367][T23337] overlayfs: missing 'lowerdir' [ 1952.353835][T23351] netlink: 'syz.6.4605': attribute type 4 has an invalid length. [ 1952.375511][ T5983] lo speed is unknown, defaulting to 1000 [ 1952.382752][ T5983] syz0: Port: 1 Link ACTIVE [ 1952.622850][T23357] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4603'. [ 1957.232731][T23371] netlink: 'syz.2.4608': attribute type 1 has an invalid length. [ 1957.241092][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4608'. [ 1959.809857][T23385] overlayfs: missing 'lowerdir' [ 1959.872219][T23389] 9pnet_fd: Insufficient options for proto=fd [ 1960.005880][T23396] netlink: 'syz.8.4616': attribute type 4 has an invalid length. [ 1960.445809][T23401] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4617'. [ 1961.284709][T23409] input: syz1 as /devices/virtual/input/input63 [ 1962.753356][T23429] 9pnet_fd: Insufficient options for proto=fd [ 1963.144345][T23437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4629'. [ 1963.728479][T23439] overlayfs: missing 'lowerdir' [ 1964.130751][T23446] input: syz1 as /devices/virtual/input/input64 [ 1966.053042][T23462] 9pnet_fd: Insufficient options for proto=fd [ 1966.145179][T23466] overlayfs: missing 'lowerdir' [ 1966.401393][T23476] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4642'. [ 1967.315911][T23485] input: syz1 as /devices/virtual/input/input65 [ 1969.081374][T23508] netlink: 'syz.8.4653': attribute type 4 has an invalid length. [ 1970.389784][T23514] overlayfs: missing 'lowerdir' [ 1971.293783][ T45] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1971.473697][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 1971.531423][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1971.539043][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1971.567957][ T45] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1971.587935][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1971.607953][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1971.639594][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1971.647100][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1971.668605][ T45] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1971.681431][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1971.693239][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1971.706888][ T45] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1971.888090][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1971.904888][ T45] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1971.916791][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1971.930956][ T45] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1972.001933][ T45] usb 3-1: string descriptor 0 read error: -22 [ 1972.018397][ T45] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1972.037993][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.062879][ T45] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1972.320660][T23529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.523470][T23529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1972.726270][ T45] usb 3-1: USB disconnect, device number 71 [ 1974.970361][T23568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4674'. [ 1974.994060][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1975.013888][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4675'. [ 1976.225059][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.232731][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.958128][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4687'. [ 1976.967486][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4687'. [ 1977.116244][T23609] overlayfs: failed to resolve './file0': -2 [ 1977.352111][T23612] lo speed is unknown, defaulting to 1000 [ 1977.405752][T23612] dummy0 speed is unknown, defaulting to 1000 [ 1977.938784][T23615] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4685'. [ 1979.151775][T23639] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4698'. [ 1979.197332][T23639] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4698'. [ 1979.477042][T23647] 9pnet_fd: Insufficient options for proto=fd [ 1979.568958][T23650] hub 2-0:1.0: USB hub found [ 1979.582734][T23650] hub 2-0:1.0: 1 port detected [ 1980.530819][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4703'. [ 1981.981756][T23679] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4706'. [ 1982.683572][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4711'. [ 1982.698375][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4711'. [ 1982.717613][T23683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4711'. [ 1982.740160][T23690] 9pnet_fd: Insufficient options for proto=fd [ 1982.809251][T23691] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4714'. [ 1985.391402][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1985.491854][T23732] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4725'. [ 1985.647777][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1986.238549][T23730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4726'. [ 1988.987670][T23774] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4739'. [ 1990.628756][T23791] overlayfs: missing 'lowerdir' [ 1990.983036][T23802] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4749'. [ 1991.404919][T23805] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4750'. [ 1994.278960][T23824] overlayfs: missing 'lowerdir' [ 1994.387217][T23828] overlayfs: missing 'lowerdir' [ 1994.559057][T23834] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1997.899378][T23864] overlayfs: missing 'lowerdir' [ 1999.115775][T23873] overlayfs: missing 'lowerdir' [ 1999.230190][T23876] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.4772'. [ 2000.543535][T23882] 9pnet_fd: Insufficient options for proto=fd [ 2000.550869][T23882] siw: device registration error -23 [ 2002.151413][T23898] overlayfs: missing 'lowerdir' [ 2002.422428][T23901] overlayfs: missing 'workdir' [ 2003.206749][T23909] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4783'. [ 2004.204160][T23930] 9pnet_fd: Insufficient options for proto=fd [ 2004.211128][T23930] siw: device registration error -23 [ 2004.827370][T23939] overlayfs: missing 'workdir' [ 2005.945605][T23946] overlayfs: missing 'workdir' [ 2006.116271][T23948] netlink: 'syz.8.4793': attribute type 4 has an invalid length. [ 2006.388331][T10812] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2006.432827][T23960] overlayfs: missing 'workdir' [ 2006.598576][T23970] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.4795'. [ 2007.479040][T10812] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.497605][T10812] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2007.507263][T10812] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2007.515668][T10812] usb 3-1: Product: syz [ 2007.535255][T10812] usb 3-1: Manufacturer: syz [ 2007.550702][T10812] usb 3-1: SerialNumber: syz [ 2007.559804][T10812] usb 3-1: config 0 descriptor?? [ 2007.588903][T10812] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2007.711508][T23976] overlayfs: missing 'workdir' [ 2008.073144][T23984] netlink: 'syz.2.4798': attribute type 1 has an invalid length. [ 2008.997643][T23994] overlayfs: missing 'workdir' [ 2009.249819][T23997] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4816'. [ 2009.866481][ T45] usb 3-1: USB disconnect, device number 72 [ 2010.313822][T24012] input: syz1 as /devices/virtual/input/input66 [ 2010.485257][T24020] overlayfs: failed to clone upperpath [ 2010.669984][T24027] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4828'. [ 2011.049690][T24037] binder: 24034:24037 ioctl c0306201 200000000640 returned -22 [ 2012.271853][T24061] Bluetooth: MGMT ver 1.23 [ 2012.724218][T24067] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.4842'. [ 2013.402401][T24083] overlayfs: failed to resolve './file1': -2 [ 2014.020666][T24090] fuse: root generation should be zero [ 2014.222399][T24097] 9pnet_fd: Insufficient options for proto=fd [ 2014.231353][T24097] siw: device registration error -23 [ 2018.525698][T24119] input: syz1 as /devices/virtual/input/input67 [ 2018.615489][T24126] overlayfs: failed to resolve './file1': -2 [ 2021.424767][T24155] 9pnet_fd: Insufficient options for proto=fd [ 2021.436737][T24155] siw: device registration error -23 [ 2022.890598][ T30] audit: type=1326 audit(1750644382.825:3759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7715d8e929 code=0x7ffc0000 [ 2023.024836][ T30] audit: type=1326 audit(1750644382.845:3760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7715d8e929 code=0x7ffc0000 [ 2023.055776][ T30] audit: type=1326 audit(1750644382.845:3761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7715d8e929 code=0x7ffc0000 [ 2023.140099][ T30] audit: type=1326 audit(1750644382.845:3762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7715d8e929 code=0x7ffc0000 [ 2023.168033][ T30] audit: type=1326 audit(1750644382.845:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7715d8e929 code=0x7ffc0000 [ 2023.194131][ T30] audit: type=1326 audit(1750644382.845:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f7715d8e929 code=0x7ffc0000 [ 2023.226425][ T30] audit: type=1326 audit(1750644382.845:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7715d2ab19 code=0x7ffc0000 [ 2023.270566][ T30] audit: type=1326 audit(1750644382.845:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7715d2ab19 code=0x7ffc0000 [ 2023.390553][ T30] audit: type=1326 audit(1750644382.845:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7715d2ab19 code=0x7ffc0000 [ 2023.409506][T24167] input: syz1 as /devices/virtual/input/input68 [ 2023.498257][ T30] audit: type=1326 audit(1750644382.845:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24163 comm="syz.2.4868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7715d2ab19 code=0x7ffc0000 [ 2024.214059][T24168] IPVS: stopping backup sync thread 24174 ... [ 2024.227034][T24174] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 2028.134527][T24197] 9pnet_fd: Insufficient options for proto=fd [ 2028.146519][T24197] siw: device registration error -23 [ 2029.413595][T24205] input: syz1 as /devices/virtual/input/input69 [ 2033.454355][T24239] netlink: 'syz.8.4889': attribute type 4 has an invalid length. [ 2036.599588][T24270] 9pnet_virtio: no channels available for device syz [ 2036.667310][T24278] fuse: Bad value for 'fd' [ 2036.808022][ T45] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2037.185044][ T45] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.196858][ T45] usb 5-1: config 0 has no interfaces? [ 2037.205036][ T45] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 2037.218587][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.226741][ T45] usb 5-1: Product: syz [ 2037.231008][ T45] usb 5-1: Manufacturer: syz [ 2037.235633][ T45] usb 5-1: SerialNumber: syz [ 2037.243587][ T45] usb 5-1: config 0 descriptor?? [ 2038.009292][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.016012][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.369454][T12626] usb 5-1: USB disconnect, device number 52 [ 2038.575904][T24302] netlink: 'syz.8.4909': attribute type 4 has an invalid length. [ 2039.409370][T24315] overlayfs: failed to resolve './file0': -2 [ 2040.078058][ T5983] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2041.542850][ T5983] usb 5-1: Using ep0 maxpacket: 16 [ 2041.709845][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2041.762041][ T5983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2041.762075][ T5983] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2041.762125][ T5983] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2041.762147][ T5983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.768855][ T5983] usb 5-1: config 0 descriptor?? [ 2042.298689][T24337] netlink: 'syz.7.4921': attribute type 4 has an invalid length. [ 2042.484871][ T5983] usbhid 5-1:0.0: can't add hid device: -71 [ 2042.499775][T24341] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4923'. [ 2042.511049][ T5983] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2042.544818][ T5983] usb 5-1: USB disconnect, device number 53 [ 2042.589305][T24345] overlayfs: failed to resolve './file1': -2 [ 2043.676986][T24365] netlink: 'syz.4.4932': attribute type 4 has an invalid length. [ 2044.908061][T24383] overlayfs: failed to resolve './file1': -2 [ 2045.149864][T24388] fuse: Bad value for 'fd' [ 2045.720424][T10812] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2045.929790][T10812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2045.961713][T10812] usb 5-1: config 0 has no interfaces? [ 2046.020217][T10812] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 2046.033886][ T30] kauditd_printk_skb: 868 callbacks suppressed [ 2046.033901][ T30] audit: type=1326 audit(1750644405.965:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.088433][T10812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.117974][ T30] audit: type=1326 audit(1750644405.995:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.140940][T10812] usb 5-1: Product: syz [ 2046.145197][T10812] usb 5-1: Manufacturer: syz [ 2046.172150][T10812] usb 5-1: SerialNumber: syz [ 2046.193109][T10812] usb 5-1: config 0 descriptor?? [ 2046.209857][ T30] audit: type=1326 audit(1750644405.995:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.231529][ C1] vkms_vblank_simulate: vblank timer overrun [ 2046.239733][T24413] overlayfs: failed to resolve './file1': -2 [ 2046.246308][ T30] audit: type=1326 audit(1750644405.995:4640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.289884][ T30] audit: type=1326 audit(1750644405.995:4641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.311580][ C1] vkms_vblank_simulate: vblank timer overrun [ 2046.323735][ T30] audit: type=1326 audit(1750644405.995:4642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.345396][ C1] vkms_vblank_simulate: vblank timer overrun [ 2046.426822][ T30] audit: type=1326 audit(1750644405.995:4643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.448524][ C1] vkms_vblank_simulate: vblank timer overrun [ 2046.649986][ T30] audit: type=1326 audit(1750644405.995:4644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24409 comm="syz.8.4950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fe398e929 code=0x7ffc0000 [ 2046.761818][T24421] fuse: Bad value for 'fd' [ 2047.371896][T10812] usb 5-1: USB disconnect, device number 54 [ 2048.376256][T24433] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4957'. [ 2050.314217][T24460] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4969'. [ 2051.247980][ T5983] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2051.497429][ T5983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.884962][T24481] 9pnet_fd: Insufficient options for proto=fd [ 2051.897270][T24481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4972'. [ 2052.208145][ T5983] usb 3-1: config 0 has no interfaces? [ 2052.218503][ T5983] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 2052.232971][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.241826][ T5983] usb 3-1: Product: syz [ 2052.246041][ T5983] usb 3-1: Manufacturer: syz [ 2052.251310][ T5983] usb 3-1: SerialNumber: syz [ 2052.259470][ T5983] usb 3-1: config 0 descriptor?? [ 2052.692752][ T45] usb 3-1: USB disconnect, device number 73 [ 2058.541107][T24500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4980'. [ 2074.181292][T24660] overlayfs: missing 'lowerdir' [ 2076.475776][T24681] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2077.958719][T24699] overlayfs: missing 'lowerdir' [ 2079.490554][T24713] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2079.836398][T24722] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5053'. [ 2080.695133][T24738] overlayfs: missing 'lowerdir' [ 2081.964080][T24760] 9pnet: Could not find request transport: fd0x0000000000000004 [ 2082.716115][T24770] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5069'. [ 2083.438012][T12626] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 2083.623452][T12626] usb 3-1: config 0 has no interfaces? [ 2083.654024][T12626] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2083.668038][T12626] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2083.676223][T12626] usb 3-1: Product: syz [ 2083.681071][T12626] usb 3-1: Manufacturer: syz [ 2083.685689][T12626] usb 3-1: SerialNumber: syz [ 2083.710992][T12626] usb 3-1: config 0 descriptor?? [ 2083.850730][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5075'. [ 2083.977074][T12626] usb 3-1: USB disconnect, device number 74 [ 2085.063803][ T30] audit: type=1326 audit(1750644444.995:4645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3d58e929 code=0x7ffc0000 [ 2085.098754][T24805] 9pnet_fd: Insufficient options for proto=fd [ 2085.118440][ T30] audit: type=1326 audit(1750644445.055:4646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c3d58e929 code=0x7ffc0000 [ 2085.334910][ T30] audit: type=1326 audit(1750644445.265:4647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1c3d58e929 code=0x7ffc0000 [ 2086.035534][ T30] audit: type=1326 audit(1750644445.265:4648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2086.137590][ T30] audit: type=1326 audit(1750644445.265:4649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2086.244076][ T30] audit: type=1326 audit(1750644445.265:4650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2086.408859][ T30] audit: type=1326 audit(1750644445.265:4651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2086.648197][ T30] audit: type=1326 audit(1750644445.265:4652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2086.670528][ T30] audit: type=1326 audit(1750644445.265:4653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2086.708035][ T30] audit: type=1326 audit(1750644445.265:4654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24797 comm="syz.6.5074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1c3d52ab19 code=0x7ffc0000 [ 2087.778114][T24820] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 2087.784714][T24820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2087.830077][T24820] vhci_hcd vhci_hcd.0: Device attached [ 2088.116928][T12626] usb 47-1: new low-speed USB device number 4 using vhci_hcd [ 2088.877974][ T5983] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2089.905601][ T5983] usb 8-1: Using ep0 maxpacket: 16 [ 2090.042956][ T5983] usb 8-1: device descriptor read/all, error -71 [ 2090.052642][T24821] vhci_hcd: connection reset by peer [ 2090.116929][T13842] vhci_hcd: stop threads [ 2090.127197][T13842] vhci_hcd: release socket [ 2090.142245][T13842] vhci_hcd: disconnect device [ 2092.121866][T24862] 9pnet_fd: Insufficient options for proto=fd [ 2092.288748][T10812] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 2093.620058][T24878] siw: device registration error -23 [ 2094.022540][T10812] usb 7-1: device not accepting address 62, error -71 [ 2094.358086][T12626] vhci_hcd: vhci_device speed not set [ 2094.531028][T24880] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2094.537572][T24880] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2094.555576][T24880] vhci_hcd vhci_hcd.0: Device attached [ 2094.797995][ T3084] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2094.805880][ T45] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 2095.468994][ T3084] usb 3-1: Using ep0 maxpacket: 16 [ 2095.543535][ T3084] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2095.555399][ T3084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.564679][ T3084] usb 3-1: Product: syz [ 2095.570278][ T3084] usb 3-1: Manufacturer: syz [ 2095.575043][ T3084] usb 3-1: SerialNumber: syz [ 2095.588093][ T3084] usb 3-1: config 0 descriptor?? [ 2095.650634][ T3084] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2095.697550][ T3084] usb 3-1: Detected FT232H [ 2096.281460][T24891] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 2096.338041][ T3084] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2096.338361][ T3084] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2096.338702][ T3084] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2096.412524][ T3084] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2096.668140][ T3084] usb 3-1: USB disconnect, device number 75 [ 2096.676606][ T3084] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2096.687140][ T3084] ftdi_sio 3-1:0.0: device disconnected [ 2096.724438][T24915] 9pnet_fd: Insufficient options for proto=fd [ 2096.732468][T17701] vhci_hcd: stop threads [ 2096.757032][T17701] vhci_hcd: release socket [ 2096.828167][T17701] vhci_hcd: disconnect device [ 2096.837253][T24917] 9pnet_fd: Insufficient options for proto=fd [ 2097.978015][T13257] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 2097.995184][T24935] IPVS: Error joining to the multicast group [ 2098.133836][T13257] usb 5-1: config 0 has no interfaces? [ 2098.147380][T13257] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2098.157609][T13257] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.191027][T13257] usb 5-1: Product: syz [ 2098.209807][T13257] usb 5-1: Manufacturer: syz [ 2098.234913][T13257] usb 5-1: SerialNumber: syz [ 2098.259987][T13257] usb 5-1: config 0 descriptor?? [ 2098.512970][T12626] usb 5-1: USB disconnect, device number 55 [ 2099.316025][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.322692][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2100.248328][T24963] netlink: 'syz.8.5129': attribute type 4 has an invalid length. [ 2100.814917][ T45] vhci_hcd: vhci_device speed not set [ 2101.732099][T24974] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 2101.732130][T24974] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2101.733399][T24974] vhci_hcd vhci_hcd.0: Device attached [ 2102.717941][T12626] usb 37-1: new low-speed USB device number 6 using vhci_hcd [ 2102.727956][T13257] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2102.998117][T13257] usb 3-1: Using ep0 maxpacket: 16 [ 2103.005073][T13257] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2103.005096][T13257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.005108][T13257] usb 3-1: Product: syz [ 2103.005117][T13257] usb 3-1: Manufacturer: syz [ 2103.005126][T13257] usb 3-1: SerialNumber: syz [ 2103.007733][T13257] usb 3-1: config 0 descriptor?? [ 2103.013677][T13257] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 2103.014365][T13257] usb 3-1: Detected FT232H [ 2103.359201][T24979] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 4 [ 2103.359361][T13257] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2103.369725][T13257] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2103.371922][T13257] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 2103.376315][ T12] vhci_hcd: stop threads [ 2103.376337][ T12] vhci_hcd: release socket [ 2103.376375][ T12] vhci_hcd: disconnect device [ 2103.376588][T13257] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2103.380841][T13257] usb 3-1: USB disconnect, device number 76 [ 2103.383642][T13257] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2103.383881][T13257] ftdi_sio 3-1:0.0: device disconnected [ 2104.769755][T25009] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5145'. [ 2107.202487][T25015] netlink: 'syz.8.5146': attribute type 4 has an invalid length. [ 2107.598103][T25029] binder: 25028:25029 ioctl c0306201 0 returned -14 [ 2107.807959][T12626] vhci_hcd: vhci_device speed not set [ 2108.995045][T25040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5156'. [ 2109.297948][ T3084] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 2109.460578][ T3084] usb 3-1: config 0 has no interfaces? [ 2109.625729][ T3084] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2109.625765][ T3084] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2109.625787][ T3084] usb 3-1: Product: syz [ 2109.625804][ T3084] usb 3-1: Manufacturer: syz [ 2109.625820][ T3084] usb 3-1: SerialNumber: syz [ 2110.043197][ T3084] usb 3-1: config 0 descriptor?? [ 2110.164800][T25054] overlayfs: failed to clone lowerpath [ 2110.220973][T24988] tty tty4: ldisc open failed (-12), clearing slot 3 [ 2110.261482][ T3084] usb 3-1: USB disconnect, device number 77 [ 2113.341502][T25092] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 2113.348068][T25092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2113.360337][T25092] vhci_hcd vhci_hcd.0: Device attached [ 2113.527918][T13257] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 2113.647910][T12626] usb 47-1: new low-speed USB device number 5 using vhci_hcd [ 2113.757889][T13257] usb 8-1: Using ep0 maxpacket: 16 [ 2113.779336][T13257] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2113.808109][T13257] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.836611][T13257] usb 8-1: Product: syz [ 2113.847005][T13257] usb 8-1: Manufacturer: syz [ 2113.857994][T13257] usb 8-1: SerialNumber: syz [ 2113.875344][T13257] usb 8-1: config 0 descriptor?? [ 2113.899847][T13257] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 2113.921708][T13257] usb 8-1: Detected FT232H [ 2114.105914][T25096] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 3 [ 2114.106118][T13257] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 2114.145135][ T3035] vhci_hcd: stop threads [ 2114.152926][ T3035] vhci_hcd: release socket [ 2114.158048][T13257] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2114.169069][T13257] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 2114.172144][ T3035] vhci_hcd: disconnect device [ 2114.188217][T13257] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2114.210401][T13257] usb 8-1: USB disconnect, device number 53 [ 2114.231634][T13257] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2114.258483][T13257] ftdi_sio 8-1:0.0: device disconnected [ 2118.777955][T12626] vhci_hcd: vhci_device speed not set [ 2120.166634][T25162] ================================================================== [ 2120.174827][T25162] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 2120.182664][T25162] Read of size 1 at addr ffff88806b5a6830 by task syz.4.5196/25162 [ 2120.190668][T25162] [ 2120.193007][T25162] CPU: 1 UID: 0 PID: 25162 Comm: syz.4.5196 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 2120.193023][T25162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2120.193030][T25162] Call Trace: [ 2120.193037][T25162] [ 2120.193043][T25162] dump_stack_lvl+0x189/0x250 [ 2120.193064][T25162] ? __virt_addr_valid+0x1c8/0x5c0 [ 2120.193075][T25162] ? rcu_is_watching+0x15/0xb0 [ 2120.193091][T25162] ? __kasan_check_byte+0x12/0x40 [ 2120.193105][T25162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2120.193121][T25162] ? rcu_is_watching+0x15/0xb0 [ 2120.193137][T25162] ? lock_release+0x4b/0x3e0 [ 2120.193151][T25162] ? __virt_addr_valid+0x1c8/0x5c0 [ 2120.193161][T25162] ? __virt_addr_valid+0x4a5/0x5c0 [ 2120.193172][T25162] print_report+0xd2/0x2b0 [ 2120.193187][T25162] ? rose_get_neigh+0x391/0x990 [ 2120.193203][T25162] kasan_report+0x118/0x150 [ 2120.193217][T25162] ? rose_get_neigh+0x391/0x990 [ 2120.193233][T25162] rose_get_neigh+0x391/0x990 [ 2120.193250][T25162] rose_connect+0x416/0x10a0 [ 2120.193262][T25162] ? __pfx_smack_socket_connect+0x10/0x10 [ 2120.193281][T25162] ? __might_fault+0xb0/0x130 [ 2120.193294][T25162] ? __pfx_rose_connect+0x10/0x10 [ 2120.193308][T25162] ? tomoyo_socket_connect_permission+0x164/0x290 [ 2120.193326][T25162] ? bpf_lsm_socket_connect+0x9/0x20 [ 2120.193339][T25162] __sys_connect+0x316/0x440 [ 2120.193351][T25162] ? __pfx___sys_connect+0x10/0x10 [ 2120.193365][T25162] ? rcu_is_watching+0x15/0xb0 [ 2120.193383][T25162] __x64_sys_connect+0x7a/0x90 [ 2120.193395][T25162] do_syscall_64+0xfa/0x3b0 [ 2120.193411][T25162] ? lockdep_hardirqs_on+0x9c/0x150 [ 2120.193427][T25162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.193437][T25162] ? clear_bhb_loop+0x60/0xb0 [ 2120.193449][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.193460][T25162] RIP: 0033:0x7fcd0058e929 [ 2120.193472][T25162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2120.193482][T25162] RSP: 002b:00007fcd0140e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2120.193496][T25162] RAX: ffffffffffffffda RBX: 00007fcd007b5fa0 RCX: 00007fcd0058e929 [ 2120.193505][T25162] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008 [ 2120.193512][T25162] RBP: 00007fcd00610b39 R08: 0000000000000000 R09: 0000000000000000 [ 2120.193519][T25162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2120.193526][T25162] R13: 0000000000000000 R14: 00007fcd007b5fa0 R15: 00007ffda3aeb9d8 [ 2120.193538][T25162] [ 2120.193542][T25162] [ 2120.445401][T25162] Allocated by task 24645: [ 2120.449920][T25162] kasan_save_track+0x3e/0x80 [ 2120.454598][T25162] __kasan_kmalloc+0x93/0xb0 [ 2120.459185][T25162] __kmalloc_cache_noprof+0x230/0x3d0 [ 2120.464552][T25162] rose_add_node+0x23a/0xde0 [ 2120.469157][T25162] rose_rt_ioctl+0xa48/0xfb0 [ 2120.473765][T25162] rose_ioctl+0x3ce/0x8b0 [ 2120.478208][T25162] sock_do_ioctl+0xdc/0x300 [ 2120.482798][T25162] sock_ioctl+0x576/0x790 [ 2120.487149][T25162] __se_sys_ioctl+0xfc/0x170 [ 2120.491744][T25162] do_syscall_64+0xfa/0x3b0 [ 2120.496270][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.502168][T25162] [ 2120.504501][T25162] Freed by task 25070: [ 2120.508602][T25162] kasan_save_track+0x3e/0x80 [ 2120.513379][T25162] kasan_save_free_info+0x46/0x50 [ 2120.518413][T25162] __kasan_slab_free+0x62/0x70 [ 2120.523214][T25162] kfree+0x18e/0x440 [ 2120.527232][T25162] rose_rt_device_down+0x66d/0x6c0 [ 2120.532444][T25162] rose_device_event+0x603/0x6a0 [ 2120.537385][T25162] notifier_call_chain+0x1b3/0x3e0 [ 2120.542526][T25162] __dev_notify_flags+0x18d/0x2e0 [ 2120.547665][T25162] netif_change_flags+0xe8/0x1a0 [ 2120.552598][T25162] dev_change_flags+0x130/0x260 [ 2120.557451][T25162] dev_ioctl+0x7b4/0x1150 [ 2120.561794][T25162] sock_do_ioctl+0x22c/0x300 [ 2120.566388][T25162] sock_ioctl+0x576/0x790 [ 2120.570716][T25162] __se_sys_ioctl+0xfc/0x170 [ 2120.575300][T25162] do_syscall_64+0xfa/0x3b0 [ 2120.579804][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.585699][T25162] [ 2120.588060][T25162] The buggy address belongs to the object at ffff88806b5a6800 [ 2120.588060][T25162] which belongs to the cache kmalloc-512 of size 512 [ 2120.602125][T25162] The buggy address is located 48 bytes inside of [ 2120.602125][T25162] freed 512-byte region [ffff88806b5a6800, ffff88806b5a6a00) [ 2120.615920][T25162] [ 2120.618243][T25162] The buggy address belongs to the physical page: [ 2120.624648][T25162] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b5a4 [ 2120.633418][T25162] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2120.641915][T25162] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2120.649815][T25162] page_type: f5(slab) [ 2120.653805][T25162] raw: 00fff00000000040 ffff88801a441c80 ffffea0000c7dc00 dead000000000003 [ 2120.662382][T25162] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2120.670965][T25162] head: 00fff00000000040 ffff88801a441c80 ffffea0000c7dc00 dead000000000003 [ 2120.679822][T25162] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 2120.688550][T25162] head: 00fff00000000002 ffffea0001ad6901 00000000ffffffff 00000000ffffffff [ 2120.697239][T25162] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 2120.706024][T25162] page dumped because: kasan: bad access detected [ 2120.712436][T25162] page_owner tracks the page as allocated [ 2120.718143][T25162] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5820, tgid 5820 (syz-executor), ts 91500394014, free_ts 81583983510 [ 2120.739671][T25162] post_alloc_hook+0x240/0x2a0 [ 2120.744437][T25162] get_page_from_freelist+0x21d5/0x22b0 [ 2120.750094][T25162] __alloc_frozen_pages_noprof+0x181/0x370 [ 2120.755982][T25162] alloc_pages_mpol+0x232/0x4a0 [ 2120.760830][T25162] allocate_slab+0x8a/0x3b0 [ 2120.765332][T25162] ___slab_alloc+0xbfc/0x1480 [ 2120.770011][T25162] __kmalloc_cache_noprof+0x296/0x3d0 [ 2120.775485][T25162] binderfs_binder_device_create+0x1eb/0xc40 [ 2120.781467][T25162] binderfs_fill_super+0xa0e/0xe90 [ 2120.786591][T25162] get_tree_nodev+0xbb/0x150 [ 2120.791181][T25162] vfs_get_tree+0x92/0x2b0 [ 2120.795678][T25162] do_new_mount+0x24a/0xa40 [ 2120.800182][T25162] __se_sys_mount+0x317/0x410 [ 2120.804949][T25162] do_syscall_64+0xfa/0x3b0 [ 2120.809453][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.815337][T25162] page last free pid 5810 tgid 5810 stack trace: [ 2120.821654][T25162] free_unref_folios+0xcd2/0x1570 [ 2120.826685][T25162] folios_put_refs+0x559/0x640 [ 2120.831447][T25162] free_pages_and_swap_cache+0x277/0x520 [ 2120.837336][T25162] tlb_flush_mmu+0x3a0/0x680 [ 2120.841919][T25162] tlb_finish_mmu+0xc3/0x1d0 [ 2120.846499][T25162] vms_clear_ptes+0x42c/0x540 [ 2120.851184][T25162] vms_complete_munmap_vmas+0x206/0x8a0 [ 2120.856736][T25162] do_vmi_align_munmap+0x358/0x420 [ 2120.861857][T25162] do_vmi_munmap+0x253/0x2e0 [ 2120.866449][T25162] __vm_munmap+0x23b/0x3d0 [ 2120.870864][T25162] __x64_sys_munmap+0x60/0x70 [ 2120.875534][T25162] do_syscall_64+0xfa/0x3b0 [ 2120.880057][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2120.885973][T25162] [ 2120.888296][T25162] Memory state around the buggy address: [ 2120.894102][T25162] ffff88806b5a6700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2120.902245][T25162] ffff88806b5a6780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2120.910427][T25162] >ffff88806b5a6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.918512][T25162] ^ [ 2120.924136][T25162] ffff88806b5a6880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.932282][T25162] ffff88806b5a6900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2120.940396][T25162] ================================================================== [ 2120.948629][T25162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2120.955824][T25162] CPU: 1 UID: 0 PID: 25162 Comm: syz.4.5196 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 2120.967983][T25162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2120.978035][T25162] Call Trace: [ 2120.981331][T25162] [ 2120.984254][T25162] dump_stack_lvl+0x99/0x250 [ 2120.988851][T25162] ? __asan_memcpy+0x40/0x70 [ 2120.993433][T25162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2120.998629][T25162] ? __pfx__printk+0x10/0x10 [ 2121.003214][T25162] panic+0x2db/0x790 [ 2121.007192][T25162] ? __pfx_panic+0x10/0x10 [ 2121.011695][T25162] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2121.018214][T25162] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2121.024114][T25162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2121.030441][T25162] ? print_memory_metadata+0x314/0x400 [ 2121.035902][T25162] ? rose_get_neigh+0x391/0x990 [ 2121.040779][T25162] check_panic_on_warn+0x89/0xb0 [ 2121.045765][T25162] ? rose_get_neigh+0x391/0x990 [ 2121.050690][T25162] end_report+0x78/0x160 [ 2121.054948][T25162] kasan_report+0x129/0x150 [ 2121.059456][T25162] ? rose_get_neigh+0x391/0x990 [ 2121.064313][T25162] rose_get_neigh+0x391/0x990 [ 2121.068993][T25162] rose_connect+0x416/0x10a0 [ 2121.073589][T25162] ? __pfx_smack_socket_connect+0x10/0x10 [ 2121.079319][T25162] ? __might_fault+0xb0/0x130 [ 2121.083990][T25162] ? __pfx_rose_connect+0x10/0x10 [ 2121.089010][T25162] ? tomoyo_socket_connect_permission+0x164/0x290 [ 2121.095573][T25162] ? bpf_lsm_socket_connect+0x9/0x20 [ 2121.100912][T25162] __sys_connect+0x316/0x440 [ 2121.105597][T25162] ? __pfx___sys_connect+0x10/0x10 [ 2121.110735][T25162] ? rcu_is_watching+0x15/0xb0 [ 2121.115505][T25162] __x64_sys_connect+0x7a/0x90 [ 2121.120262][T25162] do_syscall_64+0xfa/0x3b0 [ 2121.124761][T25162] ? lockdep_hardirqs_on+0x9c/0x150 [ 2121.129954][T25162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.136011][T25162] ? clear_bhb_loop+0x60/0xb0 [ 2121.140682][T25162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2121.146567][T25162] RIP: 0033:0x7fcd0058e929 [ 2121.150980][T25162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.170621][T25162] RSP: 002b:00007fcd0140e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2121.179038][T25162] RAX: ffffffffffffffda RBX: 00007fcd007b5fa0 RCX: 00007fcd0058e929 [ 2121.187008][T25162] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008 [ 2121.194971][T25162] RBP: 00007fcd00610b39 R08: 0000000000000000 R09: 0000000000000000 [ 2121.202937][T25162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2121.210900][T25162] R13: 0000000000000000 R14: 00007fcd007b5fa0 R15: 00007ffda3aeb9d8 [ 2121.218873][T25162] [ 2121.222192][T25162] Kernel Offset: disabled [ 2121.226514][T25162] Rebooting in 86400 seconds..