last executing test programs: 9m27.978310471s ago: executing program 4 (id=4301): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) socket(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, r6, r5}) 9m23.841228955s ago: executing program 4 (id=4309): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b7030000000000008500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) creat(0x0, 0x188) chdir(0x0) io_setup(0x81, &(0x7f0000000400)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) io_submit(r5, 0x0, &(0x7f0000000440)) 9m21.776968478s ago: executing program 4 (id=4315): socket$kcm(0x2, 0x1, 0x84) socket$inet(0x2b, 0x801, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000300)={0x0, 0x3087, 0x10, 0x100004, 0x219}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m20.784179766s ago: executing program 4 (id=4316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 9m14.449772381s ago: executing program 32 (id=4296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 9m10.76352417s ago: executing program 33 (id=4306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 9m9.210149226s ago: executing program 5 (id=4335): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x7, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000400)=0x1000000) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = userfaultfd(0x801) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)={0x1}) 9m8.743272041s ago: executing program 5 (id=4337): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f00000004c0)=0x7, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000400)=0x1000000) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r5 = userfaultfd(0x801) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)={0x1}) 9m8.359133862s ago: executing program 5 (id=4338): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) syz_io_uring_setup(0x610a, &(0x7f0000000100)={0x0, 0x0, 0x20401, 0x2, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000"], 0x18}, 0x0, 0x20040000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd28, 0x25dfdbfa, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4040006) read$FUSE(r5, &(0x7f00000010c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv4_newrule={0x34, 0x20, 0x301, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7ff}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0xfffffffc}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$key(0xf, 0x3, 0x2) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x1449c1, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x23, &(0x7f0000000100)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcb, &(0x7f0000000440)=""/203, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) connect$inet6(r6, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) sendto$inet6(r6, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xffffff70}, 0x1c) 9m7.158951822s ago: executing program 5 (id=4340): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='I', 0x1, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000100), 0x6) 9m6.240239179s ago: executing program 5 (id=4342): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x62, {"f242af66b830010f00d0c402cd0a1366ba400066b81d1966efc4e1ff70118d0f783dfd7f00002e26640f01c9b9830b0000b864f70000ba000000000f30b805000000b9820000000f01d9c4e1d1d574cd04"}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x8001, 0x3}}, @code={0x1, 0x5c, {"66ba420066b8090066ef450fb1e4410f01c466470f3830ca366564430f350fc7a970110000c7442400a3000000c744240200800000ff2c24f3420f1ad066b8b3008ec8f04728aa00000000"}}, @cpuid={0x2, 0x18, {0x91, 0x5}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}], 0x1ab}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m5.275352954s ago: executing program 34 (id=4316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 9m4.88862085s ago: executing program 5 (id=4345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 9m2.047866197s ago: executing program 35 (id=4321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 8m49.410302951s ago: executing program 36 (id=4345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r3 = syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) ptrace(0x10, r3) r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r6, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r7 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r7, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 7m10.146090787s ago: executing program 7 (id=4604): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m6.792890378s ago: executing program 7 (id=4608): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7ffffffe, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 7m1.020948341s ago: executing program 7 (id=4615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4001, 0x0, @loopback, 0x4}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x1, 0x7, 0x4, 0x3, {{0x6, 0x4, 0x1, 0x7, 0x18, 0x66, 0x0, 0x6, 0x2f, 0x0, @loopback, @multicast2, {[@end]}}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ftruncate(0xffffffffffffffff, 0xffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) getpid() move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x244) ioctl$TCSETS(0xffffffffffffffff, 0xc0384707, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x800000, 0x4, "3eccd8f9d20000000000001000000200000500"}) close_range(r0, 0xffffffffffffffff, 0x0) 7m0.328076538s ago: executing program 7 (id=4617): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_usbip_server_init(0x4) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x9, 0xfff, 0x0, 0x0, 0xf, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 6m54.752273465s ago: executing program 7 (id=4624): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x6, 0x239, &(0x7f0000000000)=ANY=[], 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000019300)=ANY=[], 0x0) 6m52.34177277s ago: executing program 6 (id=4628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) syz_clone(0x40010000, 0x0, 0x4f, 0x0, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f0000000140)=ANY=[@ANYBLOB="7851160007"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e8668c391f77c50600", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) futimesat(r5, &(0x7f0000000240)='./file1/file0\x00', &(0x7f0000000300)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x0) keyctl$join(0x1, 0x0) 6m50.174063246s ago: executing program 6 (id=4630): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @code={0x1, 0x62, {"f242af66b830010f00d0c402cd0a1366ba400066b81d1966efc4e1ff70118d0f783dfd7f00002e26640f01c9b9830b0000b864f70000ba000000000f30b805000000b9820000000f01d9c4e1d1d574cd04"}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x8001, 0x3}}, @code={0x1, 0x5c, {"66ba420066b8090066ef450fb1e4410f01c466470f3830ca366564430f350fc7a970110000c7442400a3000000c744240200800000ff2c24f3420f1ad066b8b3008ec8f04728aa00000000"}}, @cpuid={0x2, 0x18, {0x91, 0x5}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}], 0x1c3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m49.457458211s ago: executing program 7 (id=4632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 6m47.95587932s ago: executing program 6 (id=4635): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket(0x10, 0x3, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000380)={0x1, r7, r6}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000080)={0x0, r7, r6}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000800000000500000a40000000060a8bae00000000000000000a0000010900010073797a31000000001400048010000180090001006d617371000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000500)=ANY=[@ANYBLOB="1907000000000000030000000000000003000000f8ffffff09000000000000000a00000000000000807900000000000009000000000000000000000000000000000000000000000004200000000000000000000000000000ff0700000000000007000000000000000b00000000000000000000000000000000000000000000000b0600000000000000000000000000008300000000000000325e0a00000000000f0000000000000000000093f900000000000000000000000a00000000000000000000000000000085000000000000000400000000000000000000000000000000000000000000008c3100000000000000000000000000001000000020000000010000000000000006000000000000000000f3ff000000000000000000000000001800000000000000000000000000000900000000000000000000000000000007000000000000000000000000000000000000000000f10002000000000000000000000000000000010001000000000001000000000000000200000000000000000000000000000000000000000000008001000000000000000000000000000007000000000000000080000000000000ffffffffffffffff0000000000000000000000000000000080000000000000000000000000000000ffff00000000000080000000000000000b0000000000000000000000000000000000000000000000800800"/528]) 6m46.605269579s ago: executing program 6 (id=4639): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() poll(0x0, 0x0, 0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) socket(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000380)={0x1, 0x0, r5}) 6m43.546015789s ago: executing program 6 (id=4641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x1, {0x0, 0x180, 0x20fe, 0x5, 0x87, 0xd615, 0x9, 0x7ffffffe, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 6m41.373892419s ago: executing program 6 (id=4644): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_usbip_server_init(0x4) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x9, 0xfff, 0x0, 0x0, 0xf, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 6m33.061352855s ago: executing program 37 (id=4632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 6m25.471413266s ago: executing program 38 (id=4644): pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_usbip_server_init(0x4) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x6, 0x25d}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x9, 0xfff, 0x0, 0x0, 0xf, 0x0, {0x2}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 4m33.060786464s ago: executing program 9 (id=4788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000840)="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", 0x2000, &(0x7f0000007080)={&(0x7f00000000c0)={0x50, 0x0, 0xffffffffffffff14, {0x7, 0x2b, 0x4, 0x8000, 0x892f, 0x138, 0x10, 0x2, 0x0, 0x0, 0x80, 0x1}}, &(0x7f0000000240)={0x18, 0xfffffffffffffffe, 0x3ff, {0x80000000}}, 0x0, 0x0, &(0x7f00000003c0)={0x18, 0x0, 0xf, {0x7}}, 0x0, &(0x7f0000000440)={0x60, 0xfffffffffffffffe, 0x2, {{0x7, 0x200, 0x7, 0xffffffff, 0xe036, 0x80000000, 0x80000001, 0x9}}}, &(0x7f00000004c0)={0x18, 0x0, 0x8, {0x4}}, &(0x7f0000000500)=ANY=[@ANYBLOB="13000000daffffff0300000000000b00000000"], &(0x7f0000000540)={0x20, 0x0, 0x2, {0x0, 0x7}}, 0x0, 0x0, &(0x7f00000006c0)={0x30, 0x0, 0x7ff, [{0x2, 0x6, 0x4, 0x7, 'GPL\x00'}]}, 0x0, 0x0, &(0x7f0000006ec0)={0x20, 0x0, 0x1, {0x6, 0x4, 0x7, 0x9357fac}}, 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 4m32.064662823s ago: executing program 9 (id=4790): move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x271) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 4m30.628866546s ago: executing program 9 (id=4792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}}) 4m25.883475167s ago: executing program 9 (id=4797): sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="49391547809082cc8ae53c74c9e22b512608e4b4b7cd4f564d051525f12fc327d783037eda7ae2e5e122ca8f7b3c3d7d5c4b3297bc3dfb27d8de1141e6acbba0876e3572ea49c3dacfd7eefc131ab5406b4c6d8f7d9d9d32326db560cbe50de71593f84a2f6e0df173670cb625c21f31d27a6e1a7396041c505628746422cef51ceaa4da2450bc0d0648f0d863217cac7fa3f5edbc3bd250c8b04ff0b5486c102fddb9250ed6199c3b1419df02da7ce8b766745c00c698b04fd2a2ee2c51", 0xbe, 0xd1e31231a3c0ee19, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @private2}, 0x1c) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x8000236, &(0x7f0000000500)={0x0, 0x4533, 0x0, 0x3, 0x24e, 0x0, r1}, &(0x7f0000000180), &(0x7f0000000640)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4m24.094461014s ago: executing program 9 (id=4799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000680)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 4m21.601829418s ago: executing program 9 (id=4802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r4}, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r5 = dup(0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 4m4.841482542s ago: executing program 39 (id=4802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000780)={0x0, r4}, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x8911, &(0x7f0000000140)={0xa, 0xfffc, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) r5 = dup(0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r5, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 3m40.971986285s ago: executing program 2 (id=4845): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x7fffffffffffffff, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3m38.518198836s ago: executing program 2 (id=4847): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 3m33.422227801s ago: executing program 2 (id=4850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000001600)=""/4112, 0x1010}], 0x1) 3m31.864562082s ago: executing program 2 (id=4853): add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023892) 3m28.917782629s ago: executing program 2 (id=4855): syz_open_dev$tty1(0xc, 0x4, 0x1) syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000019300)=ANY=[], 0x0) 3m23.279410977s ago: executing program 2 (id=4862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 3m7.957933974s ago: executing program 40 (id=4862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m3.75559802s ago: executing program 4 (id=4812): socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000088) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000020000000000021800000000fd010000000008000100ac141400080005000a0101020c00168008000300e00000020600150006000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000100)={'gre0\x00', @ifru_flags=0x400}) writev(0xffffffffffffffff, 0x0, 0x0) 50.136577229s ago: executing program 4 (id=5052): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mkdir(&(0x7f0000000040)='./file2\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) 41.69272009s ago: executing program 0 (id=5070): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0xa) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(0xffffffffffffffff, r4, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) futex(0x0, 0x85, 0x0, 0x0, &(0x7f0000000080), 0x15000000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32, @ANYRES8], 0x4c}}, 0x40000) syz_emit_ethernet(0x1fc, &(0x7f0000000140)=ANY=[@ANYRES32], 0x0) 41.328701326s ago: executing program 0 (id=5071): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 41.209451481s ago: executing program 1 (id=5072): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 36.287042674s ago: executing program 0 (id=5073): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "62e9b29ff773593729f19d214c04e60a8d2c892b777d60cacc3f431db982ef1540d1e5cac915f917764b5cd61b015da7929c666d3155c05fe87673a9b206361fe425a51bf8f7bf389bc4466e7c9cbde7b42c20e675811683515e553a474d3259de76c3322a2aa7ac304cef67e866be6f87f010a0c95534cb0aa41fbd4d54a8c0ab878fc60e525771a620b489c929ffca1bcc2994c36eef72e7d04ed6ed1ba46edb818e84f2bd5aa53084120ce80aaea16754b2741a"}, 0xc0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r5, r6, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 35.918027345s ago: executing program 1 (id=5075): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f00000001c0)={0x0, 0x8, 0x7, "11452b39b2e5cd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x82, 0x2, "0c83"}, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000d00)={0x1c, &(0x7f0000000c00)={0x0, 0x5, 0x7, "1775200e207ae7"}, 0x0, 0x0}) 34.947418701s ago: executing program 41 (id=5052): accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80400) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xd8ef}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mkdir(&(0x7f0000000040)='./file2\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) 34.517929644s ago: executing program 8 (id=5079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 33.471758729s ago: executing program 3 (id=5080): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 31.492171876s ago: executing program 0 (id=5081): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "62e9b29ff773593729f19d214c04e60a8d2c892b777d60cacc3f431db982ef1540d1e5cac915f917764b5cd61b015da7929c666d3155c05fe87673a9b206361fe425a51bf8f7bf389bc4466e7c9cbde7b42c20e675811683515e553a474d3259de76c3322a2aa7ac304cef67e866be6f87f010a0c95534cb0aa41fbd4d54a8c0ab878fc60e525771a620b489c929ffca1bcc2994c36eef72e7d04ed6ed1ba46edb818e84f2bd5aa53084120ce80aaea16754b2741a"}, 0xc0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r5, r6, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 31.137384658s ago: executing program 1 (id=5082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x18, 0x3, "51b1ef41816fd67a0527f76ec1db9e537c4c3060"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x4048010) 29.8894624s ago: executing program 8 (id=5083): openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000087000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f00000001c0), 0x3, 0x101040) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0) pipe(0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, r4, 0x1, 0x70bd2a, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x19, 0xf7, 0x20, 0x471, 0x312, 0x9469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xb4, 0xc7, 0x6a, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}]}], [{{0x9, 0x5, 0x7, 0x19, 0x200, 0x8, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @generic={0xd, 0x3b, "a64ca5eab9884d11a74913"}]}}]}}]}}]}}, 0x0) 26.860247678s ago: executing program 1 (id=5084): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x509731f6d538811) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x1) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="1c00000000000000000000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x40010000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 26.553641365s ago: executing program 3 (id=5085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x2, @local}}, 0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x7c3ec3) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) r8 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000900)={{0x0, 0x4, 0x2, 0x0, 'syz1\x00', 0xd3}, 0x1, 0x200, 0x2, r8, 0x0, 0x3, 'syz1\x00', 0x0}) readv(r7, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) close_range(r6, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680)) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, 0x0, 0x0) 25.076818112s ago: executing program 3 (id=5086): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x1, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r1, 0x0, 0x0) 22.479601867s ago: executing program 0 (id=5087): openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000087000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f00000001c0), 0x3, 0x101040) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}}, 0x0) pipe(0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x18, r4, 0x1, 0x70bd2a, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x19, 0xf7, 0x20, 0x471, 0x312, 0x9469, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x1, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf, 0x0, 0x1, 0xb4, 0xc7, 0x6a, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x0, 0x5}]}], [{{0x9, 0x5, 0x7, 0x19, 0x200, 0x8, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x1}, @generic={0xd, 0x3b, "a64ca5eab9884d11a74913"}]}}]}}]}}]}}, 0x0) 21.593843187s ago: executing program 8 (id=5088): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0', [], 0xa, "62e9b29ff773593729f19d214c04e60a8d2c892b777d60cacc3f431db982ef1540d1e5cac915f917764b5cd61b015da7929c666d3155c05fe87673a9b206361fe425a51bf8f7bf389bc4466e7c9cbde7b42c20e675811683515e553a474d3259de76c3322a2aa7ac304cef67e866be6f87f010a0c95534cb0aa41fbd4d54a8c0ab878fc60e525771a620b489c929ffca1bcc2994c36eef72e7d04ed6ed1ba46edb818e84f2bd5aa53084120ce80aaea16754b2741a"}, 0xc0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f00000024c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r3, r4, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 20.698827417s ago: executing program 3 (id=5089): socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x483, 0x0, 0x0, 0x0) 19.795081378s ago: executing program 1 (id=5090): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, 0x0}, 0x4404c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 18.899681215s ago: executing program 3 (id=5091): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/key-users\x00', 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write(r1, 0x0, 0x0) 18.83846592s ago: executing program 8 (id=5092): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)="0284"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}], 0x0, 0x0, 0x0}) 17.457869579s ago: executing program 8 (id=5093): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000), 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) ioctl$sock_proto_private(r4, 0x89e9, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 17.252714008s ago: executing program 0 (id=5094): close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x26, 0x80002, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) socket$kcm(0x29, 0x7, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x98, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000000c0)={0x106, 0x32315559, 0x2, @discrete={0x20007, 0x8}}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) 17.113337182s ago: executing program 1 (id=5095): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0xfc, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 13.526373809s ago: executing program 8 (id=5096): socket(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000088) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000100)={'gre0\x00', @ifru_flags=0x400}) writev(0xffffffffffffffff, 0x0, 0x0) 13.525981148s ago: executing program 3 (id=5097): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x8000000000000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 0s ago: executing program 42 (id=5094): close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000600)={0x4040100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x3, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$key(0xf, 0x3, 0x2) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x62, &(0x7f0000000200)=0xad52, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x26, 0x80002, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x1) socket$kcm(0x29, 0x7, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x98, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000000c0)={0x106, 0x32315559, 0x2, @discrete={0x20007, 0x8}}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r5 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) kernel console output (not intermixed with test programs): 68][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.270735][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.324884][T21807] 9pnet_fd: Insufficient options for proto=fd [ 1417.483199][T15027] Bluetooth: hci7: command tx timeout [ 1417.679622][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1417.692344][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1417.748358][T21776] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1417.780476][T21776] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1417.790753][T21776] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1417.814942][T21776] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1417.962938][T15027] Bluetooth: hci6: command tx timeout [ 1418.473363][T21776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.498781][T21776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.513778][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.520908][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.566514][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.573613][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.899796][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1418.908980][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1419.053171][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1419.066397][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1419.078697][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1419.639972][ T51] Bluetooth: hci7: command tx timeout [ 1419.683840][T21776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1420.044613][ T51] Bluetooth: hci6: command tx timeout [ 1421.238948][ T51] Bluetooth: hci8: command tx timeout [ 1421.727391][ T51] Bluetooth: hci7: command tx timeout [ 1421.759215][T21828] chnl_net:caif_netlink_parms(): no params data found [ 1422.380733][T21828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.400763][T21828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.421782][T21828] bridge_slave_0: entered allmulticast mode [ 1422.443045][T21828] bridge_slave_0: entered promiscuous mode [ 1422.463766][T21828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.471414][T21828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.478902][T21828] bridge_slave_1: entered allmulticast mode [ 1422.488170][T21828] bridge_slave_1: entered promiscuous mode [ 1422.540134][T21828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.557365][T21776] veth0_vlan: entered promiscuous mode [ 1422.578208][T21828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.607659][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.616670][T21776] veth1_vlan: entered promiscuous mode [ 1422.676732][T21828] team0: Port device team_slave_0 added [ 1422.685493][T21828] team0: Port device team_slave_1 added [ 1422.699621][T21776] veth0_macvtap: entered promiscuous mode [ 1422.814749][T21776] veth1_macvtap: entered promiscuous mode [ 1423.040685][T21828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.049191][T21828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.088048][T21828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.181110][T21828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.224999][T21828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.566852][ T51] Bluetooth: hci8: command tx timeout [ 1423.572975][T21828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.626830][T21776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1423.637692][T21776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1423.657998][ T7750] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.676624][ T7750] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.718931][ T7750] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.748194][T16940] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.790697][T21828] hsr_slave_0: entered promiscuous mode [ 1423.798572][T21828] hsr_slave_1: entered promiscuous mode [ 1423.805507][ T51] Bluetooth: hci7: command tx timeout [ 1423.822927][T21828] debugfs: 'hsr0' already exists in 'hsr' [ 1423.829357][T21828] Cannot create hsr debugfs directory [ 1423.940760][T16940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1423.964520][T16940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.080929][ T7780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.098640][ T7780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.228267][T21828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1424.316242][T21828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1424.327074][T21828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1424.344198][T21828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1424.890786][T21828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1424.991978][T21828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.101027][T20390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.108113][T20390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.166504][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.173597][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.204862][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1425.214101][T21884] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4360'. [ 1425.230123][T21828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1425.241477][T21828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1425.643255][ T51] Bluetooth: hci8: command tx timeout [ 1426.365105][ T30] audit: type=1400 audit(1757859296.078:2335): avc: denied { write } for pid=21892 comm="syz.3.4363" path="socket:[73673]" dev="sockfs" ino=73673 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1426.392997][T21828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.723977][ T51] Bluetooth: hci8: command tx timeout [ 1428.807705][T21937] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4372'. [ 1430.574408][T21828] veth0_vlan: entered promiscuous mode [ 1430.629519][T21828] veth1_vlan: entered promiscuous mode [ 1430.770002][T21828] veth0_macvtap: entered promiscuous mode [ 1430.793450][T21828] veth1_macvtap: entered promiscuous mode [ 1430.837784][T21828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.892074][T21828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.111793][T21948] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.129614][T21948] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.593677][T21948] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.621317][T21948] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.635517][T15027] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1431.647508][T15027] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1431.660072][T15027] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1431.669759][T15027] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1431.684361][T15027] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1431.815452][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.826704][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.931596][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.955918][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.746162][T21970] chnl_net:caif_netlink_parms(): no params data found [ 1433.812688][ T51] Bluetooth: hci9: command tx timeout [ 1434.603243][T21970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.610417][T21970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.622530][T21970] bridge_slave_0: entered allmulticast mode [ 1434.629785][T21970] bridge_slave_0: entered promiscuous mode [ 1434.664477][T21970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.677130][T21970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.691070][T21970] bridge_slave_1: entered allmulticast mode [ 1434.710236][T21970] bridge_slave_1: entered promiscuous mode [ 1434.892659][T21970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1434.919510][T21970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.134418][T21970] team0: Port device team_slave_0 added [ 1435.201102][T21970] team0: Port device team_slave_1 added [ 1435.496785][ T30] audit: type=1400 audit(1757859305.608:2336): avc: denied { read append } for pid=22012 comm="syz.7.4394" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1435.518442][ T30] audit: type=1400 audit(1757859305.608:2337): avc: denied { open } for pid=22012 comm="syz.7.4394" path="/9/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1435.560401][T21970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1435.567763][T21970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.595678][T21970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1435.608140][T21970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1435.616923][T21970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1435.643044][T21970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1435.737525][T21970] hsr_slave_0: entered promiscuous mode [ 1435.755886][T21970] hsr_slave_1: entered promiscuous mode [ 1435.770194][T21970] debugfs: 'hsr0' already exists in 'hsr' [ 1435.794211][T21970] Cannot create hsr debugfs directory [ 1435.906490][ T51] Bluetooth: hci9: command tx timeout [ 1436.118653][T21970] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1436.127932][T21970] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1436.138102][T21970] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1436.148816][T21970] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1436.809595][T21970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1436.827547][T21970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1436.850883][T20390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.858043][T20390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1436.868891][T20390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.876031][T20390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.972313][T21806] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1437.117730][T21970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.132305][T21806] usb 7-1: Using ep0 maxpacket: 8 [ 1438.000975][ T51] Bluetooth: hci9: command tx timeout [ 1438.088818][T14883] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1438.140154][T14883] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1438.333956][T21970] veth0_vlan: entered promiscuous mode [ 1438.352459][T21970] veth1_vlan: entered promiscuous mode [ 1438.406470][T21970] veth0_macvtap: entered promiscuous mode [ 1438.422069][T21970] veth1_macvtap: entered promiscuous mode [ 1438.461308][T21970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.480270][T21970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.510495][T18897] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.554573][T18897] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.570786][T18897] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.618371][T18897] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.637928][T21806] usb 7-1: config 162 has an invalid interface number: 97 but max is 0 [ 1438.646404][T21806] usb 7-1: config 162 has no interface number 0 [ 1438.655181][T21806] usb 7-1: config 162 interface 97 has no altsetting 0 [ 1438.669477][T21806] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1438.683605][T14883] usb 1-1: USB disconnect, device number 59 [ 1438.708359][T21806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.720508][T21806] usb 7-1: Product: syz [ 1438.727886][T21806] usb 7-1: Manufacturer: syz [ 1438.735635][T21806] usb 7-1: SerialNumber: syz [ 1438.740065][ T7752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.755494][ T7752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.809155][T20390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.825853][T20390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1440.050847][ T51] Bluetooth: hci9: command tx timeout [ 1440.932992][T21806] metro_usb 7-1:162.97: required endpoints missing [ 1440.975627][T21806] usb 7-1: USB disconnect, device number 2 [ 1446.939863][T22113] fuse: Bad value for 'fd' [ 1449.733923][T18897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.789806][T18897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.220893][T18897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.341684][T18897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.277499][T18897] bond0 (unregistering): Released all slaves [ 1457.000462][T18897] tipc: Left network mode [ 1458.187311][T18897] hsr_slave_0: left promiscuous mode [ 1458.198410][T18897] hsr_slave_1: left promiscuous mode [ 1458.224940][T18897] veth1_macvtap: left promiscuous mode [ 1458.232559][T18897] veth0_macvtap: left promiscuous mode [ 1458.247047][T18897] veth1_vlan: left promiscuous mode [ 1458.256358][T18897] veth0_vlan: left promiscuous mode [ 1461.343269][T14362] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1461.414295][T15785] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1461.553621][T14362] usb 4-1: Using ep0 maxpacket: 8 [ 1461.560714][T14362] usb 4-1: config 162 has an invalid interface number: 97 but max is 0 [ 1461.577341][T14362] usb 4-1: config 162 has no interface number 0 [ 1461.632861][T15785] usb 8-1: Using ep0 maxpacket: 32 [ 1461.886331][T14362] usb 4-1: config 162 interface 97 has no altsetting 0 [ 1461.986476][T15785] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1461.994936][T15785] usb 8-1: config 0 has no interface number 0 [ 1462.004073][T14362] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1462.027829][T14362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.036303][T15785] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1462.214891][T14362] usb 4-1: Product: syz [ 1462.274460][T15785] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1462.295375][T14362] usb 4-1: Manufacturer: syz [ 1462.410843][T14362] usb 4-1: SerialNumber: syz [ 1462.417203][T15785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.553688][T15785] usb 8-1: Product: syz [ 1462.579647][T15785] usb 8-1: Manufacturer: syz [ 1462.589389][T15785] usb 8-1: SerialNumber: syz [ 1462.606189][T15785] usb 8-1: config 0 descriptor?? [ 1462.636222][T15785] smsc75xx v1.0.0 [ 1462.761925][T14362] metro_usb 4-1:162.97: interrupt-out endpoint missing [ 1462.832759][T14362] usb 4-1: USB disconnect, device number 48 [ 1464.041874][T15785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1464.376010][T15785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1464.389045][T15785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1464.407073][T15785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1464.418385][T15785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1464.433317][T15785] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1464.496821][T15785] usb 8-1: USB disconnect, device number 2 [ 1465.174964][T22282] binder_alloc: 22279: binder_alloc_buf, no vma [ 1469.017276][T18897] IPVS: stop unused estimator thread 0... [ 1469.992388][T17071] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1470.020158][T18897] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.154789][T17071] usb 8-1: Using ep0 maxpacket: 8 [ 1470.229608][T17071] usb 8-1: config 162 has an invalid interface number: 97 but max is 0 [ 1470.239162][T17071] usb 8-1: config 162 has no interface number 0 [ 1470.245752][T17071] usb 8-1: config 162 interface 97 has no altsetting 0 [ 1470.267277][T18897] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.687962][T17071] usb 8-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 1470.704336][T17071] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.735189][T17071] usb 8-1: Product: syz [ 1470.745608][T17071] usb 8-1: Manufacturer: syz [ 1470.767284][T18897] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.784707][T17071] usb 8-1: SerialNumber: syz [ 1471.064076][T17071] metro_usb 8-1:162.97: interrupt-out endpoint missing [ 1471.094542][T17071] usb 8-1: USB disconnect, device number 3 [ 1471.368779][T18897] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.024025][T18897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.402258][T18897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.979909][T18897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1473.725289][T18897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1474.053149][T21866] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1474.493369][T21866] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1474.530091][T21866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.555986][T21866] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1474.579813][T21866] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1474.619674][T21866] usb 4-1: Manufacturer: syz [ 1475.633338][T21866] usb 4-1: config 0 descriptor?? [ 1475.810550][T18897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.616013][T18897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.675296][T21866] rc_core: IR keymap rc-hauppauge not found [ 1476.703124][T21866] Registered IR keymap rc-empty [ 1476.764102][T21866] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1476.799189][T18897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.823953][T21866] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input89 [ 1477.521861][T21866] usb 4-1: USB disconnect, device number 49 [ 1477.622900][T18897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.676484][T18897] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.829686][T18897] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.383999][T18897] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.563619][T18897] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.889262][T22436] trusted_key: encrypted_key: insufficient parameters specified [ 1480.813649][T18897] bridge_slave_1: left allmulticast mode [ 1480.852413][T18897] bridge_slave_1: left promiscuous mode [ 1480.890597][T18897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.898833][T22443] fuse: Unknown parameter 'group_id00000000000000000000' [ 1480.934975][T22440] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4507'. [ 1480.944231][T22440] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4507'. [ 1480.965955][T18897] bridge_slave_0: left allmulticast mode [ 1480.971599][T18897] bridge_slave_0: left promiscuous mode [ 1480.982426][T18897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1481.172356][ T5919] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1481.565557][ T5919] usb 8-1: Using ep0 maxpacket: 32 [ 1481.574534][ T5919] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1481.597345][ T5919] usb 8-1: config 0 has no interface number 0 [ 1481.603888][ T5919] usb 8-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1481.668781][ T5919] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1481.717094][ T5919] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1481.736423][ T5919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.766232][ T5919] usb 8-1: Product: syz [ 1481.786059][ T5919] usb 8-1: Manufacturer: syz [ 1481.787770][ T30] audit: type=1400 audit(1757859351.888:2338): avc: denied { write } for pid=22456 comm="syz.6.4512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1481.799576][ T5919] usb 8-1: SerialNumber: syz [ 1481.825573][ T5919] usb 8-1: config 0 descriptor?? [ 1481.854441][ T5919] smsc75xx v1.0.0 [ 1481.858209][ T5919] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1481.911181][ T5919] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -22 [ 1484.102555][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.483574][ T5919] usb 8-1: USB disconnect, device number 4 [ 1485.176863][T15027] Bluetooth: hci7: command 0x0406 tx timeout [ 1485.228844][T22486] trusted_key: encrypted_key: insufficient parameters specified [ 1485.244331][T22486] overlayfs: missing 'lowerdir' [ 1485.725060][T18897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.799775][T18897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.818892][T18897] bond0 (unregistering): Released all slaves [ 1485.825246][ T5919] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1486.210761][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 1486.226776][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.274577][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1486.345076][ T5919] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1486.363402][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.392748][ T5919] usb 4-1: Product: syz [ 1486.396935][ T5919] usb 4-1: Manufacturer: syz [ 1486.408993][ T5919] usb 4-1: SerialNumber: syz [ 1486.415597][T22500] binder: BINDER_SET_CONTEXT_MGR already set [ 1486.421608][T22500] binder: 22499:22500 ioctl 4018620d 200000000040 returned -16 [ 1486.460042][ T5919] usb 4-1: config 0 descriptor?? [ 1486.556515][T22505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4524'. [ 1486.611965][T22507] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4524'. [ 1487.414319][T18897] bond0 (unregistering): Released all slaves [ 1487.700319][T18897] bond0 (unregistering): Released all slaves [ 1487.958109][T18897] bond0 (unregistering): Released all slaves [ 1489.917111][T16854] usb 4-1: USB disconnect, device number 50 [ 1490.259169][T18897] tipc: Left network mode [ 1490.276490][T18897] tipc: Left network mode [ 1491.384332][T22545] binder: BINDER_SET_CONTEXT_MGR already set [ 1491.406728][T22545] binder: 22540:22545 ioctl 4018620d 200000000040 returned -16 [ 1491.440033][T18897] tipc: Left network mode [ 1492.785277][T22561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1494.405590][T22588] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2047 sclass=netlink_xfrm_socket pid=22588 comm=syz.3.4547 [ 1497.411110][ T30] audit: type=1400 audit(1757859367.518:2339): avc: denied { create } for pid=22609 comm="syz.6.4553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1499.472545][T14883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1499.672800][T14883] usb 7-1: Using ep0 maxpacket: 32 [ 1499.720323][T14883] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1499.752548][T14883] usb 7-1: config 0 has no interface number 0 [ 1499.758905][T14883] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1499.769787][ T5919] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1499.786211][T14883] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1499.797301][T14883] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1499.811512][T14883] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1500.874256][ T5919] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1500.887960][T14883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.996994][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.057885][T14883] usb 7-1: Product: syz [ 1501.103176][T14883] usb 7-1: Manufacturer: syz [ 1501.117044][ T5919] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1501.128353][T14883] usb 7-1: SerialNumber: syz [ 1501.139246][T14883] usb 7-1: config 0 descriptor?? [ 1501.145717][ T5919] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1501.256966][T14883] smsc75xx v1.0.0 [ 1501.261436][ T5919] usb 4-1: Manufacturer: syz [ 1501.291843][T14883] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1501.422429][T14883] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1501.608606][ T5919] usb 4-1: config 0 descriptor?? [ 1502.307510][ T5919] rc_core: IR keymap rc-hauppauge not found [ 1502.314429][ T5919] Registered IR keymap rc-empty [ 1502.321294][ T5919] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1502.353064][ T5919] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input90 [ 1502.729920][ C0] igorplugusb 4-1:0.0: receive overflow invalid: 13 [ 1502.886482][ T5919] usb 7-1: USB disconnect, device number 3 [ 1502.928746][T22656] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2047 sclass=netlink_xfrm_socket pid=22656 comm=syz.8.4564 [ 1502.943989][T22354] usb 4-1: USB disconnect, device number 51 [ 1502.998301][T18897] hsr_slave_0: left promiscuous mode [ 1503.340707][T18897] hsr_slave_1: left promiscuous mode [ 1503.361739][T18897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.369821][T18897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.381065][T18897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.392355][T18897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.011086][ T5919] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1504.037477][T18897] hsr_slave_0: left promiscuous mode [ 1504.047111][T18897] hsr_slave_1: left promiscuous mode [ 1504.141981][T18897] hsr_slave_0: left promiscuous mode [ 1504.182247][ T5919] usb 7-1: Using ep0 maxpacket: 32 [ 1504.188135][T18897] hsr_slave_1: left promiscuous mode [ 1504.198159][ T5919] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1504.217183][T18897] hsr_slave_0: left promiscuous mode [ 1504.222582][ T5919] usb 7-1: config 0 has no interface number 0 [ 1504.264287][ T5919] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1504.274056][ T5919] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1504.283206][ T5919] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.291181][ T5919] usb 7-1: Product: syz [ 1504.295902][ T5919] usb 7-1: Manufacturer: syz [ 1504.300490][ T5919] usb 7-1: SerialNumber: syz [ 1504.321773][ T5919] usb 7-1: config 0 descriptor?? [ 1504.350210][ T5919] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1504.350801][T18897] hsr_slave_1: left promiscuous mode [ 1504.400815][ T5919] em28xx 7-1:0.89: Video interface 89 found: bulk [ 1504.790430][T18897] veth1_macvtap: left promiscuous mode [ 1504.857901][T18897] veth0_macvtap: left promiscuous mode [ 1504.897892][T18897] veth1_vlan: left promiscuous mode [ 1504.929530][T18897] veth0_vlan: left promiscuous mode [ 1504.981598][ T5919] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 1505.029330][T18897] veth1_macvtap: left promiscuous mode [ 1505.069988][ T5919] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1505.073188][T18897] veth0_macvtap: left promiscuous mode [ 1505.113103][ T5919] em28xx 7-1:0.89: board has no eeprom [ 1505.142476][T18897] veth1_vlan: left promiscuous mode [ 1505.169008][T18897] veth0_vlan: left promiscuous mode [ 1505.193183][T18897] veth1_macvtap: left promiscuous mode [ 1505.202429][ T5919] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 1505.211177][T18897] veth0_macvtap: left promiscuous mode [ 1505.320888][T18897] veth1_vlan: left promiscuous mode [ 1505.332906][T18897] veth0_vlan: left promiscuous mode [ 1505.340746][ T5919] em28xx 7-1:0.89: analog set to bulk mode. [ 1505.369618][T21866] em28xx 7-1:0.89: Registering V4L2 extension [ 1505.379585][T18897] veth1_macvtap: left promiscuous mode [ 1505.389824][ T5919] usb 7-1: USB disconnect, device number 4 [ 1505.401339][T18897] veth0_macvtap: left promiscuous mode [ 1505.434290][ T5919] em28xx 7-1:0.89: Disconnecting em28xx [ 1505.457332][T18897] veth1_vlan: left promiscuous mode [ 1505.493018][T18897] veth0_vlan: left promiscuous mode [ 1505.521122][T21866] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 1505.537499][T21866] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 1505.560620][T21866] em28xx 7-1:0.89: No AC97 audio processor [ 1505.591693][T21866] usb 7-1: Decoder not found [ 1505.612231][T21866] em28xx 7-1:0.89: failed to create media graph [ 1505.618516][T21866] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 1505.679161][T21866] em28xx 7-1:0.89: Registering snapshot button... [ 1506.632704][T21866] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input91 [ 1506.695720][T21866] em28xx 7-1:0.89: Remote control support is not available for this card. [ 1506.724912][ T5919] em28xx 7-1:0.89: Closing input extension [ 1506.742988][ T5919] em28xx 7-1:0.89: Deregistering snapshot button [ 1506.791917][ T5919] em28xx 7-1:0.89: Freeing device [ 1508.167743][T18897] team0 (unregistering): Port device team_slave_1 removed [ 1508.220064][T18897] team0 (unregistering): Port device team_slave_0 removed [ 1510.267330][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.276367][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.286948][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.298733][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.312514][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.321464][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.330800][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.339846][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.348971][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.359983][T22660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4565'. [ 1510.372195][T22669] tipc: Enabled bearer , priority 0 [ 1510.390940][T22678] tipc: Resetting bearer [ 1510.413981][T22704] lo speed is unknown, defaulting to 1000 [ 1510.466277][T22668] tipc: Disabling bearer [ 1510.506378][T22704] lo speed is unknown, defaulting to 1000 [ 1510.524601][T22704] lo speed is unknown, defaulting to 1000 [ 1510.543809][T22704] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1510.558923][T22704] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1510.605254][T22704] lo speed is unknown, defaulting to 1000 [ 1510.611807][T22704] lo speed is unknown, defaulting to 1000 [ 1510.619956][T22704] lo speed is unknown, defaulting to 1000 [ 1510.626348][T22704] lo speed is unknown, defaulting to 1000 [ 1510.632842][T22704] lo speed is unknown, defaulting to 1000 [ 1510.822546][T22354] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1512.018251][T22354] usb 7-1: Using ep0 maxpacket: 32 [ 1512.101164][T22354] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1512.117740][T22354] usb 7-1: config 0 has no interface number 0 [ 1512.145455][T22354] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1512.204349][T22354] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1512.248348][T22354] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1512.415187][ T30] audit: type=1400 audit(1757859382.448:2340): avc: denied { write } for pid=22722 comm="syz.7.4581" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1512.446917][T22354] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1512.534306][T22354] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.562469][T22354] usb 7-1: Product: syz [ 1512.566693][T22354] usb 7-1: Manufacturer: syz [ 1512.577465][T22354] usb 7-1: SerialNumber: syz [ 1512.904978][T22354] usb 7-1: config 0 descriptor?? [ 1513.188963][T22354] smsc75xx v1.0.0 [ 1513.264562][T22354] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1513.303616][T22354] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -22 [ 1514.521276][ T30] audit: type=1800 audit(1757859384.628:2341): pid=22736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4583" name="/" dev="9p" ino=2 res=0 errno=0 [ 1514.724227][ T5919] usb 7-1: USB disconnect, device number 5 [ 1519.941984][T22763] binder: BINDER_SET_CONTEXT_MGR already set [ 1520.139366][T22763] binder: 22762:22763 ioctl 4018620d 200000000040 returned -16 [ 1520.697990][T22774] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2047 sclass=netlink_xfrm_socket pid=22774 comm=syz.7.4590 [ 1520.728876][T22772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1524.737492][T21866] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1525.470003][T21866] usb 10-1: Using ep0 maxpacket: 32 [ 1525.476909][T21866] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1525.630960][T21866] usb 10-1: config 0 has no interface number 0 [ 1525.899405][T21866] usb 10-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1526.356999][T21866] usb 10-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 0 [ 1526.426516][T21866] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1527.801017][T22795] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1527.807564][T22795] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1528.670702][T21866] usb 10-1: string descriptor 0 read error: -71 [ 1528.679718][T22795] vhci_hcd vhci_hcd.0: Device attached [ 1528.814771][T21866] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1528.980379][T14883] vhci_hcd: vhci_device speed not set [ 1529.056383][T21866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.162271][T14883] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1529.259822][T22798] vhci_hcd: connection closed [ 1529.283336][T20390] vhci_hcd: stop threads [ 1529.299605][T21866] usb 10-1: config 0 descriptor?? [ 1529.392594][T21866] usb 10-1: can't set config #0, error -71 [ 1529.400937][T20390] vhci_hcd: release socket [ 1529.414668][T20390] vhci_hcd: disconnect device [ 1529.422605][T21866] usb 10-1: USB disconnect, device number 2 [ 1534.449452][T14883] vhci_hcd: vhci_device speed not set [ 1537.324135][T15027] Bluetooth: hci6: command 0x0406 tx timeout [ 1538.638938][T14883] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1538.931910][T14883] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1538.957593][T14883] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.018117][T14883] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1539.141046][T14883] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1539.178847][T14883] usb 7-1: Manufacturer: syz [ 1539.197350][T14883] usb 7-1: config 0 descriptor?? [ 1539.474656][T14883] rc_core: IR keymap rc-hauppauge not found [ 1539.490725][T14883] Registered IR keymap rc-empty [ 1539.807945][T14883] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1541.379296][T14883] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input92 [ 1542.452689][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 1542.677020][T22862] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1542.683563][T22862] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1542.732737][T14883] usb 7-1: USB disconnect, device number 6 [ 1543.552523][T22862] vhci_hcd vhci_hcd.0: Device attached [ 1544.099870][ T5919] vhci_hcd: vhci_device speed not set [ 1544.912234][ T5919] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1545.253975][T22868] vhci_hcd: connection reset by peer [ 1545.286606][T18897] vhci_hcd: stop threads [ 1545.311300][T18897] vhci_hcd: release socket [ 1545.467138][T18897] vhci_hcd: disconnect device [ 1546.070176][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.012204][T21866] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1549.863179][T21866] usb 4-1: Using ep0 maxpacket: 16 [ 1549.892111][T21866] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1549.910227][T21866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1549.927488][T21866] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1549.953143][T21866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.112294][ T5919] vhci_hcd: vhci_device speed not set [ 1550.276634][T21866] usb 4-1: Product: syz [ 1550.485298][T21866] usb 4-1: Manufacturer: syz [ 1550.507136][T21866] usb 4-1: SerialNumber: syz [ 1550.524662][T21866] usb 4-1: config 0 descriptor?? [ 1550.558403][T21866] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1550.628366][T21866] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1551.704846][T22929] siw: device registration error -23 [ 1551.733418][T21866] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1551.962383][T21866] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1552.031627][T21866] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1552.096976][T21866] em28xx 4-1:0.0: No AC97 audio processor [ 1552.186042][T21866] usb 4-1: USB disconnect, device number 52 [ 1552.256866][T21866] em28xx 4-1:0.0: Disconnecting em28xx [ 1552.421308][T21866] em28xx 4-1:0.0: Freeing device [ 1553.868926][ T30] audit: type=1326 audit(1757859423.978:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1555.597186][ T30] audit: type=1326 audit(1757859423.978:2343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1555.628490][ T30] audit: type=1326 audit(1757859424.038:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1555.905127][ T30] audit: type=1326 audit(1757859424.038:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1555.928654][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.233754][ T30] audit: type=1326 audit(1757859424.038:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1557.271425][ T30] audit: type=1326 audit(1757859424.038:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1557.294987][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.571519][ T30] audit: type=1326 audit(1757859424.038:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1557.595048][ C0] vkms_vblank_simulate: vblank timer overrun [ 1557.782202][ T30] audit: type=1326 audit(1757859424.038:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1558.612198][ T51] Bluetooth: hci9: command 0x0406 tx timeout [ 1558.797235][ T30] audit: type=1326 audit(1757859424.038:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1558.914269][ T30] audit: type=1326 audit(1757859424.038:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1558.948696][ T30] audit: type=1326 audit(1757859424.038:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1558.973111][ T30] audit: type=1326 audit(1757859424.038:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1558.996460][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.002870][ T30] audit: type=1326 audit(1757859424.038:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1559.026298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.766070][ T30] audit: type=1326 audit(1757859424.038:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1567.192335][ T30] audit: type=1326 audit(1757859424.038:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1567.942204][ T30] audit: type=1326 audit(1757859424.068:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1568.234736][ T30] audit: type=1326 audit(1757859424.168:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1570.649838][ T30] audit: type=1326 audit(1757859424.358:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1570.861781][T22980] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1570.868317][T22980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1571.005250][T22980] vhci_hcd vhci_hcd.0: Device attached [ 1571.506293][ T30] audit: type=1326 audit(1757859424.358:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22948 comm="syz.9.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1572.550876][T22064] vhci_hcd: vhci_device speed not set [ 1572.977628][T22064] usb 45-1: new full-speed USB device number 3 using vhci_hcd [ 1573.008632][ T30] audit: type=1326 audit(1757859443.118:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1574.622221][ T30] audit: type=1326 audit(1757859443.118:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1575.359566][ T30] audit: type=1326 audit(1757859443.118:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1579.460031][ C1] sched: DL replenish lagged too much [ 1581.058506][ T30] audit: type=1326 audit(1757859443.118:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1581.363485][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1581.381630][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1581.389563][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1581.400103][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1581.410496][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1581.453045][ T30] audit: type=1326 audit(1757859443.118:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1581.831241][T22998] lo speed is unknown, defaulting to 1000 [ 1581.894005][ T30] audit: type=1326 audit(1757859443.118:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1582.083155][ T30] audit: type=1326 audit(1757859443.118:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1582.961556][ T30] audit: type=1326 audit(1757859443.118:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1583.155826][ T30] audit: type=1326 audit(1757859443.118:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1583.482279][ T51] Bluetooth: hci1: command tx timeout [ 1583.782224][ T30] audit: type=1326 audit(1757859443.118:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1584.016006][T13064] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.092747][T15027] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1584.103256][T15027] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1584.111185][T15027] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1584.119261][T15027] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1584.127020][T15027] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1584.285581][ T30] audit: type=1326 audit(1757859443.118:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1584.576105][ T30] audit: type=1326 audit(1757859443.118:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1584.600712][ T30] audit: type=1326 audit(1757859443.118:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22985 comm="syz.8.4649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2978eba9 code=0x7ffc0000 [ 1585.562212][T15027] Bluetooth: hci1: command tx timeout [ 1585.918654][T23022] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1585.925277][T23022] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1585.938765][T23022] vhci_hcd vhci_hcd.0: Device attached [ 1586.202228][T15027] Bluetooth: hci2: command tx timeout [ 1587.380698][T23023] vhci_hcd: connection closed [ 1587.453049][T20390] vhci_hcd: stop threads [ 1587.467692][T20390] vhci_hcd: release socket [ 1587.472080][T20390] vhci_hcd: disconnect device [ 1587.642364][T15027] Bluetooth: hci1: command tx timeout [ 1587.793946][T22981] vhci_hcd: connection reset by peer [ 1588.150794][ T6373] vhci_hcd: stop threads [ 1588.157374][ T6373] vhci_hcd: release socket [ 1588.165279][ T6373] vhci_hcd: disconnect device [ 1588.264846][T22064] vhci_hcd: vhci_device speed not set [ 1588.283408][T15027] Bluetooth: hci2: command tx timeout [ 1588.700992][T13064] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.835204][T23014] lo speed is unknown, defaulting to 1000 [ 1589.025233][T13064] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.312978][T13064] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.727617][T15027] Bluetooth: hci1: command tx timeout [ 1589.816233][T22998] chnl_net:caif_netlink_parms(): no params data found [ 1590.362327][T15027] Bluetooth: hci2: command tx timeout [ 1591.048646][T22998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1591.066146][T22998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1591.094785][T22998] bridge_slave_0: entered allmulticast mode [ 1591.116993][T22998] bridge_slave_0: entered promiscuous mode [ 1591.130748][T23014] chnl_net:caif_netlink_parms(): no params data found [ 1591.182906][T13064] bridge_slave_1: left allmulticast mode [ 1591.202056][T13064] bridge_slave_1: left promiscuous mode [ 1591.232463][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1591.486097][T13064] bridge_slave_0: left allmulticast mode [ 1591.495427][T13064] bridge_slave_0: left promiscuous mode [ 1591.564788][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.493523][T15027] Bluetooth: hci2: command tx timeout [ 1594.842619][T22064] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1595.007621][T13064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1595.021670][T13064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1595.037997][T13064] bond0 (unregistering): Released all slaves [ 1595.054610][T22998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.061704][T22998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.070215][T22998] bridge_slave_1: entered allmulticast mode [ 1595.079823][T22998] bridge_slave_1: entered promiscuous mode [ 1595.099848][T22064] usb 4-1: Using ep0 maxpacket: 32 [ 1595.384328][T22064] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1595.398521][T22064] usb 4-1: config 0 has no interface number 0 [ 1595.588449][T22998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1595.592582][T22064] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1595.674977][T22998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1595.677061][T22064] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1595.731620][T22064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.758282][T22064] usb 4-1: Product: syz [ 1595.773759][T22064] usb 4-1: Manufacturer: syz [ 1595.786184][T22064] usb 4-1: SerialNumber: syz [ 1595.873525][T22064] usb 4-1: config 0 descriptor?? [ 1596.937544][T22998] team0: Port device team_slave_0 added [ 1596.949473][T22998] team0: Port device team_slave_1 added [ 1597.107709][T23014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.117688][T23014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.127293][T23014] bridge_slave_0: entered allmulticast mode [ 1597.140299][T23014] bridge_slave_0: entered promiscuous mode [ 1597.180762][T22998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.200553][T22998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.288605][T22998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1597.305454][T23014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.317322][T23014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.329611][T23014] bridge_slave_1: entered allmulticast mode [ 1597.340751][T23014] bridge_slave_1: entered promiscuous mode [ 1597.368871][T22998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1597.379476][T22998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1597.410690][T22998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1597.481490][T13064] hsr_slave_0: left promiscuous mode [ 1597.498536][T13064] hsr_slave_1: left promiscuous mode [ 1597.507357][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.516450][T13064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.528504][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.537320][T13064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.584691][T13064] veth1_macvtap: left promiscuous mode [ 1597.590357][T13064] veth0_macvtap: left promiscuous mode [ 1597.607164][T13064] veth1_vlan: left promiscuous mode [ 1597.615371][T13064] veth0_vlan: left promiscuous mode [ 1597.824475][T21806] usb 4-1: USB disconnect, device number 53 [ 1599.295912][T13064] team0 (unregistering): Port device team_slave_1 removed [ 1599.364893][T13064] team0 (unregistering): Port device team_slave_0 removed [ 1600.078875][T23106] syzkaller0: entered promiscuous mode [ 1600.090896][T23106] syzkaller0: entered allmulticast mode [ 1600.177563][T23014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.213700][T16854] lo speed is unknown, defaulting to 1000 [ 1600.221011][T16854] infiniband syz0: ib_query_port failed (-19) [ 1600.588322][T23014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1600.909776][T22998] hsr_slave_0: entered promiscuous mode [ 1600.935611][T22998] hsr_slave_1: entered promiscuous mode [ 1600.987535][T23014] team0: Port device team_slave_0 added [ 1601.035386][T23014] team0: Port device team_slave_1 added [ 1601.344831][T23014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.354643][T23014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.416664][T23014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.521071][T23014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.577286][T23014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1601.610847][T23014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.739309][T23014] hsr_slave_0: entered promiscuous mode [ 1601.761426][T23014] hsr_slave_1: entered promiscuous mode [ 1601.780795][T23014] debugfs: 'hsr0' already exists in 'hsr' [ 1601.803583][T23014] Cannot create hsr debugfs directory [ 1602.157207][T13064] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.087886][T13064] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.437713][T13064] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.642098][T13064] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.937161][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.389287][T13064] bridge_slave_1: left allmulticast mode [ 1608.420973][T13064] bridge_slave_1: left promiscuous mode [ 1609.122175][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.765421][T23150] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1609.771953][T23150] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1609.785494][T23150] vhci_hcd vhci_hcd.0: Device attached [ 1610.332302][T23151] vhci_hcd: connection closed [ 1610.334690][T13064] bridge_slave_0: left allmulticast mode [ 1610.345678][ T3466] vhci_hcd: stop threads [ 1610.350980][ T3466] vhci_hcd: release socket [ 1610.385597][ T3466] vhci_hcd: disconnect device [ 1610.391193][T13064] bridge_slave_0: left promiscuous mode [ 1610.408023][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1615.735607][T13064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1615.791035][T13064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1615.829924][T13064] bond0 (unregistering): Released all slaves [ 1616.823828][T23182] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1616.830346][T23182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1616.843979][T23182] vhci_hcd vhci_hcd.0: Device attached [ 1617.614879][T14362] usb 39-1: new high-speed USB device number 9 using vhci_hcd [ 1617.650091][T23183] vhci_hcd: connection closed [ 1618.147448][T21948] vhci_hcd: stop threads [ 1618.349041][T21948] vhci_hcd: release socket [ 1618.365071][T21948] vhci_hcd: disconnect device [ 1619.573769][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1619.573784][ T30] audit: type=1400 audit(1757859489.678:2381): avc: denied { map } for pid=23188 comm="syz.9.4700" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1619.695280][ T30] audit: type=1400 audit(1757859489.678:2382): avc: denied { execute } for pid=23188 comm="syz.9.4700" path="/dev/sg0" dev="devtmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1620.152607][T23203] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1620.202062][T13064] hsr_slave_0: left promiscuous mode [ 1620.217961][T13064] hsr_slave_1: left promiscuous mode [ 1620.226867][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.268996][T13064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.620522][T13064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.637530][T13064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.721744][T13064] veth1_macvtap: left promiscuous mode [ 1620.738736][T13064] veth0_macvtap: left promiscuous mode [ 1620.752419][T13064] veth1_vlan: left promiscuous mode [ 1620.768801][T13064] veth0_vlan: left promiscuous mode [ 1621.747145][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 1623.279681][T14362] vhci_hcd: vhci_device speed not set [ 1625.678825][T23229] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1625.685370][T23229] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1625.709278][T23229] vhci_hcd vhci_hcd.0: Device attached [ 1625.807654][T23230] vhci_hcd: connection closed [ 1625.808006][ T6373] vhci_hcd: stop threads [ 1625.821035][ T6373] vhci_hcd: release socket [ 1625.838872][ T6373] vhci_hcd: disconnect device [ 1626.094037][T13064] team0 (unregistering): Port device team_slave_1 removed [ 1626.152977][T13064] team0 (unregistering): Port device team_slave_0 removed [ 1627.680074][ T30] audit: type=1326 audit(1757859497.598:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.9.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1628.548013][T23247] binder_alloc: 23246: binder_alloc_buf, no vma [ 1628.554472][ T30] audit: type=1326 audit(1757859497.598:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.9.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1628.779822][ T30] audit: type=1326 audit(1757859498.168:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.9.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1628.862203][ T30] audit: type=1326 audit(1757859498.168:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.9.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1629.542239][ T30] audit: type=1326 audit(1757859498.168:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.9.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1630.106328][ T30] audit: type=1326 audit(1757859498.168:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23236 comm="syz.9.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1633.088396][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1633.289044][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1633.298460][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1633.312077][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1633.319808][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1636.219639][ T51] Bluetooth: hci3: command tx timeout [ 1638.050072][T23282] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1638.056604][T23282] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1638.135921][T23282] vhci_hcd vhci_hcd.0: Device attached [ 1638.145011][T23284] vhci_hcd: connection closed [ 1638.164383][ T3466] vhci_hcd: stop threads [ 1638.217226][ T3466] vhci_hcd: release socket [ 1638.234792][ T3466] vhci_hcd: disconnect device [ 1638.284589][T15027] Bluetooth: hci3: command tx timeout [ 1638.597434][T23289] overlayfs: failed to resolve './file1': -2 [ 1639.456454][T23291] binder_alloc: 23290: binder_alloc_buf, no vma [ 1639.531718][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1639.548747][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1639.558838][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1639.624596][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1639.672475][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1640.363504][ T51] Bluetooth: hci3: command tx timeout [ 1641.191535][T23263] chnl_net:caif_netlink_parms(): no params data found [ 1641.426188][T23313] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 1641.432727][T23313] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1641.501765][T23313] vhci_hcd vhci_hcd.0: Device attached [ 1641.588298][T23314] vhci_hcd: connection closed [ 1641.588513][ T3466] vhci_hcd: stop threads [ 1641.643303][ T3466] vhci_hcd: release socket [ 1641.664421][ T3466] vhci_hcd: disconnect device [ 1641.725158][T23310] __nla_validate_parse: 43 callbacks suppressed [ 1641.725179][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1641.744093][ T51] Bluetooth: hci4: command tx timeout [ 1641.824588][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1641.871721][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1641.896011][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1641.955172][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1641.982289][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1642.228840][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1642.265284][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1642.301975][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1642.443177][ T51] Bluetooth: hci3: command tx timeout [ 1643.802490][ T51] Bluetooth: hci4: command tx timeout [ 1644.032406][T23310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'. [ 1645.164555][T23294] chnl_net:caif_netlink_parms(): no params data found [ 1645.412386][T13064] bridge_slave_1: left allmulticast mode [ 1645.418051][T13064] bridge_slave_1: left promiscuous mode [ 1645.472453][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.506058][T13064] bridge_slave_0: left allmulticast mode [ 1645.521916][T13064] bridge_slave_0: left promiscuous mode [ 1645.529657][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.884062][ T51] Bluetooth: hci4: command tx timeout [ 1646.240968][T13064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.962462][ T51] Bluetooth: hci4: command tx timeout [ 1648.088489][T13064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1648.119522][T13064] bond0 (unregistering): Released all slaves [ 1648.174363][T23263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.181596][T23263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.216432][T23263] bridge_slave_0: entered allmulticast mode [ 1648.227298][T23263] bridge_slave_0: entered promiscuous mode [ 1648.420352][ T30] audit: type=1400 audit(1757859518.528:2389): avc: denied { getopt } for pid=23344 comm="syz.9.4737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1648.610027][T13064] hsr_slave_0: left promiscuous mode [ 1648.627907][T13064] hsr_slave_1: left promiscuous mode [ 1648.768365][T13064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.848380][T13064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.494640][T23358] No control pipe specified [ 1650.499437][ T30] audit: type=1400 audit(1757859520.598:2390): avc: denied { read } for pid=23357 comm="syz.9.4742" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1650.530293][ T30] audit: type=1400 audit(1757859520.598:2391): avc: denied { open } for pid=23357 comm="syz.9.4742" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1650.571132][ T30] audit: type=1400 audit(1757859520.638:2392): avc: denied { ioctl } for pid=23357 comm="syz.9.4742" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1650.618633][T13064] team0 (unregistering): Port device team_slave_1 removed [ 1650.794139][T13064] team0 (unregistering): Port device team_slave_0 removed [ 1650.980499][T23362] overlayfs: failed to resolve './file0': -2 [ 1651.137198][T23263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.156474][T23263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.165517][T23263] bridge_slave_1: entered allmulticast mode [ 1651.176859][T23263] bridge_slave_1: entered promiscuous mode [ 1651.375651][T23263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1651.504390][T23263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1651.599475][T23294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.638594][T23294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1651.677252][T23294] bridge_slave_0: entered allmulticast mode [ 1651.718998][T23294] bridge_slave_0: entered promiscuous mode [ 1651.760405][T23294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.777876][T23294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.799153][T23294] bridge_slave_1: entered allmulticast mode [ 1651.837773][T23294] bridge_slave_1: entered promiscuous mode [ 1651.967935][T23263] team0: Port device team_slave_0 added [ 1651.995675][T23263] team0: Port device team_slave_1 added [ 1652.089350][T23294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1652.191619][T23294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1652.497285][T23263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1652.533654][T23263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1652.652188][T23263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1652.838365][T23263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1652.932305][T23263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1653.032172][T23263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.848658][T23294] team0: Port device team_slave_0 added [ 1654.064666][T23294] team0: Port device team_slave_1 added [ 1654.319488][T23263] hsr_slave_0: entered promiscuous mode [ 1654.361032][T23263] hsr_slave_1: entered promiscuous mode [ 1654.392864][T23263] debugfs: 'hsr0' already exists in 'hsr' [ 1654.401937][T23263] Cannot create hsr debugfs directory [ 1654.543687][T23294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1654.561106][T23294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.635138][T23294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.726684][T23294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.743935][T23294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.798701][T23294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1655.055621][T23294] hsr_slave_0: entered promiscuous mode [ 1655.069767][T23294] hsr_slave_1: entered promiscuous mode [ 1655.089589][T23294] debugfs: 'hsr0' already exists in 'hsr' [ 1655.105616][T23294] Cannot create hsr debugfs directory [ 1655.613373][T13064] bridge_slave_1: left allmulticast mode [ 1655.642231][T13064] bridge_slave_1: left promiscuous mode [ 1655.648038][T13064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.675685][T13064] bridge_slave_0: left allmulticast mode [ 1655.686813][T13064] bridge_slave_0: left promiscuous mode [ 1655.699249][T13064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1657.151644][T13064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1657.248859][T13064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1657.647246][T13064] bond0 (unregistering): Released all slaves [ 1659.636344][T13064] hsr_slave_0: left promiscuous mode [ 1659.645941][T15027] Bluetooth: hci4: command 0x0405 tx timeout [ 1659.706129][T13064] hsr_slave_1: left promiscuous mode [ 1659.724117][T13064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.746589][T13064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1660.526037][T13064] team0 (unregistering): Port device team_slave_1 removed [ 1660.573526][T13064] team0 (unregistering): Port device team_slave_0 removed [ 1663.104642][T23423] __nla_validate_parse: 43 callbacks suppressed [ 1663.104660][T23423] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4760'. [ 1663.584915][T23263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1663.636044][T23263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1663.731195][T23263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1663.973191][T23263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1664.810453][T23442] binder: BINDER_SET_CONTEXT_MGR already set [ 1664.827925][T23442] binder: 23440:23442 ioctl 4018620d 200000000040 returned -16 [ 1666.020468][T23294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1666.124886][T23294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1667.045023][ T30] audit: type=1400 audit(1757859536.438:2393): avc: denied { read } for pid=23444 comm="syz.9.4766" lport=57391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1667.111376][T23294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1667.135609][T23294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1667.560048][T23263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.909751][T23294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1667.939414][T23263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1667.983030][T16940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1667.990149][T16940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.043337][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.050420][T13064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.101012][T23294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.143958][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.151082][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.164777][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.171882][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1668.373265][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.751961][T23469] netlink: 112 bytes leftover after parsing attributes in process `syz.9.4771'. [ 1670.766067][T23263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.626078][T23294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1675.068212][T23263] veth0_vlan: entered promiscuous mode [ 1675.249388][T23263] veth1_vlan: entered promiscuous mode [ 1675.261359][T23294] veth0_vlan: entered promiscuous mode [ 1675.319010][T23294] veth1_vlan: entered promiscuous mode [ 1675.354827][T23501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4778'. [ 1675.371098][T23263] veth0_macvtap: entered promiscuous mode [ 1675.674597][T23263] veth1_macvtap: entered promiscuous mode [ 1675.777924][T23263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.791321][T23294] veth0_macvtap: entered promiscuous mode [ 1675.816123][T23263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.831726][T23294] veth1_macvtap: entered promiscuous mode [ 1675.873732][T16940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.911901][T16940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.512266][T21806] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1676.685835][T21806] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1676.711408][T16940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.722609][T21806] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.736678][T16940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.748303][T21806] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1676.760983][T21806] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1676.769862][T21806] usb 10-1: Manufacturer: syz [ 1676.780826][T21806] usb 10-1: config 0 descriptor?? [ 1676.862154][T21806] rc_core: IR keymap rc-hauppauge not found [ 1676.868132][T21806] Registered IR keymap rc-empty [ 1676.875132][T21806] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1676.890856][T21806] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input93 [ 1677.266694][ C0] igorplugusb 10-1:0.0: receive overflow invalid: 13 [ 1677.486850][T21806] usb 10-1: USB disconnect, device number 3 [ 1680.714169][T23520] netlink: 112 bytes leftover after parsing attributes in process `syz.8.4783'. [ 1681.026254][T23294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1683.251252][ T30] audit: type=1326 audit(1757859553.358:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.9.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1683.274774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1683.457339][ T30] audit: type=1326 audit(1757859553.398:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.9.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1683.495222][ T30] audit: type=1326 audit(1757859553.398:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.9.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1683.921431][ T30] audit: type=1326 audit(1757859553.398:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.9.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1683.944935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1683.955596][ T30] audit: type=1326 audit(1757859553.398:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.9.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1683.979041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1684.039540][T23294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1684.070677][T18032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1684.090282][ T30] audit: type=1326 audit(1757859553.398:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23521 comm="syz.9.4785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f8da698eba9 code=0x7ffc0000 [ 1684.113738][ C0] vkms_vblank_simulate: vblank timer overrun [ 1684.902919][T18032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.595575][ T7750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.746599][ T7750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.785617][ T7750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.811443][ T7750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.969610][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.082225][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.183717][T21948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.230460][T21948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1688.508019][T18897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1688.536303][T18897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.812980][T23557] 9pnet_fd: Insufficient options for proto=fd [ 1695.862948][T23571] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4795'. [ 1697.436777][T23578] binder: BINDER_SET_CONTEXT_MGR already set [ 1697.470974][T23578] binder: 23577:23578 ioctl 4018620d 200000000040 returned -16 [ 1699.823226][T23586] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2047 sclass=netlink_xfrm_socket pid=23586 comm=syz.3.4800 [ 1699.992216][T21806] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1704.250158][T23603] 9pnet_fd: Insufficient options for proto=fd [ 1715.535717][T23619] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4811'. [ 1720.432661][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1720.448055][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1720.463996][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1720.473514][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1720.492548][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1721.782012][ T7750] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.524683][ T51] Bluetooth: hci1: command tx timeout [ 1726.625330][ T51] Bluetooth: hci1: command tx timeout [ 1728.813242][ T51] Bluetooth: hci1: command tx timeout [ 1729.179703][ T7750] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.518224][ T7750] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.823106][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.786630][T23683] binder: BINDER_SET_CONTEXT_MGR already set [ 1730.794279][ T7750] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.813063][T23683] binder: 23682:23683 ioctl 4018620d 200000000040 returned -16 [ 1730.844318][ T51] Bluetooth: hci1: command tx timeout [ 1730.916409][T23640] chnl_net:caif_netlink_parms(): no params data found [ 1733.677731][T23701] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1733.684265][T23701] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1733.772244][T23701] vhci_hcd vhci_hcd.0: Device attached [ 1733.976126][T23640] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.005318][T23640] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.023131][T23702] vhci_hcd: connection closed [ 1734.027138][T16940] vhci_hcd: stop threads [ 1734.046497][T23640] bridge_slave_0: entered allmulticast mode [ 1734.061289][T16940] vhci_hcd: release socket [ 1734.066594][T23640] bridge_slave_0: entered promiscuous mode [ 1734.076271][T16940] vhci_hcd: disconnect device [ 1734.085096][T23640] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.095850][T23640] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.103108][T14883] vhci_hcd: vhci_device speed not set [ 1734.116292][T23640] bridge_slave_1: entered allmulticast mode [ 1734.125916][T23640] bridge_slave_1: entered promiscuous mode [ 1734.137303][ T7750] bridge_slave_1: left allmulticast mode [ 1734.192042][ T7750] bridge_slave_1: left promiscuous mode [ 1734.230442][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.310168][T23712] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4838'. [ 1734.357831][ T7750] bridge_slave_0: left allmulticast mode [ 1734.365443][ T7750] bridge_slave_0: left promiscuous mode [ 1734.376587][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.451670][ T30] audit: type=1400 audit(1757859604.558:2400): avc: denied { create } for pid=23713 comm="syz.2.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1735.784492][ T30] audit: type=1400 audit(1757859605.888:2401): avc: denied { create } for pid=23713 comm="syz.2.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1735.804838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1745.015935][ T7750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1746.290706][ T7750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1746.465606][ T7750] bond0 (unregistering): Released all slaves [ 1747.776360][T16854] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1748.016830][T23640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.046150][T16854] usb 1-1: config 0 has no interfaces? [ 1748.181322][T23640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.206109][T16854] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1748.242134][T16854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.299793][T16854] usb 1-1: Product: syz [ 1748.513529][T16854] usb 1-1: Manufacturer: syz [ 1748.518152][T16854] usb 1-1: SerialNumber: syz [ 1748.561765][T16854] usb 1-1: config 0 descriptor?? [ 1751.134709][T23640] team0: Port device team_slave_0 added [ 1751.160677][ T5919] usb 1-1: USB disconnect, device number 61 [ 1755.106866][T23640] team0: Port device team_slave_1 added [ 1756.696229][T23640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1756.757098][T23640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1757.443876][T23640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1757.562214][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1761.430241][ T7750] hsr_slave_0: left promiscuous mode [ 1761.477621][ T7750] hsr_slave_1: left promiscuous mode [ 1761.514666][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.552519][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1761.735584][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.759633][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1761.820774][ T7750] veth1_macvtap: left promiscuous mode [ 1761.850964][ T7750] veth0_macvtap: left promiscuous mode [ 1761.865024][ T7750] veth1_vlan: left promiscuous mode [ 1761.951226][ T7750] veth0_vlan: left promiscuous mode [ 1763.242192][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1770.137262][ T7750] team0 (unregistering): Port device team_slave_1 removed [ 1770.207443][ T7750] team0 (unregistering): Port device team_slave_0 removed [ 1774.279401][T23640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1774.317836][T23640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1774.449045][T23812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1774.461033][T23812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1774.472216][T23812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1774.487223][T23812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1774.487818][T23640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1774.525769][T23812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1776.603262][T23812] Bluetooth: hci2: command tx timeout [ 1778.692147][T23812] Bluetooth: hci2: command tx timeout [ 1780.081344][ T7750] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1780.481172][T23909] overlayfs: failed to resolve './file0': -2 [ 1780.762153][T23812] Bluetooth: hci2: command tx timeout [ 1781.268530][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1781.278477][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1781.286500][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1781.294478][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1781.301908][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1781.576824][T23869] chnl_net:caif_netlink_parms(): no params data found [ 1781.841921][ T7750] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.907839][ T51] Bluetooth: hci2: command tx timeout [ 1782.981496][ T7750] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.562319][ T51] Bluetooth: hci1: command tx timeout [ 1784.000723][ T7750] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.152284][T16854] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1784.404453][T23869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1784.411705][T23869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.422550][T23869] bridge_slave_0: entered allmulticast mode [ 1784.429821][T23869] bridge_slave_0: entered promiscuous mode [ 1785.429186][T23869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.301085][ T51] Bluetooth: hci1: command tx timeout [ 1786.332671][T23869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.339912][T23869] bridge_slave_1: entered allmulticast mode [ 1786.360383][T16854] usb 1-1: device descriptor read/all, error -71 [ 1786.392867][T23869] bridge_slave_1: entered promiscuous mode [ 1786.886318][T23869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.931980][T23869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1787.476953][T23869] team0: Port device team_slave_0 added [ 1787.621496][ T30] audit: type=1800 audit(1757859657.728:2402): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4895" name="/" dev="9p" ino=2 res=0 errno=0 [ 1787.825078][T23869] team0: Port device team_slave_1 added [ 1788.240732][T23954] lo speed is unknown, defaulting to 1000 [ 1788.247041][T23954] lo speed is unknown, defaulting to 1000 [ 1788.254147][T23954] lo speed is unknown, defaulting to 1000 [ 1788.952148][ T51] Bluetooth: hci1: command tx timeout [ 1790.645573][T23954] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1791.002885][ T51] Bluetooth: hci1: command tx timeout [ 1791.212703][T23954] lo speed is unknown, defaulting to 1000 [ 1791.219206][T23954] lo speed is unknown, defaulting to 1000 [ 1791.226388][T23954] lo speed is unknown, defaulting to 1000 [ 1791.233513][T23954] lo speed is unknown, defaulting to 1000 [ 1791.239873][T23954] lo speed is unknown, defaulting to 1000 [ 1791.252944][T23954] lo speed is unknown, defaulting to 1000 [ 1791.259977][T23954] lo speed is unknown, defaulting to 1000 [ 1791.365277][T23869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1791.374696][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.387998][T23869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1791.672744][T23869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1791.690885][T23869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1791.698140][T23869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1794.011343][T23869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.127810][ T7750] bridge_slave_1: left allmulticast mode [ 1795.236254][ T7750] bridge_slave_1: left promiscuous mode [ 1795.242001][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.283745][ T7750] bridge_slave_0: left allmulticast mode [ 1795.302126][ T7750] bridge_slave_0: left promiscuous mode [ 1795.411194][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.985879][ T7750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1800.008078][ T7750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1800.024278][ T7750] bond0 (unregistering): Released all slaves [ 1801.773028][T23869] hsr_slave_0: entered promiscuous mode [ 1801.800212][T23869] hsr_slave_1: entered promiscuous mode [ 1802.838853][T23907] chnl_net:caif_netlink_parms(): no params data found [ 1803.209235][ T7750] hsr_slave_0: left promiscuous mode [ 1803.236090][ T7750] hsr_slave_1: left promiscuous mode [ 1803.242363][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1803.268695][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1803.291251][ T7750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1803.304267][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.504804][ T7750] veth1_macvtap: left promiscuous mode [ 1803.729967][ T7750] veth0_macvtap: left promiscuous mode [ 1803.901656][ T7750] veth1_vlan: left promiscuous mode [ 1803.967449][ T7750] veth0_vlan: left promiscuous mode [ 1808.663776][ T30] audit: type=1800 audit(1757859678.778:2403): pid=24032 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.4917" name="/" dev="9p" ino=2 res=0 errno=0 [ 1809.049514][ T7750] team0 (unregistering): Port device team_slave_1 removed [ 1809.098666][ T7750] team0 (unregistering): Port device team_slave_0 removed [ 1812.114050][T23907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1812.202211][T23907] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.378050][T23907] bridge_slave_0: entered allmulticast mode [ 1812.385633][T23907] bridge_slave_0: entered promiscuous mode [ 1814.989001][T23907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.001980][T23907] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.009681][T23907] bridge_slave_1: entered allmulticast mode [ 1815.017074][T23907] bridge_slave_1: entered promiscuous mode [ 1815.767311][T24056] Set syz1 is full, maxelem 65536 reached [ 1818.396740][T23812] Bluetooth: hci1: command 0x0405 tx timeout [ 1818.409476][T23907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1818.750040][T23907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.972278][T23907] team0: Port device team_slave_0 added [ 1822.236702][T23907] team0: Port device team_slave_1 added [ 1822.366118][T24093] fuse: Unknown parameter 'user_i00000000000000000000' [ 1822.509257][T24096] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1822.515792][T24096] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1822.584682][T23907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.600086][T24096] vhci_hcd vhci_hcd.0: Device attached [ 1822.615755][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.671927][T24098] vhci_hcd: connection closed [ 1822.674893][ T6373] vhci_hcd: stop threads [ 1822.716714][ T6373] vhci_hcd: release socket [ 1822.738534][ T6373] vhci_hcd: disconnect device [ 1822.751094][T23907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.788405][T23907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.795602][T14883] vhci_hcd: vhci_device speed not set [ 1822.824456][T23907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1822.856373][T23907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.902981][T21866] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1822.995397][ T7750] bridge_slave_1: left allmulticast mode [ 1823.002623][ T7750] bridge_slave_1: left promiscuous mode [ 1823.008314][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.022028][T24106] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4937'. [ 1823.036341][ T7750] bridge_slave_0: left allmulticast mode [ 1823.045226][ T7750] bridge_slave_0: left promiscuous mode [ 1823.050931][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.092121][T21866] usb 1-1: Using ep0 maxpacket: 16 [ 1823.106049][T21866] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1823.125911][T21866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.156368][T21866] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1823.186348][T21866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1823.196358][T21866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.212511][T21866] usb 1-1: Product: syz [ 1823.218764][T21866] usb 1-1: Manufacturer: syz [ 1823.224595][T21866] usb 1-1: SerialNumber: syz [ 1823.326741][ T7750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1823.360340][ T7750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1823.388855][ T7750] bond0 (unregistering): Released all slaves [ 1823.477481][T24106] syz_tun: entered promiscuous mode [ 1823.521134][T23907] hsr_slave_0: entered promiscuous mode [ 1823.682308][T21866] usb 1-1: 0:2 : does not exist [ 1823.689459][T23907] hsr_slave_1: entered promiscuous mode [ 1825.493921][T23907] debugfs: 'hsr0' already exists in 'hsr' [ 1825.522441][T23907] Cannot create hsr debugfs directory [ 1825.715509][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.772997][ T7750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.812009][T21866] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 1826.784322][T21866] usb 1-1: USB disconnect, device number 64 [ 1827.504667][ T7750] team0 (unregistering): Port device team_slave_1 removed [ 1827.515321][ T30] audit: type=1400 audit(1757859697.608:2404): avc: denied { lock } for pid=24119 comm="syz.0.4940" path="/dev/video1" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1827.573636][T24118] udevd[24118]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1828.201940][ T7750] team0 (unregistering): Port device team_slave_0 removed [ 1830.506342][T23869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1833.438236][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1833.449514][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1833.458890][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1833.468743][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1833.478383][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1835.596138][ T51] Bluetooth: hci3: command tx timeout [ 1836.036958][T24143] lo speed is unknown, defaulting to 1000 [ 1837.642337][ T51] Bluetooth: hci3: command tx timeout [ 1839.147763][T24143] chnl_net:caif_netlink_parms(): no params data found [ 1839.475049][T23812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1839.513138][T23812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1839.528617][T23812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1839.556941][T23812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1839.564778][T23812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1839.732147][T23812] Bluetooth: hci3: command tx timeout [ 1843.982230][T23812] Bluetooth: hci2: command tx timeout [ 1843.988409][T23812] Bluetooth: hci3: command tx timeout [ 1845.137252][T24175] lo speed is unknown, defaulting to 1000 [ 1846.042282][ T51] Bluetooth: hci2: command tx timeout [ 1847.596708][T24143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1847.693153][T24143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.719258][T24143] bridge_slave_0: entered allmulticast mode [ 1847.736727][T24143] bridge_slave_0: entered promiscuous mode [ 1847.848765][T24143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1847.883678][T24143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1847.938728][T24143] bridge_slave_1: entered allmulticast mode [ 1848.016455][T24143] bridge_slave_1: entered promiscuous mode [ 1848.292658][ T51] Bluetooth: hci2: command tx timeout [ 1848.345654][T24143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.884762][T24143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1849.092146][T24143] team0: Port device team_slave_0 added [ 1849.123465][T24143] team0: Port device team_slave_1 added [ 1850.150423][T24143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1850.157514][T24143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.300917][T24143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.372563][ T51] Bluetooth: hci2: command tx timeout [ 1850.533496][T24143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.549728][T24143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1850.676114][T24143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1850.697960][ T3599] bridge_slave_1: left allmulticast mode [ 1850.705515][ T3599] bridge_slave_1: left promiscuous mode [ 1850.716568][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.737290][ T3599] bridge_slave_0: left allmulticast mode [ 1850.743514][ T3599] bridge_slave_0: left promiscuous mode [ 1850.777165][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.902177][T14883] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1855.266258][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.606015][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.621821][T14883] usb 4-1: device descriptor read/all, error -71 [ 1858.977293][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1859.021338][ T3599] bond0 (unregistering): Released all slaves [ 1861.405246][ T3599] hsr_slave_0: left promiscuous mode [ 1861.418650][ T3599] hsr_slave_1: left promiscuous mode [ 1861.512533][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.658674][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1862.899384][ T3599] team0 (unregistering): Port device team_slave_1 removed [ 1863.099715][ T3599] team0 (unregistering): Port device team_slave_0 removed [ 1863.390160][T24143] hsr_slave_0: entered promiscuous mode [ 1863.410069][T24143] hsr_slave_1: entered promiscuous mode [ 1863.856582][T24175] chnl_net:caif_netlink_parms(): no params data found [ 1866.492571][T24299] siw: device registration error -23 [ 1866.860111][T24175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1866.899858][T24175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.920143][T24175] bridge_slave_0: entered allmulticast mode [ 1866.951074][T24175] bridge_slave_0: entered promiscuous mode [ 1867.131658][T24175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.414950][T24175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.441465][T24175] bridge_slave_1: entered allmulticast mode [ 1867.459561][T24175] bridge_slave_1: entered promiscuous mode [ 1867.546520][ T3599] bridge_slave_1: left allmulticast mode [ 1867.557618][ T3599] bridge_slave_1: left promiscuous mode [ 1867.568716][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.584488][ T3599] bridge_slave_0: left allmulticast mode [ 1867.921912][ T3599] bridge_slave_0: left promiscuous mode [ 1868.109677][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.861441][ T3599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.122260][ T3599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1869.348633][ T3599] bond0 (unregistering): Released all slaves [ 1869.548323][T24175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1869.664129][T24318] binder: BINDER_SET_CONTEXT_MGR already set [ 1869.670130][T24318] binder: 24317:24318 ioctl 4018620d 200000004a80 returned -16 [ 1869.696906][T24318] binder: 24317:24318 ioctl c0306201 0 returned -14 [ 1869.765488][ T3599] hsr_slave_0: left promiscuous mode [ 1869.784057][ T3599] hsr_slave_1: left promiscuous mode [ 1869.790894][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1869.809189][ T3599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.344972][ T30] audit: type=1400 audit(1757859740.428:2405): avc: denied { bind } for pid=24321 comm="syz.3.4995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1872.532186][ T30] audit: type=1400 audit(1757859742.638:2406): avc: denied { create } for pid=24339 comm="syz.8.5001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1872.965139][ T30] audit: type=1400 audit(1757859742.988:2407): avc: denied { write } for pid=24339 comm="syz.8.5001" path="socket:[84622]" dev="sockfs" ino=84622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1873.028658][T24340] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5001'. [ 1873.089576][ T3599] team0 (unregistering): Port device team_slave_1 removed [ 1873.138902][ T3599] team0 (unregistering): Port device team_slave_0 removed [ 1873.386490][T24175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1874.179405][T24175] team0: Port device team_slave_0 added [ 1874.211794][T24175] team0: Port device team_slave_1 added [ 1874.392396][T24175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.410810][T24175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1874.511211][T24175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.534617][T24175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.590145][T24175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1876.211216][T24175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1876.766992][T24175] hsr_slave_0: entered promiscuous mode [ 1876.776075][T24175] hsr_slave_1: entered promiscuous mode [ 1876.783165][T24175] debugfs: 'hsr0' already exists in 'hsr' [ 1876.789016][T24175] Cannot create hsr debugfs directory [ 1877.139233][T24143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1877.466174][T24143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1877.511314][T24143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1877.564587][T24370] 9pnet_fd: Insufficient options for proto=fd [ 1877.663219][T24143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1881.135403][T24143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1881.361756][T24143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1881.406184][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.413339][T13064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1881.590875][T24175] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1881.615132][T24175] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1881.693224][T20390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1881.700411][T20390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1881.751773][T24175] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1881.867990][T24175] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1883.826329][T24143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1883.838233][T24143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1884.112425][T23783] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1884.203858][T24175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1884.267537][T24175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1884.309010][T23783] usb 4-1: Using ep0 maxpacket: 16 [ 1884.323577][T13064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.330722][T13064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1884.361257][T23783] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1884.392396][T23783] usb 4-1: config 0 has no interface number 0 [ 1884.460317][T13064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1884.467493][T13064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1884.491266][T23783] usb 4-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1884.836502][T23783] usb 4-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1884.872264][T24422] siw: device registration error -23 [ 1884.894458][T23783] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1884.935900][T23783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.017536][T23783] usb 4-1: Product: syz [ 1885.023273][T24143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1885.030485][T23783] usb 4-1: Manufacturer: syz [ 1885.037421][T23783] usb 4-1: SerialNumber: syz [ 1885.057131][T23783] usb 4-1: config 0 descriptor?? [ 1885.538240][T24143] veth0_vlan: entered promiscuous mode [ 1885.615415][T24143] veth1_vlan: entered promiscuous mode [ 1885.870555][T24143] veth0_macvtap: entered promiscuous mode [ 1885.943855][T24143] veth1_macvtap: entered promiscuous mode [ 1885.990195][T24412] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1886.053671][T24143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1886.087422][T24143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1886.167081][T20390] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.212136][T20390] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.288344][T20390] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.341407][T20390] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.504210][T24444] binder: BINDER_SET_CONTEXT_MGR already set [ 1886.514238][T24175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1889.342241][T24444] binder: 24442:24444 ioctl 4018620d 200000004a80 returned -16 [ 1889.594650][T14883] usb 4-1: USB disconnect, device number 56 [ 1890.601787][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.649936][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1890.727299][ T6373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1890.759672][ T6373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.541399][T24175] veth0_vlan: entered promiscuous mode [ 1892.553854][T24175] veth1_vlan: entered promiscuous mode [ 1892.588176][T24175] veth0_macvtap: entered promiscuous mode [ 1892.859999][T24175] veth1_macvtap: entered promiscuous mode [ 1892.884964][T24175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1893.418710][T24175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1893.436666][ T3466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.466753][ T3466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.602513][ T3466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1893.640520][ T3466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1895.968853][ T7750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1895.994210][ T7750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.131830][ T7750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.179314][ T7750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1899.566003][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1899.575064][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1899.629145][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1900.974738][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1901.152107][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1901.735963][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1901.756057][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1901.805164][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1901.825574][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1903.376052][T24519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 1903.962198][T21866] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1904.443603][T21866] usb 2-1: Using ep0 maxpacket: 16 [ 1904.602967][T21866] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1904.631941][T21866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1908.360634][T21866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1909.166088][T21866] usb 2-1: string descriptor 0 read error: -71 [ 1909.390123][T21866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1909.483423][T21866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.640681][T21866] usb 2-1: can't set config #1, error -71 [ 1909.711175][T21866] usb 2-1: USB disconnect, device number 52 [ 1910.166148][ T43] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1910.665463][T24559] fuse: Bad value for 'fd' [ 1911.684316][ T43] usb 4-1: config 0 has no interfaces? [ 1911.984618][ T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1911.999614][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.035184][ T43] usb 4-1: Product: syz [ 1912.039369][ T43] usb 4-1: Manufacturer: syz [ 1912.074381][ T43] usb 4-1: SerialNumber: syz [ 1912.094068][ T43] usb 4-1: config 0 descriptor?? [ 1912.426563][T16854] usb 4-1: USB disconnect, device number 57 [ 1914.092497][ T30] audit: type=1400 audit(1757859784.188:2408): avc: denied { transfer } for pid=24578 comm="syz.1.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1914.112643][T24584] binder: 24578:24584 ioctl c0306201 2000000005c0 returned -14 [ 1914.142368][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.599836][ T43] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1916.112483][T24609] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 1917.135421][T21866] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1917.342181][T21866] usb 4-1: Using ep0 maxpacket: 16 [ 1917.353438][T21866] usb 4-1: config 0 has an invalid interface number: 115 but max is 0 [ 1917.361810][T21866] usb 4-1: config 0 has no interface number 0 [ 1917.624528][T21866] usb 4-1: config 0 interface 115 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1917.929517][T21866] usb 4-1: config 0 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 1918.157102][T21866] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2875, bcdDevice=6f.3f [ 1918.221079][T21866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.325300][ T43] usb 1-1: unable to read config index 0 descriptor/all [ 1918.338535][ T43] usb 1-1: can't read configurations, error -71 [ 1918.345102][T21866] usb 4-1: Product: syz [ 1918.345122][T21866] usb 4-1: Manufacturer: syz [ 1918.345137][T21866] usb 4-1: SerialNumber: syz [ 1918.347399][T21866] usb 4-1: config 0 descriptor?? [ 1918.500663][T24615] __nla_validate_parse: 43 callbacks suppressed [ 1918.500682][T24615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5070'. [ 1918.631859][T24606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1923.798295][T21866] usb 4-1: USB disconnect, device number 58 [ 1924.994058][T21866] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1925.051092][T24637] 8021q: VLANs not supported on vcan0 [ 1925.222279][T21866] usb 2-1: Using ep0 maxpacket: 16 [ 1925.334870][T21866] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1925.380008][T21866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.423371][T21866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1925.445897][T21866] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1925.465060][T21866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.510028][T21866] usb 2-1: Product: syz [ 1925.676428][T21866] usb 2-1: Manufacturer: syz [ 1925.681054][T21866] usb 2-1: SerialNumber: syz [ 1926.986577][T21866] usb 2-1: 0:2 : does not exist [ 1929.106726][T21866] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 1930.102681][T21866] usb 2-1: USB disconnect, device number 53 [ 1933.606774][T24625] udevd[24625]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1933.702800][T23812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1933.712225][T23812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1933.729495][T23812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1933.747980][T23812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1933.758263][T23812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1935.430690][T24662] lo speed is unknown, defaulting to 1000 [ 1935.984326][ T51] Bluetooth: hci1: command tx timeout [ 1936.134229][T14883] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1936.213661][T21866] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1936.510026][T14883] usb 4-1: Using ep0 maxpacket: 16 [ 1936.553923][T21866] usb 2-1: config 0 has no interfaces? [ 1936.567423][T14883] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1936.867832][T14883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.140817][T14883] usb 4-1: Product: syz [ 1937.175480][T14883] usb 4-1: Manufacturer: syz [ 1937.180135][T14883] usb 4-1: SerialNumber: syz [ 1937.281101][T14883] usb 4-1: config 0 descriptor?? [ 1937.872250][T14883] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1938.044005][ T51] Bluetooth: hci1: command tx timeout [ 1938.224821][T24682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1938.246342][T14883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1938.298809][T24682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1938.334155][T14883] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1938.339167][T24682] dtv5100: wlen = 0, aborting. [ 1938.385004][T14883] usb 4-1: media controller created [ 1938.568424][T20390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1938.582307][T14883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1938.960210][T14883] zl10353_read_register: readreg error (reg=127, ret==0) [ 1938.977355][T14883] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1938.994165][T14883] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1939.318407][T14883] usb 4-1: USB disconnect, device number 59 [ 1939.831284][T14883] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1940.092098][T23783] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1940.118763][T20390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1940.138039][ T51] Bluetooth: hci1: command tx timeout [ 1940.189432][T21866] usb 2-1: string descriptor 0 read error: -71 [ 1940.259453][T21866] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1940.327716][T21866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.337166][T23783] usb 1-1: Using ep0 maxpacket: 32 [ 1940.412808][T24662] chnl_net:caif_netlink_parms(): no params data found [ 1940.450314][T23783] usb 1-1: config 2 has an invalid interface number: 15 but max is 0 [ 1940.480275][T21866] usb 2-1: config 0 descriptor?? [ 1940.507185][T23783] usb 1-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 1940.527911][T21866] usb 2-1: can't set config #0, error -71 [ 1940.547526][T21866] usb 2-1: USB disconnect, device number 54 [ 1941.142528][T23783] usb 1-1: config 2 has no interface number 0 [ 1941.155221][T23783] usb 1-1: config 2 interface 15 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1941.678557][T20390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.692171][T16854] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1942.215739][ T51] Bluetooth: hci1: command tx timeout [ 1942.695889][T23783] usb 1-1: string descriptor 0 read error: -71 [ 1942.704696][T23783] usb 1-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=94.69 [ 1942.753376][T16854] usb 4-1: Using ep0 maxpacket: 16 [ 1942.825042][T23783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.837121][T16854] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1942.871827][T16854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.913964][T23783] usb 1-1: can't set config #2, error -71 [ 1942.938801][T23783] usb 1-1: USB disconnect, device number 67 [ 1942.952165][T16854] usb 4-1: Product: syz [ 1942.966356][T16854] usb 4-1: Manufacturer: syz [ 1943.008429][ T30] audit: type=1400 audit(1757859813.118:2409): avc: denied { ioctl } for pid=24706 comm="syz.8.5093" path="socket:[92801]" dev="sockfs" ino=92801 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1943.053610][T16854] usb 4-1: SerialNumber: syz [ 1943.139787][T16854] usb 4-1: config 0 descriptor?? [ 1943.161561][T20390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1945.683237][T16854] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1946.461420][T16854] usb 4-1: USB disconnect, device number 60 [ 1961.172053][T21738] Bluetooth: hci3: command 0x0406 tx timeout [ 2070.451972][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2070.458930][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2/1:b..l P5212/1:b..l P24745/1:b..l P24731/1:b..l P5833/1:b..l P21828/1:b..l P16854/1:b..l P49/1:b..l [ 2070.475214][ C0] rcu: (detected by 0, t=10502 jiffies, g=123133, q=517 ncpus=2) [ 2070.483010][ C0] task:kworker/u8:3 state:R running task stack:23880 pid:49 tgid:49 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2070.497556][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2070.503819][ C0] Call Trace: [ 2070.507089][ C0] [ 2070.510019][ C0] __schedule+0x1190/0x5de0 [ 2070.514534][ C0] ? __pfx___schedule+0x10/0x10 [ 2070.519387][ C0] ? mark_held_locks+0x49/0x80 [ 2070.524157][ C0] preempt_schedule_irq+0x51/0x90 [ 2070.529176][ C0] irqentry_exit+0x36/0x90 [ 2070.533584][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2070.539558][ C0] RIP: 0010:lock_release+0x183/0x2f0 [ 2070.544849][ C0] Code: 0f c1 05 f8 2d 3f 12 83 f8 01 0f 85 1d 01 00 00 9c 58 f6 c4 02 0f 85 08 01 00 00 41 f7 c5 00 02 00 00 74 01 fb 48 8b 44 24 10 <65> 48 2b 05 0d ec 3e 12 0f 85 58 01 00 00 48 83 c4 18 5b 41 5c 41 [ 2070.564449][ C0] RSP: 0018:ffffc90000b97280 EFLAGS: 00000206 [ 2070.570508][ C0] RAX: 38b6155904294000 RBX: ffffffff8e5c15a0 RCX: ffffc90000b9728c [ 2070.578467][ C0] RDX: 0000000000000003 RSI: ffffffff8de2d258 RDI: ffffffff8c163300 [ 2070.586426][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2070.594385][ C0] R10: 0000000000000003 R11: 00000000000061ef R12: ffffffff816af8a4 [ 2070.602344][ C0] R13: 0000000000000202 R14: ffff888022ad0000 R15: 0000000000000004 [ 2070.610308][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 2070.615628][ C0] unwind_next_frame+0x3f9/0x20a0 [ 2070.620644][ C0] ? arch_stack_walk+0x73/0x100 [ 2070.625501][ C0] __unwind_start+0x45f/0x7f0 [ 2070.630171][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2070.636321][ C0] arch_stack_walk+0x73/0x100 [ 2070.641002][ C0] ? stack_trace_save+0x8e/0xc0 [ 2070.645887][ C0] ? ieee802_11_parse_elems_full+0x1db/0x3780 [ 2070.651948][ C0] stack_trace_save+0x8e/0xc0 [ 2070.656618][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2070.661990][ C0] ? find_held_lock+0x2b/0x80 [ 2070.666670][ C0] kasan_save_stack+0x33/0x60 [ 2070.671395][ C0] kasan_save_track+0x14/0x30 [ 2070.676079][ C0] __kasan_kmalloc+0xaa/0xb0 [ 2070.680670][ C0] __kmalloc_noprof+0x223/0x510 [ 2070.685525][ C0] ieee802_11_parse_elems_full+0x1db/0x3780 [ 2070.691420][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 2070.696360][ C0] ? stack_trace_save+0x8e/0xc0 [ 2070.701206][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2070.706583][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 2070.712050][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2070.717000][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 2070.723336][ C0] ? kasan_save_stack+0x42/0x60 [ 2070.728193][ C0] ? cfg80211_wiphy_work+0x2c4/0x580 [ 2070.733476][ C0] ? process_one_work+0x9cc/0x1b70 [ 2070.738578][ C0] ? worker_thread+0x6c8/0xf10 [ 2070.743334][ C0] ? kthread+0x3c2/0x780 [ 2070.747570][ C0] ? ret_from_fork+0x56a/0x730 [ 2070.752329][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 2070.757275][ C0] ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 2070.763366][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 2070.769902][ C0] ? kcov_remote_start+0x3c9/0x6d0 [ 2070.775018][ C0] ieee80211_iface_work+0xe2e/0x1360 [ 2070.780298][ C0] ? rcu_is_watching+0x12/0xc0 [ 2070.785061][ C0] cfg80211_wiphy_work+0x2c4/0x580 [ 2070.790174][ C0] process_one_work+0x9cc/0x1b70 [ 2070.795115][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 2070.800745][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2070.806120][ C0] ? assign_work+0x1a0/0x250 [ 2070.810707][ C0] worker_thread+0x6c8/0xf10 [ 2070.815300][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2070.820404][ C0] kthread+0x3c2/0x780 [ 2070.824466][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.829058][ C0] ? rcu_is_watching+0x12/0xc0 [ 2070.833817][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.838402][ C0] ret_from_fork+0x56a/0x730 [ 2070.842987][ C0] ? __pfx_kthread+0x10/0x10 [ 2070.847572][ C0] ret_from_fork_asm+0x1a/0x30 [ 2070.852343][ C0] [ 2070.855355][ C0] task:kworker/0:6 state:R running task stack:23672 pid:16854 tgid:16854 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 2070.868925][ C0] Workqueue: usb_hub_wq hub_event [ 2070.873954][ C0] Call Trace: [ 2070.877229][ C0] [ 2070.880153][ C0] __schedule+0x1190/0x5de0 [ 2070.884649][ C0] ? find_held_lock+0x2b/0x80 [ 2070.889329][ C0] ? unwind_next_frame+0x3fe/0x20a0 [ 2070.894525][ C0] ? worker_thread+0x6c8/0xf10 [ 2070.899289][ C0] ? __pfx___schedule+0x10/0x10 [ 2070.904132][ C0] ? arch_stack_walk+0x88/0x100 [ 2070.908986][ C0] ? mark_held_locks+0x49/0x80 [ 2070.913753][ C0] preempt_schedule_irq+0x51/0x90 [ 2070.918778][ C0] irqentry_exit+0x36/0x90 [ 2070.923195][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2070.929168][ C0] RIP: 0010:write_comp_data+0x3c/0x90 [ 2070.934534][ C0] Code: 8b 05 c8 27 1b 12 a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 3c 16 00 00 85 c0 74 4f <8b> 82 18 16 00 00 83 f8 03 75 44 48 8b 82 20 16 00 00 8b 92 1c 16 [ 2070.954132][ C0] RSP: 0000:ffffc900033f74b8 EFLAGS: 00000246 [ 2070.960192][ C0] RAX: 0000000080000000 RBX: ffffea0001735cc0 RCX: ffffffff822dd45d [ 2070.968159][ C0] RDX: ffff888027514880 RSI: 0000000000000000 RDI: 0000000000000005 [ 2070.976123][ C0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 2070.984084][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 2070.992055][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2071.000025][ C0] ? __page_table_check_zero+0x14d/0x5d0 [ 2071.005660][ C0] __page_table_check_zero+0x14d/0x5d0 [ 2071.011113][ C0] ? __page_table_check_zero+0x12c/0x5d0 [ 2071.016752][ C0] ? __pfx___page_table_check_zero+0x10/0x10 [ 2071.022734][ C0] ? __reset_page_owner+0x137/0x1a0 [ 2071.027932][ C0] __free_frozen_pages+0x7b7/0x10f0 [ 2071.033139][ C0] __put_partials+0x165/0x1c0 [ 2071.037823][ C0] qlist_free_all+0x4d/0x120 [ 2071.042409][ C0] ? kobject_get_path+0xd2/0x2a0 [ 2071.047341][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2071.052799][ C0] __kasan_slab_alloc+0x69/0x90 [ 2071.057645][ C0] __kmalloc_noprof+0x1d4/0x510 [ 2071.062500][ C0] kobject_get_path+0xd2/0x2a0 [ 2071.067268][ C0] kobject_uevent_env+0x289/0x1870 [ 2071.072382][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 2071.077662][ C0] ? kobject_put+0xab/0x5a0 [ 2071.082165][ C0] device_release_driver_internal+0x51c/0x620 [ 2071.088235][ C0] bus_remove_device+0x22f/0x420 [ 2071.093169][ C0] device_del+0x396/0x9f0 [ 2071.097508][ C0] ? __pfx_device_del+0x10/0x10 [ 2071.102371][ C0] usb_disconnect+0x5bf/0x9c0 [ 2071.107051][ C0] hub_event+0x1c81/0x4fe0 [ 2071.111505][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2071.116444][ C0] ? __pfx_hub_event+0x10/0x10 [ 2071.121210][ C0] ? assoc_array_insert+0x1d20/0x3970 [ 2071.126594][ C0] ? rcu_is_watching+0x12/0xc0 [ 2071.131360][ C0] process_one_work+0x9cc/0x1b70 [ 2071.136301][ C0] ? __pfx_hub_event+0x10/0x10 [ 2071.141062][ C0] ? __pfx_process_one_work+0x10/0x10 [ 2071.146433][ C0] ? assign_work+0x1a0/0x250 [ 2071.151019][ C0] worker_thread+0x6c8/0xf10 [ 2071.155614][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2071.160720][ C0] kthread+0x3c2/0x780 [ 2071.164782][ C0] ? __pfx_kthread+0x10/0x10 [ 2071.169368][ C0] ? rcu_is_watching+0x12/0xc0 [ 2071.174126][ C0] ? __pfx_kthread+0x10/0x10 [ 2071.178709][ C0] ret_from_fork+0x56a/0x730 [ 2071.183287][ C0] ? __pfx_kthread+0x10/0x10 [ 2071.187870][ C0] ret_from_fork_asm+0x1a/0x30 [ 2071.192645][ C0] [ 2071.195659][ C0] task:syz-executor state:R running task stack:23784 pid:21828 tgid:21828 ppid:21817 task_flags:0x400140 flags:0x00004002 [ 2071.209143][ C0] Call Trace: [ 2071.212410][ C0] [ 2071.215336][ C0] __schedule+0x1190/0x5de0 [ 2071.219850][ C0] ? __pfx___schedule+0x10/0x10 [ 2071.224695][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2071.229641][ C0] ? mark_held_locks+0x49/0x80 [ 2071.234407][ C0] preempt_schedule_irq+0x51/0x90 [ 2071.239432][ C0] irqentry_exit+0x36/0x90 [ 2071.243841][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2071.249824][ C0] RIP: 0010:stack_access_ok+0x21/0x200 [ 2071.255278][ C0] Code: 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 41 57 41 56 4c 8d 77 08 41 55 41 54 49 89 d4 4c 89 f2 55 48 c1 ea 03 <48> 89 f5 53 48 89 fb 48 83 ec 08 80 3c 02 00 0f 85 94 01 00 00 4c [ 2071.274877][ C0] RSP: 0018:ffffc9000ff77480 EFLAGS: 00000a06 [ 2071.280937][ C0] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffffff91504c42 [ 2071.288899][ C0] RDX: 1ffff92001feeea5 RSI: ffffc9000ff77768 RDI: ffffc9000ff77520 [ 2071.296863][ C0] RBP: ffffc9000ff77768 R08: 0000000000000001 R09: 0000000000000000 [ 2071.304825][ C0] R10: 0000000000000004 R11: 0000000000012c23 R12: 0000000000000008 [ 2071.312785][ C0] R13: ffffc9000ff77520 R14: ffffc9000ff77528 R15: ffffc9000ff77554 [ 2071.320771][ C0] unwind_next_frame+0x15c5/0x20a0 [ 2071.325890][ C0] ? __reset_page_owner+0x84/0x1a0 [ 2071.330998][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2071.337153][ C0] arch_stack_walk+0x94/0x100 [ 2071.341833][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 2071.347207][ C0] stack_trace_save+0x8e/0xc0 [ 2071.351887][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2071.357259][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2071.362202][ C0] save_stack+0x160/0x1f0 [ 2071.366523][ C0] ? __pfx_save_stack+0x10/0x10 [ 2071.371372][ C0] ? page_ext_put+0x3e/0xd0 [ 2071.375872][ C0] __reset_page_owner+0x84/0x1a0 [ 2071.380805][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 2071.386003][ C0] ? mod_node_page_state+0x70/0x150 [ 2071.391205][ C0] __put_partials+0x165/0x1c0 [ 2071.395883][ C0] qlist_free_all+0x4d/0x120 [ 2071.400468][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2071.405929][ C0] __kasan_slab_alloc+0x69/0x90 [ 2071.410778][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 2071.416239][ C0] ? __kmalloc_large_noprof+0x61/0x70 [ 2071.421608][ C0] ? anon_vma_fork+0x200/0x620 [ 2071.426368][ C0] anon_vma_fork+0x200/0x620 [ 2071.430953][ C0] dup_mmap+0x152e/0x21d0 [ 2071.435291][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 2071.439984][ C0] copy_process+0x4081/0x7690 [ 2071.444658][ C0] ? do_wp_page+0x1aa7/0x4f00 [ 2071.449340][ C0] ? __pfx_copy_process+0x10/0x10 [ 2071.454357][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2071.459375][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2071.464749][ C0] kernel_clone+0xfc/0x930 [ 2071.469173][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2071.474202][ C0] ? __pfx_css_rstat_updated+0x10/0x10 [ 2071.479661][ C0] __do_sys_clone+0xce/0x120 [ 2071.484252][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 2071.489447][ C0] ? handle_mm_fault+0x2ab/0xd10 [ 2071.494398][ C0] ? do_user_addr_fault+0x843/0x1370 [ 2071.499685][ C0] do_syscall_64+0xcd/0x4e0 [ 2071.504201][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.510106][ C0] RIP: 0033:0x7f4c29785413 [ 2071.514521][ C0] RSP: 002b:00007ffd61f8e538 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2071.522928][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c29785413 [ 2071.530896][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2071.538862][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2071.546827][ C0] R10: 00005555869847d0 R11: 0000000000000246 R12: 0000000000000000 [ 2071.554797][ C0] R13: 0000000000000062 R14: 00000000001dae6a R15: 00007ffd61f8e6d0 [ 2071.562781][ C0] [ 2071.565801][ C0] task:syz-executor state:R running task stack:22888 pid:5833 tgid:5833 ppid:5832 task_flags:0x400100 flags:0x00004002 [ 2071.579286][ C0] Call Trace: [ 2071.582562][ C0] [ 2071.585489][ C0] __schedule+0x1190/0x5de0 [ 2071.589993][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2071.595794][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2071.601005][ C0] ? __pfx___schedule+0x10/0x10 [ 2071.605854][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2071.610801][ C0] ? mark_held_locks+0x49/0x80 [ 2071.615569][ C0] preempt_schedule_irq+0x51/0x90 [ 2071.620593][ C0] irqentry_exit+0x36/0x90 [ 2071.625006][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2071.630988][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 2071.636182][ C0] Code: e6 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 22 97 13 0f 0f 82 74 02 00 00 8b 35 da c8 13 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 79 e6 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 2071.655785][ C0] RSP: 0018:ffffc900039ff8a8 EFLAGS: 00000206 [ 2071.661847][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c15a0 RCX: 000000006481f9f7 [ 2071.669813][ C0] RDX: 0000000000000000 RSI: ffffffff8de2d258 RDI: ffffffff8c163300 [ 2071.677779][ C0] RBP: 0000000000000002 R08: 9e0ff3f8210f2cbc R09: 0000000000000000 [ 2071.685755][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 2071.693724][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2071.701712][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 2071.706920][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2071.713080][ C0] unwind_next_frame+0xd1/0x20a0 [ 2071.718020][ C0] ? unwind_next_frame+0xbd/0x20a0 [ 2071.723129][ C0] ? __x64_sys_pipe2+0x54/0x80 [ 2071.727893][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2071.734050][ C0] arch_stack_walk+0x94/0x100 [ 2071.738726][ C0] ? __x64_sys_pipe2+0x54/0x80 [ 2071.743491][ C0] stack_trace_save+0x8e/0xc0 [ 2071.748170][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2071.753541][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2071.758486][ C0] save_stack+0x160/0x1f0 [ 2071.762840][ C0] ? __pfx_save_stack+0x10/0x10 [ 2071.767692][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 2071.773071][ C0] ? __put_partials+0x165/0x1c0 [ 2071.777930][ C0] ? qlist_free_all+0x4d/0x120 [ 2071.782693][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 2071.788323][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 2071.793346][ C0] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 2071.798976][ C0] ? alloc_empty_file+0x55/0x1e0 [ 2071.803912][ C0] ? alloc_file_clone+0x5f/0x110 [ 2071.808851][ C0] ? create_pipe_files+0x412/0x9a0 [ 2071.813956][ C0] ? do_pipe2+0xaf/0x1c0 [ 2071.818194][ C0] ? __x64_sys_pipe2+0x54/0x80 [ 2071.822962][ C0] ? page_ext_put+0x3e/0xd0 [ 2071.827468][ C0] __reset_page_owner+0x84/0x1a0 [ 2071.832411][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 2071.837609][ C0] ? mod_node_page_state+0x70/0x150 [ 2071.842817][ C0] __put_partials+0x165/0x1c0 [ 2071.847504][ C0] qlist_free_all+0x4d/0x120 [ 2071.852087][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2071.857540][ C0] __kasan_slab_alloc+0x69/0x90 [ 2071.862387][ C0] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 2071.867842][ C0] ? alloc_file_pseudo+0x1b3/0x230 [ 2071.872952][ C0] ? alloc_empty_file+0x55/0x1e0 [ 2071.877889][ C0] alloc_empty_file+0x55/0x1e0 [ 2071.882653][ C0] alloc_file_clone+0x5f/0x110 [ 2071.887422][ C0] create_pipe_files+0x412/0x9a0 [ 2071.892359][ C0] do_pipe2+0xaf/0x1c0 [ 2071.896423][ C0] ? __pfx_do_pipe2+0x10/0x10 [ 2071.901097][ C0] ? xfd_validate_state+0x61/0x180 [ 2071.906216][ C0] __x64_sys_pipe2+0x54/0x80 [ 2071.910802][ C0] do_syscall_64+0xcd/0x4e0 [ 2071.915311][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2071.921194][ C0] RIP: 0033:0x7f600618d8c9 [ 2071.925602][ C0] RSP: 002b:00007fff0e1f0d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 2071.934007][ C0] RAX: ffffffffffffffda RBX: 000055556097bb20 RCX: 00007f600618d8c9 [ 2071.941972][ C0] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 00007fff0e1f0d68 [ 2071.949938][ C0] RBP: 00007fff0e1f1120 R08: 0000000000000007 R09: 0000555560980a10 [ 2071.957920][ C0] R10: f5a30d641191a3d9 R11: 0000000000000246 R12: 00007fff0e1f1180 [ 2071.965885][ C0] R13: 00005555609801c0 R14: 00007fff0e1f0ea0 R15: 000055556097e310 [ 2071.973864][ C0] [ 2071.976875][ C0] task:syz.1.5095 state:R running task stack:26808 pid:24731 tgid:24714 ppid:24143 task_flags:0x40044c flags:0x00004006 [ 2071.990363][ C0] Call Trace: [ 2071.993640][ C0] [ 2071.996566][ C0] __schedule+0x1190/0x5de0 [ 2072.001086][ C0] ? __pfx___schedule+0x10/0x10 [ 2072.005938][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2072.010961][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2072.016332][ C0] preempt_schedule_common+0x44/0xc0 [ 2072.021612][ C0] preempt_schedule_thunk+0x16/0x30 [ 2072.026829][ C0] _raw_spin_unlock+0x3e/0x50 [ 2072.031504][ C0] unmap_page_range+0xf77/0x42c0 [ 2072.036466][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2072.041839][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 2072.046779][ C0] ? uprobe_munmap+0x20/0x5c0 [ 2072.051455][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 2072.057349][ C0] unmap_vmas+0x218/0x470 [ 2072.061679][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2072.066543][ C0] exit_mmap+0x1b9/0xb90 [ 2072.070787][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2072.075559][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2072.080516][ C0] __mmput+0x12a/0x410 [ 2072.084585][ C0] mmput+0x62/0x70 [ 2072.088302][ C0] do_exit+0x7c7/0x2bf0 [ 2072.092457][ C0] ? __pfx___might_resched+0x10/0x10 [ 2072.097746][ C0] ? __pfx_do_exit+0x10/0x10 [ 2072.102332][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2072.107350][ C0] ? find_held_lock+0x2b/0x80 [ 2072.112030][ C0] do_group_exit+0xd3/0x2a0 [ 2072.116537][ C0] get_signal+0x2673/0x26d0 [ 2072.121037][ C0] ? fput+0x9b/0xd0 [ 2072.124848][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 2072.129868][ C0] ? __pfx_get_signal+0x10/0x10 [ 2072.134722][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 2072.140272][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2072.146436][ C0] ? xfd_validate_state+0x61/0x180 [ 2072.151559][ C0] exit_to_user_mode_loop+0x84/0x110 [ 2072.156839][ C0] do_syscall_64+0x41c/0x4e0 [ 2072.161433][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2072.167325][ C0] RIP: 0033:0x7f4e3518eba9 [ 2072.171733][ C0] RSP: 002b:00007f4e36012038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2072.180140][ C0] RAX: 0000000000000001 RBX: 00007f4e353d6090 RCX: 00007f4e3518eba9 [ 2072.188108][ C0] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 2072.196076][ C0] RBP: 00007f4e35211e19 R08: 000020000005ffe4 R09: 000000000000001c [ 2072.204041][ C0] R10: 0000000004008891 R11: 0000000000000246 R12: 0000000000000000 [ 2072.212007][ C0] R13: 00007f4e353d6128 R14: 00007f4e353d6090 R15: 00007fffaef8ba98 [ 2072.219983][ C0] [ 2072.222996][ C0] task:kworker/u8:2 state:R running task stack:28232 pid:24745 tgid:24745 ppid:18032 task_flags:0x8040 flags:0x00004000 [ 2072.236306][ C0] Call Trace: [ 2072.239574][ C0] [ 2072.242499][ C0] __schedule+0x1190/0x5de0 [ 2072.247001][ C0] ? __get_user_pages+0x551/0x34a0 [ 2072.252110][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2072.258442][ C0] ? __pfx___schedule+0x10/0x10 [ 2072.263290][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2072.268234][ C0] ? mark_held_locks+0x49/0x80 [ 2072.273002][ C0] preempt_schedule_irq+0x51/0x90 [ 2072.278022][ C0] irqentry_exit+0x36/0x90 [ 2072.282434][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2072.288411][ C0] RIP: 0010:stack_access_ok+0x166/0x200 [ 2072.293952][ C0] Code: 0f 85 95 00 00 00 48 8b 43 10 49 39 ee 77 29 48 39 e8 76 24 4c 01 e5 48 39 e8 0f 93 c0 49 39 ee 0f 92 c2 21 d0 48 83 c4 08 5b <5d> 41 5c 41 5d 41 5e 41 5f e9 4c bc 2c 0a 48 83 c4 08 31 c0 5b 5d [ 2072.313559][ C0] RSP: 0018:ffffc90006017860 EFLAGS: 00000282 [ 2072.319625][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffc90006018000 [ 2072.327587][ C0] RDX: ffffc90006017c01 RSI: ffffc90006017c38 RDI: ffffc90006017900 [ 2072.335552][ C0] RBP: ffffc90006017c38 R08: ffffffff914eb0da R09: 0000000000000000 [ 2072.343517][ C0] R10: 0000000000000002 R11: 000000000001170d R12: 0000000000000008 [ 2072.351479][ C0] R13: ffffc90006017910 R14: ffffc90006017908 R15: ffffc90006010000 [ 2072.359460][ C0] unwind_next_frame+0xcfe/0x20a0 [ 2072.364484][ C0] ? __put_partials+0x165/0x1c0 [ 2072.369338][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2072.375489][ C0] arch_stack_walk+0x94/0x100 [ 2072.380166][ C0] ? __put_partials+0x165/0x1c0 [ 2072.385021][ C0] stack_trace_save+0x8e/0xc0 [ 2072.389695][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2072.395064][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2072.400005][ C0] save_stack+0x160/0x1f0 [ 2072.404330][ C0] ? __pfx_save_stack+0x10/0x10 [ 2072.409173][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 2072.414545][ C0] ? __put_partials+0x165/0x1c0 [ 2072.419401][ C0] ? page_ext_put+0x3e/0xd0 [ 2072.423903][ C0] __reset_page_owner+0x84/0x1a0 [ 2072.428840][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 2072.434048][ C0] __put_partials+0x165/0x1c0 [ 2072.438730][ C0] qlist_free_all+0x4d/0x120 [ 2072.443312][ C0] ? lsm_blob_alloc+0x68/0x90 [ 2072.447981][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2072.453435][ C0] __kasan_kmalloc+0x8a/0xb0 [ 2072.458033][ C0] __kmalloc_noprof+0x223/0x510 [ 2072.462899][ C0] lsm_blob_alloc+0x68/0x90 [ 2072.467401][ C0] security_prepare_creds+0x30/0x270 [ 2072.472685][ C0] prepare_creds+0x56f/0x7d0 [ 2072.477276][ C0] prepare_exec_creds+0x10/0x240 [ 2072.482212][ C0] bprm_execve+0xc1/0x1640 [ 2072.486629][ C0] ? __pfx___might_resched+0x10/0x10 [ 2072.491914][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 2072.496856][ C0] ? copy_strings_kernel+0x153/0x190 [ 2072.502138][ C0] kernel_execve+0x2ef/0x3b0 [ 2072.506726][ C0] call_usermodehelper_exec_async+0x255/0x4c0 [ 2072.512793][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2072.518002][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 2072.524591][ C0] ret_from_fork+0x56a/0x730 [ 2072.529182][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 2072.535773][ C0] ret_from_fork_asm+0x1a/0x30 [ 2072.540548][ C0] [ 2072.543561][ C0] task:klogd state:R running task stack:25512 pid:5212 tgid:5212 ppid:1 task_flags:0x400100 flags:0x00004002 [ 2072.557044][ C0] Call Trace: [ 2072.560324][ C0] [ 2072.563253][ C0] __schedule+0x1190/0x5de0 [ 2072.567757][ C0] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 2072.574437][ C0] ? try_to_wake_up+0xa5d/0x1870 [ 2072.579374][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 2072.584573][ C0] ? __pfx___schedule+0x10/0x10 [ 2072.589433][ C0] ? autoremove_wake_function+0x3d/0x150 [ 2072.595064][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2072.600434][ C0] preempt_schedule_common+0x44/0xc0 [ 2072.605726][ C0] preempt_schedule_thunk+0x16/0x30 [ 2072.610931][ C0] _raw_spin_unlock_irqrestore+0x61/0x80 [ 2072.616569][ C0] sock_def_readable+0x15b/0x600 [ 2072.621507][ C0] unix_dgram_sendmsg+0xd18/0x17f0 [ 2072.626627][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2072.632173][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2072.637122][ C0] __sys_sendto+0x4a3/0x520 [ 2072.641624][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 2072.646640][ C0] ? find_held_lock+0x2b/0x80 [ 2072.651343][ C0] ? rcu_is_watching+0x12/0xc0 [ 2072.656139][ C0] ? xfd_validate_state+0x61/0x180 [ 2072.661264][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 2072.666027][ C0] ? do_syscall_64+0x91/0x4e0 [ 2072.670702][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2072.675909][ C0] do_syscall_64+0xcd/0x4e0 [ 2072.680414][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2072.686303][ C0] RIP: 0033:0x7f04423ac407 [ 2072.690716][ C0] RSP: 002b:00007ffd5328a7e0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 2072.699127][ C0] RAX: ffffffffffffffda RBX: 00007f044225cc80 RCX: 00007f04423ac407 [ 2072.707097][ C0] RDX: 000000000000005c RSI: 00007ffd5328a920 RDI: 0000000000000003 [ 2072.715072][ C0] RBP: 00007ffd5328ad50 R08: 0000000000000000 R09: 0000000000000000 [ 2072.723043][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffd5328ad68 [ 2072.731009][ C0] R13: 00007ffd5328a920 R14: 0000000000000041 R15: 00007ffd5328a920 [ 2072.738986][ C0] [ 2072.742002][ C0] task:kthreadd state:R running task stack:26504 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 2072.755486][ C0] Call Trace: [ 2072.758757][ C0] [ 2072.761696][ C0] __schedule+0x1190/0x5de0 [ 2072.766213][ C0] ? __pfx___schedule+0x10/0x10 [ 2072.771058][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2072.776005][ C0] ? mark_held_locks+0x49/0x80 [ 2072.780779][ C0] preempt_schedule_irq+0x51/0x90 [ 2072.785803][ C0] irqentry_exit+0x36/0x90 [ 2072.790217][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2072.796202][ C0] RIP: 0010:unwind_next_frame+0xa81/0x20a0 [ 2072.802005][ C0] Code: 0f 85 82 f6 ff ff 48 c7 c2 c0 12 aa 8b be 4a 03 00 00 48 c7 c7 20 13 aa 8b c6 05 5a 9f 28 0f 01 e8 34 89 2c 00 e9 5e f6 ff ff 3a c4 35 00 84 c0 0f 85 58 f9 ff ff e8 1d b1 29 0a 85 c0 0f 84 [ 2072.821610][ C0] RSP: 0018:ffffc900000775e0 EFLAGS: 00000202 [ 2072.827675][ C0] RAX: 0000000000000001 RBX: ffffc90000077f58 RCX: ffffc90000078001 [ 2072.835643][ C0] RDX: ffffc90000077f60 RSI: ffffc90000077f30 RDI: ffffc90000077660 [ 2072.843608][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 2072.851570][ C0] R10: 0000000000000001 R11: 0000000000006068 R12: ffffc900000776a0 [ 2072.859535][ C0] R13: ffffc90000077650 R14: ffffc90000077f58 R15: ffffc90000077684 [ 2072.867513][ C0] ? ret_from_fork+0x56a/0x730 [ 2072.872278][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2072.878434][ C0] arch_stack_walk+0x94/0x100 [ 2072.883110][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 2072.888049][ C0] stack_trace_save+0x8e/0xc0 [ 2072.892726][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2072.898101][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2072.903042][ C0] save_stack+0x160/0x1f0 [ 2072.907363][ C0] ? __pfx_save_stack+0x10/0x10 [ 2072.912205][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 2072.917583][ C0] ? __put_partials+0x165/0x1c0 [ 2072.922433][ C0] ? qlist_free_all+0x4d/0x120 [ 2072.927184][ C0] ? kasan_quarantine_reduce+0x195/0x1e0 [ 2072.932815][ C0] ? __kasan_kmalloc+0x8a/0xb0 [ 2072.937571][ C0] ? __kmalloc_noprof+0x223/0x510 [ 2072.942586][ C0] ? lsm_blob_alloc+0x68/0x90 [ 2072.947256][ C0] ? security_task_alloc+0x2d/0x260 [ 2072.952444][ C0] ? copy_process+0x2205/0x7690 [ 2072.957289][ C0] ? kernel_clone+0xfc/0x930 [ 2072.961876][ C0] ? kernel_thread+0xd4/0x120 [ 2072.966550][ C0] ? kthreadd+0x503/0x800 [ 2072.970880][ C0] ? ret_from_fork+0x56a/0x730 [ 2072.975641][ C0] ? page_ext_put+0x3e/0xd0 [ 2072.980144][ C0] __reset_page_owner+0x84/0x1a0 [ 2072.985075][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 2072.990280][ C0] __put_partials+0x165/0x1c0 [ 2072.994961][ C0] qlist_free_all+0x4d/0x120 [ 2072.999636][ C0] ? lsm_blob_alloc+0x68/0x90 [ 2073.004308][ C0] kasan_quarantine_reduce+0x195/0x1e0 [ 2073.009772][ C0] __kasan_kmalloc+0x8a/0xb0 [ 2073.014356][ C0] __kmalloc_noprof+0x223/0x510 [ 2073.019212][ C0] ? __pfx_perf_event_init_task+0x10/0x10 [ 2073.024933][ C0] ? audit_alloc+0x21/0x7b0 [ 2073.029433][ C0] ? __pfx_audit_alloc+0x10/0x10 [ 2073.034370][ C0] lsm_blob_alloc+0x68/0x90 [ 2073.038870][ C0] security_task_alloc+0x2d/0x260 [ 2073.043888][ C0] copy_process+0x2205/0x7690 [ 2073.048578][ C0] ? __pfx_copy_process+0x10/0x10 [ 2073.053603][ C0] ? lock_acquire+0x179/0x350 [ 2073.058276][ C0] ? find_held_lock+0x2b/0x80 [ 2073.062956][ C0] kernel_clone+0xfc/0x930 [ 2073.067371][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2073.072567][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 2073.078370][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 2073.083407][ C0] ? __pfx_kthread+0x10/0x10 [ 2073.087993][ C0] kernel_thread+0xd4/0x120 [ 2073.092495][ C0] ? __pfx_kernel_thread+0x10/0x10 [ 2073.097614][ C0] ? __pfx_kthread+0x10/0x10 [ 2073.102200][ C0] ? find_held_lock+0x2b/0x80 [ 2073.106876][ C0] ? kthreadd+0x495/0x800 [ 2073.111204][ C0] kthreadd+0x503/0x800 [ 2073.115354][ C0] ? __pfx_kthreadd+0x10/0x10 [ 2073.120025][ C0] ret_from_fork+0x56a/0x730 [ 2073.124610][ C0] ? __pfx_kthreadd+0x10/0x10 [ 2073.129284][ C0] ret_from_fork_asm+0x1a/0x30 [ 2073.134056][ C0] [ 2073.137069][ C0] task:syz.0.5094 state:R running task stack:26264 pid:24711 tgid:24711 ppid:23294 task_flags:0x40044c flags:0x00004004 [ 2073.150556][ C0] Call Trace: [ 2073.153825][ C0] [ 2073.156757][ C0] __schedule+0x1190/0x5de0 [ 2073.161274][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2073.166223][ C0] ? __pfx___schedule+0x10/0x10 [ 2073.171078][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2073.176101][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 2073.181471][ C0] preempt_schedule_common+0x44/0xc0 [ 2073.186755][ C0] preempt_schedule_thunk+0x16/0x30 [ 2073.191959][ C0] _raw_spin_unlock+0x3e/0x50 [ 2073.196628][ C0] unmap_page_range+0xf77/0x42c0 [ 2073.201585][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 2073.206955][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 2073.211895][ C0] ? __hugetlb_zap_end+0x23f/0x2f0 [ 2073.217007][ C0] ? uprobe_munmap+0x20/0x5c0 [ 2073.221682][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 2073.227578][ C0] unmap_vmas+0x218/0x470 [ 2073.231909][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 2073.236777][ C0] exit_mmap+0x1b9/0xb90 [ 2073.241046][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2073.245817][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 2073.250786][ C0] __mmput+0x12a/0x410 [ 2073.254854][ C0] mmput+0x62/0x70 [ 2073.258574][ C0] do_exit+0x7c7/0x2bf0 [ 2073.262778][ C0] ? __pfx_do_exit+0x10/0x10 [ 2073.267368][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 2073.272389][ C0] ? find_held_lock+0x2b/0x80 [ 2073.277074][ C0] do_group_exit+0xd3/0x2a0 [ 2073.281577][ C0] get_signal+0x2673/0x26d0 [ 2073.286076][ C0] ? trace_sched_exit_tp+0xd1/0x120 [ 2073.291269][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 2073.296469][ C0] ? __pfx_get_signal+0x10/0x10 [ 2073.301321][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 2073.306868][ C0] ? lockdep_softirqs_on+0xbb/0x140 [ 2073.312060][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2073.318224][ C0] irqentry_exit_to_user_mode+0x13e/0x290 [ 2073.323951][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2073.329925][ C0] RIP: 0033:0x7fec23867fd1 [ 2073.334369][ C0] RSP: 002b:00007ffe3c6bd2c0 EFLAGS: 00000206 [ 2073.340428][ C0] RAX: 00007fec22548630 RBX: 00007fec2253e988 RCX: ffffffff822c241c [ 2073.348392][ C0] RDX: ffffffff822c241c RSI: ffffffff822c241c RDI: 00007fec225486d0 [ 2073.356356][ C0] RBP: 00007fec2253e7d8 R08: 00007fec22543750 R09: 00007fec23bc2000 [ 2073.364342][ C0] R10: 00007fec223f9008 R11: 00000000000000ff R12: 00007fec2253e7d0 [ 2073.372305][ C0] R13: 000000000000001a R14: 00007ffe3c6bd488 R15: 00007fec223f9008 [ 2073.380281][ C0] ? __reset_page_owner+0x12c/0x1a0 [ 2073.385480][ C0] ? __reset_page_owner+0x12c/0x1a0 [ 2073.390672][ C0] ? __reset_page_owner+0x12c/0x1a0 [ 2073.395864][ C0] [ 2073.398876][ C0] rcu: rcu_preempt kthread starved for 10788 jiffies! g123133 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2073.410146][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2073.420110][ C0] rcu: RCU grace-period kthread stack dump: [ 2073.425992][ C0] task:rcu_preempt state:R running task stack:27672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2073.439485][ C0] Call Trace: [ 2073.442762][ C0] [ 2073.445688][ C0] __schedule+0x1190/0x5de0 [ 2073.450200][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 2073.455144][ C0] ? __pfx___schedule+0x10/0x10 [ 2073.459994][ C0] ? find_held_lock+0x2b/0x80 [ 2073.464670][ C0] ? schedule+0x2d7/0x3a0 [ 2073.469002][ C0] schedule+0xe7/0x3a0 [ 2073.473065][ C0] schedule_timeout+0x123/0x290 [ 2073.477910][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2073.483278][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2073.488578][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2073.494382][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 2073.499850][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 2073.504612][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2073.509892][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2073.515094][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2073.520030][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 2073.524882][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2073.530696][ C0] rcu_gp_kthread+0x270/0x380 [ 2073.535368][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2073.540561][ C0] ? rcu_is_watching+0x12/0xc0 [ 2073.545329][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 2073.550528][ C0] ? __kthread_parkme+0x19e/0x250 [ 2073.555597][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2073.560791][ C0] kthread+0x3c2/0x780 [ 2073.564855][ C0] ? __pfx_kthread+0x10/0x10 [ 2073.569441][ C0] ? rcu_is_watching+0x12/0xc0 [ 2073.574208][ C0] ? __pfx_kthread+0x10/0x10 [ 2073.578799][ C0] ret_from_fork+0x56a/0x730 [ 2073.583380][ C0] ? __pfx_kthread+0x10/0x10 [ 2073.587967][ C0] ret_from_fork_asm+0x1a/0x30 [ 2073.592742][ C0] [ 2073.595750][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2073.602064][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 2073.610993][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2073.621046][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2073.626685][ C0] Code: 6d 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 56 15 00 fb f4 cc 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2073.646291][ C0] RSP: 0000:ffffffff8e207e08 EFLAGS: 000002c2 [ 2073.652356][ C0] RAX: 00000000053f263b RBX: 0000000000000000 RCX: ffffffff8b94bb49 [ 2073.660321][ C0] RDX: 0000000000000000 RSI: ffffffff8de527c8 RDI: ffffffff8c163300 [ 2073.668285][ C0] RBP: fffffbfff1c52ef8 R08: 0000000000000001 R09: ffffed1017086655 [ 2073.676258][ C0] R10: ffff8880b84332ab R11: 0000000000000000 R12: 0000000000000000 [ 2073.684230][ C0] R13: ffffffff8e2977c0 R14: ffffffff90ab7090 R15: 0000000000000000 [ 2073.692200][ C0] FS: 0000000000000000(0000) GS:ffff8881246b4000(0000) knlGS:0000000000000000 [ 2073.701131][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2073.707711][ C0] CR2: 00007f5ceb6b4000 CR3: 0000000032105000 CR4: 00000000003526f0 [ 2073.715697][ C0] Call Trace: [ 2073.718979][ C0] [ 2073.721906][ C0] default_idle+0x13/0x20 [ 2073.726238][ C0] default_idle_call+0x6d/0xb0 [ 2073.731008][ C0] do_idle+0x391/0x510 [ 2073.735101][ C0] ? __pfx_do_idle+0x10/0x10 [ 2073.739694][ C0] ? trace_sched_exit_tp+0x2f/0x120 [ 2073.744890][ C0] cpu_startup_entry+0x4f/0x60 [ 2073.749652][ C0] rest_init+0x16b/0x2b0 [ 2073.753899][ C0] ? acpi_subsystem_init+0x133/0x180 [ 2073.759179][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 2073.764723][ C0] start_kernel+0x3ee/0x4d0 [ 2073.769226][ C0] x86_64_start_reservations+0x18/0x30 [ 2073.774683][ C0] x86_64_start_kernel+0x130/0x190 [ 2073.779794][ C0] common_startup_64+0x13e/0x148 [ 2073.784826][ C0] [ 2074.154672][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2074.163378][ T1297] ieee802154 phy1 wpan1: encryption failed: -22