last executing test programs: 1m35.471364882s ago: executing program 0 (id=1691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a7b000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000000)="362e0f22c30f01c4260f01cb0fd7e70fc75bbcf30fc731baf80c66b8c2816a8066efbafc0cecd84f30ba420066ed0f01df"}], 0x1, 0x16, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x9, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x2, 0x8000000000000, 0x200000000000004, 0x1, 0x9, 0x8, 0x8a02, 0x0, 0xbd9], 0xdddd1000, 0x384310}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m34.219365576s ago: executing program 0 (id=1699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x2, 0x3, 0x3ff, 0x80, 0x10, 0xfffff000, 0x7}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x7, @empty, 0xfff}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="f0", 0x1}], 0x1}, 0x54) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x64, @empty, 0xfffffff7}}, 0xe, 0x2b, 0xa4f, 0xc1, 0x4c, 0x7, 0x80}, 0x9c) 1m33.819765581s ago: executing program 0 (id=1704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000050) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xfff2}, {0xfff1, 0xffe0}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m33.379576796s ago: executing program 0 (id=1711): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x240000c1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x3}, 0x8) 1m33.096735648s ago: executing program 0 (id=1713): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m32.790339719s ago: executing program 0 (id=1719): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1m17.716591232s ago: executing program 32 (id=1719): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 21.287204408s ago: executing program 2 (id=2105): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x4f23, 0x2, 0x1, 0x4000, 0x1, 0x5, 0x8, 0xd287, 0xa, 0xfd, 0xffeffffe, 0x23, 0x4, 0x1, 0x6, 0x101, 0xf7fffffe, 0x6d, 0x2, 0x1, 0x8, 0x927, 0xeb96, 0x401, 0x40b, 0xe69, 0x6, 0x10008, 0x3, 0x1cdc, 0xfbfffff8]}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, 0x0, 0x48810) 19.063828666s ago: executing program 2 (id=2111): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="66643d56002f30f44e3ca788ffbc3d890f25ee1e3a8ddc2ab2a255cc03c9b498a44c2553ed30e9229b2bc9a073a4f5f072a95da489bb238e56066f5857b9685d11", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000020201080000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x20004000) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffa, 0x7, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) connect$qrtr(0xffffffffffffffff, &(0x7f0000000ac0)={0x2a, 0xffffffff, 0x8000}, 0xc) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = syz_io_uring_setup(0x7a0e, &(0x7f0000000200)={0x0, 0x3dc, 0x10, 0x2, 0xd6}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) syz_io_uring_setup(0x34d8, &(0x7f0000000380)={0x0, 0x553b, 0x800, 0x2, 0x8f, 0x0, r4}, &(0x7f0000000400), &(0x7f0000000480), &(0x7f0000000000)) ioctl$SNDCTL_SEQ_NRSYNTHS(r3, 0x40045109, &(0x7f0000000000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0xd4d00) 18.993727276s ago: executing program 4 (id=2113): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 17.45685519s ago: executing program 2 (id=2116): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000180)=[@decrefs], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 17.156160801s ago: executing program 5 (id=2119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) pread64(r5, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r3, r3, 0x0, 0x20000023896) 15.709867257s ago: executing program 5 (id=2120): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) socket$key(0xf, 0x3, 0x2) 14.682629097s ago: executing program 5 (id=2124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) pread64(r4, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) 13.356203812s ago: executing program 5 (id=2127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) pread64(r3, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 12.019583832s ago: executing program 5 (id=2128): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 11.896586816s ago: executing program 4 (id=2130): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.745337581s ago: executing program 1 (id=2131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) pread64(r4, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 9.981597847s ago: executing program 1 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) pread64(r5, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) sendfile(r3, r3, 0x0, 0x20000023896) 8.267166285s ago: executing program 4 (id=2137): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000100)={0x8, 0x1, 0x0, "f5677038ab753e8b145c2563857921bd8c79142f851e585cd792c8dca7d8e046", 0x4c314356}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000feffffff0f00000008000300", @ANYRES32=r7, @ANYBLOB="05003500b5000000080034"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.250007089s ago: executing program 1 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) pread64(r4, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) 8.094441994s ago: executing program 2 (id=2140): setns(0xffffffffffffffff, 0x24020000) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x800, 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x20008004) accept(r4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000140)="71b6745b87cc14837cd2559ab3075fccbcee74c6db022e1eac", 0x19}, {&(0x7f0000001080)="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", 0x4cc}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r6) 4.967426757s ago: executing program 3 (id=2141): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001e00010029bd7000fcdbdf25fe8800000000000000d597000000000005000000cb33da533c000000000000e13d00000535"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mkdir(&(0x7f0000000200)='./file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.26005246s ago: executing program 2 (id=2142): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = request_key(0x0, &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r2) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x1, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0x5c, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa0000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r8, 0x400caed0, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0xffffffff}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000001c0)={0x1, 0x4, 0x12, &(0x7f0000000080)=""/18}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.133621548s ago: executing program 4 (id=2143): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001e00010029bd7000fcdbdf25fe8800000000000000d597000000000005000000cb33da533c000000000000e13d00000535"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.067533292s ago: executing program 1 (id=2144): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x254c, &(0x7f0000000140)={0x0, 0x3352, 0x10, 0x3, 0x1b}, 0x0, 0x0, &(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 3.028812015s ago: executing program 3 (id=2145): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) pread64(r4, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) 1.799421927s ago: executing program 3 (id=2146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) pread64(0xffffffffffffffff, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r3, r3, 0x0, 0x20000023896) 1.796199196s ago: executing program 4 (id=2147): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.791883155s ago: executing program 1 (id=2148): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xfff) accept4(r0, 0x0, 0x0, 0x800) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r2, 0x1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x47}, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@llc={0x4, {@snap={0x0, 0x1, "c0", "118190", 0xf9}}}}}, 0x0) 848.522816ms ago: executing program 3 (id=2149): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) pread64(r5, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r3, r3, 0x0, 0x20000023896) 499.253604ms ago: executing program 3 (id=2150): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 460.507012ms ago: executing program 2 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) pread64(r5, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r3, r3, 0x0, 0x20000023896) 248.573302ms ago: executing program 1 (id=2152): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4267, 0x6}, 0x50) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r3, 0x58, &(0x7f0000000180)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r4 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xdaee, 0x1, 0x42, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$FUSE_LK(r1, &(0x7f00000000c0)={0x28, 0x0, r2, {{0x0, 0x0, 0x1, r5}}}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r9, 0xffff) fcntl$setsig(r3, 0xa, 0xd) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r4, 0xffffffffffffffff, 0x0) 49.505ms ago: executing program 4 (id=2153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x6, &(0x7f0000000180)) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x4000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) pread64(r5, &(0x7f00000031c0)=""/212, 0xd4, 0x7fffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/bus/input/devices\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[], 0x10) sendfile(r3, r3, 0x0, 0x20000023896) 885.209µs ago: executing program 5 (id=2154): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000001900010000000000000000002001000000000000000ae10000000000ac14141500000000000000000000000000000005000000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ff"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000006bc0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x8080, @dev={0xfe, 0x80, '\x00', 0x29}, 0x4}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)='L', 0x1}], 0x1}}], 0x1, 0x4040001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001e00010029bd7000fcdbdf25fe8800000000000000d597000000000005000000cb33da533c000000000000e13d00000535"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000200)='./file0\x00', 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 3 (id=2155): timer_create(0x3, 0x0, &(0x7f0000044000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006100)={{0x14}, [@NFT_MSG_NEWSETELEM={0xe4, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}]}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}]}, {0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x134}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=ANY=[@ANYBLOB="6400000043000701fefffffffcdbdf25027c0000040045804c0001804500f3804d6162970056486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e"], 0x64}}, 0xc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x2, 0x7) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x10000, 0x8, 0x1}) close_range(r5, r5, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.102' (ED25519) to the list of known hosts. [ 81.443474][ T5782] cgroup: Unknown subsys name 'net' [ 81.684917][ T5782] cgroup: Unknown subsys name 'cpuset' [ 81.740422][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.729441][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.091662][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.092819][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.097749][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.102032][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.102672][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.103402][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.104668][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.110985][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.111129][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.118430][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.118614][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.120907][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.121657][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.129899][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.131202][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.133603][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.137107][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.137822][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.210926][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.212491][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.213049][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.217482][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.237260][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.237590][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.238854][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.083871][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 87.114780][ T31] cfg80211: failed to load regulatory.db [ 87.157533][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 87.193241][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 87.282742][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 87.405638][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 87.524432][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.525441][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.525572][ T5794] bridge_slave_0: entered allmulticast mode [ 87.527237][ T5794] bridge_slave_0: entered promiscuous mode [ 87.602252][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.602344][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.602500][ T5794] bridge_slave_1: entered allmulticast mode [ 87.604111][ T5794] bridge_slave_1: entered promiscuous mode [ 87.646100][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.646237][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.646404][ T5796] bridge_slave_0: entered allmulticast mode [ 87.648508][ T5796] bridge_slave_0: entered promiscuous mode [ 87.703635][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.703756][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.704072][ T5795] bridge_slave_0: entered allmulticast mode [ 87.705707][ T5795] bridge_slave_0: entered promiscuous mode [ 87.707145][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.707275][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.707504][ T5796] bridge_slave_1: entered allmulticast mode [ 87.712065][ T5796] bridge_slave_1: entered promiscuous mode [ 87.788564][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.788722][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.788901][ T5795] bridge_slave_1: entered allmulticast mode [ 87.792352][ T5795] bridge_slave_1: entered promiscuous mode [ 87.821530][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.821632][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.821743][ T5798] bridge_slave_0: entered allmulticast mode [ 87.823308][ T5798] bridge_slave_0: entered promiscuous mode [ 87.866408][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.891069][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.891169][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.891284][ T5798] bridge_slave_1: entered allmulticast mode [ 87.892824][ T5798] bridge_slave_1: entered promiscuous mode [ 87.915756][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.918715][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.963517][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.965991][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.985335][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.985528][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.986101][ T5797] bridge_slave_0: entered allmulticast mode [ 87.988630][ T5797] bridge_slave_0: entered promiscuous mode [ 88.017761][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.182389][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.182551][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.182731][ T5797] bridge_slave_1: entered allmulticast mode [ 88.184531][ T5797] bridge_slave_1: entered promiscuous mode [ 88.188264][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.225767][ T5805] Bluetooth: hci0: command tx timeout [ 88.225774][ T5813] Bluetooth: hci1: command tx timeout [ 88.238775][ T5794] team0: Port device team_slave_0 added [ 88.258694][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.276568][ T5796] team0: Port device team_slave_0 added [ 88.278448][ T5794] team0: Port device team_slave_1 added [ 88.299758][ T5813] Bluetooth: hci3: command tx timeout [ 88.310612][ T5813] Bluetooth: hci4: command tx timeout [ 88.314825][ T5795] team0: Port device team_slave_0 added [ 88.334066][ T5796] team0: Port device team_slave_1 added [ 88.337107][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.339467][ T5795] team0: Port device team_slave_1 added [ 88.381639][ T5813] Bluetooth: hci2: command tx timeout [ 88.415695][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.437629][ T5798] team0: Port device team_slave_0 added [ 88.438874][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.438885][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.438899][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.499494][ T5798] team0: Port device team_slave_1 added [ 88.500839][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.500852][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.500876][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.502121][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.502133][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.502154][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.524164][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.524180][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.524210][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.542121][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.542138][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.542161][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.545807][ T5797] team0: Port device team_slave_0 added [ 88.548017][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.548031][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.548053][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.580829][ T5797] team0: Port device team_slave_1 added [ 88.748541][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.748555][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.748570][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.789364][ T5794] hsr_slave_0: entered promiscuous mode [ 88.793347][ T5794] hsr_slave_1: entered promiscuous mode [ 88.817796][ T5796] hsr_slave_0: entered promiscuous mode [ 88.818761][ T5796] hsr_slave_1: entered promiscuous mode [ 88.819453][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 88.819523][ T5796] Cannot create hsr debugfs directory [ 88.856501][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.856519][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.856545][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.907282][ T5795] hsr_slave_0: entered promiscuous mode [ 88.908966][ T5795] hsr_slave_1: entered promiscuous mode [ 88.909532][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 88.909551][ T5795] Cannot create hsr debugfs directory [ 88.934335][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.934347][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.934362][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.949974][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.949991][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.950014][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.488220][ T5797] hsr_slave_0: entered promiscuous mode [ 89.489058][ T5797] hsr_slave_1: entered promiscuous mode [ 89.501647][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 89.501674][ T5797] Cannot create hsr debugfs directory [ 89.584077][ T5798] hsr_slave_0: entered promiscuous mode [ 89.584975][ T5798] hsr_slave_1: entered promiscuous mode [ 89.585582][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 89.585599][ T5798] Cannot create hsr debugfs directory [ 90.211772][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.258928][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.276247][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.300067][ T5813] Bluetooth: hci0: command tx timeout [ 90.301120][ T5813] Bluetooth: hci1: command tx timeout [ 90.337691][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.380840][ T5805] Bluetooth: hci3: command tx timeout [ 90.380940][ T5813] Bluetooth: hci4: command tx timeout [ 90.458911][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.468386][ T5813] Bluetooth: hci2: command tx timeout [ 90.508445][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.549895][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.602631][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.748931][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.792273][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.826231][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.866000][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.986919][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.033211][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.076194][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.119746][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.222407][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.286785][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.323243][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.358919][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.403573][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.448923][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.484803][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.503339][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.504018][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.549092][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.549245][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.609009][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.647315][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.647462][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.694660][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.698741][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.719769][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.802817][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.805345][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.863876][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.873592][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.925465][ T1401] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.925980][ T1401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.958666][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.002636][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.002857][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.038330][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.048535][ T4243] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.048884][ T4243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.174521][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.241275][ T4243] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.241489][ T4243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.306664][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.307644][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.363022][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.379982][ T5813] Bluetooth: hci1: command tx timeout [ 92.380017][ T5813] Bluetooth: hci0: command tx timeout [ 92.466613][ T5805] Bluetooth: hci4: command tx timeout [ 92.466653][ T5805] Bluetooth: hci3: command tx timeout [ 92.540200][ T5813] Bluetooth: hci2: command tx timeout [ 92.610441][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.791284][ T5794] veth0_vlan: entered promiscuous mode [ 92.858897][ T5794] veth1_vlan: entered promiscuous mode [ 92.915675][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.952225][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.992859][ T5796] veth0_vlan: entered promiscuous mode [ 93.086574][ T5796] veth1_vlan: entered promiscuous mode [ 93.129424][ T5794] veth0_macvtap: entered promiscuous mode [ 93.161679][ T5794] veth1_macvtap: entered promiscuous mode [ 93.214362][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.267788][ T5795] veth0_vlan: entered promiscuous mode [ 93.300933][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.334619][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.336354][ T5796] veth0_macvtap: entered promiscuous mode [ 93.338823][ T5795] veth1_vlan: entered promiscuous mode [ 93.383110][ T5796] veth1_macvtap: entered promiscuous mode [ 93.406915][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.414707][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.423067][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.431867][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.514718][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.574665][ T5798] veth0_vlan: entered promiscuous mode [ 93.587394][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.687482][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.698001][ T5795] veth0_macvtap: entered promiscuous mode [ 93.700780][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.701389][ T5798] veth1_vlan: entered promiscuous mode [ 93.705939][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.717644][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.726964][ T5795] veth1_macvtap: entered promiscuous mode [ 93.893720][ T1401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.893744][ T1401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.922739][ T5797] veth0_vlan: entered promiscuous mode [ 93.996582][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.057907][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.058512][ T5797] veth1_vlan: entered promiscuous mode [ 94.074981][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.075003][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.153614][ T5798] veth0_macvtap: entered promiscuous mode [ 94.157602][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.164571][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.164590][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.179871][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.188829][ T1401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.207991][ T1401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208880][ T5798] veth1_macvtap: entered promiscuous mode [ 94.324906][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.324928][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.460337][ T5813] Bluetooth: hci0: command tx timeout [ 94.460372][ T5813] Bluetooth: hci1: command tx timeout [ 94.492502][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.497078][ T5797] veth0_macvtap: entered promiscuous mode [ 94.540233][ T5805] Bluetooth: hci3: command tx timeout [ 94.540269][ T5805] Bluetooth: hci4: command tx timeout [ 94.584930][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.590635][ T5797] veth1_macvtap: entered promiscuous mode [ 94.621246][ T5813] Bluetooth: hci2: command tx timeout [ 94.704068][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.708647][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.708738][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.708752][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.713059][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.724508][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.796599][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.830053][ T1076] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 94.863764][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.976138][ T4243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.978469][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.978489][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.016041][ T1401] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.033867][ T203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.040032][ T1076] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.040064][ T1076] usb 2-1: config 0 has no interface number 0 [ 95.040505][ T1076] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.040535][ T1076] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.040555][ T1076] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.040582][ T1076] usb 2-1: config 0 interface 1 has no altsetting 0 [ 95.040618][ T1076] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 95.040642][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.045603][ T203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.169162][ T1076] usb 2-1: config 0 descriptor?? [ 95.265999][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.266084][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.575420][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.575441][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.691481][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.707572][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.734051][ T1076] hid (null): invalid report_count 252767622 [ 95.927101][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.927127][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.975529][ T5925] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6'. [ 95.976479][ T1076] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0001/input/input5 [ 96.099928][ T1076] input: HID 145f:0212 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:145F:0212.0001/input/input6 [ 96.146661][ T1076] uclogic 0003:145F:0212.0001: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.1-1/input1 [ 96.260739][ T1076] usb 2-1: USB disconnect, device number 2 [ 96.346638][ T1401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.346661][ T1401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.497880][ T5930] fido_id[5930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 97.313153][ T5949] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.376833][ T5947] netlink: 'syz.4.5': attribute type 11 has an invalid length. [ 100.832080][ T5999] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.872894][ T5999] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.228087][ T1076] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 101.330132][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'. [ 101.410498][ T1076] usb 2-1: Using ep0 maxpacket: 32 [ 101.412919][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.412953][ T1076] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.412997][ T1076] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.413021][ T1076] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.468705][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 101.468862][ T6016] Zero length message leads to an empty skb [ 101.497213][ T1076] usb 2-1: config 0 descriptor?? [ 101.538897][ T1076] hub 2-1:0.0: USB hub found [ 101.614500][ T6014] block nbd0: server does not support multiple connections per device. [ 101.663322][ T6014] block nbd0: shutting down sockets [ 101.714049][ T1076] hub 2-1:0.0: 1 port detected [ 101.890434][ T6024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.338429][ T1076] hub 2-1:0.0: activate --> -90 [ 102.742816][ T1076] usb 2-1-port1: cannot reset (err = -71) [ 102.743175][ T1076] usb 2-1-port1: cannot reset (err = -71) [ 102.743194][ T1076] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 102.743544][ T1076] usb 2-1-port1: cannot disable (err = -71) [ 102.744048][ T1076] usb 2-1-port1: cannot reset (err = -71) [ 102.744361][ T1076] usb 2-1-port1: cannot reset (err = -71) [ 102.744379][ T1076] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad? [ 102.744691][ T1076] usb 2-1-port1: cannot disable (err = -71) [ 102.744753][ T1076] usb 2-1-port1: attempt power cycle [ 102.750979][ T10] usb 2-1: USB disconnect, device number 3 [ 102.760058][ T6031] warning: `syz.2.42' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.587960][ T5887] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.751050][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 104.764489][ T5887] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 104.764520][ T5887] usb 3-1: config 0 has no interface number 0 [ 104.764574][ T5887] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 104.774507][ T5887] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 104.774540][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.774559][ T5887] usb 3-1: Product: syz [ 104.774574][ T5887] usb 3-1: Manufacturer: syz [ 104.774589][ T5887] usb 3-1: SerialNumber: syz [ 104.850806][ T5887] usb 3-1: config 0 descriptor?? [ 104.851835][ T6060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 105.104988][ T6060] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 106.290720][ T5887] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.291570][ T5887] asix 3-1:0.188: probe with driver asix failed with error -71 [ 106.381235][ T5887] usb 3-1: USB disconnect, device number 2 [ 106.418455][ T5799] udevd[5799]: setting mode of /dev/bus/usb/003/002 to 020664 failed: No such file or directory [ 106.418653][ T5799] udevd[5799]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 107.098755][ T6144] ======================================================= [ 107.098755][ T6144] WARNING: The mand mount option has been deprecated and [ 107.098755][ T6144] and is ignored by this kernel. Remove the mand [ 107.098755][ T6144] option from the mount to silence this warning. [ 107.098755][ T6144] ======================================================= [ 108.047334][ T6161] Illegal XDP return value 4294967294 on prog (id 6) dev syz_tun, expect packet loss! [ 108.209773][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.366073][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 108.372735][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.374509][ T31] usb 1-1: config 1 has an invalid descriptor of length 77, skipping remainder of the config [ 108.374568][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 108.415605][ T31] usb 1-1: New USB device found, idVendor=17cc, idProduct=1940, bcdDevice= 0.40 [ 108.415637][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.415658][ T31] usb 1-1: Product: syz [ 108.415672][ T31] usb 1-1: Manufacturer: syz [ 108.415686][ T31] usb 1-1: SerialNumber: syz [ 108.764935][ T31] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 109.053944][ T31] usb 1-1: USB disconnect, device number 2 [ 109.209769][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.679761][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 109.843809][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 109.843841][ T10] usb 3-1: config 0 has no interface number 0 [ 109.843904][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 109.846926][ T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 109.846958][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.846978][ T10] usb 3-1: Product: syz [ 109.846992][ T10] usb 3-1: Manufacturer: syz [ 109.847006][ T10] usb 3-1: SerialNumber: syz [ 109.862321][ T10] usb 3-1: config 0 descriptor?? [ 109.899836][ T5898] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.054394][ T5898] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.054492][ T5898] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 110.054537][ T5898] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 110.054562][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.134021][ T6186] io-wq is not configured for unbound workers [ 110.146685][ T6177] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 110.247850][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.710447][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 110.865645][ T5898] usb 5-1: USB disconnect, device number 2 [ 111.107319][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 111.120339][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 111.120369][ T10] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 111.120630][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 111.158705][ T6193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 111.180050][ T10] usb 3-1: USB disconnect, device number 3 [ 111.615219][ T5898] kernel read not supported for file /vcs (pid: 5898 comm: kworker/0:5) [ 112.164881][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.213409][ T6217] bond1: (slave bond0): making interface the new active one [ 112.225663][ T6217] bond1: (slave bond0): Enslaving as an active interface with an up link [ 112.226668][ T6216] netlink: 76 bytes leftover after parsing attributes in process `syz.4.96'. [ 112.573550][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 112.625460][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.100'. [ 113.433118][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 113.433147][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 113.617497][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 113.617706][ T6268] netlink: 'syz.4.117': attribute type 12 has an invalid length. [ 113.824067][ T6099] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.824243][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.117'. [ 113.824273][ T6268] netlink: 'syz.4.117': attribute type 12 has an invalid length. [ 113.905846][ T6093] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.969833][ T6093] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.969890][ T6093] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.563103][ T6309] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 115.563127][ T6309] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 115.563139][ T6309] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.131'. [ 115.611633][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.779706][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 115.784166][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.784202][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.784243][ T5887] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 115.784264][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.820046][ T5887] usb 3-1: config 0 descriptor?? [ 117.194163][ T5887] kye 0003:0458:5016.0002: control desc unexpectedly large [ 117.261175][ T5887] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input7 [ 117.357857][ T5887] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input8 [ 117.408049][ T6335] netlink: 'syz.4.143': attribute type 4 has an invalid length. [ 117.570436][ T5887] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 118.169815][ T5898] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.319845][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 118.322506][ T5898] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 118.322535][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.322554][ T5898] usb 5-1: config 0 has no interface number 0 [ 118.322621][ T5898] usb 5-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 118.325650][ T5898] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 118.325682][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.325701][ T5898] usb 5-1: Product: syz [ 118.325716][ T5898] usb 5-1: Manufacturer: syz [ 118.325730][ T5898] usb 5-1: SerialNumber: syz [ 118.424378][ T6352] bridge0: port 3(vlan2) entered blocking state [ 118.428645][ T5898] usb 5-1: config 0 descriptor?? [ 118.435806][ C1] kye 0003:0458:5016.0002: usb_submit_urb(ctrl) failed: -1 [ 118.492199][ T6352] bridge0: port 3(vlan2) entered disabled state [ 118.492542][ T6352] vlan2: entered allmulticast mode [ 118.492561][ T6352] geneve0: entered allmulticast mode [ 118.492960][ T1076] usb 3-1: USB disconnect, device number 4 [ 118.576245][ T6352] vlan2: entered promiscuous mode [ 118.576267][ T6352] geneve0: entered promiscuous mode [ 118.692121][ T5898] ath6kl: Failed to submit usb control message: -71 [ 118.692178][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 118.692194][ T5898] ath6kl: Unable to send get target info: -71 [ 118.712290][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 118.714219][ T5898] ath6kl_usb 5-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 118.777484][ T6355] fido_id[6355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 118.814203][ T5898] usb 5-1: USB disconnect, device number 3 [ 122.505737][ T6450] kvm: user requested TSC rate below hardware speed [ 123.433558][ T37] audit: type=1326 audit(1774964767.939:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.2.175" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x0 [ 123.680658][ T6481] netlink: 68 bytes leftover after parsing attributes in process `syz.1.181'. [ 127.759928][ T5935] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 127.909738][ T5935] usb 2-1: Using ep0 maxpacket: 8 [ 127.925766][ T5935] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 127.925799][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.925820][ T5935] usb 2-1: Product: syz [ 127.925835][ T5935] usb 2-1: Manufacturer: syz [ 127.925850][ T5935] usb 2-1: SerialNumber: syz [ 127.984190][ T5935] usb 2-1: config 0 descriptor?? [ 128.140030][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.192659][ T5935] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.329745][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 128.356298][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 128.356390][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.356412][ T10] usb 3-1: Product: syz [ 128.356426][ T10] usb 3-1: Manufacturer: syz [ 128.356441][ T10] usb 3-1: SerialNumber: syz [ 128.641733][ T5935] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 128.725953][ T5935] usb 2-1: USB disconnect, device number 8 [ 129.912861][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 129.953061][ T10] usb 3-1: USB disconnect, device number 5 [ 130.241350][ T6626] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 130.241382][ T6626] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 130.241568][ T6626] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 131.283683][ T6658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 132.241201][ T6680] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 133.022279][ T6698] netlink: 68 bytes leftover after parsing attributes in process `syz.4.253'. [ 133.189386][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.189485][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319900][ T1076] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 133.689197][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.689234][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.689276][ T1076] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 133.689301][ T1076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.706596][ T1076] usb 3-1: config 0 descriptor?? [ 134.011490][ T6697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.012129][ T6697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.073036][ T1076] usbhid 3-1:0.0: can't add hid device: -71 [ 134.073118][ T1076] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 134.083051][ T1076] usb 3-1: USB disconnect, device number 6 [ 134.669699][ T1076] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 134.820854][ T1076] usb 3-1: Using ep0 maxpacket: 16 [ 134.824766][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.824800][ T1076] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.824842][ T1076] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 134.824866][ T1076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.861534][ T1076] usb 3-1: config 0 descriptor?? [ 135.309311][ T1076] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 135.310572][ T1076] mcp2221 0003:04D8:00DD.0003: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 135.632392][ T1076] usb 3-1: USB disconnect, device number 7 [ 136.542078][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 139.210221][ T37] audit: type=1326 audit(1774964783.729:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6823 comm="syz.1.292" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x0 [ 139.759707][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.909709][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 139.911668][ T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.911696][ T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.911718][ T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.911772][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.911794][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.911820][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.911864][ T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.911889][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.953858][ T31] usb 5-1: config 0 descriptor?? [ 140.212638][ T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.412667][ T5911] usb 5-1: USB disconnect, device number 4 [ 140.484083][ T5911] usblp0: removed [ 140.635843][ T6860] netlink: 76 bytes leftover after parsing attributes in process `syz.2.307'. [ 141.127561][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.4.313'. [ 141.569118][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569155][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569181][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569206][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569231][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569256][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569282][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569307][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569332][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.569356][ T5877] hid-generic 0006:0004:0009.0004: unknown main item tag 0x0 [ 141.714906][ T5877] hid-generic 0006:0004:0009.0004: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 142.033496][ T6893] fido_id[6893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 143.664762][ T6916] ceph: No mds server is up or the cluster is laggy [ 143.667556][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 143.668242][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 147.946921][ T6997] process 'syz.1.360' launched './file0' with NULL argv: empty string added [ 148.844006][ T7022] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 149.318298][ T5935] hid_parser_main: 7 callbacks suppressed [ 149.318325][ T5935] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 149.341968][ T5935] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.354652][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 149.354685][ T7038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.376'. [ 149.355206][ T7038] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 149.451277][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 149.690799][ T7041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.527249][ T7045] bond1 (unregistering): Released all slaves [ 152.707279][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 154.659352][ T7113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.849608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 158.889602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 160.613557][ T7163] netlink: 'syz.4.420': attribute type 27 has an invalid length. [ 163.848018][ T7177] ISOFS: Unable to identify CD-ROM format. [ 164.152746][ T7163] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.154279][ T7163] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.979614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 167.105552][ T7212] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 167.704342][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.762437][ T7163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.398824][ T7215] bond2: (slave gretap1): making interface the new active one [ 171.550455][ T7225] IPVS: starting estimator thread 0... [ 171.553156][ T7215] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 171.581315][ T6447] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.581352][ T6447] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.595549][ T6447] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.595587][ T6447] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.602034][ T6447] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.602065][ T6447] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.602100][ T6447] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.602123][ T6447] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.789900][ T7285] IPVS: using max 13 ests per chain, 31200 per kthread [ 173.739625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.749618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.759622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.750757][ T7334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.606532][ T7381] binder: 7376:7381 ioctl c0306201 0 returned -14 [ 179.929761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.711279][ T7438] netlink: 'syz.0.504': attribute type 16 has an invalid length. [ 184.427463][ T7460] netlink: 68 bytes leftover after parsing attributes in process `syz.1.512'. [ 190.539598][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 190.559596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 190.569594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 194.980442][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.980523][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.777682][ T7531] netlink: 68 bytes leftover after parsing attributes in process `syz.0.528'. [ 197.928744][ T7538] netlink: 'syz.4.531': attribute type 4 has an invalid length. [ 198.721915][ T5877] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.317037][ T5877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.317068][ T5877] usb 2-1: config 0 has no interface number 0 [ 199.336143][ T5877] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 199.336177][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.336198][ T5877] usb 2-1: Product: syz [ 199.336213][ T5877] usb 2-1: Manufacturer: syz [ 199.336228][ T5877] usb 2-1: SerialNumber: syz [ 199.385214][ T5877] usb 2-1: config 0 descriptor?? [ 200.598398][ T7559] ptrace attach of "./syz-executor exec"[5798] was attempted by "./syz-executor exec"[7559] [ 200.739777][ T5877] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 200.784223][ T5877] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 200.784923][ T5877] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 200.785011][ T5877] usb 2-1: media controller created [ 200.846986][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.542041][ T5813] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 201.558794][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 202.263891][ T5877] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 202.956051][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 204.336663][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.709916][ T7599] syz.0.550 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 204.740506][ T7599] ubi31: attaching mtd0 [ 204.815692][ T7599] ubi31: scanning is finished [ 204.815745][ T7599] ubi31: empty MTD device detected [ 204.936560][ T5805] Bluetooth: Frame is too long (len 12, expected len 4) [ 205.567838][ T7224] usb 2-1: USB disconnect, device number 9 [ 207.328967][ T7599] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 212.331658][ T5816] Bluetooth: hci4: command 0x0406 tx timeout [ 212.392570][ T5816] Bluetooth: hci1: command 0x0406 tx timeout [ 212.401510][ T5816] Bluetooth: hci0: command 0x0406 tx timeout [ 212.419477][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 212.419514][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 215.310172][ T5935] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 215.741392][ T5935] usb 1-1: unable to get BOS descriptor or descriptor too short [ 215.749188][ T5935] usb 1-1: not running at top speed; connect to a high speed hub [ 215.795386][ T5935] usb 1-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 215.795434][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.795455][ T5935] usb 1-1: Product: syz [ 215.795469][ T5935] usb 1-1: Manufacturer: syz [ 215.795484][ T5935] usb 1-1: SerialNumber: syz [ 215.893716][ T5935] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 216.066918][ T5935] usb 1-1: unit 13 not found! [ 217.279662][ T5935] usb 1-1: USB disconnect, device number 3 [ 217.707119][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 217.709354][ T7235] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 217.889766][ T7235] usb 2-1: Using ep0 maxpacket: 8 [ 217.892279][ T7235] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 217.892307][ T7235] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 217.892326][ T7235] usb 2-1: config 6 has no interface number 0 [ 217.892393][ T7235] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 217.892416][ T7235] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.967583][ T7235] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 217.967619][ T7235] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 217.967640][ T7235] usb 2-1: Product: syz [ 217.967654][ T7235] usb 2-1: Manufacturer: syz [ 217.967669][ T7235] usb 2-1: SerialNumber: syz [ 217.997700][ T7235] hso 2-1:6.2: Failed to find INT IN ep [ 218.303524][ T7235] usb 2-1: USB disconnect, device number 10 [ 218.505285][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 218.515480][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.596'. [ 223.308831][ T5115] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 223.314228][ T5115] Bluetooth: hci4: Injecting HCI hardware error event [ 223.317001][ T5115] Bluetooth: hci4: hardware error 0x00 [ 224.764499][ T7767] cgroup: Need name or subsystem set [ 226.940232][ T5115] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 228.448697][ T7811] netlink: 33 bytes leftover after parsing attributes in process `syz.0.626'. [ 228.986785][ T7829] netlink: 148 bytes leftover after parsing attributes in process `syz.1.637'. [ 228.986913][ T7829] netlink: 116 bytes leftover after parsing attributes in process `syz.1.637'. [ 228.986930][ T7829] netlink: 24 bytes leftover after parsing attributes in process `syz.1.637'. [ 228.989768][ T7225] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 229.139716][ T7225] usb 5-1: Using ep0 maxpacket: 8 [ 229.146151][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 229.146190][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.146293][ T7225] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.146319][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 229.146346][ T7225] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 229.146387][ T7225] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 229.146411][ T7225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.243487][ T7225] usb 5-1: config 0 descriptor?? [ 229.244450][ T7819] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 229.536530][ T7225] usb 5-1: USB disconnect, device number 5 [ 229.714500][ T5115] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 233.030319][ T5935] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 233.193286][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 233.193325][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 233.194905][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 233.194935][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.194956][ T5935] usb 3-1: SerialNumber: syz [ 233.312646][ T5935] usb 3-1: bad CDC descriptors [ 233.313702][ T5935] usb-storage 3-1:1.0: USB Mass Storage device detected [ 233.348045][ T5935] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 233.358640][ T5935] scsi host1: usb-storage 3-1:1.0 [ 233.929775][ T7966] tmpfs: Bad value for 'mpol' [ 235.176269][ T7224] usb 3-1: USB disconnect, device number 8 [ 236.109897][ T8021] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 237.111629][ T8043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.725'. [ 237.533275][ T8057] sock: sock_timestamping_bind_phc: sock not bind to device [ 238.355713][ T8076] bond1: option xmit_hash_policy: invalid value (6) [ 238.441225][ T8076] bond1 (unregistering): Released all slaves [ 239.353016][ T37] audit: type=1326 audit(1774964883.839:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.353075][ T37] audit: type=1326 audit(1774964883.849:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.353119][ T37] audit: type=1326 audit(1774964883.879:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.358407][ T37] audit: type=1326 audit(1774964883.879:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.358463][ T37] audit: type=1326 audit(1774964883.879:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.358508][ T37] audit: type=1326 audit(1774964883.879:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.358553][ T37] audit: type=1326 audit(1774964883.879:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.362095][ T37] audit: type=1326 audit(1774964883.889:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 239.362143][ T37] audit: type=1326 audit(1774964883.889:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8113 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f415895c819 code=0x7ffc0000 [ 240.012560][ T8133] comedi comedi0: comedi_config --init_data is deprecated [ 240.341979][ T8142] trusted_key: encrypted_key: insufficient parameters specified [ 242.406840][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.791'. [ 242.570971][ T8190] bond2: option ad_actor_sys_prio: invalid value (0) [ 242.570999][ T8190] bond2: option ad_actor_sys_prio: allowed values 1 - 65535 [ 242.671119][ T8190] bond2 (unregistering): Released all slaves [ 244.080656][ T8227] netlink: 8 bytes leftover after parsing attributes in process `syz.1.807'. [ 245.399743][ T7235] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 245.562175][ T7235] usb 2-1: config 246 has an invalid descriptor of length 0, skipping remainder of the config [ 245.567896][ T7235] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 9.63 [ 245.567929][ T7235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.567950][ T7235] usb 2-1: Product: syz [ 245.567965][ T7235] usb 2-1: Manufacturer: syz [ 245.567980][ T7235] usb 2-1: SerialNumber: syz [ 246.077564][ T7235] usb 2-1: Cannot retrieve CPort count: -71 [ 246.077623][ T7235] usb 2-1: Cannot retrieve CPort count: -71 [ 246.077664][ T7235] es2_ap_driver 2-1:246.0: probe with driver es2_ap_driver failed with error -71 [ 246.086420][ T7235] usb 2-1: USB disconnect, device number 11 [ 247.136547][ T8271] comedi comedi3: reset error (fatal) [ 247.346619][ T8282] netlink: 136 bytes leftover after parsing attributes in process `syz.2.830'. [ 252.510712][ T8375] syz.2.869 uses old SIOCAX25GETINFO [ 252.533204][ T8377] Invalid ELF header magic: != ELF [ 253.432695][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 254.029683][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 254.033413][ T5877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.033471][ T5877] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.033500][ T5877] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.033523][ T5877] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.033552][ T5877] usb 5-1: config 0 interface 0 has no altsetting 0 [ 254.033587][ T5877] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 254.033611][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.127868][ T5877] usb 5-1: config 0 descriptor?? [ 254.568544][ T5877] corsair-cpro 0003:1B1C:0C10.0006: item fetching failed at offset 4/5 [ 254.605726][ T5877] corsair-cpro 0003:1B1C:0C10.0006: probe with driver corsair-cpro failed with error -22 [ 254.790792][ T5877] usb 5-1: USB disconnect, device number 6 [ 255.849811][ T8431] netlink: 120 bytes leftover after parsing attributes in process `syz.0.894'. [ 255.849838][ T8431] netlink: 'syz.0.894': attribute type 1 has an invalid length. [ 255.849990][ T8431] netlink: 64 bytes leftover after parsing attributes in process `syz.0.894'. [ 256.070665][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.070746][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.502130][ T8451] netlink: 20 bytes leftover after parsing attributes in process `syz.1.902'. [ 257.002585][ T7232] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 257.349684][ T7232] usb 5-1: Using ep0 maxpacket: 16 [ 257.365660][ T7232] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 257.365692][ T7232] usb 5-1: config 0 has no interface number 0 [ 257.365739][ T7232] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.365766][ T7232] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.365806][ T7232] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 257.365828][ T7232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.413690][ T7232] usb 5-1: config 0 descriptor?? [ 258.074886][ T7232] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71 [ 258.074958][ T7232] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71 [ 258.074976][ T7232] uclogic 0003:28BD:0071.0007: pen probing failed: -71 [ 258.075030][ T7232] uclogic 0003:28BD:0071.0007: failed probing parameters: -71 [ 258.075185][ T7232] uclogic 0003:28BD:0071.0007: probe with driver uclogic failed with error -71 [ 258.164051][ T7232] usb 5-1: USB disconnect, device number 7 [ 259.575653][ T8547] vlan2: entered promiscuous mode [ 259.575679][ T8547] bridge0: entered promiscuous mode [ 260.487747][ T5877] kernel write not supported for file /input/mouse0 (pid: 5877 comm: kworker/1:3) [ 260.543175][ T8586] netlink: 44 bytes leftover after parsing attributes in process `syz.0.951'. [ 260.593617][ T8588] bridge_slave_0: default FDB implementation only supports local addresses [ 260.873646][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.957'. [ 261.095740][ T8607] netlink: 84 bytes leftover after parsing attributes in process `syz.4.962'. [ 263.162304][ T8632] usb usb2: usbfs: process 8632 (syz.2.971) did not claim interface 0 before use [ 263.919692][ T7225] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 264.069861][ T7225] usb 1-1: Using ep0 maxpacket: 32 [ 264.072672][ T7225] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 264.072702][ T7225] usb 1-1: config 0 has no interface number 0 [ 264.072751][ T7225] usb 1-1: config 0 interface 184 has no altsetting 0 [ 264.078224][ T7225] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 264.078257][ T7225] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.078277][ T7225] usb 1-1: Product: syz [ 264.078292][ T7225] usb 1-1: Manufacturer: syz [ 264.078306][ T7225] usb 1-1: SerialNumber: syz [ 264.128805][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 264.175426][ T7225] usb 1-1: config 0 descriptor?? [ 265.454396][ T7225] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 265.454432][ T7225] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 265.454453][ T7225] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 265.454804][ T7225] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 265.526450][ T7225] usb 1-1: USB disconnect, device number 4 [ 265.899929][ T8681] capability: warning: `syz.1.994' uses deprecated v2 capabilities in a way that may be insecure [ 266.210262][ T7225] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 266.360643][ T7225] usb 5-1: Using ep0 maxpacket: 8 [ 266.363592][ T7225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.363684][ T7225] usb 5-1: too many configurations: 141, using maximum allowed: 8 [ 266.365158][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.365212][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.366637][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.366689][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.375193][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.375252][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.391396][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.391457][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.400693][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.400752][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.405680][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.405736][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.411005][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.411071][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.414516][ T7225] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.414572][ T7225] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.489739][ T7225] usb 5-1: New USB device found, idVendor=15ca, idProduct=0101, bcdDevice= 0.40 [ 266.489770][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.489789][ T7225] usb 5-1: Product: syz [ 266.489803][ T7225] usb 5-1: Manufacturer: syz [ 266.489818][ T7225] usb 5-1: SerialNumber: syz [ 267.180910][ T7225] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 267.180975][ T7225] usb 5-1: MIDIStreaming interface descriptor not found [ 267.407476][ T7225] usb 5-1: USB disconnect, device number 8 [ 268.084184][ T6357] udevd[6357]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.706157][ T8742] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1023'. [ 270.139737][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 270.292931][ T5898] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 270.292995][ T5898] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.293023][ T5898] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.293069][ T5898] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.293093][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.393014][ T5898] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.394160][ T5898] usb 3-1: invalid MIDI out EP 0 [ 270.971348][ T5898] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 271.013160][ T5898] usb 3-1: USB disconnect, device number 9 [ 271.032140][ T6359] udevd[6359]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.485132][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1059'. [ 271.485171][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1059'. [ 271.583668][ T8829] gretap0: entered promiscuous mode [ 271.629660][ T7231] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 271.661270][ T8829] gretap0: left promiscuous mode [ 271.799700][ T7231] usb 5-1: Using ep0 maxpacket: 8 [ 271.815647][ T7231] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 271.815711][ T7231] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 271.815735][ T7231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.815759][ T7231] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.815782][ T7231] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.815827][ T7231] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.815849][ T7231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.074718][ T7231] usb 5-1: GET_CAPABILITIES returned 0 [ 272.074785][ T7231] usbtmc 5-1:16.0: can't read capabilities [ 272.287763][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.291348][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.291428][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.291492][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.293600][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.293673][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.293735][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294063][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294127][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294189][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294474][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294540][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294602][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294879][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.294943][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.295005][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 272.330224][ T7231] usb 5-1: USB disconnect, device number 9 [ 274.970970][ T8922] hpfs: Bad magic ... probably not HPFS [ 274.981113][ T8922] hpfs: Bad magic ... probably not HPFS [ 275.462247][ T8932] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1107'. [ 276.447406][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 276.908878][ T8973] capability: warning: `syz.0.1126' uses 32-bit capabilities (legacy support in use) [ 276.931340][ T8973] program syz.0.1126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.169641][ T7225] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 277.309652][ T7225] usb 3-1: device descriptor read/64, error -71 [ 277.600889][ T7225] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 277.729740][ T7225] usb 3-1: device descriptor read/64, error -71 [ 277.840319][ T7225] usb usb3-port1: attempt power cycle [ 278.123833][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 278.123933][ T9009] vlan2: left allmulticast mode [ 278.123949][ T9009] geneve0: left allmulticast mode [ 278.123976][ T9009] vlan2: left promiscuous mode [ 278.123988][ T9009] geneve0: left promiscuous mode [ 278.131033][ T9009] bridge0: port 3(vlan2) entered disabled state [ 278.209742][ T7225] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 278.231616][ T7225] usb 3-1: device descriptor read/8, error -71 [ 278.271485][ T9009] bridge_slave_1: left allmulticast mode [ 278.271518][ T9009] bridge_slave_1: left promiscuous mode [ 278.271853][ T9009] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.434561][ T9009] bridge_slave_0: left allmulticast mode [ 278.434593][ T9009] bridge_slave_0: left promiscuous mode [ 278.434888][ T9009] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.479671][ T7225] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 278.511805][ T7225] usb 3-1: device descriptor read/8, error -71 [ 278.625862][ T7225] usb usb3-port1: unable to enumerate USB device [ 278.843011][ T9031] input: syz1 as /devices/virtual/input/input9 [ 279.169644][ T9042] program syz.4.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 279.650395][ T9058] sctp: [Deprecated]: syz.1.1168 (pid 9058) Use of int in max_burst socket option deprecated. [ 279.650395][ T9058] Use struct sctp_assoc_value instead [ 281.107789][ T5898] kernel write not supported for file bpf-map (pid: 5898 comm: kworker/0:5) [ 281.405681][ T37] audit: type=1800 audit(1774964925.929:13): pid=9116 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1196" name="bus" dev="tmpfs" ino=1051 res=0 errno=0 [ 282.908458][ T9178] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1223'. [ 283.457198][ T37] audit: type=1326 audit(1774964927.979:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9196 comm="syz.1.1233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ae18ac819 code=0x0 [ 284.143081][ T37] audit: type=1800 audit(1774964928.659:15): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1245" name="bus" dev="tmpfs" ino=1040 res=0 errno=0 [ 284.269902][ T7225] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 284.371171][ T9228] program syz.0.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.443112][ T7225] usb 5-1: unable to get BOS descriptor or descriptor too short [ 284.444186][ T7225] usb 5-1: no configurations [ 284.444204][ T7225] usb 5-1: can't read configurations, error -22 [ 284.911100][ T9247] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 284.950103][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1258'. [ 285.709720][ T7225] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 285.887616][ T7225] usb 2-1: unable to get BOS descriptor or descriptor too short [ 285.889724][ T7225] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 285.889766][ T7225] usb 2-1: can't read configurations, error -71 [ 285.999666][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 286.159707][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 286.160715][ T10] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 286.164474][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.164512][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.165880][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.166204][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.167460][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.167484][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.168741][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.168767][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.180059][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.180086][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.190423][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.190451][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.196319][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.196344][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.205650][ T10] usb 1-1: config 28 has an invalid descriptor of length 36, skipping remainder of the config [ 286.205676][ T10] usb 1-1: config 28 has 0 interfaces, different from the descriptor's value: 1 [ 286.219484][ T10] usb 1-1: string descriptor 0 read error: -71 [ 286.221828][ T10] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 286.221854][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.314530][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 286.314555][ T10] r8152-cfgselector 1-1: rejected 8 configurations due to insufficient available bus power [ 286.314573][ T10] r8152-cfgselector 1-1: no configuration chosen from 8 choices [ 286.338485][ T10] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 286.534373][ T9297] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1278'. [ 286.534402][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1278'. [ 287.074771][ T9316] netlink: 'syz.4.1287': attribute type 39 has an invalid length. [ 287.414758][ T9325] sctp: [Deprecated]: syz.0.1291 (pid 9325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 287.414758][ T9325] Use struct sctp_sack_info instead [ 287.879868][ T9335] tipc: Invalid UDP bearer configuration [ 287.879920][ T9335] tipc: Enabling of bearer rejected, failed to enable media [ 288.263223][ T9349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1303'. [ 288.782854][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 288.782884][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 288.784371][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 288.784398][ T9369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1312'. [ 289.074741][ T9378] erspan0: entered promiscuous mode [ 289.429670][ T7225] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 289.582523][ T7225] usb 5-1: Using ep0 maxpacket: 32 [ 289.584926][ T7225] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 289.584957][ T7225] usb 5-1: config 0 has no interface number 0 [ 289.588068][ T7225] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 289.588098][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.588118][ T7225] usb 5-1: Product: syz [ 289.588132][ T7225] usb 5-1: Manufacturer: syz [ 289.588147][ T7225] usb 5-1: SerialNumber: syz [ 289.658816][ T7225] usb 5-1: config 0 descriptor?? [ 290.071658][ T7225] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 290.071692][ T7225] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 290.457343][ T5877] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 290.480178][ T7225] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 290.480523][ T7225] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 290.519680][ T7225] usb 5-1: USB disconnect, device number 12 [ 290.619771][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 290.624235][ T5877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.624293][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 290.624324][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 290.624345][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 290.624365][ T5877] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.627728][ T5877] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 290.627761][ T5877] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 290.627781][ T5877] usb 2-1: Manufacturer: syz [ 290.663942][ T5877] usb 2-1: config 0 descriptor?? [ 291.819678][ T5877] rc_core: IR keymap rc-hauppauge not found [ 291.819699][ T5877] Registered IR keymap rc-empty [ 291.820340][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 291.841060][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 291.867969][ T5877] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 291.904433][ T5877] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 291.988969][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.032342][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.055204][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.124963][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.139848][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.161242][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.189956][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.209701][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.234468][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.257960][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.279802][ T5877] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 292.329597][ T5877] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 58 [ 292.329624][ T5877] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 292.354383][ T5877] usb 2-1: USB disconnect, device number 14 [ 293.481560][ T5898] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.853544][ T9492] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.861632][ T5877] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 295.035883][ T5877] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.035919][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.069046][ T5877] usb 1-1: config 0 descriptor?? [ 295.076741][ T5877] cp210x 1-1:0.0: cp210x converter detected [ 295.492345][ T5877] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 295.493461][ T5877] cp210x 1-1:0.0: GPIO initialisation failed: -524 [ 295.526213][ T9535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1386'. [ 295.544303][ T5877] usb 1-1: cp210x converter now attached to ttyUSB0 [ 295.703723][ T5877] usb 1-1: USB disconnect, device number 6 [ 295.734173][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 295.735091][ T5877] cp210x 1-1:0.0: device disconnected [ 297.519818][ T5898] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 298.068233][ T5898] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.068565][ T5898] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 298.068624][ T5898] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.234569][ T5898] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.234604][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.234624][ T5898] usb 2-1: Product: syz [ 298.234639][ T5898] usb 2-1: Manufacturer: syz [ 298.234653][ T5898] usb 2-1: SerialNumber: syz [ 298.264409][ T5898] cdc_mbim 2-1:1.0: skipping garbage [ 298.509228][ T9568] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 299.676259][ T9591] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 299.676447][ T7231] IPVS: starting estimator thread 0... [ 299.759780][ T9598] IPVS: using max 6 ests per chain, 14400 per kthread [ 299.922855][ T7225] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 299.982644][ T9601] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 300.080940][ T7225] usb 5-1: Using ep0 maxpacket: 8 [ 300.109976][ T7225] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 300.110067][ T7225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.110089][ T7225] usb 5-1: Product: syz [ 300.110104][ T7225] usb 5-1: Manufacturer: syz [ 300.110118][ T7225] usb 5-1: SerialNumber: syz [ 300.177382][ T7225] usb 5-1: config 0 descriptor?? [ 300.214233][ T5898] cdc_mbim 2-1:1.0: bind() failure [ 300.249766][ T7225] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 300.265425][ T5898] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 300.273375][ T5898] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 300.281636][ T5898] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 300.354272][ T5898] usb 2-1: USB disconnect, device number 15 [ 300.829650][ T7232] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 300.982287][ T7232] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.982317][ T7232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.986580][ T7232] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 300.986611][ T7232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.986631][ T7232] usb 1-1: SerialNumber: syz [ 301.089775][ T5898] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 301.245129][ T7225] gspca_sonixj: reg_w1 err -71 [ 301.251387][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.251435][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.252762][ T5898] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 301.252785][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 301.252803][ T5898] usb 3-1: SerialNumber: syz [ 301.319860][ T7225] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 301.360679][ T7232] usb 1-1: 0:2 : does not exist [ 301.406728][ T7225] usb 5-1: USB disconnect, device number 14 [ 302.195825][ T5898] usb 3-1: 0:2 : does not exist [ 302.269326][ T7232] usb 1-1: USB disconnect, device number 7 [ 303.158743][ T5898] usb 3-1: USB disconnect, device number 14 [ 303.647084][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 303.779777][ T7225] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 303.803532][ T37] audit: type=1326 audit(1774964948.319:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.803590][ T37] audit: type=1326 audit(1774964948.319:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.803646][ T37] audit: type=1326 audit(1774964948.329:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.803691][ T37] audit: type=1326 audit(1774964948.329:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.812845][ T37] audit: type=1326 audit(1774964948.339:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.812895][ T37] audit: type=1326 audit(1774964948.339:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.812934][ T37] audit: type=1326 audit(1774964948.339:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.812972][ T37] audit: type=1326 audit(1774964948.339:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.813012][ T37] audit: type=1326 audit(1774964948.339:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.813051][ T37] audit: type=1326 audit(1774964948.339:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9669 comm="syz.1.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8ae18ac819 code=0x7ffc0000 [ 303.970094][ T7225] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.970128][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 303.970151][ T7225] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 303.970171][ T7225] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.970212][ T7225] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.970233][ T7225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.995916][ T7225] usb 5-1: config 0 descriptor?? [ 305.047735][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047772][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047797][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047821][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047845][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047868][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047893][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047918][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047944][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.047969][ T7225] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 305.194061][ T7225] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 305.345507][ T10] usb 5-1: USB disconnect, device number 15 [ 305.708591][ T9695] fido_id[9695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 306.098937][ T9717] input: syz1 as /devices/virtual/input/input11 [ 306.786892][ T9738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1474'. [ 307.539741][ T9764] mmap: syz.0.1485 (9764) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 308.559653][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 308.709717][ T5877] usb 2-1: Using ep0 maxpacket: 16 [ 308.712461][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.712514][ T5877] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 308.712540][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.778544][ T5877] usb 2-1: config 0 descriptor?? [ 309.225216][ T5877] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 309.671574][ T10] usb 2-1: USB disconnect, device number 16 [ 309.746889][ T9813] faux_driver vgem: [drm] Unknown color mode 13; guessing buffer size. [ 311.278515][ T9864] netlink: 'syz.4.1527': attribute type 1 has an invalid length. [ 311.644700][ T9864] bond1: entered promiscuous mode [ 311.645208][ T9864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.075159][ T9870] bond1: (slave veth3): making interface the new active one [ 312.075185][ T9870] veth3: entered promiscuous mode [ 312.076655][ T9870] bond1: (slave veth3): Enslaving as an active interface with an up link [ 313.181013][ T9928] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1544'. [ 313.356855][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 313.422387][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1548'. [ 314.539941][ T5877] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 314.713996][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.714032][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.714073][ T5877] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 314.714097][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.744939][ T5877] usb 2-1: config 0 descriptor?? [ 315.191720][ T5877] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 315.268107][ T5877] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 315.431339][ T5877] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 315.465015][ T5877] usb 2-1: USB disconnect, device number 17 [ 315.526882][ T5877] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 315.619701][ T5898] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 315.773122][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 315.775546][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.775597][ T5898] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.775622][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.815789][T10005] fido_id[10005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 315.836496][ T5898] usb 5-1: config 0 descriptor?? [ 316.259670][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 316.302920][ T5898] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 316.409759][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 316.412199][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.412233][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.412256][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 316.412301][ T10] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 316.412325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.479452][ T10] usb 2-1: config 0 descriptor?? [ 316.720945][ T5898] usb 5-1: USB disconnect, device number 16 [ 316.947118][ T10] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 316.947157][ T10] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 316.947183][ T10] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 316.947326][ T10] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 316.947353][ T10] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 317.005811][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 317.114126][ T10] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 317.114882][ T10] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 317.129390][T10014] random: crng reseeded on system resumption [ 317.385181][ T10] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 317.403527][ T10] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 317.403927][ T10] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 317.404325][ T10] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 317.418967][ T5877] usb 2-1: USB disconnect, device number 18 [ 317.505669][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.505758][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.579743][ T7232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 317.749683][ T7232] usb 1-1: Using ep0 maxpacket: 8 [ 317.757077][ T7232] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 317.757115][ T7232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 317.757142][ T7232] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.757166][ T7232] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.757211][ T7232] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.757236][ T7232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.022013][ T7232] usb 1-1: GET_CAPABILITIES returned 0 [ 318.022067][ T7232] usbtmc 1-1:16.0: can't read capabilities [ 318.268546][ T10] usb 1-1: USB disconnect, device number 8 [ 318.958943][T10089] input: syz0 as /devices/virtual/input/input13 [ 319.910473][ T7235] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 320.105643][ T7235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 320.105855][ T7235] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 320.105882][ T7235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.077317][ T7235] usb 1-1: config 0 descriptor?? [ 321.221792][T10095] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 321.681891][ T7235] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 321.681926][ T7235] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 321.681953][ T7235] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 321.681980][ T7235] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 321.682006][ T7235] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0 [ 321.685326][ T7235] logitech-djreceiver 0003:046D:C71F.000D: reserved main item tag 0xd [ 321.775148][ T7235] logitech-djreceiver 0003:046D:C71F.000D: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 321.878075][ T10] usb 1-1: USB disconnect, device number 9 [ 322.142558][T10137] fido_id[10137]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 323.036816][T10167] trusted_key: syz.2.1647 sent an empty control message without MSG_MORE. [ 323.070835][T10165] kvm: kvm [10161]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 324.369358][ T7235] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 324.559698][ T7235] usb 1-1: Using ep0 maxpacket: 8 [ 324.578894][ T7235] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.578963][ T7235] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 324.578987][ T7235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.636417][ T7235] usb 1-1: config 0 descriptor?? [ 324.672948][ T7235] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 326.300515][ T7235] gspca_vc032x: reg_r err -110 [ 326.301520][ T7235] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 327.081245][ T37] audit: type=1326 audit(1774964971.599:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.082200][ T37] audit: type=1326 audit(1774964971.609:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.152323][ T37] audit: type=1326 audit(1774964971.679:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.152491][ T37] audit: type=1326 audit(1774964971.679:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.152652][ T37] audit: type=1326 audit(1774964971.679:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.152791][ T37] audit: type=1326 audit(1774964971.679:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.152941][ T37] audit: type=1326 audit(1774964971.679:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.153273][ T37] audit: type=1326 audit(1774964971.679:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.153420][ T37] audit: type=1326 audit(1774964971.679:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.153625][ T37] audit: type=1326 audit(1774964971.679:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10246 comm="syz.4.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34fe8fc819 code=0x7ffc0000 [ 327.609748][ T7235] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 327.759656][ T7235] usb 5-1: Using ep0 maxpacket: 16 [ 327.767343][ T7235] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.767380][ T7235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.767416][ T7235] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.767438][ T7235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.887421][ T7235] usb 5-1: config 0 descriptor?? [ 328.179902][ T10] usb 1-1: USB disconnect, device number 10 [ 328.356171][ T7235] mcp2221 0003:04D8:00DD.000E: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 328.874394][ T7235] usb 5-1: USB disconnect, device number 17 [ 329.344100][ T5877] kernel write not supported for file /snd/seq (pid: 5877 comm: kworker/1:3) [ 329.864362][T10287] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 329.864395][T10287] overlayfs: failed to set xattr on upper [ 329.864404][T10287] overlayfs: ...falling back to redirect_dir=nofollow. [ 329.864411][T10287] overlayfs: ...falling back to index=off. [ 329.864418][T10287] overlayfs: ...falling back to uuid=null. [ 329.864425][T10287] overlayfs: ...falling back to xino=off. [ 330.110245][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1704'. [ 331.803869][T10353] kvm: MWAIT instruction emulated as NOP! [ 332.812348][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'. [ 335.051257][T10462] syz.1.1768 uses obsolete (PF_INET,SOCK_PACKET) [ 335.711336][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1786'. [ 335.843756][T10482] macvlan2: entered promiscuous mode [ 335.843786][T10482] macvlan2: entered allmulticast mode [ 335.845063][T10482] bond1: (slave macvlan2): Opening slave failed [ 336.404684][ T5806] kernel write not supported for file /audio (pid: 5806 comm: kworker/0:4) [ 338.415683][T10538] kvm: emulating exchange as write [ 338.799683][ T5806] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 338.952507][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.952604][ T5806] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 338.952629][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.959284][ T5806] usb 2-1: config 0 descriptor?? [ 339.214507][ T5806] usbhid 2-1:0.0: can't add hid device: -71 [ 339.214650][ T5806] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 339.281877][ T5806] usb 2-1: USB disconnect, device number 19 [ 339.749660][ T5806] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 339.904676][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 339.904732][ T5806] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 339.904756][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.949738][ T5806] usb 2-1: config 0 descriptor?? [ 339.975487][T10601] input: syz0 as /devices/virtual/input/input14 [ 340.432516][ T5806] hid_parser_main: 459 callbacks suppressed [ 340.432544][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432575][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432602][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432627][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432653][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432676][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432751][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432776][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432801][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.432827][ T5806] logitech-djreceiver 0003:046D:C71F.000F: unknown main item tag 0x0 [ 340.435956][ T5806] logitech-djreceiver 0003:046D:C71F.000F: reserved main item tag 0xd [ 340.559653][ T5806] logitech-djreceiver 0003:046D:C71F.000F: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0 [ 340.791966][ T5877] usb 2-1: USB disconnect, device number 20 [ 341.826746][T10655] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 341.945353][T10659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1867'. [ 342.253059][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 342.253083][ T37] audit: type=1800 audit(1774964986.769:59): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1871" name="bus" dev="ramfs" ino=24473 res=0 errno=0 [ 343.015102][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'. [ 344.737665][T10732] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 344.764189][T10732] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 344.769071][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1900'. [ 344.769173][T10732] bridge_slave_1: left allmulticast mode [ 344.769197][T10732] bridge_slave_1: left promiscuous mode [ 344.806063][T10732] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.881992][T10732] bridge_slave_0: left allmulticast mode [ 344.882025][T10732] bridge_slave_0: left promiscuous mode [ 344.882332][T10732] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.160309][T10732] bond0: (slave bridge0): Releasing backup interface [ 346.119641][ T7231] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 346.151295][T10773] kvm: pic: level sensitive irq not supported [ 346.151545][T10773] kvm: pic: non byte read [ 346.152024][T10773] kvm: pic: non byte read [ 346.152466][T10773] kvm: pic: non byte read [ 346.152990][T10773] kvm: pic: single mode not supported [ 346.153074][T10773] kvm: pic: non byte read [ 346.153509][T10773] kvm: pic: non byte read [ 346.153949][T10773] kvm: pic: non byte read [ 346.154432][T10773] kvm: pic: non byte read [ 346.154807][T10773] kvm: pic: single mode not supported [ 346.154816][T10773] kvm: pic: level sensitive irq not supported [ 346.154892][T10773] kvm: pic: non byte read [ 346.155325][T10773] kvm: pic: non byte read [ 346.299684][ T7231] usb 3-1: Using ep0 maxpacket: 8 [ 346.303291][ T7231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.303326][ T7231] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.303371][ T7231] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 346.303396][ T7231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.361855][ T7231] usb 3-1: config 0 descriptor?? [ 346.537732][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.556533][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.571171][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.599370][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.610272][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.920072][ T7231] hid_parser_main: 454 callbacks suppressed [ 346.920098][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920128][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920154][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920180][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920206][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920232][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920257][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920293][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920319][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.920344][ T7231] petalynx 0003:18B1:0037.0010: unknown main item tag 0x0 [ 346.947798][ T7231] petalynx 0003:18B1:0037.0010: hidraw0: USB HID v0.0b Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 347.108132][ T5898] usb 3-1: USB disconnect, device number 15 [ 347.236453][T10792] fido_id[10792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 348.871328][ T5898] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 349.019658][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 349.022372][ T5898] usb 5-1: config 0 has no interfaces? [ 349.025519][ T5898] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 349.025548][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.025569][ T5898] usb 5-1: Product: syz [ 349.025593][ T5898] usb 5-1: Manufacturer: syz [ 349.025608][ T5898] usb 5-1: SerialNumber: syz [ 349.079705][ T5115] Bluetooth: hci5: command tx timeout [ 349.102208][ T5898] usb 5-1: config 0 descriptor?? [ 349.474890][T10784] chnl_net:caif_netlink_parms(): no params data found [ 350.107402][T10784] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.107631][T10784] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.107866][T10784] bridge_slave_0: entered allmulticast mode [ 350.111346][T10784] bridge_slave_0: entered promiscuous mode [ 350.114675][T10784] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.114864][T10784] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.115039][T10784] bridge_slave_1: entered allmulticast mode [ 350.117649][T10784] bridge_slave_1: entered promiscuous mode [ 350.351022][T10784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.434921][T10784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.674747][T10784] team0: Port device team_slave_0 added [ 350.699223][T10784] team0: Port device team_slave_1 added [ 350.788560][T10784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.788573][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.788587][T10784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.800794][T10784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.800811][T10784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.800834][T10784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.014611][T10784] hsr_slave_0: entered promiscuous mode [ 351.016191][T10784] hsr_slave_1: entered promiscuous mode [ 351.017581][T10784] debugfs: 'hsr0' already exists in 'hsr' [ 351.017609][T10784] Cannot create hsr debugfs directory [ 351.109828][ T5115] Bluetooth: hci5: command tx timeout [ 351.116798][ T5898] usb 5-1: USB disconnect, device number 18 [ 352.218673][T10892] binder: 10891:10892 ioctl c0306201 0 returned -14 [ 352.219362][T10892] binder_alloc: 10891: binder_alloc_buf, no vma [ 352.414762][T10784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.651948][T10784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.740370][T10784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.861691][T10784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.179794][ T5115] Bluetooth: hci5: command tx timeout [ 353.439762][T10784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.508099][T10784] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.244902][ T6112] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.245903][ T6112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.265777][ T6112] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.265990][ T6112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.259799][ T5115] Bluetooth: hci5: command tx timeout [ 356.725796][T10784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.905686][T10784] veth0_vlan: entered promiscuous mode [ 359.924758][T10784] veth1_vlan: entered promiscuous mode [ 360.253942][T10784] veth0_macvtap: entered promiscuous mode [ 360.286378][T10784] veth1_macvtap: entered promiscuous mode [ 360.332842][T10784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.382032][T10784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.427892][ T92] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.428173][ T92] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.428459][ T92] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.428508][ T92] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.816738][ T5115] Bluetooth: hci1: unexpected event for opcode 0x041b [ 360.999365][ T6119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.999390][ T6119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.225407][ T6099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.225432][ T6099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.785968][T11033] fuse: Unknown parameter 'group_i00000000000000000000' [ 363.906689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.162418][T11043] random: crng reseeded on system resumption [ 370.148364][T11080] syz.4.2025 (11080): drop_caches: 2 [ 374.369826][ T5806] page_pool_release_retry() stalled pool shutdown: id 38, 1 inflight 60 sec [ 377.411670][T11204] bond1: left promiscuous mode [ 377.411695][T11204] veth3: left promiscuous mode [ 377.562064][ T7231] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 378.389610][ T7231] usb 3-1: Using ep0 maxpacket: 16 [ 378.392618][ T7231] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 378.416721][ T7231] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 378.416756][ T7231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.416777][ T7231] usb 3-1: Product: syz [ 378.416792][ T7231] usb 3-1: Manufacturer: syz [ 378.416807][ T7231] usb 3-1: SerialNumber: syz [ 378.773578][ T5115] Bluetooth: hci0: unknown advertising packet type: 0x75 [ 378.773819][ T5115] Bluetooth: hci0: Malformed LE Event: 0x02 [ 378.955786][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.955866][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.656251][ T7231] r8152-cfgselector 3-1: Unknown version 0x0000 [ 379.656284][ T7231] r8152-cfgselector 3-1: config 0 descriptor?? [ 379.656896][ T7231] r8152-cfgselector 3-1: can't set config #0, error -71 [ 379.679910][ T7231] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 379.876758][T11230] syz_tun: entered allmulticast mode [ 380.293841][T11224] syz_tun: left allmulticast mode [ 380.706144][T11236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2056'. [ 382.051206][ T7225] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 385.056752][ T7225] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 385.056797][ T7225] usb 5-1: can't read configurations, error -71 [ 396.301129][ T7231] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 396.625762][ T7231] usb 2-1: Using ep0 maxpacket: 16 [ 396.712177][ T7231] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 396.712212][ T7231] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 396.756234][ T7231] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 396.756278][ T7231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.756300][ T7231] usb 2-1: Product: syz [ 396.756314][ T7231] usb 2-1: Manufacturer: syz [ 396.756329][ T7231] usb 2-1: SerialNumber: syz [ 396.833478][ T7231] usb 2-1: config 0 descriptor?? [ 397.128772][ T7231] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 398.688720][ T10] usb 2-1: USB disconnect, device number 21 [ 400.066697][T11375] ubi31: attaching mtd0 [ 400.078293][T11375] ubi31: scanning is finished [ 401.510377][T11382] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.15044 [ 401.510398][T11382] PKCS7: Only support pkcs7_signedData type [ 401.513303][T11382] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 401.513354][T11382] CIFS mount error: No usable UNC path provided in device string! [ 401.513354][T11382] [ 401.513631][T11382] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.086376][T11375] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 404.039493][T11397] NILFS (nullb0): couldn't find nilfs on the device [ 404.837548][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2111'. [ 406.074510][T11420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2115'. [ 421.471616][T11553] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2144'. [ 421.608469][T11553] dummy0: entered promiscuous mode [ 421.608822][T11553] macvtap1: entered promiscuous mode [ 421.618291][T11553] macvtap1: entered allmulticast mode [ 421.618316][T11553] dummy0: entered allmulticast mode [ 421.683720][T11561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.331415][T11656] ================================================================== [ 424.331435][T11656] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 424.331468][T11656] Read of size 1 at addr ffff88805e9f1068 by task syz.1.2152/11656 [ 424.331488][T11656] [ 424.331504][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz.1.2152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.331535][T11656] Tainted: [L]=SOFTLOCKUP [ 424.331543][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.331557][T11656] Call Trace: [ 424.331566][T11656] [ 424.331575][T11656] dump_stack_lvl+0xe8/0x150 [ 424.331609][T11656] print_report+0xba/0x230 [ 424.331638][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.331660][T11656] kasan_report+0x117/0x150 [ 424.331684][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.331710][T11656] __kasan_check_byte+0x2a/0x40 [ 424.331732][T11656] lock_acquire+0x79/0x2e0 [ 424.331754][T11656] ? rcu_is_watching+0x15/0xb0 [ 424.331780][T11656] _raw_spin_lock_irqsave+0x40/0x60 [ 424.331800][T11656] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 424.331831][T11656] rt_mutex_slowunlock+0xbf/0x8b0 [ 424.331865][T11656] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 424.331897][T11656] ? __rcu_read_unlock+0x83/0xe0 [ 424.331929][T11656] ? rt_spin_unlock+0x160/0x200 [ 424.331962][T11656] dma_buf_fd+0x189/0x370 [ 424.331994][T11656] udmabuf_create+0xf26/0xfe0 [ 424.332029][T11656] ? __pfx_udmabuf_create+0x10/0x10 [ 424.332070][T11656] udmabuf_ioctl+0x1f6/0x310 [ 424.332093][T11656] ? __pfx_smack_file_ioctl+0x10/0x10 [ 424.332128][T11656] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 424.332154][T11656] ? __fget_files+0x2a/0x420 [ 424.332183][T11656] ? __fget_files+0x2a/0x420 [ 424.332212][T11656] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.332235][T11656] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 424.332258][T11656] __se_sys_ioctl+0xff/0x170 [ 424.332281][T11656] do_syscall_64+0x14d/0xf80 [ 424.332303][T11656] ? trace_irq_disable+0x3b/0x150 [ 424.332337][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.332360][T11656] ? clear_bhb_loop+0x40/0x90 [ 424.332385][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.332407][T11656] RIP: 0033:0x7f8ae18ac819 [ 424.332427][T11656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.332447][T11656] RSP: 002b:00007f8adfac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.332473][T11656] RAX: ffffffffffffffda RBX: 00007f8ae1b26180 RCX: 00007f8ae18ac819 [ 424.332490][T11656] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000008 [ 424.332505][T11656] RBP: 00007f8ae1942c91 R08: 0000000000000000 R09: 0000000000000000 [ 424.332520][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.332535][T11656] R13: 00007f8ae1b26218 R14: 00007f8ae1b26180 R15: 00007fff7eb86e48 [ 424.332561][T11656] [ 424.332569][T11656] [ 424.332574][T11656] Allocated by task 11656: [ 424.332585][T11656] kasan_save_track+0x3e/0x80 [ 424.332615][T11656] __kasan_kmalloc+0x93/0xb0 [ 424.332645][T11656] __kmalloc_noprof+0x3e7/0x7b0 [ 424.332663][T11656] dma_buf_export+0x3ba/0xb10 [ 424.332689][T11656] udmabuf_create+0xee5/0xfe0 [ 424.332708][T11656] udmabuf_ioctl+0x1f6/0x310 [ 424.332727][T11656] __se_sys_ioctl+0xff/0x170 [ 424.332744][T11656] do_syscall_64+0x14d/0xf80 [ 424.332765][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.332785][T11656] [ 424.332789][T11656] Freed by task 11657: [ 424.332797][T11656] kasan_save_track+0x3e/0x80 [ 424.332826][T11656] kasan_save_free_info+0x46/0x50 [ 424.332850][T11656] __kasan_slab_free+0x5c/0x80 [ 424.332880][T11656] kfree+0x1c1/0x6c0 [ 424.332908][T11656] __dentry_kill+0x211/0x5e0 [ 424.332927][T11656] finish_dput+0xc9/0x480 [ 424.332952][T11656] __fput+0x6a3/0xa90 [ 424.332974][T11656] task_work_run+0x1d9/0x270 [ 424.332996][T11656] exit_to_user_mode_loop+0xed/0x480 [ 424.333027][T11656] do_syscall_64+0x32d/0xf80 [ 424.333056][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.333076][T11656] [ 424.333082][T11656] The buggy address belongs to the object at ffff88805e9f1000 [ 424.333082][T11656] which belongs to the cache kmalloc-1k of size 1024 [ 424.333100][T11656] The buggy address is located 104 bytes inside of [ 424.333100][T11656] freed 1024-byte region [ffff88805e9f1000, ffff88805e9f1400) [ 424.333123][T11656] [ 424.333129][T11656] The buggy address belongs to the physical page: [ 424.333140][T11656] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805e9f2000 pfn:0x5e9f0 [ 424.333163][T11656] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 424.333180][T11656] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 424.333199][T11656] page_type: f5(slab) [ 424.333219][T11656] raw: 0080000000000240 ffff88813fe19dc0 ffff88813fe18b88 ffffea0000d65810 [ 424.333239][T11656] raw: ffff88805e9f2000 000000080010000f 00000000f5000000 0000000000000000 [ 424.333259][T11656] head: 0080000000000240 ffff88813fe19dc0 ffff88813fe18b88 ffffea0000d65810 [ 424.333279][T11656] head: ffff88805e9f2000 000000080010000f 00000000f5000000 0000000000000000 [ 424.333299][T11656] head: 0080000000000003 ffffea00017a7c01 00000000ffffffff 00000000ffffffff [ 424.333317][T11656] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 424.333329][T11656] page dumped because: kasan: bad access detected [ 424.333339][T11656] page_owner tracks the page as allocated [ 424.333347][T11656] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4243, tgid 4243 (kworker/u8:14), ts 95255951448, free_ts 0 [ 424.333385][T11656] post_alloc_hook+0x231/0x280 [ 424.333416][T11656] get_page_from_freelist+0x28bb/0x2950 [ 424.333438][T11656] __alloc_frozen_pages_noprof+0x18d/0x380 [ 424.333461][T11656] allocate_slab+0x77/0x660 [ 424.333486][T11656] refill_objects+0x334/0x3c0 [ 424.333509][T11656] __pcs_replace_empty_main+0x35c/0x710 [ 424.333535][T11656] __kmalloc_noprof+0x530/0x7b0 [ 424.333552][T11656] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 424.333581][T11656] ieee80211_ibss_rx_queued_mgmt+0x4ca/0x2cd0 [ 424.333606][T11656] ieee80211_iface_work+0x84e/0x1340 [ 424.333631][T11656] cfg80211_wiphy_work+0x2ab/0x4a0 [ 424.333658][T11656] process_scheduled_works+0xb6e/0x18c0 [ 424.333686][T11656] worker_thread+0xa53/0xfc0 [ 424.333715][T11656] kthread+0x388/0x470 [ 424.333734][T11656] ret_from_fork+0x51e/0xb90 [ 424.333763][T11656] ret_from_fork_asm+0x1a/0x30 [ 424.333782][T11656] page_owner free stack trace missing [ 424.333790][T11656] [ 424.333795][T11656] Memory state around the buggy address: [ 424.333807][T11656] ffff88805e9f0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 424.333821][T11656] ffff88805e9f0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 424.333835][T11656] >ffff88805e9f1000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.333846][T11656] ^ [ 424.333859][T11656] ffff88805e9f1080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.333874][T11656] ffff88805e9f1100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 424.333886][T11656] ================================================================== [ 424.333899][T11656] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 424.333918][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz.1.2152 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 424.333949][T11656] Tainted: [L]=SOFTLOCKUP [ 424.333957][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 424.333970][T11656] Call Trace: [ 424.333979][T11656] [ 424.333987][T11656] vpanic+0x56c/0xa60 [ 424.334022][T11656] ? __pfx_vpanic+0x10/0x10 [ 424.334068][T11656] panic+0xc5/0xd0 [ 424.334099][T11656] ? __pfx_panic+0x10/0x10 [ 424.334133][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.334155][T11656] ? rcu_is_watching+0x15/0xb0 [ 424.334181][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.334204][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.334225][T11656] check_panic_on_warn+0x89/0xb0 [ 424.334251][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.334273][T11656] end_report+0x73/0x180 [ 424.334294][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.334315][T11656] kasan_report+0x128/0x150 [ 424.334337][T11656] ? _raw_spin_lock_irqsave+0x40/0x60 [ 424.334365][T11656] __kasan_check_byte+0x2a/0x40 [ 424.334386][T11656] lock_acquire+0x79/0x2e0 [ 424.334407][T11656] ? rcu_is_watching+0x15/0xb0 [ 424.334433][T11656] _raw_spin_lock_irqsave+0x40/0x60 [ 424.334455][T11656] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 424.334486][T11656] rt_mutex_slowunlock+0xbf/0x8b0 [ 424.334521][T11656] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 424.334555][T11656] ? __rcu_read_unlock+0x83/0xe0 [ 424.334586][T11656] ? rt_spin_unlock+0x160/0x200 [ 424.334619][T11656] dma_buf_fd+0x189/0x370 [ 424.334649][T11656] udmabuf_create+0xf26/0xfe0 [ 424.334682][T11656] ? __pfx_udmabuf_create+0x10/0x10 [ 424.334714][T11656] udmabuf_ioctl+0x1f6/0x310 [ 424.334736][T11656] ? __pfx_smack_file_ioctl+0x10/0x10 [ 424.334771][T11656] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 424.334795][T11656] ? __fget_files+0x2a/0x420 [ 424.334824][T11656] ? __fget_files+0x2a/0x420 [ 424.334854][T11656] ? bpf_lsm_file_ioctl+0x9/0x20 [ 424.334877][T11656] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 424.334899][T11656] __se_sys_ioctl+0xff/0x170 [ 424.334922][T11656] do_syscall_64+0x14d/0xf80 [ 424.334944][T11656] ? trace_irq_disable+0x3b/0x150 [ 424.334971][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.334993][T11656] ? clear_bhb_loop+0x40/0x90 [ 424.335019][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.335047][T11656] RIP: 0033:0x7f8ae18ac819 [ 424.335066][T11656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.335086][T11656] RSP: 002b:00007f8adfac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.335109][T11656] RAX: ffffffffffffffda RBX: 00007f8ae1b26180 RCX: 00007f8ae18ac819 [ 424.335125][T11656] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000008 [ 424.335139][T11656] RBP: 00007f8ae1942c91 R08: 0000000000000000 R09: 0000000000000000 [ 424.335153][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.335167][T11656] R13: 00007f8ae1b26218 R14: 00007f8ae1b26180 R15: 00007fff7eb86e48 [ 424.335191][T11656] [ 424.335358][T11656] Kernel Offset: disabled