last executing test programs: 37m10.690886667s ago: executing program 2 (id=572): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000480)={0xdb, 0x1ff, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x3, 0x9, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x9, 0x5, 0x40005}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 37m10.485829627s ago: executing program 2 (id=574): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000005d40)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000400000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a54909e8441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce993c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1a8f2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f2466a39addc610406744a8715dbdb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xf0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x8, 0x0, 0x0}}, 0x34) sendto$inet(r2, 0x0, 0x0, 0x40040011, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000030000009500000000000000606acf562d9022bfb57746f2a838c4aeecdc5b5ccbb3ebc0401a32b360fbabe78e55890a4cfcaa3c6f3cdab5b12f59eeac5929db40a9c2c85a7b62391ab1"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{0x0}], 0x1) 37m5.318634903s ago: executing program 2 (id=578): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) 37m4.979927157s ago: executing program 2 (id=580): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_clone(0x4000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 37m3.303126614s ago: executing program 2 (id=585): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) 37m2.380086406s ago: executing program 2 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xdf, 0x81, 0x3, 0xc4ea}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r4, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 37m1.64387757s ago: executing program 32 (id=587): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x50401, 0x1b) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) add_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x3, 0x0, 0x315}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x3, 0x102, 0x2, {0xdf, 0x81, 0x3, 0xc4ea}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x80}}, 0x20000000) sendmsg$key(r4, 0x0, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 11.845598805s ago: executing program 4 (id=5465): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, 0x0, 0x1) 11.469016293s ago: executing program 4 (id=5468): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0x10}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f00000000c0)={0x399f1316}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x7, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0x1002, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0xfffffffa, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x6, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x0, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x0, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x0, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x2, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32, 0x6}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0x9, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x2008000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 10.473769463s ago: executing program 4 (id=5470): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000001540)={'tunl0\x00', {0x2, 0x4e23, @local}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8d69cdbd9d470f56c7ae4218d32c5d7fe44d5f02728"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000000)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x15}, {[@ssrr={0x89, 0x3, 0x3f}, @noop]}}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @private}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000000)=0x102, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 7.831388727s ago: executing program 1 (id=5478): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)}, {0x0}], 0x2}, 0x40050) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x1, 0x3a, '%', 0x3a, '&&\xf3}_k\nl8t\xf9\x17\xbf\x84-\x83\xf9D\xde\x11\xaf]\xf7K]b\xe5', 0x3a, './file0'}, 0x43) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x55, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b6090092aa722681a1ee3f88792f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24d796682495d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffc92915ff6e000000abf60400", [0xc]}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 7.627388207s ago: executing program 1 (id=5481): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(0x0, 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e5, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.20496268s ago: executing program 1 (id=5482): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x2001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.923620547s ago: executing program 1 (id=5483): r0 = socket(0x2, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41054}, 0x48851) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000380)={&(0x7f00000007c0)}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) 5.951925795s ago: executing program 1 (id=5484): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd143, 0x100, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r3, 0x3516, 0xddd3, 0x4, 0x0, 0x0) 5.218033128s ago: executing program 4 (id=5488): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 4.889994211s ago: executing program 4 (id=5489): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, 0x0, 0x0, 0x40012140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = userfaultfd(0x801) getpid() ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x0) 4.239879356s ago: executing program 0 (id=5493): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x2, 0x10}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) capset(&(0x7f00000000c0)={0x399f1316}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x7, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0x1002, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0xfffffffa, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x6, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x0, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x0, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x0, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x2, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32, 0x6}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0x9, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x2008000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3.530343397s ago: executing program 3 (id=5494): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x10000006, 0x40, &(0x7f0000000580)={0x40, 0x14, 0xf801, 0x224}, 0x8, 0x28001, 0x2, 0x0, 0x16768b34, 0xdffffffc, 0x0}) 3.279131302s ago: executing program 3 (id=5495): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x4, "78e1141009f593233bce41f20613341f43d01f"}) write$proc_mixer(r0, &(0x7f0000000280)=[{'VOLUME', @val={' \'', 'Line'}}, {'VOLUME', @void}], 0x2a) close(r0) 2.989136611s ago: executing program 0 (id=5496): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x80, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x30, 0x0, @void}, 0x7) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x8001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) getrlimit(0x8, &(0x7f0000000080)) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') writev(r2, &(0x7f0000000400)=[{0x0}], 0x1) r3 = socket(0xa, 0x3, 0x3a) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x140c, 0x4, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x44) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6f0}, 0x94) socket(0x2b, 0x1, 0x1) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000240)={0x2, 0x5, 0x482}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x20, r7, 0x1, 0x70bd29, 0x25df5bfd, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x4000) request_key(&(0x7f00000013c0)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x303}, "9370725ed0e4ebaa", "d1ba209494041a121a34e8d72091b58b", "0e474759", "472ded9697469a12"}, 0x28) 2.812013208s ago: executing program 3 (id=5497): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 2.729693127s ago: executing program 1 (id=5498): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x99, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x15, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x1c8, 0x12) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) migrate_pages(r0, 0x4, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @private=0xa010102}}, 0x1, 0x0, 0x3f8, 0x0, 0x0, 0x1}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) mount(0x0, &(0x7f0000003c40)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)='gid=1\x00nk]e\xb2}\x9c6\b\xc1\x04\xbb\xbe \x9f\xe7\x8c\xc6\x06y\x89sd\xeb\xf4\x94\x1f\xdf\x91A!\xf9}\xee\xe7\x89\xcf\x99\n[\'\xca\xb3\x84\xb6j\xb9\x8c#\xf4\xf0\x96\x8e\xaa\x04\x82\x99f7\xf3\xd8\x17\xfc\x00\x00\x00\x00\x9c$Nn\x13\x8f\xf7\b\x00\x00\x00/\xf5|H\xe1\xbd0\x0fz\xbat\x0e-\x95c.j\xdd\xbe\x1dc3\xca\xd5\x91\xc8\x12f\x90\xac\x97\xdb\x06\x10?]\")\xb4\xe7tD6G\"<') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002380)={0x2020}, 0x2020) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) getrlimit(0x8, &(0x7f0000000380)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.628312387s ago: executing program 3 (id=5499): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$VT_DISALLOCATE(r0, 0x5608) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) epoll_create1(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @remote}, 0x2, 0x1, 0x2, 0x3}}, 0x26) prctl$PR_CAPBSET_READ(0x17, 0x8) socket(0x1, 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r3) 1.982407241s ago: executing program 0 (id=5500): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040), 0x0, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x7b52e4aff0f1e2e5, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.771654602s ago: executing program 3 (id=5501): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000280)={0x2001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.752131585s ago: executing program 0 (id=5502): r0 = socket(0x2, 0x3, 0xff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x288501) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x41054}, 0x48851) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000380)={&(0x7f00000007c0)="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", 0x800}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200888e4}, 0x20048000) 1.519951968s ago: executing program 3 (id=5503): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) 601.14974ms ago: executing program 0 (id=5504): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000a40)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "70eae4", 0x8, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x0, 0x0, 0x5}]}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f0000001300)=@HCI_ACLDATA_PKT={0x2, {0x1, 0x3, 0x3, 0x43}, @l2cap_cid_signaling={{0x3f}, [@l2cap_conf_rsp={{0x5, 0x6d, 0x27}, {0x2, 0x8, 0x5, [@l2cap_conf_efs={0x6, 0x10, {0x2, 0x1, 0x1, 0x800, 0x100, 0xa2}}, @l2cap_conf_ews={0x7, 0x2, 0x39a}, @l2cap_conf_rfc={0x4, 0x9, {0x4, 0x40, 0x8, 0xb, 0x7}}]}}, @l2cap_move_chan_cfm={{0x10, 0x9f, 0x4}, {0x5, 0x7}}, @l2cap_create_chan_rsp={{0xd, 0xff, 0x8}, {0xff, 0x4, 0x401, 0xfffe}}]}}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) fallocate(r4, 0x0, 0x7, 0x81) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000000000002000002e000000200000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000"], 0x90) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 569.320483ms ago: executing program 4 (id=5505): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000ebffffffb702000008000000b70300"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x1c1040, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() getrlimit(0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x4f23, 0x7f, 0x1, 0x0, 0x1, 0x5, 0xc, 0x3, 0xa, 0xfd, 0x8, 0x1, 0x1, 0x1, 0x6, 0x101, 0xf7fffffe, 0x7f, 0x2, 0x40000001, 0x8c, 0xca9f, 0x0, 0x20001e58, 0xaba7, 0xe66, 0x3, 0x8, 0x4085, 0x0, 0xfbfffff8]}) 0s ago: executing program 0 (id=5506): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$inet_udp(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x14, r4, 0x321, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4008080) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) r6 = syz_open_dev$sg(&(0x7f00000000c0), 0xfffffffffffffffa, 0x801) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000180)={0x65, 0x2, 0x6, "5c6c6feb51fa72fcd122cbc5c44550143d277a1320f495e5a4f031ea0ed2f6024a0485cc146f3dfe8c9cadf41a2587573e028ae3c0ad5249fa903b663511bb0143e0829391c21e28b401aabbce6a040d245af69fbb02b2b3398ebb5cc640958248da46457b"}) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x2d, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000080)={0x2d, 0x0, 0xfffffffe}, 0xc) kernel console output (not intermixed with test programs): 43376][T15822] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2017.463392][T15822] usb 4-1: Product: syz [ 2017.597940][T15930] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2017.611793][T15822] usb 4-1: Manufacturer: syz [ 2017.874331][T15822] usb 4-1: SerialNumber: syz [ 2017.964800][T15930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2018.039757][T15822] usb 4-1: config 0 descriptor?? [ 2018.052605][T15822] usb 4-1: selecting invalid altsetting 0 [ 2018.069926][T15930] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2018.091799][T15930] usb 2-1: media controller created [ 2018.503936][T15930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2019.157890][T15930] zl10353_read_register: readreg error (reg=127, ret==0) [ 2019.165912][T15930] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2019.191058][T22965] Cannot find add_set index 128 as target [ 2019.228964][T22965] overlayfs: missing 'lowerdir' [ 2019.258482][T22965] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2019.279547][T15930] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2019.318423][T15930] usb 2-1: USB disconnect, device number 66 [ 2019.782500][T15930] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2020.132599][T15445] usb 4-1: USB disconnect, device number 57 [ 2025.653314][T15445] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 2025.857394][T15445] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2025.873495][T15445] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2025.886157][T15445] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2025.906088][T15445] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2025.923397][T15445] usb 4-1: Product: syz [ 2025.927979][T15445] usb 4-1: Manufacturer: syz [ 2025.932694][T15445] usb 4-1: SerialNumber: syz [ 2025.961659][T15445] usb 4-1: config 0 descriptor?? [ 2025.997243][T15445] usb 4-1: selecting invalid altsetting 0 [ 2026.789119][T23004] vivid-000: disconnect [ 2027.285762][T23002] vivid-000: reconnect [ 2027.819170][T23013] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2028.544430][T15930] usb 4-1: USB disconnect, device number 58 [ 2029.028107][T15822] IPVS: starting estimator thread 0... [ 2029.123426][T23014] IPVS: using max 17 ests per chain, 40800 per kthread [ 2031.182828][T23033] vivid-000: disconnect [ 2031.740483][T23029] vivid-000: reconnect [ 2031.961372][T23038] vivid-000: disconnect [ 2032.452764][T23036] vivid-000: reconnect [ 2034.193816][T23048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4043'. [ 2037.909877][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.916522][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.189815][T23081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4053'. [ 2039.793358][T15445] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 2040.018377][T15445] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2040.072590][T15445] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2040.111289][T15445] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2040.149190][T15445] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2040.186120][T15445] usb 2-1: Product: syz [ 2040.199023][T15445] usb 2-1: Manufacturer: syz [ 2040.213606][T15445] usb 2-1: SerialNumber: syz [ 2040.250789][T15445] usb 2-1: config 0 descriptor?? [ 2040.287406][T15445] usb 2-1: selecting invalid altsetting 0 [ 2042.597324][T23116] (null): rxe_set_mtu: Set mtu to 1024 [ 2042.604349][T23116] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2043.203529][T15445] usb 2-1: USB disconnect, device number 67 [ 2043.907162][T23128] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2045.663346][T22952] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 2045.860788][T22952] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2045.871043][T22952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2045.892552][T22952] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2045.910272][T22952] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2045.920819][T22952] usb 5-1: Product: syz [ 2045.929135][T22952] usb 5-1: Manufacturer: syz [ 2045.949926][T22952] usb 5-1: SerialNumber: syz [ 2046.029818][T22952] usb 5-1: config 0 descriptor?? [ 2046.085038][T22952] usb 5-1: selecting invalid altsetting 0 [ 2047.059128][T23152] (null): rxe_set_mtu: Set mtu to 1024 [ 2047.082608][T23152] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2047.993392][T23153] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4075'. [ 2048.481128][T22952] usb 5-1: USB disconnect, device number 61 [ 2051.036796][T23184] Cannot find set identified by id 0 to match [ 2051.095439][T23184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2052.159900][T23193] /dev/nullb0: Can't open blockdev [ 2053.721770][T23198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2055.356190][T23219] Cannot find set identified by id 0 to match [ 2055.416207][T23219] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2060.428752][T23253] Cannot find set identified by id 0 to match [ 2060.488128][T23253] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2061.211791][T23251] /dev/nullb0: Can't open blockdev [ 2062.450718][T23251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2062.640032][T18888] Bluetooth: hci2: ISO packet for unknown connection handle 1550 [ 2062.767460][T23251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.936975][T23251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.628130][T23251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2065.490095][T23251] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.547840][T23251] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.598586][T23251] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.631304][T23251] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.703623][T15930] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2065.914504][T15930] usb 5-1: Using ep0 maxpacket: 16 [ 2065.958682][T15930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 2066.010454][T15930] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 2066.021863][T15930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 34581, setting to 1024 [ 2066.039888][T15930] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 2066.064186][T15930] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 2066.098116][T15930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2066.258025][T15930] usb 5-1: Product: syz [ 2066.262766][T15930] usb 5-1: Manufacturer: syz [ 2066.267583][T15930] usb 5-1: SerialNumber: syz [ 2066.276518][T15930] usb 5-1: config 0 descriptor?? [ 2066.287717][T23284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2066.304716][T23284] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2067.151776][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 2067.161136][ C0] port100 5-1:0.0: NFC: Urb failure (status -71) [ 2067.175525][T15930] port100 5-1:0.0: NFC: Could not get supported command types [ 2068.289566][T15445] usb 5-1: USB disconnect, device number 62 [ 2074.486672][T23364] vivid-000: disconnect [ 2074.491354][T23362] vivid-000: reconnect [ 2074.775026][T23369] (null): rxe_set_mtu: Set mtu to 1024 [ 2074.782151][T23369] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2077.382822][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 2077.382843][ T28] audit: type=1326 audit(1763029230.969:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2077.518463][ T28] audit: type=1326 audit(1763029230.969:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2077.655732][ T28] audit: type=1326 audit(1763029230.969:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2077.687544][ T28] audit: type=1326 audit(1763029230.969:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2077.743313][ T28] audit: type=1326 audit(1763029230.969:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2077.822564][ T28] audit: type=1326 audit(1763029230.969:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2077.951263][ T28] audit: type=1326 audit(1763029230.969:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2078.037424][ T28] audit: type=1326 audit(1763029230.979:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2078.094544][ T28] audit: type=1326 audit(1763029230.979:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2078.253873][T23400] vivid-000: disconnect [ 2078.258453][T23399] vivid-000: reconnect [ 2078.264549][ T28] audit: type=1326 audit(1763029230.979:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23388 comm="syz.4.4146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2078.343093][T23404] syz2: rxe_newlink: already configured on veth1_to_team [ 2082.645894][T23441] (null): rxe_set_mtu: Set mtu to 1024 [ 2082.662273][T23441] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2086.739075][T23473] Cannot find set identified by id 0 to match [ 2086.751872][T23473] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2086.764198][T23480] (null): rxe_set_mtu: Set mtu to 1024 [ 2086.770042][T23480] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2092.868211][T23521] (null): rxe_set_mtu: Set mtu to 1024 [ 2092.875394][T23521] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2094.247754][T23534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4189'. [ 2098.248416][T23561] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 2098.540546][T23566] syz2: rxe_newlink: already configured on veth1_to_team [ 2099.351773][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.358347][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2110.341294][T23698] Cannot find add_set index 128 as target [ 2110.345663][T23698] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2113.540172][T23726] comedi comedi3: dt2801: I/O port conflict (0x4f27,2) [ 2116.143618][ T9310] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2116.414598][ T9310] usb 4-1: Using ep0 maxpacket: 8 [ 2117.780702][ T9310] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2117.789970][ T9310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.798221][ T9310] usb 4-1: Product: syz [ 2117.802514][ T9310] usb 4-1: Manufacturer: syz [ 2117.807343][ T9310] usb 4-1: SerialNumber: syz [ 2117.839169][ T9310] usb 4-1: config 0 descriptor?? [ 2118.465508][ T9310] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 2118.472917][ T9310] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 2118.548512][ T9310] usb 4-1: USB disconnect, device number 59 [ 2129.762322][T23838] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2130.103459][T23838] netlink: 'syz.1.4258': attribute type 12 has an invalid length. [ 2130.225759][T23831] ubi31: attaching mtd0 [ 2130.296029][T23831] ubi31: scanning is finished [ 2130.300796][T23831] ubi31: empty MTD device detected [ 2130.579038][T23831] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 2130.603232][T23831] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 2130.619023][T23831] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 2130.634650][T23831] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 2130.650920][T23831] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 2130.717644][T23831] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 2130.726205][T23831] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1012477725 [ 2130.737019][T23831] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 2130.802908][T23846] ubi31: background thread "ubi_bgt31d" started, PID 23846 [ 2131.359481][T23853] Cannot find set identified by id 0 to match [ 2131.401988][T23853] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2136.974145][T23892] Cannot find add_set index 128 as target [ 2136.984590][T23892] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2140.909002][T18888] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 2141.927392][T23931] Cannot find add_set index 128 as target [ 2141.938229][T23931] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2142.498656][T23934] tmpfs: Bad value for 'mpol' [ 2143.154211][T23938] block device autoloading is deprecated and will be removed. [ 2144.731863][T23954] netlink: 'syz.1.4286': attribute type 15 has an invalid length. [ 2144.740135][T23954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4286'. [ 2146.558356][T23968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4289'. [ 2146.888054][T23967] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2146.911965][T23967] netlink: 'syz.0.4290': attribute type 12 has an invalid length. [ 2148.987389][T23983] tmpfs: Bad value for 'mpol' [ 2151.916933][T24003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4300'. [ 2153.300607][T24011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4303'. [ 2153.336377][T24015] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 2156.882582][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4312'. [ 2160.787412][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.793827][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2163.288791][T24078] Cannot find add_set index 128 as target [ 2163.334530][T24078] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2164.594991][T24087] netlink: 'syz.0.4323': attribute type 15 has an invalid length. [ 2164.603504][T24087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4323'. [ 2168.593349][T15445] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 2168.825246][T15445] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.866001][T15445] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2168.886981][T15445] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2168.934908][T15445] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2168.946747][T15445] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2168.956657][T15445] usb 5-1: Product: syz [ 2168.970059][T15445] usb 5-1: Manufacturer: syz [ 2168.977065][T15445] usb 5-1: SerialNumber: syz [ 2169.004339][T15445] usb 5-1: config 0 descriptor?? [ 2169.095856][T15445] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 2169.379917][T24071] udevd[24071]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2169.514899][T24112] Cannot find add_set index 128 as target [ 2169.558902][T24112] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2171.118079][T24120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4333'. [ 2171.496803][T15930] usb 5-1: USB disconnect, device number 63 [ 2176.673257][T22952] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 2176.935050][T22952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.003461][T22952] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2177.103263][T22952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2177.134706][T22952] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2177.148822][T22952] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2177.179366][T22952] usb 5-1: Product: syz [ 2177.199706][T22952] usb 5-1: Manufacturer: syz [ 2177.209809][T22952] usb 5-1: SerialNumber: syz [ 2177.233897][T22952] usb 5-1: config 0 descriptor?? [ 2177.314401][T22952] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 2177.451869][T24134] udevd[24134]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2179.512431][T22952] usb 5-1: USB disconnect, device number 64 [ 2180.586283][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4347'. [ 2181.412736][T24182] Cannot find add_set index 128 as target [ 2181.510180][T24176] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2187.269226][T24224] Cannot find add_set index 128 as target [ 2187.314912][T24224] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2188.212387][T24231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4363'. [ 2191.153352][T15445] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 2191.396549][T15445] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2191.535762][T15445] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2191.583695][T15445] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2191.685739][T15445] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2191.838554][T24281] tipc: Started in network mode [ 2191.843220][T15445] usb 4-1: Product: syz [ 2191.843678][T24281] tipc: Node identity 10001, cluster identity 4711 [ 2191.847764][T15445] usb 4-1: Manufacturer: syz [ 2191.854410][T24281] tipc: Node number set to 65537 [ 2191.865585][T15445] usb 4-1: SerialNumber: syz [ 2191.941962][T15445] usb 4-1: config 0 descriptor?? [ 2192.207233][T15445] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 2192.507671][T24210] udevd[24210]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2193.656118][T24294] Cannot find set identified by id 0 to match [ 2193.749469][T24295] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2193.759953][T24295] overlayfs: overlapping lowerdir path [ 2194.938867][T24283] usb 4-1: USB disconnect, device number 60 [ 2195.403980][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4373'. [ 2198.435412][T24324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4379'. [ 2199.413510][T24331] Cannot find add_set index 128 as target [ 2199.456300][T24331] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2200.363529][T24250] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2200.606770][T24250] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2200.622439][T24250] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2200.655331][T24250] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2200.665788][T24250] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2200.674201][T24250] usb 2-1: Product: syz [ 2200.683435][T24250] usb 2-1: Manufacturer: syz [ 2200.688248][T24250] usb 2-1: SerialNumber: syz [ 2200.753245][T24250] usb 2-1: config 0 descriptor?? [ 2200.802850][T24250] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 2200.926715][T24210] udevd[24210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2202.464278][T24250] usb 2-1: USB disconnect, device number 68 [ 2202.741372][T24347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4384'. [ 2209.235023][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4394'. [ 2209.445543][T22952] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 2209.773870][T22952] usb 5-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 2209.804717][T22952] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2209.832772][T22952] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2209.845454][T22952] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2209.861555][T22952] usb 5-1: Product: syz [ 2209.876396][T22952] usb 5-1: Manufacturer: syz [ 2209.881093][T22952] usb 5-1: SerialNumber: syz [ 2210.117832][T22952] usb 5-1: config 0 descriptor?? [ 2210.524041][T22952] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 2210.615208][T24364] udevd[24364]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2212.521428][T15930] usb 5-1: USB disconnect, device number 65 [ 2216.383384][T24283] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2216.564015][T24283] usb 4-1: Using ep0 maxpacket: 8 [ 2216.641899][T24283] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 2216.653406][T24283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.661772][T24283] usb 4-1: Product: syz [ 2216.680227][T24283] usb 4-1: Manufacturer: syz [ 2216.699685][T24283] usb 4-1: SerialNumber: syz [ 2216.767994][T24283] usb 4-1: config 0 descriptor?? [ 2217.741866][T24283] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 2218.302964][T24283] radio-usb-si4713: probe of 4-1:0.0 failed with error -71 [ 2218.315695][T24283] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2218.327801][T24283] usb 4-1: USB disconnect, device number 61 [ 2222.183009][T24475] fuse: Bad value for 'fd' [ 2222.234429][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.241904][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.944685][T22952] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2225.435295][T22952] usb 2-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 2225.477732][T22952] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2225.499771][T22952] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2225.514495][T22952] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2225.535290][T22952] usb 2-1: Product: syz [ 2225.549273][T22952] usb 2-1: Manufacturer: syz [ 2225.557104][T22952] usb 2-1: SerialNumber: syz [ 2225.567684][T22952] usb 2-1: config 0 descriptor?? [ 2225.670219][T22952] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 2225.854971][T24509] udevd[24509]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2228.105317][T24283] usb 2-1: USB disconnect, device number 69 [ 2229.888102][T24543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4443'. [ 2231.537513][T24283] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 2232.886243][T24283] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2232.896352][T24283] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2232.909325][T24283] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2232.919031][T24283] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2232.952316][T24283] usb 4-1: Product: syz [ 2232.968053][T24283] usb 4-1: Manufacturer: syz [ 2232.972805][T24283] usb 4-1: SerialNumber: syz [ 2232.997887][T24283] usb 4-1: config 0 descriptor?? [ 2233.032238][T24283] usb 4-1: selecting invalid altsetting 0 [ 2234.920994][T22952] usb 4-1: USB disconnect, device number 62 [ 2235.543808][T24587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4454'. [ 2237.602576][T24283] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 2237.809687][T24606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 2238.006694][T24283] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2238.170060][T24283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.292337][T24283] usb 2-1: Product: syz [ 2238.341194][T24283] usb 2-1: Manufacturer: syz [ 2238.527127][T24283] usb 2-1: SerialNumber: syz [ 2238.711836][T24283] usb 2-1: config 0 descriptor?? [ 2239.043302][T16636] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 2239.086943][T24283] usb-storage 2-1:0.0: USB Mass Storage device detected [ 2239.948044][T24283] usb 2-1: USB disconnect, device number 70 [ 2239.981328][T16636] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2240.018660][T16636] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2240.066648][T16636] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2240.084777][T16636] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2240.093335][T16636] usb 5-1: Product: syz [ 2240.097931][T16636] usb 5-1: Manufacturer: syz [ 2240.102665][T16636] usb 5-1: SerialNumber: syz [ 2240.137235][T16636] usb 5-1: config 0 descriptor?? [ 2240.195150][T16636] usb 5-1: selecting invalid altsetting 0 [ 2240.964134][T24630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4468'. [ 2241.717988][T24637] Cannot find add_set index 128 as target [ 2241.765788][T24637] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2242.346119][T22952] usb 5-1: USB disconnect, device number 66 [ 2247.283640][T24691] Cannot find add_set index 128 as target [ 2247.327405][T24691] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2248.210450][T24694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4482'. [ 2250.836909][T24718] capability: warning: `syz.0.4489' uses 32-bit capabilities (legacy support in use) [ 2253.359986][T24736] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 2253.974699][T24735] Cannot find add_set index 128 as target [ 2255.997376][T24753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4496'. [ 2256.043756][T15930] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 2256.448176][T15930] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2256.521486][T15930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2256.566338][T15930] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2256.590908][T15930] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2256.610559][T15930] usb 4-1: Product: syz [ 2256.623166][T15930] usb 4-1: Manufacturer: syz [ 2256.627818][T15930] usb 4-1: SerialNumber: syz [ 2256.824595][T15930] usb 4-1: config 0 descriptor?? [ 2256.859742][T15930] usb 4-1: selecting invalid altsetting 0 [ 2258.883309][T15930] usb 4-1: USB disconnect, device number 63 [ 2261.132464][T24792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4505'. [ 2263.133312][T15930] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 2263.200410][T24806] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 2263.327911][T15930] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2263.383252][T15930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2263.394051][T15930] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2263.420918][T15930] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2263.468060][T15930] usb 2-1: Product: syz [ 2263.508794][T15930] usb 2-1: Manufacturer: syz [ 2263.546251][T15930] usb 2-1: SerialNumber: syz [ 2263.603628][T15930] usb 2-1: config 0 descriptor?? [ 2263.646950][T15930] usb 2-1: selecting invalid altsetting 0 [ 2267.475938][T24821] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2267.964639][T16636] usb 2-1: USB disconnect, device number 71 [ 2272.776189][T24849] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2275.621813][T16636] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 2275.886362][T16636] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2275.912376][T16636] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2275.948315][T16636] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2275.970726][T16636] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2276.001196][T16636] usb 2-1: Product: syz [ 2276.031974][T16636] usb 2-1: Manufacturer: syz [ 2276.061619][T16636] usb 2-1: SerialNumber: syz [ 2276.102913][T16636] usb 2-1: config 0 descriptor?? [ 2276.117179][T16636] usb 2-1: selecting invalid altsetting 0 [ 2278.337214][T24283] usb 2-1: USB disconnect, device number 72 [ 2279.045802][T18888] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 2279.424919][T24892] xt_cgroup: invalid path, errno=-2 [ 2281.171089][T15930] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 2281.373256][T15930] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2281.408400][T15930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2281.433948][T15930] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2281.456528][T15930] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2281.477075][T15930] usb 2-1: Product: syz [ 2281.483075][T15930] usb 2-1: Manufacturer: syz [ 2281.490530][T15930] usb 2-1: SerialNumber: syz [ 2281.498501][T15930] usb 2-1: config 0 descriptor?? [ 2281.533499][T15930] usb 2-1: selecting invalid altsetting 0 [ 2282.432367][T24927] Set syz1 is full, maxelem 6117 reached [ 2283.672199][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.685962][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.215415][T15930] usb 2-1: USB disconnect, device number 73 [ 2287.234226][T22952] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2287.444192][T22952] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2287.482577][T22952] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2287.533918][T22952] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2287.555223][T22952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2287.696987][T22952] usb 2-1: config 0 descriptor?? [ 2287.741857][T22952] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2289.885664][T24283] libceph: connect (1)[c::]:6789 error -101 [ 2289.894520][T24283] libceph: mon0 (1)[c::]:6789 connect error [ 2289.926674][T25003] ceph: No mds server is up or the cluster is laggy [ 2290.003677][T22952] usb 2-1: USB disconnect, device number 74 [ 2293.463829][T25024] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4577'. [ 2293.491642][T25022] infiniband syz2: set active [ 2297.386145][T25050] ip6_vti0: Master is either lo or non-ether device [ 2300.551289][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4591'. [ 2304.600945][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4603'. [ 2305.258289][T15930] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 2305.766454][T25119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4608'. [ 2305.838228][T15930] usb 2-1: Using ep0 maxpacket: 32 [ 2305.871664][T15930] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 2305.891879][T15930] usb 2-1: config 0 has no interface number 0 [ 2305.938714][T15930] usb 2-1: New USB device found, idVendor=2770, idProduct=9051, bcdDevice=d9.3e [ 2305.958007][T15930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2305.976405][T15930] usb 2-1: Product: syz [ 2305.982812][T15930] usb 2-1: Manufacturer: syz [ 2305.994071][T15930] usb 2-1: SerialNumber: syz [ 2306.011100][T15930] usb 2-1: config 0 descriptor?? [ 2306.020908][T15930] gspca_main: sq905c-2.14.0 probing 2770:9051 [ 2306.436652][T15930] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 2306.503503][T15930] sq905c 2-1:0.151: Reading version command failed [ 2306.617164][T15930] sq905c: probe of 2-1:0.151 failed with error -71 [ 2306.838262][T15930] usb 2-1: USB disconnect, device number 75 [ 2307.137977][T25132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4612'. [ 2307.709011][T25136] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4614'. [ 2309.274047][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'. [ 2309.284514][T25157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4618'. [ 2310.657802][T25172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4623'. [ 2311.338156][T15930] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2311.548148][T15930] usb 4-1: Using ep0 maxpacket: 32 [ 2311.560363][T15930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2311.612179][T15930] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2311.643475][T15930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2311.735975][T15930] usb 4-1: config 0 descriptor?? [ 2311.777807][T15930] dw2102: su3000_identify_state [ 2311.820646][T15930] dvb-usb: found a 'TeVii S662' in warm state. [ 2311.870393][T15930] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2311.915301][T15930] dvb-usb: bulk message failed: -22 (2/0) [ 2311.930692][T15930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2311.972615][T15930] dvbdev: DVB: registering new adapter (TeVii S662) [ 2312.010062][T25179] dvb-usb: bulk message failed: -22 (5/0) [ 2312.022611][T15930] usb 4-1: media controller created [ 2312.045332][T25179] dw2102: i2c transfer failed. [ 2312.072414][T15930] dvb-usb: bulk message failed: -22 (6/0) [ 2312.159756][T15930] dw2102: i2c transfer failed. [ 2312.184218][T15930] dvb-usb: bulk message failed: -22 (6/0) [ 2312.227257][T15930] dw2102: i2c transfer failed. [ 2312.232127][T15930] dvb-usb: bulk message failed: -22 (6/0) [ 2312.242356][T15930] dw2102: i2c transfer failed. [ 2312.262185][T15930] dvb-usb: bulk message failed: -22 (6/0) [ 2312.297330][T15930] dw2102: i2c transfer failed. [ 2312.302412][T15930] dvb-usb: bulk message failed: -22 (6/0) [ 2312.328157][T15930] dw2102: i2c transfer failed. [ 2312.338153][T15930] dvb-usb: bulk message failed: -22 (6/0) [ 2312.350124][T15930] dw2102: i2c transfer failed. [ 2312.355364][T15930] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2312.399542][T15930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2313.245301][T15930] dvb-usb: bulk message failed: -22 (3/0) [ 2313.347160][T15930] dw2102: command 0x0e transfer failed. [ 2313.390627][T15930] dvb-usb: bulk message failed: -22 (3/0) [ 2313.405828][T15930] dw2102: command 0x0e transfer failed. [ 2313.503013][T18888] Bluetooth: hci1: Malformed Event: 0x2f [ 2313.737921][T15930] dvb-usb: bulk message failed: -22 (3/0) [ 2313.772408][T15930] dw2102: command 0x0e transfer failed. [ 2313.790734][T15930] dvb-usb: bulk message failed: -22 (3/0) [ 2313.951917][T15930] dw2102: command 0x0e transfer failed. [ 2313.970542][T15930] dvb-usb: bulk message failed: -22 (1/0) [ 2313.976560][T15930] dw2102: command 0x51 transfer failed. [ 2313.984618][T15930] dvb-usb: bulk message failed: -22 (5/0) [ 2314.777023][T15930] dw2102: i2c probe for address 0x68 failed. [ 2314.834229][T15930] dvb-usb: bulk message failed: -22 (5/0) [ 2314.965758][T15930] dw2102: i2c probe for address 0x69 failed. [ 2314.980748][T15930] dvb-usb: bulk message failed: -22 (5/0) [ 2315.000797][T25211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 2315.244247][T15930] dw2102: i2c probe for address 0x6a failed. [ 2315.342821][T15930] dw2102: probing for demodulator failed. Is the external power switched on? [ 2315.457002][T15930] dvb-usb: no frontend was attached by 'TeVii S662' [ 2315.754289][T15930] rc_core: IR keymap rc-tt-1500 not found [ 2315.770090][T15930] Registered IR keymap rc-empty [ 2315.786629][T15930] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2315.840774][T15930] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input44 [ 2315.930091][T15930] dvb-usb: schedule remote query interval to 250 msecs. [ 2315.962283][T15930] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2316.039193][T15930] dvb-usb: TeVii S662 successfully initialized and connected. [ 2316.217036][T22952] dvb-usb: bulk message failed: -22 (1/0) [ 2316.336254][T15930] usb 4-1: USB disconnect, device number 64 [ 2316.353385][T22952] dw2102: i2c transfer failed. [ 2316.482929][T15930] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2317.921475][T25239] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 2317.935224][T25239] exFAT-fs (nullb0): invalid boot record signature [ 2317.941855][T25239] exFAT-fs (nullb0): failed to read boot sector [ 2317.948147][T25239] exFAT-fs (nullb0): failed to recognize exfat type [ 2320.646467][T15930] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 2320.850332][T15930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2321.552596][T15930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2321.563159][T15930] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2321.572705][T15930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2321.585061][T15930] usb 2-1: config 0 descriptor?? [ 2321.898548][T25266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'. [ 2322.492343][T15930] usbhid 2-1:0.0: can't add hid device: -71 [ 2322.511395][T15930] usbhid: probe of 2-1:0.0 failed with error -71 [ 2322.543761][T15930] usb 2-1: USB disconnect, device number 76 [ 2327.576485][T25298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4659'. [ 2331.435083][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4669'. [ 2334.425215][T25354] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 2334.937638][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4679'. [ 2338.173573][T25396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4688'. [ 2341.481577][T25424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4697'. [ 2345.189876][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.199391][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2346.022170][T25458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 2346.320957][T25460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4709'. [ 2351.115813][T25493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4718'. [ 2354.815671][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4727'. [ 2358.737006][T21673] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2358.750972][T21673] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2358.761126][T21673] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2358.772061][T21673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2358.781025][T21673] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2358.788913][T21673] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2360.019357][T25552] chnl_net:caif_netlink_parms(): no params data found [ 2360.350284][T25552] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.360365][T25552] bridge0: port 1(bridge_slave_0) entered disabled state [ 2360.374219][T25552] bridge_slave_0: entered allmulticast mode [ 2360.465136][T25552] bridge_slave_0: entered promiscuous mode [ 2360.495458][T25552] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.503504][T25552] bridge0: port 2(bridge_slave_1) entered disabled state [ 2360.510768][T25552] bridge_slave_1: entered allmulticast mode [ 2360.533238][T25552] bridge_slave_1: entered promiscuous mode [ 2361.190520][T21673] Bluetooth: hci2: command tx timeout [ 2361.570275][T25552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2361.612444][T25552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2361.806477][T25582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4740'. [ 2362.319082][T25552] team0: Port device team_slave_0 added [ 2362.327831][T25552] team0: Port device team_slave_1 added [ 2362.359884][T25552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2362.367731][T25552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2363.057493][T25552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2363.072764][T25552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2363.093822][T25552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2363.172472][T25552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2363.240609][T21673] Bluetooth: hci2: command tx timeout [ 2363.343193][T25552] hsr_slave_0: entered promiscuous mode [ 2363.358907][T25552] hsr_slave_1: entered promiscuous mode [ 2363.366409][T25552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2363.386750][T25552] Cannot create hsr debugfs directory [ 2363.732458][T25599] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4744'. [ 2365.289862][T25552] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2365.320601][T21673] Bluetooth: hci2: command tx timeout [ 2365.480928][T25552] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2365.649655][T25552] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2365.823751][T25552] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2365.888510][T25616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4749'. [ 2365.995415][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 2365.995431][ T28] audit: type=1326 audit(1763030031.645:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25613 comm="syz.1.4750" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb02e98f6c9 code=0x0 [ 2367.001452][T25552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2367.051417][T25552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2367.077913][T25552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2367.111939][T25552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2367.206799][T25622] binder: BINDER_SET_CONTEXT_MGR already set [ 2367.233743][T25622] binder: 25621:25622 ioctl 4018620d 200000004a80 returned -16 [ 2367.398183][T21673] Bluetooth: hci2: command tx timeout [ 2367.557617][T25552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2367.602818][T25552] 8021q: adding VLAN 0 to HW filter on device team0 [ 2367.653105][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2367.660440][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2367.740804][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 2367.748086][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2369.057553][ T28] audit: type=1326 audit(1763030034.697:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.199259][ T28] audit: type=1326 audit(1763030034.697:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.245534][ T28] audit: type=1326 audit(1763030034.707:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.347163][ T28] audit: type=1326 audit(1763030034.707:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.531854][ T28] audit: type=1326 audit(1763030034.707:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.564679][ T28] audit: type=1326 audit(1763030034.707:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.646298][ T28] audit: type=1326 audit(1763030034.707:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.756945][ T28] audit: type=1326 audit(1763030034.707:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2369.819783][T25552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2369.866166][ T28] audit: type=1326 audit(1763030034.707:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25651 comm="syz.4.4756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f043d98f6c9 code=0x7ffc0000 [ 2370.432809][T25665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4760'. [ 2370.589549][T25552] veth0_vlan: entered promiscuous mode [ 2370.615787][T25552] veth1_vlan: entered promiscuous mode [ 2370.680658][T25552] veth0_macvtap: entered promiscuous mode [ 2370.693090][T25552] veth1_macvtap: entered promiscuous mode [ 2371.001238][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.046194][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.100998][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.135127][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.163423][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.214557][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.235086][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2371.271705][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.329731][T25552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2371.448887][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2371.465719][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.492260][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2371.561961][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.594205][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2371.625358][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.695027][T25552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2371.905241][T25552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2371.952200][T25552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2372.003901][T25552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.053308][T25552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.117310][T25552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2372.163538][T25552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2373.084199][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2373.251059][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2374.410538][T22915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2374.455820][T22915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2375.600910][T25707] (null): rxe_set_mtu: Set mtu to 1024 [ 2375.608185][T25707] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2377.290540][T23979] syz_tun (unregistering): left allmulticast mode [ 2377.774408][ T8071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2377.965252][ T8071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.135581][ T8071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2378.158291][T18888] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2378.172914][T18888] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2378.183102][T18888] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2378.193133][T18888] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2378.201086][T18888] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2378.208798][T18888] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2378.300236][ T8071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.297186][T18888] Bluetooth: hci1: command tx timeout [ 2380.401717][T18888] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 2380.692101][ T8071] tipc: Disabling bearer [ 2380.722134][ T8071] tipc: Disabling bearer [ 2380.731461][ T8071] tipc: Left network mode [ 2381.258823][T25755] (null): rxe_set_mtu: Set mtu to 1024 [ 2381.356818][T25755] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2382.831653][T18888] Bluetooth: hci1: command tx timeout [ 2383.319060][T25722] chnl_net:caif_netlink_parms(): no params data found [ 2384.250000][T25722] bridge0: port 1(bridge_slave_0) entered blocking state [ 2384.257204][T25722] bridge0: port 1(bridge_slave_0) entered disabled state [ 2384.309776][T25722] bridge_slave_0: entered allmulticast mode [ 2384.317365][T25722] bridge_slave_0: entered promiscuous mode [ 2384.346089][T25722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2384.359696][T25722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2384.375023][T25722] bridge_slave_1: entered allmulticast mode [ 2384.390198][T25722] bridge_slave_1: entered promiscuous mode [ 2384.461697][T25791] syzkaller0: entered promiscuous mode [ 2384.477704][T25791] syzkaller0: entered allmulticast mode [ 2384.604774][T25722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2384.729165][T25722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2384.909551][T18888] Bluetooth: hci1: command tx timeout [ 2385.201890][ T8071] hsr_slave_0: left promiscuous mode [ 2385.373211][ T8071] hsr_slave_1: left promiscuous mode [ 2385.408671][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2385.442298][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2385.490472][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2385.497965][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2385.677415][ T8071] veth1_macvtap: left allmulticast mode [ 2385.699095][ T8071] veth1_macvtap: left promiscuous mode [ 2385.705519][ T8071] veth0_macvtap: left promiscuous mode [ 2385.729235][ T8071] veth1_vlan: left promiscuous mode [ 2385.734988][ T8071] veth0_vlan: left promiscuous mode [ 2386.327099][T25830] (null): rxe_set_mtu: Set mtu to 1024 [ 2386.337109][T25830] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2386.998459][T18888] Bluetooth: hci1: command tx timeout [ 2388.000623][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 2388.363929][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 2388.565885][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2388.717790][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2389.468112][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4800'. [ 2390.917931][ T8071] bond0 (unregistering): Released all slaves [ 2391.031916][T25722] team0: Port device team_slave_0 added [ 2391.235475][T25722] team0: Port device team_slave_1 added [ 2391.432139][T25722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2391.675942][T25722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2391.753711][T25722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2391.796650][T25722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2391.812629][T25722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2392.146878][T25722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2392.511000][T25722] hsr_slave_0: entered promiscuous mode [ 2392.551490][T25722] hsr_slave_1: entered promiscuous mode [ 2397.288326][T25722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2397.299139][T25722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2397.313852][T25722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2397.342009][T25722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2397.989535][T25722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2398.121949][T25722] 8021q: adding VLAN 0 to HW filter on device team0 [ 2398.186712][T14562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2398.194296][T14562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2398.214515][T14562] bridge0: port 2(bridge_slave_1) entered blocking state [ 2398.221731][T14562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2399.298334][T25722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2399.529640][T25722] veth0_vlan: entered promiscuous mode [ 2399.616215][T25722] veth1_vlan: entered promiscuous mode [ 2399.721827][T15930] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 2400.075425][T25722] veth0_macvtap: entered promiscuous mode [ 2400.299375][T25722] veth1_macvtap: entered promiscuous mode [ 2400.315235][T15930] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2400.366890][T15930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2400.400034][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2400.405483][T15930] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2400.438856][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.450191][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2400.468910][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.479085][T15930] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2400.479744][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2400.518947][T15930] usb 2-1: Product: syz [ 2400.531703][T15930] usb 2-1: Manufacturer: syz [ 2400.536435][T15930] usb 2-1: SerialNumber: syz [ 2400.539423][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.576448][T15930] usb 2-1: config 0 descriptor?? [ 2400.577645][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2400.616704][T15930] usb 2-1: selecting invalid altsetting 0 [ 2400.622543][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.641147][T25722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2400.676327][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2400.731360][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.778196][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2400.821387][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.867627][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2400.911242][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2400.943307][T25722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2401.098977][T25722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2401.111350][T25722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2401.257361][T25722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.294046][T25722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.319570][T25722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.348718][T25722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2402.314923][T25979] (null): rxe_set_mtu: Set mtu to 1024 [ 2402.321103][T25979] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2402.803194][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2402.845179][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2402.974221][T23637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2403.019677][T23637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2403.282435][T15930] usb 2-1: USB disconnect, device number 77 [ 2405.035054][T26013] comedi comedi3: multiq3: I/O port conflict (0x20048001,16) [ 2406.475203][T25617] syz_tun (unregistering): left allmulticast mode [ 2406.504412][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.510924][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.894314][T21673] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2406.919306][T21673] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2406.951380][T21673] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2406.974116][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2406.994133][T21673] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2407.018411][T21673] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2407.026087][T21673] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2407.355435][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2407.518665][T26037] (null): rxe_set_mtu: Set mtu to 1024 [ 2407.623619][T26037] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2407.644846][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.047908][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2408.655853][T26029] chnl_net:caif_netlink_parms(): no params data found [ 2408.894802][ T56] tipc: Left network mode [ 2409.057482][T21673] Bluetooth: hci0: command tx timeout [ 2409.314474][T26029] bridge0: port 1(bridge_slave_0) entered blocking state [ 2409.342386][T26029] bridge0: port 1(bridge_slave_0) entered disabled state [ 2409.373163][T26029] bridge_slave_0: entered allmulticast mode [ 2409.413226][T26029] bridge_slave_0: entered promiscuous mode [ 2409.565737][T26029] bridge0: port 2(bridge_slave_1) entered blocking state [ 2409.597390][T26029] bridge0: port 2(bridge_slave_1) entered disabled state [ 2409.645786][T26029] bridge_slave_1: entered allmulticast mode [ 2409.668563][T26029] bridge_slave_1: entered promiscuous mode [ 2410.199821][T26029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2410.258934][T26029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2410.674273][T26029] team0: Port device team_slave_0 added [ 2410.759279][T26029] team0: Port device team_slave_1 added [ 2411.153982][T21673] Bluetooth: hci0: command tx timeout [ 2411.884975][T26085] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.911087][T26086] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 2411.979146][T26029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2412.001839][T26029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2412.130984][T26029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2412.189327][T26029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2412.233262][T26029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2412.340533][T26029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2412.620722][T26085] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2412.865765][T26085] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.093877][T26085] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.129585][T26029] hsr_slave_0: entered promiscuous mode [ 2413.176289][T26029] hsr_slave_1: entered promiscuous mode [ 2413.216788][T26029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2413.234792][T26029] Cannot create hsr debugfs directory [ 2413.318502][T18888] Bluetooth: hci0: command tx timeout [ 2413.560558][T26085] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.584329][T26115] (null): rxe_set_mtu: Set mtu to 1024 [ 2413.590507][T26115] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2413.594529][T26085] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.615490][T26085] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2413.635484][T26085] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.235451][T15822] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 2414.251495][ T56] hsr_slave_0: left promiscuous mode [ 2414.271210][ T56] hsr_slave_1: left promiscuous mode [ 2414.295779][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2414.323819][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2414.335177][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2414.342659][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2414.436303][T15822] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2414.457049][T15822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2414.471327][ T56] veth1_macvtap: left promiscuous mode [ 2414.486555][T15822] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2414.497991][ T56] veth0_macvtap: left promiscuous mode [ 2414.503727][ T56] veth1_vlan: left promiscuous mode [ 2414.514976][T15822] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2414.528469][ T56] veth0_vlan: left promiscuous mode [ 2414.533950][T15822] usb 4-1: Product: syz [ 2414.554571][T15822] usb 4-1: Manufacturer: syz [ 2414.559261][T15822] usb 4-1: SerialNumber: syz [ 2414.591673][T15822] usb 4-1: config 0 descriptor?? [ 2414.646904][T15822] usb 4-1: selecting invalid altsetting 0 [ 2415.374078][T18888] Bluetooth: hci0: command tx timeout [ 2417.419893][ T56] team0 (unregistering): Port device team_slave_1 removed [ 2417.591633][ T56] team0 (unregistering): Port device team_slave_0 removed [ 2417.698413][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2417.848370][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2419.693331][ T56] bond0 (unregistering): Released all slaves [ 2420.407420][T15822] usb 4-1: USB disconnect, device number 65 [ 2421.137919][ T56] IPVS: stop unused estimator thread 0... [ 2421.728408][T26029] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2421.776715][T26029] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2422.211268][T26029] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2422.425385][T26029] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2423.496984][T26029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2424.101615][T26029] 8021q: adding VLAN 0 to HW filter on device team0 [ 2424.220129][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2424.227324][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2424.295648][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 2424.302868][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2424.729793][T15930] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 2424.946433][T15930] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2424.989391][T15930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2425.021703][T15930] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2425.059199][T15930] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2425.079412][T15930] usb 4-1: Product: syz [ 2425.083657][T15930] usb 4-1: Manufacturer: syz [ 2425.127897][T15930] usb 4-1: SerialNumber: syz [ 2425.162831][T15930] usb 4-1: config 0 descriptor?? [ 2425.183669][T15930] usb 4-1: selecting invalid altsetting 0 [ 2425.365084][T26029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2425.751788][T26029] veth0_vlan: entered promiscuous mode [ 2425.846799][T26029] veth1_vlan: entered promiscuous mode [ 2426.520441][T26029] veth0_macvtap: entered promiscuous mode [ 2426.554127][T26029] veth1_macvtap: entered promiscuous mode [ 2426.593828][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.604680][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.614929][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.625565][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.635619][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.801497][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.830999][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2426.842018][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2426.880078][T26029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2427.099425][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2427.126896][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2427.154491][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2427.183231][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2427.223995][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2427.273380][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2427.300785][T26029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2427.327969][T26029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2427.355922][T26029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2427.420241][T26029] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.524020][T24283] usb 4-1: USB disconnect, device number 66 [ 2427.564134][T26029] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.623736][T26029] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.665675][T26029] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2428.513846][T22915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2428.533154][T22915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2428.697634][T22915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2428.753141][T22915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2431.962023][T26276] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2434.974137][T24283] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2435.207662][T24283] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2435.231403][T24283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2435.240555][T24283] usb 4-1: Product: syz [ 2435.254143][T24283] usb 4-1: Manufacturer: syz [ 2435.264088][T24283] usb 4-1: SerialNumber: syz [ 2435.280025][T24283] usb 4-1: config 0 descriptor?? [ 2435.293744][T24283] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 067 [ 2435.800395][T24283] (null): failure reading functionality [ 2435.823795][T24283] i2c i2c-1: failure reading functionality [ 2435.845471][T24283] i2c i2c-1: connected i2c-tiny-usb device [ 2435.872232][T24283] usb 4-1: USB disconnect, device number 67 [ 2436.189194][T26317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'. [ 2438.908194][T26340] (null): rxe_set_mtu: Set mtu to 1024 [ 2438.914026][T26340] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2441.381305][T26366] overlayfs: failed to clone upperpath [ 2442.664348][T26376] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2442.691605][T26376] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2443.064177][T26381] (null): rxe_set_mtu: Set mtu to 1024 [ 2443.070401][T26381] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2443.706454][T26389] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4901'. [ 2448.829102][T26427] (null): rxe_set_mtu: Set mtu to 1024 [ 2448.835053][T26427] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2449.526920][T26437] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4915'. [ 2450.309684][T26448] (null): rxe_set_mtu: Set mtu to 1024 [ 2450.315544][T26448] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2453.284908][T26469] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2453.403761][T26472] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4926'. [ 2454.175221][T26482] (null): rxe_set_mtu: Set mtu to 1024 [ 2454.181203][T26482] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2455.242718][T26490] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 2455.938847][T26493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4934'. [ 2456.623450][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 2456.623469][ T28] audit: type=1326 audit(1763030122.321:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26496 comm="syz.0.4935" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7bfbb8f6c9 code=0x0 [ 2458.580350][T26523] (null): rxe_set_mtu: Set mtu to 1024 [ 2458.586180][T26523] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2460.421170][T26532] Bluetooth: MGMT ver 1.22 [ 2465.789042][T15822] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 2465.993765][T15822] usb 2-1: Using ep0 maxpacket: 32 [ 2466.101225][T15822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.137048][T15822] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2466.178321][T15822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.223521][T15822] usb 2-1: config 0 descriptor?? [ 2466.519708][T15822] dw2102: su3000_identify_state [ 2466.557066][T15822] dvb-usb: found a 'TeVii S662' in warm state. [ 2466.577871][T15822] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2466.591241][T15822] dvb-usb: bulk message failed: -22 (2/0) [ 2466.641401][T15822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2466.659873][T26575] dvb-usb: bulk message failed: -22 (5/0) [ 2466.668199][T26575] dw2102: i2c transfer failed. [ 2466.672091][T15822] dvbdev: DVB: registering new adapter (TeVii S662) [ 2466.695416][T15822] usb 2-1: media controller created [ 2466.708424][T15822] dvb-usb: bulk message failed: -22 (6/0) [ 2466.721845][T15822] dw2102: i2c transfer failed. [ 2466.726897][T15822] dvb-usb: bulk message failed: -22 (6/0) [ 2466.783063][T26589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4963'. [ 2466.794204][T15822] dw2102: i2c transfer failed. [ 2466.808370][T15822] dvb-usb: bulk message failed: -22 (6/0) [ 2466.816709][T15822] dw2102: i2c transfer failed. [ 2466.822513][T15822] dvb-usb: bulk message failed: -22 (6/0) [ 2466.832891][T15822] dw2102: i2c transfer failed. [ 2466.843029][T15822] dvb-usb: bulk message failed: -22 (6/0) [ 2466.850488][T15822] dw2102: i2c transfer failed. [ 2466.861454][T15822] dvb-usb: bulk message failed: -22 (6/0) [ 2466.869683][T15822] dw2102: i2c transfer failed. [ 2466.874768][T15822] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2466.984862][T15822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2467.615586][T15822] dvb-usb: bulk message failed: -22 (3/0) [ 2467.630439][T15822] dw2102: command 0x0e transfer failed. [ 2467.697603][T15822] dvb-usb: bulk message failed: -22 (3/0) [ 2467.703782][T15822] dw2102: command 0x0e transfer failed. [ 2467.970835][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.977168][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.268156][T15822] dvb-usb: bulk message failed: -22 (3/0) [ 2468.279821][T15822] dw2102: command 0x0e transfer failed. [ 2468.304592][T15822] dvb-usb: bulk message failed: -22 (3/0) [ 2468.327568][T15930] libceph: connect (1)[c::]:6789 error -101 [ 2468.340763][T15822] dw2102: command 0x0e transfer failed. [ 2468.349161][T15930] libceph: mon0 (1)[c::]:6789 connect error [ 2468.363569][T15822] dvb-usb: bulk message failed: -22 (1/0) [ 2468.377691][T15822] dw2102: command 0x51 transfer failed. [ 2468.383587][T15822] dvb-usb: bulk message failed: -22 (5/0) [ 2468.395028][T15822] dw2102: i2c probe for address 0x68 failed. [ 2468.498740][T26605] ceph: No mds server is up or the cluster is laggy [ 2468.888494][T22952] libceph: connect (1)[c::]:6789 error -101 [ 2468.948676][T15822] dvb-usb: bulk message failed: -22 (5/0) [ 2468.954788][T22952] libceph: mon0 (1)[c::]:6789 connect error [ 2468.967499][T15822] dw2102: i2c probe for address 0x69 failed. [ 2468.977444][T15822] dvb-usb: bulk message failed: -22 (5/0) [ 2468.983249][T15822] dw2102: i2c probe for address 0x6a failed. [ 2468.997679][T15822] dw2102: probing for demodulator failed. Is the external power switched on? [ 2469.016887][T15822] dvb-usb: no frontend was attached by 'TeVii S662' [ 2469.523180][T15822] rc_core: IR keymap rc-tt-1500 not found [ 2469.587935][T15822] Registered IR keymap rc-empty [ 2469.673396][T15822] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 2469.808578][T15822] input: TeVii S662 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input45 [ 2469.962923][T15822] dvb-usb: schedule remote query interval to 250 msecs. [ 2470.422572][T15822] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2470.490803][T15822] dvb-usb: TeVii S662 successfully initialized and connected. [ 2470.679327][T15930] dvb-usb: bulk message failed: -22 (1/0) [ 2470.695585][T15930] dw2102: i2c transfer failed. [ 2471.129382][T15822] usb 2-1: USB disconnect, device number 78 [ 2471.596939][T26640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4973'. [ 2471.926889][T15822] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2472.704043][T26660] xt_cgroup: invalid path, errno=-2 [ 2473.352021][T24283] libceph: connect (1)[c::]:6789 error -101 [ 2473.371353][T24283] libceph: mon0 (1)[c::]:6789 connect error [ 2473.473784][T26664] ceph: No mds server is up or the cluster is laggy [ 2473.649525][T24283] libceph: connect (1)[c::]:6789 error -101 [ 2473.658485][T24283] libceph: mon0 (1)[c::]:6789 connect error [ 2474.564600][T26679] (null): rxe_set_mtu: Set mtu to 1024 [ 2474.570485][T26679] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2476.120934][T26692] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2478.479251][T26697] overlayfs: failed to clone upperpath [ 2480.824258][T26722] (null): rxe_set_mtu: Set mtu to 1024 [ 2480.830155][T26722] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2481.691593][T14562] hsr_slave_0: left promiscuous mode [ 2481.705115][T14562] hsr_slave_1: left promiscuous mode [ 2481.789782][T14562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2481.820249][T14562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2481.868712][T14562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2481.896628][T14562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2482.451178][T14562] veth1_macvtap: left promiscuous mode [ 2482.479811][T14562] veth0_macvtap: left promiscuous mode [ 2482.508875][T14562] veth1_vlan: left promiscuous mode [ 2482.540712][T14562] veth0_vlan: left promiscuous mode [ 2482.858462][T14562] infiniband syz2: set down [ 2485.960380][T26756] (null): rxe_set_mtu: Set mtu to 1024 [ 2485.966243][T26756] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2486.239478][T21673] Bluetooth: hci2: command 0x0406 tx timeout [ 2486.690551][T14562] team0 (unregistering): Port device team_slave_1 removed [ 2486.730574][ T56] smc: removing ib device syz2 [ 2486.764663][T14562] team0 (unregistering): Port device team_slave_0 removed [ 2486.836516][T14562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2486.900794][T14562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2487.691792][T14562] bond0 (unregistering): Released all slaves [ 2487.787318][T26751] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2487.851316][T26751] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2488.403794][T26764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5015'. [ 2489.506464][ T28] audit: type=1326 audit(1763030155.217:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2489.575249][T26782] (null): rxe_set_mtu: Set mtu to 1024 [ 2489.581200][T26782] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2489.720332][ T28] audit: type=1326 audit(1763030155.217:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2489.971826][ T28] audit: type=1326 audit(1763030155.257:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.141968][ T28] audit: type=1326 audit(1763030155.257:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.253025][ T28] audit: type=1326 audit(1763030155.257:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.425744][ T28] audit: type=1326 audit(1763030155.287:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.536363][ T28] audit: type=1326 audit(1763030155.287:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.618193][ T28] audit: type=1326 audit(1763030155.287:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.643618][ T28] audit: type=1326 audit(1763030155.307:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2490.667021][ T28] audit: type=1326 audit(1763030155.317:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26781 comm="syz.3.5010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2491.713971][T26805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5021'. [ 2492.199422][T26814] overlayfs: failed to clone upperpath [ 2493.267141][T26838] (null): rxe_set_mtu: Set mtu to 1024 [ 2493.926445][T26838] infiniband syz2: set active [ 2493.931212][T26838] infiniband syz2: added veth1_to_team [ 2493.937419][T26838] syz2: rxe_create_cq: returned err = -12 [ 2493.943268][T26838] infiniband syz2: Couldn't create ib_mad CQ [ 2493.951147][T26838] infiniband syz2: Couldn't open port 1 [ 2493.971248][T26838] RDS/IB: syz2: added [ 2493.975539][T26838] smc: adding ib device syz2 with port count 1 [ 2493.981718][T26838] smc: ib device syz2 port 1 has pnetid [ 2495.712411][T26853] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 2497.107820][T26868] bridge0: entered allmulticast mode [ 2497.122223][T26868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5043'. [ 2497.131301][T26868] bridge_slave_1: left allmulticast mode [ 2497.141534][T26868] bridge_slave_1: left promiscuous mode [ 2497.147501][T26868] bridge0: port 2(bridge_slave_1) entered disabled state [ 2497.162351][T26868] bridge_slave_0: left allmulticast mode [ 2497.169480][T26868] bridge_slave_0: left promiscuous mode [ 2497.193395][T26868] bridge0: port 1(bridge_slave_0) entered disabled state [ 2497.520476][T26874] (null): rxe_set_mtu: Set mtu to 1024 [ 2497.529714][T26874] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2498.959571][T26868] bridge0 (unregistering): left allmulticast mode [ 2499.068572][T26881] overlayfs: failed to clone upperpath [ 2500.696844][T18888] Bluetooth: hci1: command 0x0406 tx timeout [ 2502.510468][T24250] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2502.742587][T24250] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 2502.751577][T24250] usb 4-1: config 0 has no interface number 0 [ 2502.757981][T24250] usb 4-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 2502.773494][T24250] usb 4-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 2502.787377][T24250] usb 4-1: config 0 interface 108 has no altsetting 0 [ 2502.811389][T24250] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2502.821167][T24250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.829391][T24250] usb 4-1: Product: syz [ 2502.834106][T24250] usb 4-1: Manufacturer: syz [ 2502.838884][T24250] usb 4-1: SerialNumber: syz [ 2502.861510][T24250] usb 4-1: config 0 descriptor?? [ 2503.189032][T24250] i2c-tiny-usb 4-1:0.108: version 6d.cc found at bus 004 address 068 [ 2503.200335][T24250] (null): failure setting delay to 10us [ 2503.206095][T24250] i2c-tiny-usb: probe of 4-1:0.108 failed with error -5 [ 2503.219647][T24250] usb 4-1: USB disconnect, device number 68 [ 2503.643595][T26959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5076'. [ 2506.067089][T26989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5086'. [ 2507.454223][T26998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5090'. [ 2507.719010][T26988] netlink: 'syz.4.5082': attribute type 20 has an invalid length. [ 2507.733384][T26988] IPv6: NLM_F_CREATE should be specified when creating new route [ 2508.433301][T26988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2508.441467][T26988] IPv6: NLM_F_CREATE should be set when creating new route [ 2510.061543][T27027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5099'. [ 2516.131326][T27078] overlayfs: failed to resolve './file1': -2 [ 2517.728551][T27086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5117'. [ 2520.054338][T27121] overlayfs: failed to resolve './file1': -2 [ 2521.551780][T21673] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 2523.023722][T27150] (null): rxe_set_mtu: Set mtu to 1024 [ 2523.032861][T27150] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2524.910682][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 2524.910699][ T28] audit: type=1326 audit(1763030190.645:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2525.126141][T27171] overlayfs: failed to resolve './file1': -2 [ 2525.143668][ T28] audit: type=1326 audit(1763030190.675:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2525.455499][ T28] audit: type=1326 audit(1763030190.685:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.105582][ T28] audit: type=1326 audit(1763030190.685:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.128294][ T28] audit: type=1326 audit(1763030190.685:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.181597][ T28] audit: type=1326 audit(1763030190.685:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.262680][ T28] audit: type=1326 audit(1763030190.685:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.338119][ T28] audit: type=1326 audit(1763030190.685:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.447551][ T28] audit: type=1326 audit(1763030190.685:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.472434][ T28] audit: type=1326 audit(1763030190.835:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27166 comm="syz.3.5141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2526.740625][T27189] (null): rxe_set_mtu: Set mtu to 1024 [ 2526.749577][T27189] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2527.541025][T21673] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 2527.651111][T27201] unsupported nlmsg_type 40 [ 2527.943450][T27213] overlayfs: failed to resolve './file0': -2 [ 2527.968561][T27212] fuse: Bad value for 'fd' [ 2529.393358][T27222] (null): rxe_set_mtu: Set mtu to 1024 [ 2529.399315][T27222] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2529.480562][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.487246][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2530.430049][T21673] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 2531.057596][T27252] overlayfs: failed to resolve './file0': -2 [ 2532.713531][T27267] (null): rxe_set_mtu: Set mtu to 1024 [ 2532.719455][T27267] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2533.058443][T21673] Bluetooth: hci0: command 0x0406 tx timeout [ 2534.405546][T27288] overlayfs: failed to resolve './file0': -2 [ 2534.457128][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 2534.457145][ T28] audit: type=1326 audit(1763030200.190:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2534.548992][ T28] audit: type=1326 audit(1763030200.190:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2534.598917][ T28] audit: type=1326 audit(1763030200.200:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2534.882975][ T28] audit: type=1326 audit(1763030200.200:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2534.973349][T27302] (null): rxe_set_mtu: Set mtu to 1024 [ 2534.983264][T27302] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2535.590516][ T28] audit: type=1326 audit(1763030200.200:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2535.638086][ T28] audit: type=1326 audit(1763030200.200:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2536.165663][ T28] audit: type=1326 audit(1763030200.200:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2536.255172][ T28] audit: type=1326 audit(1763030200.200:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2536.391738][ T28] audit: type=1326 audit(1763030200.200:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2536.481953][ T28] audit: type=1326 audit(1763030200.200:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27289 comm="syz.0.5180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2536.616175][T27326] overlayfs: failed to clone upperpath [ 2537.948616][T27340] overlayfs: failed to clone upperpath [ 2538.967388][T27368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5207'. [ 2540.194152][T27383] overlayfs: failed to clone upperpath [ 2541.362024][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 2541.362041][ T28] audit: type=1326 audit(1763030207.113:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2541.472696][ T28] audit: type=1326 audit(1763030207.113:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2541.584114][ T28] audit: type=1326 audit(1763030207.113:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2541.610974][T26757] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2541.639116][ T28] audit: type=1326 audit(1763030207.113:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2541.833080][ T28] audit: type=1326 audit(1763030207.113:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2541.861481][ T28] audit: type=1326 audit(1763030207.113:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2542.803826][ T28] audit: type=1326 audit(1763030207.113:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2542.826737][ T28] audit: type=1326 audit(1763030207.113:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2542.830813][T26757] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 2542.880257][T26757] usb 4-1: config 0 has no interface number 0 [ 2542.886441][T26757] usb 4-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 2542.912741][ T28] audit: type=1326 audit(1763030207.113:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2542.942632][ T28] audit: type=1326 audit(1763030207.113:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27389 comm="syz.1.5215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2542.959011][T26757] usb 4-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 2543.276301][T26757] usb 4-1: config 0 interface 108 has no altsetting 0 [ 2543.303591][T26757] usb 4-1: string descriptor 0 read error: -71 [ 2543.317867][T26757] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2543.327554][T26757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2543.363443][T26757] usb 4-1: config 0 descriptor?? [ 2543.371308][T26757] usb 4-1: can't set config #0, error -71 [ 2543.379898][T26757] usb 4-1: USB disconnect, device number 69 [ 2543.421798][T27412] overlayfs: failed to clone upperpath [ 2543.662797][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5227'. [ 2543.680086][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5227'. [ 2543.696598][T27422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5227'. [ 2544.972566][T27449] veth0_to_team: entered promiscuous mode [ 2545.009522][T27449] veth0_to_team: entered allmulticast mode [ 2545.663922][T27467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5242'. [ 2546.748532][T25638] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2546.954461][T18888] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 2546.993539][T25638] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 2547.006670][T25638] usb 4-1: config 0 has no interface number 0 [ 2547.038155][T25638] usb 4-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 2547.084099][T25638] usb 4-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 2547.138194][T25638] usb 4-1: config 0 interface 108 has no altsetting 0 [ 2547.348225][T25638] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2547.368066][T25638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2547.376151][T25638] usb 4-1: Product: syz [ 2547.474796][T25638] usb 4-1: Manufacturer: syz [ 2547.486240][T25638] usb 4-1: SerialNumber: syz [ 2547.499977][T25638] usb 4-1: config 0 descriptor?? [ 2547.843148][T25638] i2c-tiny-usb 4-1:0.108: version 6d.cc found at bus 004 address 070 [ 2547.854928][T25638] (null): failure setting delay to 10us [ 2547.862969][T25638] i2c-tiny-usb: probe of 4-1:0.108 failed with error -5 [ 2547.879291][T25638] usb 4-1: USB disconnect, device number 70 [ 2547.899512][T27494] overlayfs: failed to clone upperpath [ 2548.104606][ T28] kauditd_printk_skb: 81 callbacks suppressed [ 2548.104622][ T28] audit: type=1326 audit(1763030213.847:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.136373][ T28] audit: type=1326 audit(1763030213.847:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.163090][ T28] audit: type=1326 audit(1763030213.887:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.408871][ T28] audit: type=1326 audit(1763030213.887:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.431846][ T28] audit: type=1326 audit(1763030213.887:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.454647][ T28] audit: type=1326 audit(1763030213.887:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.494033][ T28] audit: type=1326 audit(1763030213.907:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.544223][ T28] audit: type=1326 audit(1763030213.907:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.594114][ T28] audit: type=1326 audit(1763030213.907:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2548.616796][ T28] audit: type=1326 audit(1763030213.907:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27496 comm="syz.1.5253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b78f8f6c9 code=0x7ffc0000 [ 2549.308290][T27518] (null): rxe_set_mtu: Set mtu to 1024 [ 2549.317296][T27518] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2555.382450][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 2555.382468][ T28] audit: type=1326 audit(1763030221.130:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.554078][ T28] audit: type=1326 audit(1763030221.170:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.576858][ T28] audit: type=1326 audit(1763030221.210:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.600295][ T28] audit: type=1326 audit(1763030221.210:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.640097][ T28] audit: type=1326 audit(1763030221.210:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.640144][T18888] Bluetooth: hci0: ACL packet for unknown connection handle 1 [ 2555.672208][ T28] audit: type=1326 audit(1763030221.240:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.710956][ T28] audit: type=1326 audit(1763030221.250:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.733707][ T28] audit: type=1326 audit(1763030221.250:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.756728][ T28] audit: type=1326 audit(1763030221.250:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2555.779419][ T28] audit: type=1326 audit(1763030221.250:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27563 comm="syz.0.5273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2561.692276][T27625] overlayfs: failed to clone upperpath [ 2561.750977][T25638] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2561.945625][T25638] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2561.955037][T25638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2561.963236][T25638] usb 4-1: Product: syz [ 2561.967567][T25638] usb 4-1: Manufacturer: syz [ 2561.972408][T25638] usb 4-1: SerialNumber: syz [ 2561.979506][T25638] usb 4-1: config 0 descriptor?? [ 2561.988246][T25638] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 071 [ 2562.661575][T25638] (null): failure reading functionality [ 2562.685717][T25638] i2c i2c-1: failure reading functionality [ 2562.706024][T25638] i2c i2c-1: connected i2c-tiny-usb device [ 2562.717974][T25638] usb 4-1: USB disconnect, device number 71 [ 2562.909838][T18888] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 2563.034246][T27645] overlayfs: failed to clone upperpath [ 2563.968478][T21673] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2563.980737][T21673] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2563.990420][T21673] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2564.179764][T21673] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2564.196297][T21673] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2564.210398][T21673] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2565.078501][T22915] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.325090][T22915] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.512770][T22915] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.614229][T22915] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2565.634140][T27655] chnl_net:caif_netlink_parms(): no params data found [ 2565.715985][T27655] bridge0: port 1(bridge_slave_0) entered blocking state [ 2565.723454][T27655] bridge0: port 1(bridge_slave_0) entered disabled state [ 2565.735720][T27655] bridge_slave_0: entered allmulticast mode [ 2565.747943][T27655] bridge_slave_0: entered promiscuous mode [ 2565.758938][T24250] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 2565.764786][T27655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2565.774295][T27655] bridge0: port 2(bridge_slave_1) entered disabled state [ 2565.784403][T27655] bridge_slave_1: entered allmulticast mode [ 2565.792550][T27655] bridge_slave_1: entered promiscuous mode [ 2565.846485][T27655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2565.909473][T27655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2565.967624][T24250] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2566.000857][T24250] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2566.031602][T24250] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2566.051515][T24250] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2566.063318][T24250] usb 4-1: Product: syz [ 2566.067636][T24250] usb 4-1: Manufacturer: syz [ 2566.089136][T24250] usb 4-1: SerialNumber: syz [ 2566.135005][T24250] usb 4-1: config 0 descriptor?? [ 2566.156574][T27655] team0: Port device team_slave_0 added [ 2566.174878][T24250] usb 4-1: selecting invalid altsetting 0 [ 2566.194169][T27655] team0: Port device team_slave_1 added [ 2566.259362][T21673] Bluetooth: hci3: command tx timeout [ 2566.473219][T27698] overlayfs: failed to clone upperpath [ 2566.782226][T27655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2566.791310][T27655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2566.820846][T27655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2566.863447][T27655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2566.871106][T27655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2566.897737][T27655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2567.037461][T27655] hsr_slave_0: entered promiscuous mode [ 2567.055349][T27655] hsr_slave_1: entered promiscuous mode [ 2567.066799][T27655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2567.075267][T27655] Cannot create hsr debugfs directory [ 2567.912892][T27729] netlink: 'syz.1.5329': attribute type 10 has an invalid length. [ 2567.935980][T27729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5329'. [ 2567.956580][T27729] batadv0: entered promiscuous mode [ 2567.963140][T27729] batadv0: entered allmulticast mode [ 2567.970506][T27729] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2567.977879][T21673] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 2568.341804][T21673] Bluetooth: hci3: command tx timeout [ 2568.570007][T25638] usb 4-1: USB disconnect, device number 72 [ 2568.961049][T22915] hsr_slave_0: left promiscuous mode [ 2568.984450][T22915] hsr_slave_1: left promiscuous mode [ 2568.998860][T22915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2569.017258][T22915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2569.040180][T22915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2569.048229][T22915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2569.117461][T22915] veth1_macvtap: left promiscuous mode [ 2569.125880][T22915] veth0_macvtap: left promiscuous mode [ 2569.150608][T22915] veth1_vlan: left promiscuous mode [ 2569.156741][T22915] veth0_vlan: left promiscuous mode [ 2569.902689][T22915] bond2 (unregistering): Released all slaves [ 2570.000060][T22915] bond1 (unregistering): (slave veth3): Releasing backup interface [ 2570.020535][T22915] bond1 (unregistering): Released all slaves [ 2570.416720][T21673] Bluetooth: hci3: command tx timeout [ 2570.740811][T22915] team0 (unregistering): Port device team_slave_1 removed [ 2570.830851][T22915] team0 (unregistering): Port device team_slave_0 removed [ 2570.930680][T22915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2571.003063][T22915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2571.944203][T22915] bond0 (unregistering): Released all slaves [ 2572.506974][T21673] Bluetooth: hci3: command tx timeout [ 2572.526067][T27655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2572.552577][T27655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2572.621999][T27655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2572.652752][T27655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2572.721141][T22915] IPVS: stop unused estimator thread 0... [ 2572.954266][T27655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2572.998561][T27655] 8021q: adding VLAN 0 to HW filter on device team0 [ 2573.024780][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 2573.032096][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2573.074553][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 2573.081880][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2573.579906][T27655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2573.776888][T27846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5354'. [ 2575.667231][T27655] veth0_vlan: entered promiscuous mode [ 2575.719856][T27655] veth1_vlan: entered promiscuous mode [ 2575.836829][T27655] veth0_macvtap: entered promiscuous mode [ 2575.896688][T27655] veth1_macvtap: entered promiscuous mode [ 2575.961387][T27655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2576.002684][T27655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2576.033162][T27655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2576.053622][T27655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2576.072688][T27655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2576.088073][T27655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2576.101782][T27655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2576.113890][T27655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2576.125374][T27655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2576.136036][T27655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2576.147324][T27655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2576.157694][T27655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2576.192555][T27655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2576.207234][T27655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2576.244850][T27655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.265793][T27655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.283600][T27655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.302762][T27655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2576.624610][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2576.687233][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2576.746908][T27885] ip6erspan0: entered promiscuous mode [ 2577.191272][T14562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2577.302537][T14562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2578.602440][T26757] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2578.792527][T26757] usb 5-1: Using ep0 maxpacket: 16 [ 2578.807886][T26757] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 2578.817583][T26757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2578.834879][T26757] usb 5-1: Product: syz [ 2578.839155][T26757] usb 5-1: Manufacturer: syz [ 2578.852484][T26757] usb 5-1: SerialNumber: syz [ 2578.863951][T26757] usb 5-1: config 0 descriptor?? [ 2578.876816][T26757] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 2578.891655][T26757] usb 5-1: Detected FT232H [ 2580.035832][T26757] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 2580.052066][T26757] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 2580.082948][T26757] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2580.103911][T26757] usb 5-1: USB disconnect, device number 67 [ 2580.115565][T26757] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2580.127727][T26757] ftdi_sio 5-1:0.0: device disconnected [ 2581.233009][T27948] ip6erspan0: entered promiscuous mode [ 2582.417099][T27966] delete_channel: no stack [ 2583.305086][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5391'. [ 2583.762629][T27987] (null): rxe_set_mtu: Set mtu to 1024 [ 2583.771986][T27987] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2585.848531][T28010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5399'. [ 2586.338858][T28016] (null): rxe_set_mtu: Set mtu to 1024 [ 2586.347667][T28016] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2587.716500][T28030] md: md2 stopped. [ 2588.200290][T28045] (null): rxe_set_mtu: Set mtu to 1024 [ 2588.217748][T28045] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2590.733112][T28053] vxfs: WRONG superblock magic 00000000 at 1 [ 2590.734322][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.741780][T28053] vxfs: WRONG superblock magic 00000000 at 8 [ 2590.750045][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.752228][T28053] vxfs: can't find superblock. [ 2590.903217][T24250] libceph: connect (1)[c::]:6789 error -101 [ 2590.910273][T24250] libceph: mon0 (1)[c::]:6789 connect error [ 2591.020631][T28052] ceph: No mds server is up or the cluster is laggy [ 2591.171667][T28069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'. [ 2592.011874][T28077] (null): rxe_set_mtu: Set mtu to 1024 [ 2592.017820][T28077] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2595.004348][T24250] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2595.176608][T28111] (null): rxe_set_mtu: Set mtu to 1024 [ 2595.185829][T28111] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2595.889925][T24250] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2595.905698][T24250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2595.916453][T24250] usb 5-1: Product: syz [ 2595.922500][T24250] usb 5-1: Manufacturer: syz [ 2595.927731][T24250] usb 5-1: SerialNumber: syz [ 2596.095026][T24250] usb 5-1: config 0 descriptor?? [ 2596.111854][T24250] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 068 [ 2597.186098][T24250] (null): failure reading functionality [ 2597.205899][T24250] i2c i2c-1: failure reading functionality [ 2597.234798][T24250] i2c i2c-1: connected i2c-tiny-usb device [ 2597.256192][T24250] usb 5-1: USB disconnect, device number 68 [ 2597.537307][T28129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5437'. [ 2597.668034][T28137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5442'. [ 2599.149610][T28147] (null): rxe_set_mtu: Set mtu to 1024 [ 2599.155768][T28147] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2601.004084][T28158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5448'. [ 2602.013146][T25638] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2602.107767][T28178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5453'. [ 2602.296338][T25638] usb 5-1: config 0 has an invalid interface number: 108 but max is 0 [ 2602.330556][T25638] usb 5-1: config 0 has no interface number 0 [ 2602.336735][T25638] usb 5-1: too many endpoints for config 0 interface 108 altsetting 101: 116, using maximum allowed: 30 [ 2602.420542][T25638] usb 5-1: config 0 interface 108 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 116 [ 2602.458839][T25638] usb 5-1: config 0 interface 108 has no altsetting 0 [ 2602.479987][T25638] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2602.499412][T25638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2602.526705][T25638] usb 5-1: Product: syz [ 2602.540693][T25638] usb 5-1: Manufacturer: syz [ 2602.555594][T25638] usb 5-1: SerialNumber: syz [ 2602.583122][T25638] usb 5-1: config 0 descriptor?? [ 2602.853946][T25638] i2c-tiny-usb 5-1:0.108: version 6d.cc found at bus 005 address 069 [ 2602.910458][T25638] (null): failure setting delay to 10us [ 2602.916248][T25638] i2c-tiny-usb: probe of 5-1:0.108 failed with error -5 [ 2602.959624][T25638] usb 5-1: USB disconnect, device number 69 [ 2603.120994][T28189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5459'. [ 2604.014815][T28197] (null): rxe_set_mtu: Set mtu to 1024 [ 2604.020745][T28197] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2606.145757][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 2606.145789][ T28] audit: type=1326 audit(1763030271.915:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.182964][ T28] audit: type=1326 audit(1763030271.915:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.223238][ T28] audit: type=1326 audit(1763030271.955:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.266440][ T28] audit: type=1326 audit(1763030271.955:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.304358][ T28] audit: type=1326 audit(1763030271.955:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.540482][ T28] audit: type=1326 audit(1763030271.955:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.597921][ T28] audit: type=1326 audit(1763030271.975:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2606.688525][T28237] (null): rxe_set_mtu: Set mtu to 1024 [ 2606.697687][T28237] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2607.308649][T28232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5470'. [ 2607.358438][T18888] Bluetooth: hci1: command 0x0406 tx timeout [ 2607.407094][ T28] audit: type=1326 audit(1763030271.975:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2607.432102][ T28] audit: type=1326 audit(1763030271.975:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2607.455624][ T28] audit: type=1326 audit(1763030271.975:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28222 comm="syz.0.5471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfbb8f6c9 code=0x7ffc0000 [ 2607.546108][T28243] fuse: Bad value for 'fd' [ 2609.643912][T28268] (null): rxe_set_mtu: Set mtu to 1024 [ 2609.653027][T28268] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2611.623551][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 2611.623571][ T28] audit: type=1326 audit(1763030277.388:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2611.703527][ T28] audit: type=1326 audit(1763030277.388:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2611.956804][ T28] audit: type=1326 audit(1763030277.398:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2611.981565][ T28] audit: type=1326 audit(1763030277.398:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2612.024481][ T28] audit: type=1326 audit(1763030277.398:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2612.120784][T28293] syz2: rxe_newlink: already configured on veth1_to_team [ 2612.805693][ T28] audit: type=1326 audit(1763030277.398:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2612.854677][ T28] audit: type=1326 audit(1763030277.438:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2612.995091][ T28] audit: type=1326 audit(1763030277.438:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2613.118334][ T28] audit: type=1326 audit(1763030277.438:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2613.262886][ T28] audit: type=1326 audit(1763030277.438:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28283 comm="syz.3.5490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f388238f6c9 code=0x7ffc0000 [ 2615.052052][T28333] (null): rxe_set_mtu: Set mtu to 1024 [ 2615.061101][T28333] rdma_rxe: rxe_newlink: failed to add veth1_to_team [ 2616.163743][T21673] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 2616.683031][T28344] comedi comedi3: pcl818: I/O port conflict (0x4f23,16) [ 2616.693745][T28344] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 2616.705527][T28344] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 2616.713995][T28344] CPU: 1 PID: 28344 Comm: syz.4.5505 Not tainted syzkaller #0 [ 2616.721585][T28344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2616.731685][T28344] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 2616.737257][T28344] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 2616.756892][T28344] RSP: 0018:ffffc9000485fa18 EFLAGS: 00010206 [ 2616.763005][T28344] RAX: 0000000000000005 RBX: ffff888076d84f00 RCX: 0000000000080000 [ 2616.771023][T28344] RDX: ffffc90013c01000 RSI: 0000000000002ac5 RDI: 0000000000002ac6 [ 2616.779031][T28344] RBP: 0000000000000001 R08: ffff88814c35c12f R09: 1ffff1102986b825 [ 2616.787021][T28344] R10: dffffc0000000000 R11: ffffed102986b826 R12: 0000000000000028 [ 2616.795006][T28344] R13: dffffc0000000000 R14: ffff88814c35c000 R15: dffffc0000000000 [ 2616.802995][T28344] FS: 00007f3b07c736c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2616.811943][T28344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2616.818539][T28344] CR2: 000000110c4248e8 CR3: 0000000064525000 CR4: 00000000003506e0 [ 2616.826523][T28344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2616.834502][T28344] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2616.842520][T28344] Call Trace: [ 2616.845814][T28344] [ 2616.848761][T28344] pcl818_detach+0x66/0xd0 [ 2616.853215][T28344] comedi_device_detach_locked+0x172/0x710 [ 2616.859055][T28344] comedi_device_attach+0x5cd/0x710 [ 2616.864267][T28344] comedi_unlocked_ioctl+0x606/0xfe0 [ 2616.869572][T28344] ? tomoyo_path_number_perm+0x477/0x590 [ 2616.875235][T28344] ? comedi_poll+0x8c0/0x8c0 [ 2616.879860][T28344] ? __fget_files+0x28/0x4d0 [ 2616.884471][T28344] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2616.889436][T28344] ? security_file_ioctl+0x80/0xa0 [ 2616.894564][T28344] ? comedi_poll+0x8c0/0x8c0 [ 2616.899169][T28344] __se_sys_ioctl+0xfd/0x170 [ 2616.903776][T28344] do_syscall_64+0x55/0xb0 [ 2616.908207][T28344] ? clear_bhb_loop+0x40/0x90 [ 2616.912893][T28344] ? clear_bhb_loop+0x40/0x90 [ 2616.917585][T28344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2616.923491][T28344] RIP: 0033:0x7f3b06d8f6c9 [ 2616.928018][T28344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2616.947752][T28344] RSP: 002b:00007f3b07c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2616.956182][T28344] RAX: ffffffffffffffda RBX: 00007f3b06fe6090 RCX: 00007f3b06d8f6c9 [ 2616.964173][T28344] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000007 [ 2616.972240][T28344] RBP: 00007f3b06e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2616.980305][T28344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2616.988286][T28344] R13: 00007f3b06fe6128 R14: 00007f3b06fe6090 R15: 00007ffc42dfce48 [ 2616.996301][T28344] [ 2616.999340][T28344] Modules linked in: [ 2617.009392][T28344] ---[ end trace 0000000000000000 ]--- [ 2617.019527][T28344] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 2617.026457][T28344] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 2617.093778][T28344] RSP: 0018:ffffc9000485fa18 EFLAGS: 00010206 [ 2617.109327][T28344] RAX: 0000000000000005 RBX: ffff888076d84f00 RCX: 0000000000080000 [ 2617.122799][T28344] RDX: ffffc90013c01000 RSI: 0000000000002ac5 RDI: 0000000000002ac6 [ 2617.131151][T28344] RBP: 0000000000000001 R08: ffff88814c35c12f R09: 1ffff1102986b825 [ 2617.177763][T28344] R10: dffffc0000000000 R11: ffffed102986b826 R12: 0000000000000028 [ 2617.219879][T28344] R13: dffffc0000000000 R14: ffff88814c35c000 R15: dffffc0000000000 [ 2617.237192][T28344] FS: 00007f3b07c736c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2617.259373][T28344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2617.333185][T28344] CR2: 000000110c38891d CR3: 0000000064525000 CR4: 00000000003506f0 [ 2617.341265][T28344] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2617.349319][T28344] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2617.357523][T28344] Kernel panic - not syncing: Fatal exception [ 2617.363987][T28344] Kernel Offset: disabled [ 2617.368332][T28344] Rebooting in 86400 seconds..